Troy kuvhima, iye musiki weinozivikanwa webhusaiti "Ndave weKubatwa" akazivisa Mazuva mashoma apfuura source kodhi kuburitswa kubva kune yakashatiswa password yekuongorora webhusaiti "Ini ndakabatwa here?"
Kune avo vasina kujairana naIni Ini weKubatwa nePwned, vanofanira kuziva izvozvo iyi zvirokwazvo inozivikanwa webhusaiti , que inobvumira vashandisi veInternet kuti vaone kana yavo yega data yakanganiswa nekutyorwa kwedata. Iyo sevhisi inounganidza uye inoongorora mazana emadhodhi epa database uye mapasta ane ruzivo pamabhiriyoni emaakaunzi akadhirika uye anotendera vashandisi kutsvaga yavo ruzivo nekupinza yavo yezita kana email kero.
Iyi webhusaiti yakashanda sekurudzira kune vamwe Sawa mawebhusaiti kana ayo anotobatanidza kune ino webhusaiti, yakadaro inyaya yeFirefox Monitor kana kunyange Google pachayo, iyo inozivisa vashandisi vayo kana chero dhata ravo rakachengetwa mubrowser password maneja rakagadziriswa.
Ndakave Ndabatwa, Inopawo vashandisi kunyoresa kuti vagamuchire zviziviso yekuti email yako kero inowoneka mukudonha mune ramangwana. Iyo saiti yakave yakashongedzerwa seyakakosha sosi yevashandisi veInternet avo vanoda kuchengetedza kwavo kwega uye kuvanzika.
Pakuburitswa kodhi yekodhi yeNdine Wakave Wakatsemurwa
Troy Hunt akataura mublog blog izvo pakutanga, chinangwa chekuvhura kodhi yeprojekiti chakaziviswa muna Nyamavhuvhu gore rapfuura, asi maitiro acho akanonoka uye kodhi yakatsikiswa kusvika zvino.
MunaAugust, ndakazivisa kuti ndakaronga kuvhura iyo HIBP codebase seyakavhurwa sosi. Aiziva kuti zvaisazove nyore, asi zvakare aiziva kuti ndicho chinhu chaicho chekuita kwehurefu hwepurojekiti. Chandakanga ndisingazive ndechekuti zvingave zvidiki sei kune ese marudzi ezvikonzero iwe zvaunogona kufungidzira uye zvimwe zvakawanda zvisingawanzo kuve pachena. Chimwe chezvikonzero zvakakosha ndechekuti pane yakawanda yekuedza inosanganisirwa mukusarudza chimwe chinhu chakaitwa seye-munhu-chipfuwo chirongwa chemakore uye kuchichinjisa munzvimbo yeruzhinji. Ini ndanga ndisina zano rekuti ndingatarise sei yakavhurika sosi purojekiti, kumisikidza iyo rezinesi modhi, kurongedza uko nharaunda inodyara, kugamuchira mipiro, kugadzirisazve nzira yekuburitsa, uye zvese zvese zvinhu zvandine chokwadi kuti handina kumbofunga nezvazvo nazvino. Apa ndipo pane iyo. inopinda.
Mushure mekuzivisa chinangwa chekuenda kunovhura sosi, shamwari yangu uye CEO wesheyo, Claire Novotny, akatambanudza ruoko ndokupa rutsigiro, nekudaro achitanga hurukuro nyowani. Ndakaziva Claire kwemakore semumwe weMicrosoft Regional Director uye gare gare seMushandi weMicrosoft neManeja weProjekiti pane timu yeNET. Asi .NET Foundation haisi chikamu cheMicrosoft, isangano rakazvimiririra risingabatsiri ...
Kodhi yebasa yakanyorwa muC # uye yakaburitswa pasi pezenisi reBSD. Iyo purojekiti inorongerwa kuvandudzwa pamwe nekutora chikamu kwenharaunda pasi pesangano reasina purofiti sangano .NET Foundatuon.
Panguva imwecheteyo, kutanga kwebasa mushandirapamwe kwakaziviswa RAKADHARA pamwe neUS Federal Bureau yeInvestigation. iyo yairatidza kuda kwayo kupfuudza ruzivo nezve mapassword akakanganiswa zvakaratidzwa nekuda kwekuferefetwa kuri kuenderera.
Semuenzaniso, pakurwisa botnets, iyo FBI inowanzo sangana nedhatabhesi yemaphasiwedi anoshandiswa mumarware kuita kurwisa. Iko kufarira kuendesa ruzivo kune iyo HaveIBeenPwned sevhisi inosanganisirwa nechishuwo chekutora imwechete poindi yekutaridza akanganisa maakaunzi. Izvo zvakarongwa kuendesa ruzivo rwepassword muchimiro cheSHA-1 uye NTLM hashes. API yakakosha ichagadziriswa kuronga otomatiki password yekufambisa chiteshi.
Finalmente kana iwe uchifarira kuziva zvakawanda nezvazvo, unogona kutarisa iyo ruzivo mune inotevera chinongedzo.