{"id":34346,"date":"2019-10-31T21:57:50","date_gmt":"2019-10-31T18:57:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source\/"},"modified":"2019-10-31T21:57:50","modified_gmt":"2019-10-31T18:57:50","slug":"elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","title":{"rendered":"Elasticsearch har gjort problematiska s\u00e4kerhetsfunktioner, som tidigare togs bort till open source, gratis.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nyligen publicerades ett inl\u00e4gg p\u00e5 Elastic-bloggen <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/blog\/security-for-elasticsearch-is-now-free\">d\u00e4r det rapporteras om att de centrala s\u00e4kerhetsfunktionerna i Elasticsearch, som togs till open source f\u00f6r \u00f6ver ett \u00e5r sedan, nu \u00e4r gratis f\u00f6r anv\u00e4ndare.<\/a><\/noindex>I det officiella blogginl\u00e4gget uttrycks \"korrekta\" ord om att open source b\u00f6r vara gratis och att projekt\u00e4garna bygger sin verksamhet p\u00e5 andra till\u00e4ggsfunktioner som erbjuds f\u00f6r f\u00f6retagsl\u00f6sningar. Nu ing\u00e5r f\u00f6ljande s\u00e4kerhetsfunktioner, som tidigare endast var tillg\u00e4ngliga med en guldprenumeration, i de grundl\u00e4ggande versionerna av 6.8.0 och 7.1.0:<\/p>\n<p>TLS f\u00f6r krypterad kommunikation.<\/p>\n<ul>\n<li>Fil- och native-realm f\u00f6r att skapa och hantera anv\u00e4ndarkonton.<\/li>\n<li>Beh\u00f6righetskontroll f\u00f6r anv\u00e4ndare till API och kluster baserat p\u00e5 roller; multi-anv\u00e4ndartillg\u00e5ng till Kibana till\u00e5ts med hj\u00e4lp av Kibana Spaces.<\/li>\n<li>Men \u00f6verg\u00e5ngen av s\u00e4kerhetsfunktioner till den kostnadsfria sektionen \u00e4r inte en stor gest utan ett f\u00f6rs\u00f6k att skapa avst\u00e5nd mellan den kommersiella produkten och dess st\u00f6rsta problem.<\/li>\n<\/ul>\n<p>\n<b>Och de \u00e4r allvarliga. <\/b><\/p>\n<p>F\u00f6rfr\u00e5gan \"Elastic Leaked\" returnerar 13,3 miljoner s\u00f6kresultat p\u00e5 Google. Imponerande, eller hur? Efter att s\u00e4kerhetsfunktionerna i projektet togs till open source, vad som en g\u00e5ng verkade som en bra id\u00e9, drabbades Elastic av allvarliga dataintr\u00e5ng. Faktiskt har den grundl\u00e4ggande versionen blivit som en schweizerost, eftersom ingen verkligen st\u00f6dde dessa s\u00e4kerhetsfunktioner.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nEn av de mest anm\u00e4rkningsv\u00e4rda dataintr\u00e5ngen fr\u00e5n elastic-servern var fallet d\u00e4r 57 miljoner data om amerikanska medborgare gick f\u00f6rlorade, vilket<\/p>\n<p>skrevs om i pressen <noindex><a rel=\"nofollow\" href=\"https:\/\/www.zdnet.com\/article\/elasticsearch-server-exposed-the-personal-data-of-over-57-million-us-citizens\/\">i december 2018 (det visade sig senare att faktiskt 82 miljoner poster l\u00e4cktes). Samma m\u00e5nad, i december 2018, stals uppgifter om 32 miljoner personer i Brasilien p\u00e5 grund av s\u00e4kerhetsproblem hos Elastic. I mars 2019 l\u00e4cktes \"bara\" 250 000 konfidentiella dokument, inklusive juridiska dokument, fr\u00e5n en annan elastic-server. Och detta \u00e4r bara f\u00f6rsta sidan av s\u00f6kresultaten f\u00f6r v\u00e5r n\u00e4mnda f\u00f6rfr\u00e5gan.<\/a><\/noindex> Faktum \u00e4r att inbrotten fortfarande p\u00e5g\u00e5r och b\u00f6rjade snart efter att s\u00e4kerhetsfunktionerna sj\u00e4lva avinstallerades av utvecklarna och togs till \u00f6ppen k\u00e4llkod.<\/p>\n<p>L\u00e4saren kanske l\u00e4gger m\u00e4rke till: \"Jaha, och vad d\u00e5? De har s\u00e4kerhetsproblem, men vem har inte?\"<\/p>\n<p>Men nu, uppm\u00e4rksamhet.<\/p>\n<p>Och nu, uppm\u00e4rksamhet.<\/p>\n<p>Fr\u00e5gan \u00e4r att fram till denna m\u00e5ndag tog Elastic med gott samvete betalt av kunder f\u00f6r ett verkningsl\u00f6st verktyg som kallas s\u00e4kerhetsfunktioner, som de sj\u00e4lva sl\u00e4ppte som \u00f6ppen k\u00e4llkod redan i februari 2018, det vill s\u00e4ga f\u00f6r cirka 15 m\u00e5nader sedan. Utan att b\u00e4ra n\u00e5gra betydande kostnader f\u00f6r att underh\u00e5lla dessa funktioner, fortsatte f\u00f6retaget att ta betalt av gold- och premiumprenumeranter inom f\u00f6retagssegmentet.<\/p>\n<p>Vid n\u00e5got tillf\u00e4lle blev s\u00e4kerhetsproblemen s\u00e5 giftiga f\u00f6r f\u00f6retaget, och klagom\u00e5len fr\u00e5n kunder s\u00e5 hotande, att girigheten hamnade i skymundan. Men ist\u00e4llet f\u00f6r att \u00e5teruppta utvecklingen och \"laga\" h\u00e5len i sitt eget projekt, som ledde till att miljoner dokument och personuppgifter l\u00e4ckte ut, kastade Elastic ut s\u00e4kerhetsfunktionerna i den gratisversion av elasticsearch. Och presenterar detta som en stor v\u00e4lg\u00f6renhet och ett bidrag till open source.<\/p>\n<p>I skenet av s\u00e5dana \"effektiva\" l\u00f6sningar framst\u00e5r den andra delen av blogginl\u00e4gget som v\u00e5r anledning att fokusera p\u00e5 denna historia. Det handlar om <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/blog\/introducing-elastic-cloud-on-kubernetes-the-elasticsearch-operator-and-beyond\">lanseringen av alfa-versionen Elastic Cloud on Kubernetes (ECK)<\/a><\/noindex> \u2014 den officiella operat\u00f6ren f\u00f6r Kubernetes f\u00f6r Elasticsearch och Kibana.<\/p>\n<p>Utvecklarna med ett allvarligt uttryck p\u00e5 ansiktet s\u00e4ger att belastningen p\u00e5 administrat\u00f6rer av dessa l\u00f6sningar kommer att minskas p\u00e5 grund av att s\u00e4kerhetsfunktionerna har flyttats till den grundl\u00e4ggande gratisversionen av elasticsearch. Och \u00f6verlag, allt \u00e4r toppen.<\/p>\n<p>\"Vi kan garantera att alla kluster som k\u00f6rs och hanteras av ECK kommer att vara skyddade som standard fr\u00e5n start, utan extra belastning p\u00e5 administrat\u00f6rerna,\" st\u00e5r det i den officiella bloggen.<\/p>\n<p>Som en \u00f6vergiven och i praktiken osupportad l\u00f6sning, som under det senaste \u00e5ret har blivit en vanlig slagp\u00e5se, d\u00f6ljer utvecklarna hur anv\u00e4ndarna verkligen ska skyddas.<br \/>\n<br \/>K\u00e4lla: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/itsumma\/blog\/453110\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438 Elasticsearch, \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 open source-\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u043e \u0431\u043e\u043b\u0435\u0435 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434, \u0442\u0435\u043f\u0435\u0440\u044c \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0412 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u043b\u043e\u0433\u043e\u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u00ab\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0435\u00bb \u0441\u043b\u043e\u0432\u0430 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e open source \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c \u0438 \u0447\u0442\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0441\u0442\u0440\u043e\u044f\u0442 \u0441\u0432\u043e\u0439 \u0431\u0438\u0437\u043d\u0435\u0441 \u043d\u0430 \u043f\u0440\u043e\u0447\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34346","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sv_SE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Elasticsearch \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 open source | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:57:50+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:57:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Elasticsearch har gjort problematiska s\u00e4kerhetsfunktioner gratis, som tidigare sl\u00e4pptes som \u00f6ppen k\u00e4llkod | ProHoster","description":"Nyligen publicerades ett inl\u00e4gg p\u00e5 Elastic-bloggen som meddelar att de viktigaste s\u00e4kerhetsfunktionerna.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Elasticsearch \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 open source | ProHoster","og:description":"\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:57:50+00:00","article:modified_time":"2019-10-31T18:57:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34346","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 18:50:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:23:17","updated":"2026-01-21 18:50:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/34346","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=34346"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/34346\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=34346"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=34346"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=34346"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}