September 26, 2017

ʻO nā mea hōʻoiaʻiʻo e pili ana i ka hapalua miliona mau mīkini hāmeʻa kaʻa i loaʻa pū ʻia ma ka pūnaewele

I kekahi hihia ʻē aʻe o ka haki ʻikepili kuʻikuʻi ʻole, nā hōʻoia ʻeʻe o 540,000 nā moʻolelo e pili ana i ka ʻoihana hāmeʻa kaʻa Lawelawe lawelawe ʻo SVR ua kulu pūnaewele ma muli o a kuhi hewa hoʻonohonoho kikowaena, ke hōʻike nei i ka ʻikepili pilikino a me nā kikoʻī kaʻa o nā hoʻokele a me nā ʻoihana e hoʻohana nei i kāna lawelawe.

ʻO nā Kelepona-o-About-Half-A-Million-Car-Tracking-Devices-Loaʻa Pūnaewele-Pūnaewele.

 

ʻO SVR (Stolen Vehicle Records) Tracking, kahi ʻoihana i koi e loea i ka "hoʻōla kaʻa" e ʻae i kāna mea kūʻai aku e nānā i kā lākou mau kaʻa i ka manawa maoli ma o ka hoʻopili ʻana i kahi mea huli kino i nā kaʻa ma kahi wahi naʻaupō, no laila hiki iā lākou ke nānā a hoʻihoʻi iā lākou i hihia ʻaihue ʻia kā lākou mau kaʻa.

Wahi a nā kānaka noiʻi ma Kromtech Security Center, ka mea i ʻike mua i ka haʻihaʻi, ua hōʻike ʻia ka ʻikepili me nā hōʻike moʻokāki a nā mea hoʻohana o ka SVR, e like me nā leka uila, nā ʻōlelo huna, nā ʻikepili kaʻa (e like me nā helu VIN a me nā pā laikini), nā helu IMEI o nā hāmeʻa GPS a me nā ʻikepili ʻē aʻe ʻohiʻohi ʻia ma kā lākou hāmeʻa, nā mea kūʻai aku a me nā mea kūʻai aku kaʻa. Ua hōʻike ʻia ka ʻike ma o ka maluhia ka Pūnaewele Pūnaewele ʻo Amazon (AWS) S3 pūnaewele ʻōkuhi i waiho ʻia i loaʻa ākea.

ʻO ka mea hoihoi, ua loaʻa pū ka ʻike i ka waihona i hōʻike ʻia ma kahi o ka kaʻa i hūnā ʻia ai ka pūʻali huli. Ua hōʻike ʻia nā mea noiʻi pale ʻia nā huaʻōlelo pū ʻia e ka nāwaliwali SHA-1 hashing algorithm ʻoluʻolu kēlā i ka māwae.

Wahi a Kromtech, ʻo ka huina nui o nā hāmeʻa i hōʻike ʻia "hiki ke ʻoi aku ka nui ma muli o ka nui o nā mea kūʻai aku a i ʻole mea kūʻai aku he nui nā hāmeʻa no ka huli ʻana."

"I ka makahiki kahi e hele pū ai ka hewa a me ka ʻenehana, e noʻonoʻo i ka weliweli hiki ke ʻike ʻia nā cybercriminal i kahi o kahi kaʻa e ke komo ʻana me nā ʻike i loaʻa ākea ma ka pūnaewele a ʻaihue i kēlā kaʻa? ʻO ka helu nui o nā hāmeʻa hiki ke ʻoi aku ka nui ma muli o ka ʻoiaʻiʻo he nui nā mea kūʻai aku a i ʻole mea kūʻai aku he nui nā hāmeʻa no ka huli ʻana, "wahi a ka mea noiʻi ʻo Kromtech ʻo Bob Diachenko i loko o kahi blog.

Ua hoʻopaʻa ʻia ka bākeke Amazon S3 ma hope o ke kiʻi ʻana o Kromtech iā SVR a hoʻomaopopo iā lākou e pili ana i ka haʻi. Eia nō naʻe, akāka mau ka maopopo ʻole o ka lōʻihi o ka hōʻike ākea ʻana o ka ʻikepili. ʻAʻole maopopo ia inā ua kiʻi ʻia nā ʻikepili i ka lehulehu e nā hackers ʻaʻole paha.

No ka mea kākau 

Chaitanya


{"email": "He kūpono ʻole ka leka uila", "url": "He kūpono ʻole ka wahi pūnaewele", "koi ʻia": "Nānā ʻia ke kahua koi"