{"id":100566,"date":"2021-06-22T10:22:46","date_gmt":"2021-06-22T08:22:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic"},"modified":"2021-06-22T10:22:46","modified_gmt":"2021-06-22T08:22:46","slug":"utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","title":{"rendered":"Shkarkimi i hasheve t\u00eb fjal\u00ebkalimeve t\u00eb sh\u00ebrbimit Whois nga regjistratori i internetit APNIC","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Regjistruesi APNIC, p\u00ebrgjegj\u00ebs p\u00ebr shp\u00ebrndarjen e adresave IP n\u00eb rajonin Azia-Paq\u00ebsor, njoftoi p\u00ebr nj\u00eb incident, ku nj\u00eb dump SQL i sh\u00ebrbimit Whois u b\u00eb publik, duke p\u00ebrfshir\u00eb t\u00eb dh\u00ebna t\u00eb ndjeshme dhe hash-e t\u00eb fjal\u00ebkalimeve. \u00cbsht\u00eb e v\u00ebrtet\u00eb q\u00eb kjo nuk \u00ebsht\u00eb hera e par\u00eb q\u00eb raportet e t\u00eb dh\u00ebnave personale n\u00eb APNIC dalin n\u00eb publik \u2014 n\u00eb vitin 2017, baza e t\u00eb dh\u00ebnave Whois gjithashtu u ekspozua p\u00ebr publikun p\u00ebr shkak t\u00eb nj\u00eb neglizhence nga stafi. <\/p>\n

Gjat\u00eb procesit t\u00eb implementimit t\u00eb mb\u00ebshtetjes p\u00ebr protokollin RDAP, i cili ka p\u00ebr q\u00ebllim t\u00eb z\u00ebvend\u00ebsoj\u00eb protokollin WHOIS, angazhimet e APNIC postuan nj\u00eb kopje SQL t\u00eb baz\u00ebs q\u00eb p\u00ebrdorej n\u00eb sh\u00ebrbimin Whois n\u00eb magazin\u00ebn cloud t\u00eb Google, por nuk e kufizuan qasjen n\u00eb t\u00eb. P\u00ebr shkak t\u00eb nj\u00eb gabimi n\u00eb konfigurime, p\u00ebr tre muaj kopja SQL ishte n\u00eb dispozicion publik dhe ky fakt doli n\u00eb pah vet\u00ebm m\u00eb 4 qershor, kur nj\u00eb nga studiuesit e pavarur t\u00eb siguris\u00eb e t\u00ebrhoqi v\u00ebmendjen dhe e informoi regjistratorin p\u00ebr problemin. <\/p>\n

N\u00eb dump-in SQL gjendeshin kat\u00ebr atributet \u201cauth\u201d, t\u00eb cilat p\u00ebrmbanin hash-e t\u00eb fjal\u00ebkalimeve p\u00ebr modifikimin e objekteve Maintainer dhe Incident Response Team (IRT), si dhe disa informacione t\u00eb ndjeshme p\u00ebr klient\u00ebt, t\u00eb cilat nuk paraqiten n\u00eb Whois gjat\u00eb k\u00ebrkesave normale (zakonisht jan\u00eb t\u00eb dh\u00ebna kontaktuese shtes\u00eb dhe sh\u00ebnime mbi p\u00ebrdoruesin). N\u00eb rast t\u00eb rikuperimit t\u00eb fjal\u00ebkalimeve, sulmuesit kishin mund\u00ebsin\u00eb t\u00eb ndryshonin p\u00ebrmbajtjen e fushave me parametrat e pronar\u00ebve t\u00eb blloqeve IP-adresat<\/a> n\u00eb Whois. Objekti Maintainer p\u00ebrcakton personin p\u00ebrgjegj\u00ebs p\u00ebr modifikimin e grupit t\u00eb sh\u00ebnimeve, t\u00eb lidhura p\u00ebrmes atributit \u201cmnt-by\u201d, nd\u00ebrsa objekti IRT p\u00ebrmban t\u00eb dh\u00ebnat kontaktuese t\u00eb administrator\u00ebve, t\u00eb cil\u00ebt p\u00ebrgjigjen p\u00ebr njoftimet mbi problemet. Informacioni mbi algoritmin e p\u00ebrdorur p\u00ebr hashimin e fjal\u00ebkalimeve nuk \u00ebsht\u00eb dh\u00ebn\u00eb, por n\u00eb vitin 2017, p\u00ebr hashimin jan\u00eb p\u00ebrdorur algoritme t\u00eb vjetra si MD5 dhe CRYPT-PW (fjal\u00ebkalime me 8 karaktere me hash nga funksioni UNIX crypt). <\/p>\n

Pas identifikimit t\u00eb incidentit, APNIC nisi nj\u00eb rikthim t\u00eb fjal\u00ebkalimeve p\u00ebr objektet n\u00eb Whois. Nga ana e APNIC, nuk jan\u00eb gjetur shenja t\u00eb veprimeve t\u00eb paligjshme deri tani, por nuk ka garanci q\u00eb t\u00eb dh\u00ebnat nuk jan\u00eb r\u00ebn\u00eb n\u00eb duar t\u00eb keqe, pasi mungojn\u00eb regjistrat e plot\u00eb t\u00eb qasjes n\u00eb skedar\u00ebt n\u00eb Google Cloud. Ashtu si pas incidentit t\u00eb kaluar, APNIC premtoi t\u00eb realizoj\u00eb nj\u00eb audit dhe t\u00eb b\u00ebj\u00eb ndryshime n\u00eb proceset teknologjike, p\u00ebr t\u00eb parandaluar q\u00eb incidente t\u00eb tilla t\u00eb ndodhin n\u00eb t\u00eb ardhmen.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 APNIC, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432 \u0410\u0437\u0438\u0430\u0442\u0441\u043a\u043e-\u0422\u0438\u0445\u043e\u043e\u043a\u0435\u0430\u043d\u0441\u043a\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435, \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u043f\u0430\u043b SQL-\u0434\u0430\u043c\u043f \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Whois, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 APNIC — \u0432 2017 \u0433\u043e\u0434\u0443 \u0431\u0430\u0437\u0430 Whois \u0443\u0436\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0430 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0442\u043e\u0436\u0435 \u043f\u043e \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0443 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0430. \u0412 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100566","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Shkarkimi i hash-eve t\u00eb fjal\u00ebkalimeve t\u00eb sh\u00ebrbimit Whois t\u00eb regjistruesit t\u00eb internetit APNIC | ProHoster","description":"Regjistruesi APNIC, p\u00ebrgjegj\u00ebs p\u00ebr shp\u00ebrndarjen e adresave IP n\u00eb rajonin Azi-Paq\u00ebsor, njoftoi p\u00ebr nj\u00eb incident, n\u00eb t\u00eb cilin u b\u00eb i disponuesh\u00ebm nj\u00eb dump SQL i sh\u00ebrbimit Whois, duke p\u00ebrfshir\u00eb t\u00eb dh\u00ebna konfidenciale.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 \u0445\u044d\u0448\u0435\u0439 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 Whois-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 APNIC | ProHoster","og:description":"\u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 APNIC, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432 \u0410\u0437\u0438\u0430\u0442\u0441\u043a\u043e-\u0422\u0438\u0445\u043e\u043e\u043a\u0435\u0430\u043d\u0441\u043a\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435, \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u043f\u0430\u043b SQL-\u0434\u0430\u043c\u043f \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Whois, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-22T08:22:46+00:00","article:modified_time":"2021-06-22T08:22:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100566","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-22 08:30:54","updated":"2026-02-08 20:40:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100566","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=100566"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100566\/revisions"}],"predecessor-version":[{"id":158025,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100566\/revisions\/158025"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=100566"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=100566"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=100566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}