Docker Hub yakabiwa uye maakaundi 190,000 akafumurwa, ma tokeni, mawaniro uye nezvimwe

Kushatirwa

Munguva pfupi yapfuura timu ye Docker akaburitsa yezano rekuchengetedza kuzivisa kuwanikwa kusingatenderwe kune Docker Hub dhatabhesi nemunhu asingazivikanwe. Chikwata cheDocker chakazoziva nezve kupindira kwakagara kwenguva pfupi chete muna Kubvumbi 25, 2019.

Iyo Docker Hub dhatabhesi yakaburitsa pachena ruzivo rwevashandisi vangangosvika zviuru mazana mazana gumi neshanu, kusanganisira mazita evashandisi nemapassword, pamwe nemasaini eGitHub uye Bitbucket repositori ayo mashandisiro asina kukurudzirwa neumwe wechitatu anogona kukanganisa kutendeka kwemakodhi ezvinyorwa.

Zvinoenderana nemaonero aDocker, ruzivo rwuri mudhatabhesi rwaisanganisira ma tokeni eGitHub neBitbucket repositori ayo anoshandiswa kugadzira otomatiki kodhi kuDocker Hub, pamwe nemazita evashandisi nemapassword vashoma muzana vashandisi: 190,000 maakaundi emushandisi Ivo vanomiririra isingasviki 5% yevanoshandisa Docker Hub.

Zvechokwadi, GitHub neBitbucket makiyi ekuwana akachengetwa muDocker Hub anotendera vagadziri kugadzirisa yavo kodhi yeprojekti uye otomatiki unganidza iwo mufananidzo kune Docker Hub.

Iko kunyorera kweavo vakakanganiswa kunogona kuchinjwa

Iyo ingangoita njodzi yevashandisi zana nemazana masere vane maakaundi akafumurwa ndeekuti kana murwisi akawana mukana wekuwana tokeni, iwe unogona kuwana mukana kune yavo yakavanzika kodhi repodhi iyo ivo yavanogona kuchinjisa zvinoenderana nemvumo dzakachengetwa muchiratidzo.

Nekudaro, kana kodhi ikashandurwa nekuda kwezvikonzero zvisiri izvo uye mifananidzo yakadzikiswa yaitwa, izvi zvinogona kutungamira pakurwisa kwakakomba kwekutengesasemifananidzo yeDocker Hub inowanzo shandiswa mumashandisirwo eserver uye kumisikidzwa.

Mune rako rekuchengetedza chengetedzo rakatumirwa Chishanu manheru, Docker yakati yatobvisa zvese tokeni uye pa - screen yekuwana makiyi.

Docker akati zvakare inovandudza maitiro ayo ese ekuchengetedza uye kuongorora maratidziro ayo. Akazivisawo kuti maturusi matsva ekuongorora ave panzvimbo.

Docker-Hub-Yakasungwa1

Zvisinei, zvakakosha kuti vanogadzira, ndiani akashandisa otomatiki kuvaka kweDocker Hub, tarisa yako reprojekti yekuchengetedza kuti uwane mvumo yekuwana.

Heano zano rekuchengetedza rakatumirwa naDocker neChishanu manheru:

NeChina, Kubvumbi 25, 2019, takawana mukana usingatenderwe kune imwechete Hub dhatabhesi iyo inochengetera subset yeasina-mushandisi data. zvemari Kana taziva, isu tinokasira kupindira uye kuchengetedza saiti.

Tinoda kukuzivisa iwe izvo zvatakadzidza kubva kuongororo yedu inoenderera, kusanganisira kuti ndeapi maDocker Hub maakaitika akakanganiswa uye nezviitoi zvinofanirwa kushandiswa nevashandisi.

Izvi ndizvo zvatakadzidza:

Munguva pfupi yenguva isingabvumidzwe kuwana kune Docker Hub dhatabhesi, data rakaomarara kubva kumaaccount 190,000 (asingasviki 5% yevashandisi veHub) anogona kunge akafumurwa.

Iyo data inosanganisira iwo mashedhi emazita uye mapassword echikamu chidiki cheava vashandisi, pamwe neyeGithub neBitbucket tokeni ye otomatiki Docker anovaka.

Chiito chekutora:

Tinokumbira vashandisi kuti vachinje password yavo muDocker Hub uye chero imwe account inogovera password iyi.

Kune vashandisi vane auto-anovaka maseva angangodaro akanganiswa, isu takabvisa makiyi ekupinda uye tokeni kubva kuGitHub uye iwe unokurudzirwa kuti ubatanidzwe zvakare kune ako marekodhi uye tarisa ekuchengetedza matanda kuona kana paine chiito. Zviitiko zvisingafanoonekwi zvakaitika.

Unogona kutarisa zviito zvekuchengetedza pane ako maGitHub kana maBitBucket maakaundi kuti uone kana kwave nekuwana kupi kusingatarisirwe mumaawa makumi maviri nemana apfuura.

Izvi zvinogona kukanganisa yako yazvino kuvaka kubva kune yedu otomatiki kuvaka sevhisi. Iwe ungangoda kudimbura uye kubatanidza yako Github neBitbucket sosi mupi senge zvinotsanangurwa muiyi inotevera chinongedzo.


Izvo zviri muchinyorwa zvinoomerera pamisimboti yedu ye tsika dzekunyora. Kuti utaure chikanganiso tinya pano.

Iva wekutanga kutaura

Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa.

*

*

  1. Inotarisira data: AB Internet Networks 2008 SL
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako