{"id":32527,"date":"2019-10-31T21:47:32","date_gmt":"2019-10-31T18:47:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dockerhub-vzloman\/"},"modified":"2019-10-31T21:47:32","modified_gmt":"2019-10-31T18:47:32","slug":"dockerhub-vzloman","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/dockerhub-vzloman","title":{"rendered":"DockerHub \u00ebsht\u00eb hakuar","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"DockerHub
\n
\nDisa or\u00eb m\u00eb par\u00eb, disa p\u00ebrdorues t\u00eb DockerHub mor\u00ebn emaile me p\u00ebrmbajtjen e m\u00ebposhtme:<\/p>\n

\u00abM\u00eb dat\u00eb 25 prill 2019, ne zbuluam nj\u00eb akses t\u00eb paautorizuar n\u00eb nj\u00eb nga bazat e t\u00eb dh\u00ebnave t\u00eb DockerHub, n\u00eb t\u00eb cil\u00ebn ruheshin disa t\u00eb dh\u00ebna jo-financiare t\u00eb p\u00ebrdoruesve. Pasi u zbulua, ne menj\u00ebher\u00eb mor\u00ebm t\u00eb gjitha masat e nevojshme p\u00ebr t\u00eb siguruar t\u00eb dh\u00ebnat e p\u00ebrdoruesve. <\/p>\n

Dhe tani do t\u00eb doja t\u00eb ndajm\u00eb informacionin q\u00eb kemi arritur t\u00eb zbulojm\u00eb gjat\u00eb hetimit, duke p\u00ebrfshir\u00eb se cilat llogari DockerHub jan\u00eb prekur dhe cilat hapa duhet t\u00eb nd\u00ebrmarrin tani pronar\u00ebt e tyre.
\n<\/a><\/noindex>
\nK\u00ebtu \u00ebsht\u00eb ajo q\u00eb kemi zbuluar: <\/p>\n

Gjat\u00eb nj\u00eb periudhe t\u00eb shkurt\u00ebr t\u00eb aksesit t\u00eb paautorizuar, mund t\u00eb ken\u00eb u zbuluar t\u00eb dh\u00ebna konfidenciale p\u00ebr rreth 190,000 llogari (m\u00eb pak se 5% e p\u00ebrdoruesve t\u00eb sh\u00ebrbimit). T\u00eb dh\u00ebnat p\u00ebrfshijn\u00eb emrat e p\u00ebrdoruesve dhe hash-t\u00eb e fjal\u00ebkalimeve t\u00eb nj\u00eb p\u00ebrqindje t\u00eb vog\u00ebl t\u00eb p\u00ebrdoruesve t\u00eb m\u00ebsip\u00ebrm, si dhe token\u00ebt GitHub dhe BitBucket, t\u00eb p\u00ebrdorur p\u00ebr nd\u00ebrtimet automatike t\u00eb kontejner\u00ebve. <\/p>\n

\u00c7far\u00eb duhet t\u00eb b\u00ebni tani: <\/p>\n

\u2014 Ne ju k\u00ebrkojm\u00eb q\u00eb p\u00ebrdoruesit t\u00eb ndryshojn\u00eb fjal\u00ebkalimet e DockerHub dhe t\u00eb \u00e7do llogarie tjet\u00ebr q\u00eb p\u00ebrdor t\u00eb nj\u00ebjtin fjal\u00ebkalim. <\/p>\n

\u2014 P\u00ebrdoruesit q\u00eb kan\u00eb p\u00ebrdorur nd\u00ebrtime automatike, t\u00eb cil\u00ebt mund t\u00eb jen\u00eb prekur, ne kemi resetuar token\u00ebt dhe \u00e7el\u00ebsat e aksesit. Ju lutemi t\u00eb kontrolloni gjithashtu repozitoret tuaja p\u00ebr aktivitet t\u00eb dyshimt\u00eb t\u00eb fundit. <\/p>\n

\u2014 P\u00ebr t\u00eb m\u00ebsuar se si t\u00eb shqyrtoni aktivitetin e dyshimt\u00eb n\u00eb llogarit\u00eb tuaja GitHub dhe BitBucket gjat\u00eb 24 or\u00ebve t\u00eb fundit, vizitoni lidhjet help.github.com\/en\/articles\/reviewing-your-security-log<\/a><\/noindex> dhe bitbucket.org\/blog\/new-audit-logs-give-you-the-who-what-when-and-where<\/a><\/noindex> <\/p>\n

\u2014 Kjo mund t\u00eb ndikoj\u00eb n\u00eb nd\u00ebrtimet tuaja aktuale nga sh\u00ebrbimi yn\u00eb t\u00eb nd\u00ebrtimit automatike. Po ashtu, mund t\u00eb duhet t\u00eb shk\u00ebputni dhe ribashkoni llogarit\u00eb tuaja GitHub dhe BitBucket. K\u00ebtu jan\u00eb detajet docs.docker.com\/docker-hub\/builds\/link-source<\/a><\/noindex> <\/p>\n

Ne, nga ana jon\u00eb, do t\u00eb fokusojm\u00eb p\u00ebrmir\u00ebsimin e sistemeve tona t\u00eb siguris\u00eb dhe do t\u00eb rishikojm\u00eb politikat tona. Po ashtu kemi vendosur metrika t\u00eb tjera p\u00ebr t\u00eb ndjekur aktivitetin e paligjsh\u00ebm t\u00eb mundsh\u00ebm n\u00eb t\u00eb ardhmen. <\/p>\n

Ne akoma jemi duke hetuar incidentin dhe do t'ju informojm\u00eb p\u00ebr \u00e7do detaj t\u00eb ri.\u00bb<\/p>\n

Si zakonisht, kontrolloni post\u00ebn tuaj, llogarit\u00eb tuaja n\u00eb sh\u00ebrbimet e p\u00ebrmendura, rishpikni fjal\u00ebkalimet tuaja. Ne do t\u00eb p\u00ebrdit\u00ebsojm\u00eb k\u00ebt\u00eb postim me \u00e7do informacion t\u00eb ri.<\/p>\n

Vet\u00ebm p\u00ebrdoruesit e regjistruar mund t\u00eb marrin pjes\u00eb n\u00eb anket\u00eb. Hyni<\/a><\/noindex>, ju lutemi.<\/p>\n

A keni marr\u00eb ndonj\u00eb email t\u00eb till\u00eb?<\/h2>\n