{"id":785,"date":"2013-08-05T04:29:21","date_gmt":"2013-08-05T04:29:21","guid":{"rendered":"http:\/\/obcanskymonitoring.cz\/?p=785"},"modified":"2013-08-11T09:15:42","modified_gmt":"2013-08-11T09:15:42","slug":"webove-stranky-nbu-hackli-hackeri","status":"publish","type":"post","link":"https:\/\/obcanskymonitoring.cz\/?p=785","title":{"rendered":"Webov\u00e9 str\u00e1nky NB\u00da hackli hacke\u0159i"},"content":{"rendered":"
<\/div>\n

<\/g><\/svg><\/i>  1,174 total views<\/p>\n

<\/div>\n

Webov\u00e9 str\u00e1nky NB\u00da hackli hacke\u0159i. Pod\u00edvejte se na sn\u00edmky str\u00e1nek NBU.\u00a0Nam\u00edsto anonymn\u00edho nahl\u00e1\u0161en\u00ed korupce si m\u016f\u017eete sjednat jakousi pofidern\u00ed hypot\u00e9ku.\u00a0 Situace je o to pikantn\u011bj\u0161\u00ed, \u017ee NB\u00da m\u00e1 v gesci n\u00e1rodn\u00ed strategii boje proti kybernetick\u00e9mu zlo\u010dinu. Je pov\u011b\u0159ena vytvo\u0159en\u00edm technick\u00e9 i person\u00e1ln\u00ed infrastruktury pro odra\u017een\u00ed kybernetick\u00fdch \u00fatok\u016f, tzv. N\u00e1rodn\u00edm centrum kybernetick\u00e9 bezpe\u010dnosti. Tzn. m\u011bli by chr\u00e1nit proti kybernetick\u00fdm \u00fatok\u016fm cel\u00fd st\u00e1t a nejsou schopni uh\u00e1jit sv\u00e9 vlastn\u00ed webov\u00e9 str\u00e1nky?<\/p>\n

Posu\u010fte sami. Na sn\u00edmku vid\u00edte webov\u00e9 str\u00e1nky NBU, v\u0161imn\u011bte si banneru protikorup\u010dn\u00ed linky 199 v lev\u00e9m doln\u00edm rohu. Animovan\u00fd banner slibuje mo\u017enost anonymn\u00edho nahl\u00e1\u0161en\u00ed korupce.<\/p>\n

<\/p>\n

\"NBU2.jpg\"<\/p>\n

 <\/p>\n

Po kliknut\u00ed na banner se spust\u00ed webov\u00e9 str\u00e1nky Protikorup\u010dn\u00ed linky, kter\u00e9 vypadaj\u00ed n\u00e1sledovn\u011b.<\/p>\n

\"prima_linka.jpg\"<\/p>\n

 <\/p>\n

Koment\u00e1\u0159e net\u0159eba. Vyzkou\u0161ejte si cel\u00fd postup sami na webov\u00fdch str\u00e1nk\u00e1ch\u00a0NBU<\/a>.<\/p>\n

Co je p\u0159esnou p\u0159\u00ed\u010dinou tohoto incidentu jsem nezji\u0161\u0165oval. – P\u0159edal jsem zji\u0161t\u011bn\u00ed na podatelnu NB\u00da.<\/p>\n

A co Vy? Nem\u00e1te chu\u0165 zahl\u00e1sit korupci p\u0159es webov\u00e9 str\u00e1nky NB\u00da? Banner na str\u00e1nk\u00e1ch NB\u00da slibuje, \u017ee je to anonymn\u00ed.<\/p>\n

 <\/p>\n

EDIT:\u00a0<\/strong>Dopl\u0148uji zji\u0161t\u011bn\u00ed. Technicky vzato, webov\u00e9 str\u00e1nky NB\u00da hacknuty nebyly. D\u00e1 se \u0159\u00edci, \u017ee hacker\u016f ani nebylo pot\u0159eba, proto\u017ee cel\u00e9 zdokumentovan\u00e9 selh\u00e1n\u00ed si provedla st\u00e1tn\u00ed spr\u00e1va \u00fapln\u011b sama. Opakuji, hacker\u016f nebylo t\u0159eba, sta\u010dila nedbalost na stran\u011b NB\u00da, MV \u010cR i zbytku \u00a0st\u00e1tn\u00ed spr\u00e1vy k tomu, aby vznikla bezpe\u010dnostn\u00ed hrozba mnohem v\u00e1\u017en\u011bj\u0161\u00ed ne\u017e je n\u011bjak\u00e9 recesistick\u00e9, jednor\u00e1zov\u00e9 a kr\u00e1tkodob\u00e9 \u00a0napaden\u00ed webov\u00fdch str\u00e1nek n\u011bjak\u00e9ho \u00fa\u0159adu hackery. Posu\u010fte sami.\u00a0Cel\u00e1 situace vznikla tak, \u017ee n\u011bkdo ze st\u00e1tn\u00ed spr\u00e1vy nezaplatil prodlou\u017een\u00ed dom\u00e9ny \u00a0protikorup\u010dn\u00ed linky\u00a0www.linka199.cz<\/a>,\u00a0v d\u016fsledku \u010deho\u017e tato dom\u00e9na p\u0159e\u0161la do rukou nov\u00e9ho majitele. (Volnou dom\u00e9nu si m\u016f\u017ee koupit naprosto kdokoliv). Na tuto skute\u010dnost NB\u00da nijak nezareagoval a ponechal d\u00e1l na sv\u00fdch str\u00e1nk\u00e1ch banner odkazuj\u00edc\u00ed na tuto dom\u00e9nu. (Banner odstranil a\u017e po m\u00e9m p\u00edsemn\u00e9m upozorn\u011bn\u00ed). Na\u0161t\u011bst\u00ed nov\u00fd majitel str\u00e1nek protikorup\u010dn\u00ed linky pozm\u011bnil str\u00e1nky tak, \u017ee na prvn\u00ed pohled bylo n\u00e1padn\u00e9, \u017ee je “n\u011bco \u0161patn\u011b” (viz sn\u00edmek obrazovky – bannery s reklamou). Uv\u011bdomme si, \u017ee pokud by vlastn\u00edk ponechal p\u016fvodn\u00ed str\u00e1nky, hl\u00e1\u0161en\u00ed o korupci, u kter\u00fdch NB\u00da sliboval, \u017ee zajist\u00ed jejich anonymizaci, mohly skon\u010dit v rukou nezn\u00e1m\u00e9ho subjektu, kter\u00fd s nimi mohl nalo\u017eit libovoln\u00fdm zp\u016fsobem. (T\u0159eba je mohl pou\u017e\u00edt k vyd\u00edr\u00e1n\u00ed jak ohla\u0161ovatele, tak ohla\u0161ovan\u00e9ho). Nav\u00edc bez optick\u00e9 zm\u011bny str\u00e1nek by si nikdo ni\u010deho nev\u0161iml, j\u00e1 bych tento \u010dl\u00e1nek nenapsal a NB\u00da bych na riziko neupozornil. Jedn\u00e1 NB\u00da stejn\u011b nedbale i v dal\u0161\u00edch oblastech?<\/p>\n

Druh\u00fd z\u00e1v\u011br je ten, \u017ee anonymn\u011b zahl\u00e1sit korupci u\u017e nen\u00ed mo\u017en\u00e9. Dost p\u0159ekvapiv\u00fd d\u016fsledek skute\u010dnosti, \u017ee boj proti korupci byla “programov\u00e1 priorita vl\u00e1dy<\/em>.” \u010clov\u011bk nemus\u00ed b\u00fdt bezpe\u010dnostn\u00ed expert, ani expert na boj proti korupci, aby si uv\u011bdomil, \u017ee pokud nebude vytvo\u0159ena infrastruktura, kter\u00e1 zajist\u00ed bezpe\u010d\u00ed pro ohla\u0161ovatele korupce, mus\u00ed nutn\u011b boj proti korupci skon\u010dit fiaskem prost\u011b proto, \u017ee korupci nikdo neohl\u00e1s\u00ed.<\/p>\n

Na z\u00e1v\u011br mal\u00fd lingvistick\u00fd vt\u00edpek. Na stran\u011b vl\u00e1dy m\u011bl koordinovat boj proti korupci v\u00fdbor s n\u00e1zvem: “Vl\u00e1dn\u00ed\u00a0v\u00fdbor\u00a0<\/em>pro koordinaci boje\u00a0s<\/strong>\u00a0korupc\u00ed<\/em>.” Vedla jej, jak v\u00edme Karolina Peak. V\u0161imn\u011bte si toho “s”, nam\u00edsto “proti” v n\u00e1zvu \u00fa\u0159adu.\u00a0Mo\u017en\u00e1 to tedy bylo my\u0161leno tak, \u017ee vl\u00e1da bojuje s korupc\u00ed proti sv\u00fdm ob\u010dan\u016fm. (Freude, Freude, v\u017edy na tebe dojde). Pak ov\u0161em toto v\u0161e, co se stalo, d\u00e1v\u00e1 smysl. Hezk\u00fd den.<\/p>\n

<\/a><\/a><\/a><\/a><\/div>
<\/a><\/a><\/a><\/a><\/div>","protected":false},"excerpt":{"rendered":"

 1,174 total views Webov\u00e9 str\u00e1nky NB\u00da hackli hacke\u0159i. Pod\u00edvejte se na sn\u00edmky str\u00e1nek NBU.\u00a0Nam\u00edsto anonymn\u00edho nahl\u00e1\u0161en\u00ed korupce si m\u016f\u017eete sjednat jakousi pofidern\u00ed hypot\u00e9ku.\u00a0 Situace je o to pikantn\u011bj\u0161\u00ed, \u017ee NB\u00da m\u00e1 v gesci n\u00e1rodn\u00ed strategii boje proti kybernetick\u00e9mu zlo\u010dinu. Je pov\u011b\u0159ena vytvo\u0159en\u00edm technick\u00e9 i person\u00e1ln\u00ed infrastruktury pro odra\u017een\u00ed kybernetick\u00fdch \u00fatok\u016f, tzv. N\u00e1rodn\u00edm centrum kybernetick\u00e9 bezpe\u010dnosti. Tzn. […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":true,"template":"","format":"standard","meta":[],"categories":[9],"tags":[],"_links":{"self":[{"href":"https:\/\/obcanskymonitoring.cz\/index.php?rest_route=\/wp\/v2\/posts\/785"}],"collection":[{"href":"https:\/\/obcanskymonitoring.cz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/obcanskymonitoring.cz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/obcanskymonitoring.cz\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/obcanskymonitoring.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=785"}],"version-history":[{"count":0,"href":"https:\/\/obcanskymonitoring.cz\/index.php?rest_route=\/wp\/v2\/posts\/785\/revisions"}],"wp:attachment":[{"href":"https:\/\/obcanskymonitoring.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=785"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/obcanskymonitoring.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=785"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/obcanskymonitoring.cz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=785"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}