Sezvakarongwa kare, GitHub haichatsigira kubatanidza kune Git zvinhu uchishandisa password yekusimbisa. Shanduko ichashandiswa nhasi na19:XNUMX (MSK), mushure mezvo kuita zvakanangana kwekushanda neGit izvo zvinoda humbowo zvinogoneka chete uchishandisa makiyi eSSH kana tokens (GitHub personal tokens kana OAuth). Kusarudzika kunopihwa chete kumaakaundi anoshandisa maviri-chinhu chechokwadi chinobatana neGit nepassword uye imwe kiyi.
Zvinofungidzirwa kuti kusimbisa zvinodikanwa zvehuchokwadi kuchadzivirira vashandisi kubva mukukanganisa magwaro avo kana chiitiko chekudonha kwevashandisi base kana kubirwa kwechitatu-bato masevhisi apo vashandisi vakashandisa iwo mapassword kubva kuGitHub. Pakati pezvakanakira kuvimbiswa nezviratidzo ndezvekuti: kugona kugadzira ma tokens akasiyana ezvishandiso chaiwo uye masesheni, tsigiro yekubviswa kwezviratidzo zvakakanganisika pasina kushandura magwaro, kugona kudzikamisa nzvimbo yekupinda kuburikidza nechiratidzo, chengetedzo yezviratidzo kana yatemwa. brute force.
Source: opennet.ru