ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ ืคื•ืŸ ื‘ื™ื™ื–ืข ืงืึธื“ ืื™ืŸ ืจื•ื‘ื™ ืคึผืขืงืœ Strong_password ื“ื™ื˜ืขืงื˜ืึทื“

ะ’ ืืจื•ื™ืก 25 ื™ื•ื ื™ ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื™ื™ื“ืœืฉื˜ื™ื™ืŸ ืคึผืขืงืœ Strong_password 0.7 ืื ื˜ืคืœืขืงื˜ ื‘ื™ื™ื–ืข ืขื ื“ืขืจื•ื ื’ืขืŸ (CVE-2019-13354), ื“ืึทื•ื ืœืึธื•ื“ื™ื ื’ ืื•ืŸ ืขืงืกืึทืงื™ื•ื˜ื™ื ื’ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ืงืึธื“ ืงืึทื ื˜ืจืึธื•ืœื“ ื“ื•ืจืš ืึทืŸ ืื•ืžื‘ืึทืงืึทื ื˜ ืึทื˜ืึทืงืขืจ, ื›ืึธื•ืกื˜ื™ื“ ืื•ื™ืฃ ื“ื™ Pastebin ื“ื™ื ืกื˜. ื“ื™ ื’ืึทื ืฅ ื ื•ืžืขืจ ืคื•ืŸ ื“ืึทื•ื ืœืึธื•ื“ื– ืคื•ืŸ ื“ื™ ืคึผืจื•ื™ืขืงื˜ ืื™ื– 247 ื˜ื•ื™ื–ื ื˜, ืื•ืŸ ื•ื•ืขืจืกื™ืข 0.6 ืื™ื– ื•ื•ืขื’ืŸ 38 ื˜ื•ื™ื–ื ื˜. ืคึฟืึทืจ ื“ื™ ื‘ื™ื™ื–ืข ื•ื•ืขืจืกื™ืข, ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ื“ืึทื•ื ืœืึธื•ื“ื– ืื™ื– ืœื™ืกื˜ืขื“ ื•ื•ื™ 537, ืึธื‘ืขืจ ืขืก ืื™ื– ื ื™ืฉื˜ ืงืœืึธืจ ื•ื•ื™ ืคึผื™ื ื˜ืœืขืš ื“ืึธืก ืื™ื–, ื•ื•ื™ื™ึทืœ ื“ื™ ืžืขืœื“ื•ื ื’ ืื™ื– ืฉื•ื™ืŸ ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ ืคื•ืŸ Ruby Gems.

ื“ื™ Strong_password ื‘ื™ื‘ืœื™ืึธื˜ืขืง ื’ื™ื˜ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืงืึธื ื˜ืจืึธืœื™ืจื•ื ื’ ื“ื™ ืฉื˜ืึทืจืงื™ื™ื˜ ืคื•ืŸ ื“ื™ ืคึผืึทืจืึธืœ ืกืคึผืขืกื™ืคื™ืขื“ ื“ื•ืจืš ื“ื™ ื‘ืึทื ื™ืฆืขืจ ื‘ืขืฉืึทืก ืจืขื’ื™ืกื˜ืจืึทืฆื™ืข.
ืฆื•ื•ื™ืฉืŸ ื ื™ืฆืŸ ื“ื™ Strong_password ืคึผืึทืงื™ื“ื–ืฉื™ื– think_feel_do_engine (65 ื˜ื•ื™ื–ื ื˜ ื“ืึทื•ื ืœืึธื•ื“ื–), think_feel_do_dashboard (15 ื˜ื•ื™ื–ื ื˜ ื“ืึทื•ื ืœืึธื•ื“ื–) ืื•ืŸ
ืกื•ืคึผืขืจื”ืึธืกื˜ื™ื ื’ (1.5 ื˜ื•ื™ื–ื ื˜). ืขืก ืื™ื– ื‘ืืžืขืจืงื˜ ืึทื– ื“ื™ ื‘ื™ื™ื–ืข ืขื ื“ืขืจื•ื ื’ ืื™ื– ื’ืขื•ื•ืขืŸ ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื•ืจืš ืึทืŸ ืื•ืžื‘ืึทืงืึทื ื˜ ืžืขื ื˜ืฉ ื•ื•ืืก ื’ืขื›ืืคื˜ ืงืึธื ื˜ืจืึธืœ ืคื•ืŸ ื“ื™ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ืคื•ืŸ ื“ืขืจ ืžื—ื‘ืจ.

ื“ื™ ื‘ื™ื™ื–ืข ืงืึธื“ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ื‘ืœื•ื™ื– ืฆื• RubyGems.org, ื’ื™ื˜ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ื“ื™ ืคึผืจื•ื™ืขืงื˜ ืื™ื– ื ื™ืฉื˜ ืึทืคืขืงื˜ืึทื“. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขื•ื•ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื ืึธืš ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก, ื•ื•ืึธืก ื ื™ืฆื˜ Strong_password ืื™ืŸ ื–ื™ื™ืŸ ืคึผืจืึทื“ื–ืฉืขืงืก, ืื ื’ืขื”ื•ื™ื‘ืŸ ืฆื• ืจืขื›ืขื ืขืŸ ืื•ื™ืก ื•ื•ืึธืก ื“ื™ ืœืขืฆื˜ืข ืขื ื“ืขืจื•ื ื’ ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ืžืขืจ ื•ื•ื™ 6 ื—ื“ืฉื™ื ืฆื•ืจื™ืง, ืึธื‘ืขืจ ืึท ื ื™ื™ึทืข ืžืขืœื“ื•ื ื’ ืื™ื– ืืจื•ื™ืก ืื•ื™ืฃ RubyGems, ืืจื•ื™ืก ืื™ืŸ ื‘ื™ื›ืึทืฃ ืคื•ืŸ ืึท ื ื™ื™ึทืข. ืžืฒื ืขืจ , ืฐืขื’ ืŸ ืฐืขืœื› ืŸ ืงืฒื ืข ืจ ื”ื ื˜ ืคืจื™ืข ืจ ื ื™ืฉ ื˜ ื’ืขื”ืขืจื˜ , ื”ื ื‘ ืื™ ืš ื’ืืจื ื™ืฉ ื˜ ื’ืขื”ืขืจื˜ .

ื“ืขืจ ืึทื˜ืึทืงืขืจ ืงืขืŸ ื•ื™ืกืคื™ืจืŸ ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ืงืึธื“ ืื•ื™ืฃ ืกืขืจื•ื•ืขืจืก ื ื™ืฆืŸ ื“ื™ ืคึผืจืึธื‘ืœืขืžืึทื˜ื™ืง ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹Strong_password. ื•ื•ืขืŸ ืึท ืคึผืจืึธื‘ืœืขื ืžื™ื˜ Pastebin ืื™ื– ื’ืขื•ื•ืขืŸ ื“ื™ื˜ืขืงื˜ืึทื“, ืึท ืฉืจื™ืคื˜ ืื™ื– ืœืึธื•ื“ื™ื“ ืฆื• ืœื•ื™ืคืŸ ืงื™ื™ืŸ ืงืึธื“ ื“ื•ืจื›ื’ืขื’ืื ื’ืขืŸ ื“ื•ืจืš ื“ืขื ืงืœื™ืขื ื˜ ื“ื•ืจืš ืงื™ื›ืœ "__id" ืื•ืŸ ืงืึธื“ืขื“ ืžื™ื˜ ื“ื™ Base64 ืื•ืคึฟืŸ. ื“ื™ ื‘ื™ื™ื–ืข ืงืึธื“ ืื•ื™ืš ื’ืขืฉื™ืงื˜ ืคึผืึทืจืึทืžืขื˜ืขืจืก ืคื•ืŸ ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก ืื•ื™ืฃ ื•ื•ืึธืก ื“ื™ ื‘ื™ื™ื–ืข Strong_password ื•ื•ืึทืจื™ืึทื ื˜ ืื™ื– ืื™ื ืกื˜ืึทืœื™ืจืŸ ืฆื• ืึท ืกืขืจื•ื•ืขืจ ืงืึทื ื˜ืจืึธื•ืœื“ ื“ื•ืจืš ื“ื™ ืึทื˜ืึทืงืขืจ.

ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ ืคื•ืŸ ื‘ื™ื™ื–ืข ืงืึธื“ ืื™ืŸ ืจื•ื‘ื™ ืคึผืขืงืœ Strong_password ื“ื™ื˜ืขืงื˜ืึทื“

ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ ืคื•ืŸ ื‘ื™ื™ื–ืข ืงืึธื“ ืื™ืŸ ืจื•ื‘ื™ ืคึผืขืงืœ Strong_password ื“ื™ื˜ืขืงื˜ืึทื“

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’