{"id":32527,"date":"2019-10-31T21:47:32","date_gmt":"2019-10-31T18:47:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dockerhub-vzloman\/"},"modified":"2019-10-31T21:47:32","modified_gmt":"2019-10-31T18:47:32","slug":"dockerhub-vzloman","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/dockerhub-vzloman","title":{"rendered":"DockerHub \u00ebsht\u00eb thyer","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"DockerHub
\n
\nDisa or\u00eb m\u00eb par\u00eb, disa p\u00ebrdorues t\u00eb DockerHub mor\u00ebn emaile me p\u00ebrmbajtje si m\u00eb posht\u00eb:<\/p>\n

\u00abT\u00eb enjten, m\u00eb 25 prill 2019, ne zbuluam nj\u00eb qasje t\u00eb paautorizuar n\u00eb nj\u00eb nga bazat tona t\u00eb t\u00eb dh\u00ebnave DockerHub, n\u00eb t\u00eb cil\u00ebn ruhet nj\u00eb pjes\u00eb e t\u00eb dh\u00ebnave jo financiare t\u00eb p\u00ebrdoruesve. Pas zbulimit, ne menj\u00ebher\u00eb nd\u00ebrmorr\u00ebm t\u00eb gjitha masat e nevojshme p\u00ebr t\u00eb siguruar t\u00eb dh\u00ebnat e p\u00ebrdoruesve. <\/p>\n

Dhe tani d\u00ebshirojm\u00eb t\u00eb ndajm\u00eb informacionin q\u00eb arrit\u00ebm t\u00eb zbulojm\u00eb gjat\u00eb hetimit, duke p\u00ebrfshir\u00eb se cilat llogari DockerHub ishin prekur dhe cilat masa duhet t\u00eb nd\u00ebrmarrin tani pronar\u00ebt e tyre.
\n<\/a><\/noindex>
\nK\u00ebtu \u00ebsht\u00eb se \u00e7far\u00eb arrit\u00ebm t\u00eb zbulojm\u00eb: <\/p>\n

Gjat\u00eb nj\u00eb periudhe t\u00eb shkurt\u00ebr qasje t\u00eb paautorizuar n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave DockerHub, mund t\u00eb jen\u00eb zbuluar t\u00eb dh\u00ebna t\u00eb ndjeshme t\u00eb afro 190,000 llogarive (m\u00eb pak se 5% t\u00eb p\u00ebrdoruesve t\u00eb sh\u00ebrbimit). T\u00eb dh\u00ebnat p\u00ebrfshijn\u00eb emrat e p\u00ebrdoruesve dhe hash-at e fjal\u00ebkalimeve t\u00eb nj\u00eb p\u00ebrqindje t\u00eb vog\u00ebl nga p\u00ebrdoruesit e m\u00ebsip\u00ebrm, si edhe tokent e GitHub dhe BitBucket, t\u00eb p\u00ebrdorura p\u00ebr nd\u00ebrtimet automatike t\u00eb kontejner\u00ebve. <\/p>\n

\u00c7far\u00eb duhet t\u00eb b\u00ebni tani: <\/p>\n

\u2014 Ne i k\u00ebrkojm\u00eb p\u00ebrdoruesve t\u00eb nd\u00ebrroni fjal\u00ebkalimet e DockerHub dhe \u00e7do llogari tjet\u00ebr q\u00eb p\u00ebrdor t\u00eb nj\u00ebjtin fjal\u00ebkalim. <\/p>\n

\u2014 P\u00ebrdoruesve q\u00eb kan\u00eb p\u00ebrdorur nd\u00ebrtimet automatike, t\u00eb cil\u00ebt mund t\u00eb jen\u00eb prekur, ne u kemi resetuar tokenet dhe \u00e7el\u00ebsat e aksesit. I lutemi q\u00eb gjithashtu t\u00eb kontrolloni depozitat e tyre p\u00ebr aktivitete t\u00eb dyshimta t\u00eb fundit. <\/p>\n

\u2014 P\u00ebr t\u00eb m\u00ebsuar se si t\u00eb shqyrtoni aktivitetin e dyshimt\u00eb n\u00eb llogarit\u00eb tuaja GitHub dhe BitBucket gjat\u00eb 24 or\u00ebve t\u00eb fundit, vizitoni lidhjet help.github.com\/en\/articles\/reviewing-your-security-log<\/a><\/noindex> dhe bitbucket.org\/blog\/new-audit-logs-give-you-the-who-what-when-and-where<\/a><\/noindex> <\/p>\n

\u2014 Kjo mund t\u00eb ndikoj\u00eb n\u00eb nd\u00ebrtimet tuaja aktuale nga sh\u00ebrbimi yn\u00eb i nd\u00ebrtimit automatik. Gjithashtu mund t\u00eb ket\u00eb nevoj\u00eb t\u00eb shk\u00ebputni dhe rind\u00ebrdoni llogarit\u00eb tuaja GitHub dhe BitBucket. Kjo \u00ebsht\u00eb p\u00ebrshkruar n\u00eb detaje k\u00ebtu docs.docker.com\/docker-hub\/builds\/link-source<\/a><\/noindex> <\/p>\n

Ne nga ana jon\u00eb do t\u00eb p\u00ebrmir\u00ebsojm\u00eb sistemet tona t\u00eb siguris\u00eb dhe do t\u00eb rishikojm\u00eb politikat tona. Po ashtu, kemi vendosur metrika t\u00eb tjera p\u00ebr t\u00eb monitoruar aktivitete t\u00eb paligjshme t\u00eb mundshme n\u00eb t\u00eb ardhmen. <\/p>\n

Ne ende jemi duke hetuar incidentin dhe do t'ju informojm\u00eb kur t\u00eb kemi detaje t\u00eb reja.\u00bb<\/p>\n

Si zakonisht, kontrolloni post\u00ebn tuaj, llogarit\u00eb tuaja n\u00eb sh\u00ebrbimet p\u00ebrkat\u00ebse dhe shpikni p\u00ebrs\u00ebri fjal\u00ebkalimet. Do t\u00eb p\u00ebrdit\u00ebsojm\u00eb k\u00ebt\u00eb postim me \u00e7do informacion t\u00eb ri.<\/p>\n

Vet\u00ebm p\u00ebrdoruesit e regjistruar mund t\u00eb marrin pjes\u00eb n\u00eb anket\u00eb. Hyni<\/a><\/noindex>, ju lutem.<\/p>\n

A e mor\u00ebt nj\u00eb mesazh t\u00eb till\u00eb?<\/h2>\n