yuhr123
V2EX  ›  Docker

Docker Hub 数据库被入侵

  •  
  •   yuhr123 ·
    yuhr123 · Apr 27, 2019 via iPhone · 7388 views
    This topic created in 2750 days ago, the information mentioned may be changed or developed.
    刚刚收到 Docker 支持团队的邮件,告知由于数据库被入侵有 190000 用户账号和密码(已哈希)受影响,财务相关信息未受影响。GitHub 和 bitbucket 的歌曲 token 也被泄漏了,建议尽快修改相关密码。

    On Thursday, April 25th, 2019, we discovered unauthorized access to a single Hub database storing a subset of non-financial user data. Upon discovery, we acted quickly to intervene and secure the site.

    During a brief period of unauthorized access to a Docker Hub database, sensitive data from approximately 190,000 accounts may have been exposed (less than 5% of Hub users). Data includes usernames and hashed passwords for a small percentage of these users, as well as Github and Bitbucket tokens for Docker autobuilds.
    11 replies  •  2019-04-27 21:18:50 +08:00
    d5
    d5
    Apr 27, 2019 via iPhone
    1
    这就很难受了
    fanyingmao
    fanyingmao
    Apr 27, 2019 via Android
    2
    他的哈希希望别是简单的 md5,不然大部分简单密码会被查出。
    SenLief
    SenLief
    Apr 27, 2019 via Android
    3
    主要是尼玛泄露都用的同一套密码,擦还得全改嘛?
    zhang330700
    zhang330700
    Apr 27, 2019
    4
    起码还主动公布了...
    lusi1990
    lusi1990
    Apr 27, 2019 via Android
    5
    回去看看 我有账号不,要不得全改
    maxlino
    maxlino
    Apr 27, 2019 via iPhone
    6
    还好是 1Password 生成随机密码🌚
    longnight
    longnight
    Apr 27, 2019 via Android
    7
    应该用了自己的 salt 吧, 所以担心的话只要改 docker 的密码就好
    vencentge
    vencentge
    Apr 27, 2019 via iPhone
    8
    问题严重的在于 github 上的 token 被拿了,这个就延伸了危害面
    whatsmyip
    whatsmyip
    Apr 27, 2019
    9
    赶紧删了授权
    watzds
    watzds
    Apr 27, 2019
    10
    前几天刚注册就这样了。。
    whileFalse
    whileFalse
    Apr 27, 2019
    11
    我的习惯是不在源代码和构建系统中硬编码任何敏感信息;敏感信息都是在运行时注入。
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Privacy   ·   Solana   ·   4107 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 132ms · UTC 09:44 · PVG 17:44 · LAX 01:44 · JFK 04:44
    ♥ Do have faith in what you're doing.