Isayithi elidumile le-movie nochungechunge lwemibhalo engezansi, I-OpenSubtitles imemezele kuleli sonto kubasebenzisi bayo ukuthi ihlaselwe yisigebengu, yazisa abasebenzisi ngoLwesibili, Januwari 18 ngemuva kokuba umgebengu eputshuze isizindalwazi se-inthanethi.
Encwadini yebhulogi esithangamini sabo, ithimba lesayithi liveze ukuthi i-hacker ixhumane nabo ngo-Agasti odlule nge-Telegram ukubazisa ukuthi inokufinyelela kudatha yabo bonke abasebenzisi, cishe izigidi eziyisi-7, okuhlanganisa amakheli e-imeyili namakheli e-IP, amagama omsebenzisi namagama ayimfihlo.
Kulabo abasha kuma-OpenSubtitles, kufanele ukwazi lokho iyisevisi edume kakhulu enikezela ngamafayela emibhalo engezansi yamamuvi nochungechunge. Isevisi ifinyeleleka ngezizinda ezithi "opensubtitles.org" kanye ne-"opensubtitles.com", lapho igcina khona inkundla yezingxoxo.
Ngokomlayezo wabaphathis yesayithi abaduni bakwazi ukufinyelela kusizindalwazi sabasebenzisi ngo-Agasti 2021. Kusukela abaqhubi be I-OpenSubtitles ayizange iphendule izimfuno zesihlengo, idatha yokufinyelela manje isivela ku-inthanethi. Ngokusho kweqembu, isizindalwazi sabasebenzisi sihlanganisa okufakiwe okungaphezudlwana kwezigidi ezingu-6,7.
Iphakethe elihlungiwe liqukethe amakheli e-imeyili, ama-IP, amagama abasebenzisi, amazwe abasuka kuwo abasebenzisi, namagama ayimfihlo asesimweni se-MD5 hashi. Ithimba liyavuma ukuthi kuncane okwenziwayo ukuze kuqiniswe ezokuphepha eminyakeni yakamuva, okuvumele umhlaseli ukuthi ajove i-SQL ngemuva kokwephula igama-mfihlo elingavikelekile lomlawuli omkhulu.
“Ngo-Agasti 2021, sathola umlayezo kuTelegram ovela kumgebenga, owasibonisa ukuthi ukwazile ukufinyelela kuthebula labasebenzisi be-opensubtitles.org futhi wadawuniloda ukulahlwa kwe-SQL (ikhophi yedatha eluhlaza). Ufune isihlengo sama-bitcoins ngokungadaluli lokhu emphakathini futhi wathembisa ukuyisusa imininingwane. Asivumanga neze, ngoba kwakungeyona imali encane. Usitshele ukuthi angathola kanjani ukufinyelela futhi wasisiza silungise iphutha. Ngokobuchwepheshe, ukwazile ukugebenga igama-mfihlo elingavikelekile le-SuperAdmin," kufunda iposi leqembu.
“Ngangikwazi ukufinyelela umbhalo ongavikelekile, owawutholakala kuphela kwabakwaSuperAdmins. Lesi script simvumele ukuthi enze imijovo ye-SQL futhi akhiphe imininingwane, ”kusho iposi. Yize kungekho neyodwa idatha entshontshiwe eyaputshuzwa ngo-Agasti odlule, ngoJanuwari 11, 2022, i-OpenSubtitles yathola enye incwadi evela “kumnikeli womgebengu wangempela” owenza izicelo ezifanayo. Umgebengu wokuqala akazange athintwe ukuze bathole usizo, kwathi ngoJanuwari 15, isiza sathola ukuthi imininingwane iputshuzwe ku-inthanethi ngayizolo.
Le phrojekthi "Ngabe-nga-ngidliwe?" iqophe idatha futhi yengeza kusizindalwazi Sesha konke ukuvuza kwedatha yomphakathi. Lokhu kuvumela abasebenzisi ukuthi bahlole ukuthi ikheli labo le-imeyili noma igama-mfihlo lifakwe engcupheni yini.
I-OpenSubtitles ithe i- imininingwane yekhadi lesikweletu ayizange yonakaliswe.
“I-hacker ingakwazi ukufinyelela kuma-akhawunti omsebenzisi. Ukuze ukwazi ukulanda imibhalo engezansi nokunye, kodwa awukaze ube nokufinyelela ekhadini lesikweletu noma enye idatha; lezo zigcinwa ngaphandle kweplatifomu yethu,” kubhala umphathi wesayithi, “OSS,” kubhala.
I-OpenSubtitles ichaza ukugebenga ngokuthi "isifundo esinzima", evuma amaphutha ekuvikelekeni kwayo. Ngakho-ke i-OpenSubtitles selokhu yathuthukisa ukuphepha kwayo ngokwenza izinguquko ezithile ngaphansi kwe-hood.
“Isayithi ligcine amagama ayimfihlo kumahashi we-md5() angafakwanga usawoti, athathelwe indawo yi-hash_hmac kanye ne-SHA-256 enosawoti,” kusho i-OSS. Ngaphezu kwalokho, i-OpenSubtitles iphinde yethula inqubomgomo entsha yephasiwedi, ukuvala i-akhawunti ngemva kwemizamo yokungena ehlulekile, i-captcha ekusethweni kabusha kwephasiwedi, ikhasi lokungena nezinye izindawo.
Okuyingozi kakhulu kubasebenzisi abasebenzise inhlanganisela ye-imeyili nephasiwedi efanayo kwamanye amasayithi. Ngakho umhlaseli angafinyelela ama-akhawunti ezinkampani zangaphandle. Futhi, kungase kube inkinga kubasebenzisi be-OpenSubtitles abavame ukuvama amaphothali anemininingwane efanayo.
Kungakho uma noma yimuphi wabafundi bethu evakashela njalo, kunconywa ukuthi bashintshe iphasiwedi yabo kusizinda se-openSubtitles.org kanye ne-openSubtitles.com.
Umthombo: https://forum.opensubtitles.org/