{"id":100566,"date":"2021-06-22T10:22:46","date_gmt":"2021-06-22T08:22:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic"},"modified":"2021-06-22T10:22:46","modified_gmt":"2021-06-22T08:22:46","slug":"utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","title":{"rendered":"Dalja e hash-eve t\u00eb fjal\u00ebkalimeve t\u00eb sh\u00ebrbimit Whois t\u00eb regjistruesit t\u00eb internetit APNIC","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Registratori APNIC, q\u00eb p\u00ebrgjigjet p\u00ebr shp\u00ebrndarjen e IP-ve n\u00eb rajonin e Azis\u00eb-Paq\u00ebsorit, njoftoi p\u00ebr nj\u00eb incident ku dump-i SQL i sh\u00ebrbimit Whois, i cili p\u00ebrmban t\u00eb dh\u00ebna konfidenciale dhe hash t\u00eb fjal\u00ebkalimeve, u b\u00eb i disponuesh\u00ebm publikisht. \u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb theksohet se kjo nuk \u00ebsht\u00eb hera e par\u00eb q\u00eb t\u00eb dh\u00ebnat personale n\u00eb APNIC kan\u00eb rrjedhur - n\u00eb vitin 2017, baza e Whois gjithashtu u b\u00eb e disponueshme publikisht p\u00ebr shkak t\u00eb pakujdesis\u00eb s\u00eb stafit. <\/p>\n

Gjat\u00eb procesit t\u00eb implementimit t\u00eb mb\u00ebshtetjes p\u00ebr protokollin RDAP, i cili \u00ebsht\u00eb menduar t\u00eb z\u00ebvend\u00ebsoj\u00eb protokollin WHOIS, stafi i APNIC publikoi dump-in SQL t\u00eb databaz\u00ebs q\u00eb p\u00ebrdorej n\u00eb sh\u00ebrbimin Whois n\u00eb ruajtjen n\u00eb re Google Cloud, por nuk e kufizoi aksesin n\u00eb t\u00eb. P\u00ebr shkak t\u00eb nj\u00eb gabimi n\u00eb konfigurim, dump-i SQL ishte n\u00eb dispozicion publik p\u00ebr tre muaj dhe ky fakt doli n\u00eb pah vet\u00ebm m\u00eb 4 qershor, kur nj\u00eb nga hulumtuesit e pavarur t\u00eb siguris\u00eb e vuri re at\u00eb dhe njoftoi regjistruesin p\u00ebr problemin. <\/p>\n

Dump-i SQL p\u00ebrfshinte atributet \"auth\", q\u00eb p\u00ebrmbanin hash t\u00eb fjal\u00ebkalimeve p\u00ebr ndryshimin e objekteve Maintainer dhe Incident Response Team (IRT), si dhe disa t\u00eb dh\u00ebna konfidenciale p\u00ebr klient\u00ebt, t\u00eb cilat nuk shfaqen n\u00eb Whois gjat\u00eb k\u00ebrkesave t\u00eb zakonshme (zakonisht k\u00ebto jan\u00eb t\u00eb dh\u00ebna t\u00eb tjera kontakti dhe sh\u00ebnime p\u00ebr p\u00ebrdoruesin). N\u00eb rastin e rikuperimit t\u00eb fjal\u00ebkalimeve, sulmuesit kishin mund\u00ebsin\u00eb t\u00eb ndryshonin p\u00ebrmbajtjen e fushave me parametrat e pronar\u00ebve IP-adresave<\/a> n\u00eb Whois. Objekti Maintainer p\u00ebrcakton personin p\u00ebrgjegj\u00ebs p\u00ebr ndryshimin e grupit t\u00eb regjistrave t\u00eb lidhur p\u00ebrmes atributit \"mnt-by\", nd\u00ebrsa objekti IRT p\u00ebrmban t\u00eb dh\u00ebnat e kontaktit t\u00eb administrator\u00ebve q\u00eb p\u00ebrgjigjen p\u00ebr njoftimet p\u00ebr probleme. Informacioni mbi algoritmin e p\u00ebrdorur p\u00ebr hashimin e fjal\u00ebkalimeve nuk jepet, por n\u00eb vitin 2017 p\u00ebr hashimin u p\u00ebrdor\u00ebn algoritme t\u00eb vjetra MD5 dhe CRYPT-PW (fjal\u00ebkalime 8-shifrore me hash bazuar n\u00eb funksionin UNIX crypt). <\/p>\n

Pas pas fiksimit t\u00eb incidentit, APNIC nisi procesin e rikthimit t\u00eb fjal\u00ebkalimeve p\u00ebr objektet n\u00eb Whois. Nga ana e APNIC, nuk jan\u00eb zbuluar shenja t\u00eb veprimeve t\u00eb paligjshme deri tani, por nuk ka garanci q\u00eb t\u00eb dh\u00ebnat nuk kan\u00eb r\u00ebn\u00eb n\u00eb duar t\u00eb keqb\u00ebr\u00ebsve, pasi mungojn\u00eb logjet e plota t\u00eb hyrjeve n\u00eb skedar\u00ebt n\u00eb Google Cloud. Ashtu si pas incidentit t\u00eb kaluar, APNIC premtoi t\u00eb kryej\u00eb nj\u00eb auditim dhe t\u00eb b\u00ebj\u00eb ndryshime n\u00eb proceset teknologjike p\u00ebr t\u00eb parandaluar rrjedhje t\u00eb ngjashme n\u00eb t\u00eb ardhmen.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 APNIC, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432 \u0410\u0437\u0438\u0430\u0442\u0441\u043a\u043e-\u0422\u0438\u0445\u043e\u043e\u043a\u0435\u0430\u043d\u0441\u043a\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435, \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u043f\u0430\u043b SQL-\u0434\u0430\u043c\u043f \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Whois, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 APNIC — \u0432 2017 \u0433\u043e\u0434\u0443 \u0431\u0430\u0437\u0430 Whois \u0443\u0436\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0430 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0442\u043e\u0436\u0435 \u043f\u043e \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0443 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0430. \u0412 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100566","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rrjedhja e hash-eve t\u00eb fjal\u00ebkalimeve t\u00eb sh\u00ebrbimit Whois t\u00eb regjistruesit t\u00eb internetit APNIC | ProHoster","description":"Regjistruesi APNIC, i cili \u00ebsht\u00eb p\u00ebrgjegj\u00ebs p\u00ebr shp\u00ebrndarjen e adresave IP n\u00eb rajonin e Azis\u00eb-Paq\u00ebsorit, njoftoi p\u00ebr nj\u00eb incident, si rezultat i t\u00eb cilit nj\u00eb dump SQL i sh\u00ebrbimit Whois u b\u00eb publik, duke p\u00ebrfshir\u00eb t\u00eb dh\u00ebna konfidenciale dhe hash-e fjal\u00ebkalimesh. E r\u00ebnd\u00ebsishme \u00ebsht\u00eb se kjo nuk \u00ebsht\u00eb rrjedhja e par\u00eb e t\u00eb dh\u00ebnave personale n\u00eb APNIC - n\u00eb vitin 2017, baza Whois gjithashtu doli e hapur p\u00ebr publikun p\u00ebr shkak t\u00eb neglizhenc\u00ebs s\u00eb stafit. N\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 \u0445\u044d\u0448\u0435\u0439 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 Whois-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 APNIC | ProHoster","og:description":"\u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 APNIC, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432 \u0410\u0437\u0438\u0430\u0442\u0441\u043a\u043e-\u0422\u0438\u0445\u043e\u043e\u043a\u0435\u0430\u043d\u0441\u043a\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435, \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u043f\u0430\u043b SQL-\u0434\u0430\u043c\u043f \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Whois, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 APNIC - \u0432 2017 \u0433\u043e\u0434\u0443 \u0431\u0430\u0437\u0430 Whois \u0443\u0436\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0430 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0442\u043e\u0436\u0435 \u043f\u043e \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0443 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0430. \u0412","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-22T08:22:46+00:00","article:modified_time":"2021-06-22T08:22:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100566","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-22 08:30:54","updated":"2026-02-08 20:40:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100566","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=100566"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100566\/revisions"}],"predecessor-version":[{"id":158025,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/100566\/revisions\/158025"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=100566"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=100566"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=100566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}