Ikozvino kukanganisa kwe data revashandisi kwakavhundutsa vanogadzira
munguva pfupi yapfuura ndinoziva ruzivo rwakaburitswa nevagadziri ve open media center Guvva mariri nyevera vashandisi nezve ichangoburwa forum hack, iyo Pastebin sevhisi uye saiti yewiki yeprojekiti (forum.kodi.tv, paste.kodi.tv, uye kodi.wiki).
Vagadziri ndakaziva nezve hack mushure mekunge base base yaiswa kutengeswa kubva ku Kodi forum. Ongororo iyi yakaratidza kuti zvivakwa zvepurojekiti zvechokwadi zvakakanganisika uye ekupedzisira maitiro evapambi akanyorwa muna Kukadzi 16 na21.
Mumaawa makumi maviri nemana apfuura, takaziva nezvekuraswa kweKodi User Forum (MyBB) software iri kushambadzirwa kutengeswa pamaforamu einternet. Ichi chinyorwa chinosimbisa kuti kukanganisa kwakaitika.
MyBB manejimendi matanda anoratidza kuti nhoroondo yeakavimbika asi iye zvino asisaite nhengo yeforum manejimendi timu yakashandiswa kuwana iyo web-based MyBB administration console kaviri: muna February 16 uye zvakare February 21. February. Iyo account yakashandiswa kugadzira dura rekuchengetedza iro rakazotorwa nekudzimwa. Iyo yakadhawunirodha iripo husiku izere backups yedatabase. Muridzi weakaundi akasimbisa kuti havana kuwana admin console kuita zviito izvi.
Nezve nyaya yacho, zvakakodzera kutaura kuti kunyanya, iyo forum log yaive neruzivo nezve yekupinda kune administrative web interface kubva kune mumwe wevasina basa vatariri.
Nenzira iyi, kuva yakapinda pawebhu interface kutonga, varwisi vakagadzira uye vakadhawunirodha kopi yekuchengetedza yedatabase, pamwe nekudhawunirodha yakazara backups yehusiku huripo dhatabhesi.
Muridzi weakaunti akasimbisa kuti haana kuita chero chiitiko neforum mazuva ano (hazvina kutaurwa kuti vapambi vakakwanisa sei kuziva password yemutungamiriri). Iyo data yakakwidzwa nevapambi yaisanganisira dura rakazara renhaurirano dzeruzhinji nedzakavanzika, meseji yakavanzika, uye base base (mazita, maemail, uye password hashes).
Kunyangwe MyBB ichichengeta mapassword mune yakavharidzirwa fomati, isu tinofanirwa kufunga kuti ese mapassword akakanganiswa. Izvi zvinoda zviito kubva kuchikwata uye vashandisi veforum:
Chikwata che manejimendi chiri kuferefeta nzira yakanakisa yekuita pasi rese password reset uye yakanakisa nzira yekuona kutendeseka kweserver server uye yakabatana software. Sevha yeforum yakatorerwa Indaneti apo chiitiko ichi chiri kupera. Izvi zvichakanganisa zvakare Kodi wiki uye pastebin masaiti. Ikozvino hapana fungidziro yenguva yekuti forum server idzoke online; nzira yedu ndeyokuva yakakwana, kwete kukurumidza.
Vashandisi vanofanirwa kutora yavo Kodi forum zvitupa uye chero yakavanzika data yakagovaniswa nevamwe vashandisi kuburikidza nemushandisi-kune-mushandisi meseji system inokanganiswa. Kana iwe wakashandisa iro zita rekushandisa uye password pane chero imwe saiti, iwe unofanirwa kutevedzera reset / shanduko password maitiro eiyo saiti. Kana iyo Kodi foramu yadzoka pamhepo, isu tinopa mirairo yekuti ungapedzisa sei kuseta yako Kodi forum password.
Panguva yekudzidza kwezvakatipoteredza yeiyo system, pakanga pasina zvisaririra zveOS compromise kana zviito zvakapfuura administrative web interface yeforamu. Zvisinei, iyo forum server yakabviswa kubva kunetiweki uye nzira yekumisikidza yatanga yesoftware inoshandiswa mairi. Iyo Pastebin neWiki masevhisi akarongwa pane imwechete sevha, iyo inogona kutariswa seinogona kukanganisa.
Pashure kudzorera software, inorongwa kuronga shanduko yemapassword evashandisi uye kutumira zviziviso zvega yekuzvipira (vanopfuura vashandisi ve400.000 vakanyoreswa muforamu). Vashandisi veforum yeKodi vakashandisa password yakafanana pane dzakasiyana saiti vanorairwa kuti vachinje nekuchimbidza.
Kupora kunotarisirwa kutora mazuva akati wandei, sezvo Kodi yakashandisa forogo yakagadziridzwa yeimwe yakapfuura vhezheni yeMyBB injini (1.8.27) uye kuwiriranisa kwayo neshanduro yazvino (1.8.33) inotora nguva.
Iyo wiki saiti ichaendeswa kune imwe sevha uye inogadziridzwa kune yazvino vhezheni yeMediaWiki injini. Iyo Pastebin sevhisi inozoendeswa kune imwe sevha.
Finalmente kana iwe uchifarira kuziva zvakawanda nezvazvo, unogona kutarisa ruzivo mu chinotevera chinongedzo.