publish: mirror-news: add 2019-10-10-data-leak

generated from commit 37da46eb9514275199fcb4d0b3cc7bd850a8cb75
sjtug · Oct 11, 2019 · d58b597 · d58b597
1 parent 43eada4
commit d58b597
Show file tree

Hide file tree

Showing 81 changed files with 927 additions and 547 deletions.
diff --git a/404.html b/404.html
@@ -61,6 +61,13 @@ <h3>Read more</h3>
 
 
 
+        <li>
+            <a href="https://sjtug.org/post/mirror-news/2019-10-10-data-leak/">关于19年10月软件源日志泄漏的通告<aside class="dates">Oct 10</aside></a>
+        </li>
+
+
+
+
         <li>
             <a href="https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/">Pypi镜像源改为反代<aside class="dates">Oct 9</aside></a>
         </li>
@@ -122,13 +129,6 @@ <h3>Read more</h3>
         </li>
 
 
-
-
-        <li>
-            <a href="https://sjtug.org/post/mirror-news/2018-06-15-raspbian-homebrew/">新增homebrew与raspbian/raspberrypi镜像<aside class="dates">Jun 15</aside></a>
-        </li>
-
-
 </ul>
 
         </article>

diff --git a/index.xml b/index.xml
@@ -6,11 +6,42 @@
     <description>Recent content on SJTUG - A Joyful Techie User Group</description>
     <generator>Hugo -- gohugo.io</generator>
     <language>zh-cn</language>
-    <lastBuildDate>Wed, 09 Oct 2019 22:23:00 -0700</lastBuildDate>
+    <lastBuildDate>Thu, 10 Oct 2019 19:37:00 -0700</lastBuildDate>
 
         <atom:link href="https://sjtug.org/index.xml" rel="self" type="application/rss+xml" />
 
 
+    <item>
+      <title>关于19年10月软件源日志泄漏的通告</title>
+      <link>https://sjtug.org/post/mirror-news/2019-10-10-data-leak/</link>
+      <pubDate>Thu, 10 Oct 2019 19:37:00 -0700</pubDate>
+
+      <guid>https://sjtug.org/post/mirror-news/2019-10-10-data-leak/</guid>
+      <description>
+
+&lt;h1 id=&#34;发生了什么&#34;&gt;发生了什么&lt;/h1&gt;
+
+&lt;p&gt;由于镜像状态页面的Access Token未被合理限权，未授权外部用户可以查看软件源的所有日志。&lt;/p&gt;
+
+&lt;h1 id=&#34;范围&#34;&gt;范围&lt;/h1&gt;
+
+&lt;p&gt;2018年4月3日2019年10月10日的日志，其中可能会对用户造成影响的内容包括：用户的IP、访问时间与路径&lt;/p&gt;
+
+&lt;h1 id=&#34;目前采取的措施&#34;&gt;目前采取的措施&lt;/h1&gt;
+
+&lt;p&gt;目前已经此漏洞已被以下措施修复：&lt;/p&gt;
+
+&lt;ul&gt;
+&lt;li&gt;注销了之前未被限权的Access Token&lt;/li&gt;
+&lt;li&gt;更换了日志账户的Account Token&lt;/li&gt;
+&lt;li&gt;在完成日志权限模型之前，暂时停止日志上传&lt;/li&gt;
+&lt;li&gt;更换了泄漏的代理后端的IP，并换用了随机性更强的域名&lt;/li&gt;
+&lt;/ul&gt;
+
+&lt;p&gt;之后将会更加审慎处理相关信息的接口，保障数据安全。&lt;/p&gt;
+</description>
+    </item>
+
     <item>
       <title>Pypi镜像源改为反代</title>
       <link>https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/</link>

diff --git a/post/2016-10-04-dependent-type/index.html b/post/2016-10-04-dependent-type/index.html
@@ -141,6 +141,13 @@ <h3>Read more</h3>
 
 
 
+        <li>
+            <a href="https://sjtug.org/post/mirror-news/2019-10-10-data-leak/">关于19年10月软件源日志泄漏的通告<aside class="dates">Oct 10</aside></a>
+        </li>
+
+
+
+
         <li>
             <a href="https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/">Pypi镜像源改为反代<aside class="dates">Oct 9</aside></a>
         </li>
@@ -202,13 +209,6 @@ <h3>Read more</h3>
         </li>
 
 
-
-
-        <li>
-            <a href="https://sjtug.org/post/mirror-news/2018-06-15-raspbian-homebrew/">新增homebrew与raspbian/raspberrypi镜像<aside class="dates">Jun 15</aside></a>
-        </li>
-
-
 </ul>
 
             <footer id="footer">

diff --git a/post/2016-10-16-c11-memory-model/index.html b/post/2016-10-16-c11-memory-model/index.html
@@ -138,6 +138,13 @@ <h3>Read more</h3>
 
 
 
+        <li>
+            <a href="https://sjtug.org/post/mirror-news/2019-10-10-data-leak/">关于19年10月软件源日志泄漏的通告<aside class="dates">Oct 10</aside></a>
+        </li>
+
+
+
+
         <li>
             <a href="https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/">Pypi镜像源改为反代<aside class="dates">Oct 9</aside></a>
         </li>
@@ -199,13 +206,6 @@ <h3>Read more</h3>
         </li>
 
 
-
-
-        <li>
-            <a href="https://sjtug.org/post/mirror-news/2018-06-15-raspbian-homebrew/">新增homebrew与raspbian/raspberrypi镜像<aside class="dates">Jun 15</aside></a>
-        </li>
-
-
 </ul>
 
             <footer id="footer">

diff --git a/post/2016-10-29-physical-engine/index.html b/post/2016-10-29-physical-engine/index.html
@@ -136,6 +136,13 @@ <h3>Read more</h3>
 
 
 
+        <li>
+            <a href="https://sjtug.org/post/mirror-news/2019-10-10-data-leak/">关于19年10月软件源日志泄漏的通告<aside class="dates">Oct 10</aside></a>
+        </li>
+
+
+
+
         <li>
             <a href="https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/">Pypi镜像源改为反代<aside class="dates">Oct 9</aside></a>
         </li>
@@ -197,13 +204,6 @@ <h3>Read more</h3>
         </li>
 
 
-
-
-        <li>
-            <a href="https://sjtug.org/post/mirror-news/2018-06-15-raspbian-homebrew/">新增homebrew与raspbian/raspberrypi镜像<aside class="dates">Jun 15</aside></a>
-        </li>
-
-
 </ul>
 
             <footer id="footer">

diff --git a/post/2016-11-12-life-of-a-packet/index.html b/post/2016-11-12-life-of-a-packet/index.html
@@ -136,6 +136,13 @@ <h3>Read more</h3>
 
 
 
+        <li>
+            <a href="https://sjtug.org/post/mirror-news/2019-10-10-data-leak/">关于19年10月软件源日志泄漏的通告<aside class="dates">Oct 10</aside></a>
+        </li>
+
+
+
+
         <li>
             <a href="https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/">Pypi镜像源改为反代<aside class="dates">Oct 9</aside></a>
         </li>
@@ -197,13 +204,6 @@ <h3>Read more</h3>
         </li>
 
 
-
-
-        <li>
-            <a href="https://sjtug.org/post/mirror-news/2018-06-15-raspbian-homebrew/">新增homebrew与raspbian/raspberrypi镜像<aside class="dates">Jun 15</aside></a>
-        </li>
-
-
 </ul>
 
             <footer id="footer">

diff --git a/post/2017-01-08-halvm/index.html b/post/2017-01-08-halvm/index.html
@@ -144,6 +144,13 @@ <h3>Read more</h3>
 
 
 
+        <li>
+            <a href="https://sjtug.org/post/mirror-news/2019-10-10-data-leak/">关于19年10月软件源日志泄漏的通告<aside class="dates">Oct 10</aside></a>
+        </li>
+
+
+
+
         <li>
             <a href="https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/">Pypi镜像源改为反代<aside class="dates">Oct 9</aside></a>
         </li>
@@ -205,13 +212,6 @@ <h3>Read more</h3>
         </li>
 
 
-
-
-        <li>
-            <a href="https://sjtug.org/post/mirror-news/2018-06-15-raspbian-homebrew/">新增homebrew与raspbian/raspberrypi镜像<aside class="dates">Jun 15</aside></a>
-        </li>
-
-
 </ul>
 
             <footer id="footer">

diff --git a/post/2017-01-14-announcing-new-portal/index.html b/post/2017-01-14-announcing-new-portal/index.html
@@ -128,6 +128,13 @@ <h3>Read more</h3>
 
 
 
+        <li>
+            <a href="https://sjtug.org/post/mirror-news/2019-10-10-data-leak/">关于19年10月软件源日志泄漏的通告<aside class="dates">Oct 10</aside></a>
+        </li>
+
+
+
+
         <li>
             <a href="https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/">Pypi镜像源改为反代<aside class="dates">Oct 9</aside></a>
         </li>
@@ -189,13 +196,6 @@ <h3>Read more</h3>
         </li>
 
 
-
-
-        <li>
-            <a href="https://sjtug.org/post/mirror-news/2018-06-15-raspbian-homebrew/">新增homebrew与raspbian/raspberrypi镜像<aside class="dates">Jun 15</aside></a>
-        </li>
-
-
 </ul>
 
             <footer id="footer">

diff --git a/post/2017-01-15-writing-guide/index.html b/post/2017-01-15-writing-guide/index.html
@@ -154,6 +154,13 @@ <h3>Read more</h3>
 
 
 
+        <li>
+            <a href="https://sjtug.org/post/mirror-news/2019-10-10-data-leak/">关于19年10月软件源日志泄漏的通告<aside class="dates">Oct 10</aside></a>
+        </li>
+
+
+
+
         <li>
             <a href="https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/">Pypi镜像源改为反代<aside class="dates">Oct 9</aside></a>
         </li>
@@ -215,13 +222,6 @@ <h3>Read more</h3>
         </li>
 
 
-
-
-        <li>
-            <a href="https://sjtug.org/post/mirror-news/2018-06-15-raspbian-homebrew/">新增homebrew与raspbian/raspberrypi镜像<aside class="dates">Jun 15</aside></a>
-        </li>
-
-
 </ul>
 
             <footer id="footer">

diff --git a/post/2017-02-21-hotpot/index.html b/post/2017-02-21-hotpot/index.html
@@ -132,6 +132,13 @@ <h3>Read more</h3>
 
 
 
+        <li>
+            <a href="https://sjtug.org/post/mirror-news/2019-10-10-data-leak/">关于19年10月软件源日志泄漏的通告<aside class="dates">Oct 10</aside></a>
+        </li>
+
+
+
+
         <li>
             <a href="https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/">Pypi镜像源改为反代<aside class="dates">Oct 9</aside></a>
         </li>
@@ -193,13 +200,6 @@ <h3>Read more</h3>
         </li>
 
 
-
-
-        <li>
-            <a href="https://sjtug.org/post/mirror-news/2018-06-15-raspbian-homebrew/">新增homebrew与raspbian/raspberrypi镜像<aside class="dates">Jun 15</aside></a>
-        </li>
-
-
 </ul>
 
             <footer id="footer">

diff --git a/post/2017-03-09-gpg-sign-party/index.html b/post/2017-03-09-gpg-sign-party/index.html
@@ -133,6 +133,13 @@ <h3>Read more</h3>
 
 
 
+        <li>
+            <a href="https://sjtug.org/post/mirror-news/2019-10-10-data-leak/">关于19年10月软件源日志泄漏的通告<aside class="dates">Oct 10</aside></a>
+        </li>
+
+
+
+
         <li>
             <a href="https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/">Pypi镜像源改为反代<aside class="dates">Oct 9</aside></a>
         </li>
@@ -194,13 +201,6 @@ <h3>Read more</h3>
         </li>
 
 
-
-
-        <li>
-            <a href="https://sjtug.org/post/mirror-news/2018-06-15-raspbian-homebrew/">新增homebrew与raspbian/raspberrypi镜像<aside class="dates">Jun 15</aside></a>
-        </li>
-
-
 </ul>
 
             <footer id="footer">

diff --git a/post/2017-06-12-summer-class/index.html b/post/2017-06-12-summer-class/index.html
@@ -186,6 +186,13 @@ <h3>Read more</h3>
 
 
 
+        <li>
+            <a href="https://sjtug.org/post/mirror-news/2019-10-10-data-leak/">关于19年10月软件源日志泄漏的通告<aside class="dates">Oct 10</aside></a>
+        </li>
+
+
+
+
         <li>
             <a href="https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/">Pypi镜像源改为反代<aside class="dates">Oct 9</aside></a>
         </li>
@@ -247,13 +254,6 @@ <h3>Read more</h3>
         </li>
 
 
-
-
-        <li>
-            <a href="https://sjtug.org/post/mirror-news/2018-06-15-raspbian-homebrew/">新增homebrew与raspbian/raspberrypi镜像<aside class="dates">Jun 15</aside></a>
-        </li>
-
-
 </ul>
 
             <footer id="footer">

diff --git a/post/2017-06-24-summer-class-portal/index.html b/post/2017-06-24-summer-class-portal/index.html
@@ -182,6 +182,13 @@ <h3>Read more</h3>
 
 
 
+        <li>
+            <a href="https://sjtug.org/post/mirror-news/2019-10-10-data-leak/">关于19年10月软件源日志泄漏的通告<aside class="dates">Oct 10</aside></a>
+        </li>
+
+
+
+
         <li>
             <a href="https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/">Pypi镜像源改为反代<aside class="dates">Oct 9</aside></a>
         </li>
@@ -243,13 +250,6 @@ <h3>Read more</h3>
         </li>
 
 
-
-
-        <li>
-            <a href="https://sjtug.org/post/mirror-news/2018-06-15-raspbian-homebrew/">新增homebrew与raspbian/raspberrypi镜像<aside class="dates">Jun 15</aside></a>
-        </li>
-
-
 </ul>
 
             <footer id="footer">
-Original file line number
+Diff line change
@@ Expand Up / @@ -61,6 +61,13 @@ <h3>Read more</h3> @@
+            <li>
+                <a href="https://sjtug.org/post/mirror-news/2019-10-10-data-leak/">关于19年10月软件源日志泄漏的通告<aside class="dates">Oct 10</aside></a>
+            </li>
             <li>
                 <a href="https://sjtug.org/post/mirror-news/2019-10-09-remove-pypi/">Pypi镜像源改为反代<aside class="dates">Oct 9</aside></a>
             </li>
@@ Expand Down Expand Up / @@ -122,13 +129,6 @@ <h3>Read more</h3> @@
             </li>
-            <li>
-                <a href="https://sjtug.org/post/mirror-news/2018-06-15-raspbian-homebrew/">新增homebrew与raspbian/raspberrypi镜像<aside class="dates">Jun 15</aside></a>
-            </li>
     </ul>
             </article>
@@ Expand Down @@