BTCPay sunucusu, sald\u0131rganlar\u0131n kritik bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131ndan yararlanarak yaz\u0131l\u0131m\u0131n eski s\u00fcr\u00fcmlerini kullanan kullan\u0131c\u0131lar\u0131n paralar\u0131n\u0131 ba\u015far\u0131yla \u00e7ald\u0131\u011f\u0131n\u0131 do\u011frulad\u0131.<\/p>\n\n\n\n
A\u00e7\u0131k kaynakl\u0131, kendi sunucular\u0131nda bar\u0131nd\u0131r\u0131lan Bitcoin \u00f6deme i\u015flemcisi, g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 kapatmak i\u00e7in 2.4.2 s\u00fcr\u00fcm\u00fcne acil bir g\u00fcncelleme yay\u0131nlad\u0131. T\u00fcm operat\u00f6rlerin derhal g\u00fcncelleme yapmas\u0131 gerekti\u011fi belirtildi.<\/p>\n\n\n\n
Bu g\u00fcvenlik a\u00e7\u0131\u011f\u0131, kimlik do\u011frulamas\u0131 yap\u0131lmam\u0131\u015f uzaktan bir sald\u0131rgan\u0131n, yayg\u0131n olarak kullan\u0131lan bir Lightning Network uygulamas\u0131 olan LND ile ba\u011flant\u0131l\u0131 macaroon kimlik bilgisi dosyalar\u0131n\u0131 elde etmesine olanak sa\u011flad\u0131.<\/p>\n\n\n\n
\u00c7al\u0131nan macaroon dosyalar\u0131, bir sald\u0131rgana bir LND d\u00fc\u011f\u00fcm\u00fcn\u00fcn etkin kontrol\u00fcn\u00fc sa\u011flayabilir. Buradan, fonlar sahibinin m\u00fcdahalesi olmadan do\u011frudan d\u00fc\u011f\u00fcmden d\u0131\u015far\u0131 aktar\u0131labilir.<\/p>\n\n\n\n
BTCPay Server, s\u00f6z konusu g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n 2.4.2 s\u00fcr\u00fcm\u00fcnden \u00f6nce yay\u0131nlanan t\u00fcm s\u00fcr\u00fcmleri, hatta bu s\u00fcr\u00fcm\u00fcn aday s\u00fcr\u00fcmlerini bile etkiledi\u011fini belirtti.<\/p>\n\n\n\n
Ekip, kullan\u0131c\u0131lar\u0131n etkilendi\u011fini ve fonlar\u0131n \u00e7al\u0131nd\u0131\u011f\u0131n\u0131 a\u00e7\u0131k\u00e7a do\u011frulad\u0131. Teknik detaylar\u0131n ge\u00e7ici olarak gizli tutulaca\u011f\u0131n\u0131, b\u00f6ylece operat\u00f6rlerin sald\u0131rganlar raporu incelemeden \u00f6nce yamalar\u0131 uygulamaya koyabileceklerini belirtti.<\/p>\n\n\n\n
Donan\u0131m c\u00fczdan\u0131 \u00fcreticisi Foundation ve bitcoin yay\u0131nc\u0131s\u0131 Citadel21, Lightning d\u00fc\u011f\u00fcmlerinin tamamen temizlendi\u011fini ve kanallar\u0131n kamuoyuna uyar\u0131 yap\u0131lmadan \u00f6nce zorla kapat\u0131ld\u0131\u011f\u0131n\u0131 bildirdi.<\/p>\n\n\n\n
Hemen g\u00fcncelleme yapamayan operat\u00f6rlere BTCPay sunucular\u0131n\u0131 tamamen \u00e7evrimd\u0131\u015f\u0131 hale getirmeleri s\u00f6ylendi. Bu ad\u0131m, yama uygulanana kadar yetkisiz eri\u015fimi engellemeyi ama\u00e7l\u0131yor.<\/p>\n\n\n\n
Bu g\u00fcvenlik a\u00e7\u0131\u011f\u0131, a\u00e7\u0131k kaynakl\u0131 Bitcoin altyap\u0131s\u0131n\u0131 denetleyen g\u00f6n\u00fcll\u00fc bir g\u00fcvenlik grubu olan Bitcoin Red Team taraf\u0131ndan BTCPay’e bildirildi.<\/p>\n\n\n\n
BTCPay Server’\u0131n kendi zincir \u00fcst\u00fc ve s\u0131cak c\u00fczdanlar\u0131 bu \u00f6zel sorundan etkilenmemektedir. Bu risk, yaln\u0131zca LND tabanl\u0131 Lightning da\u011f\u0131t\u0131mlar\u0131yla s\u0131n\u0131rl\u0131d\u0131r.<\/p>\n\n\n\n
Yaln\u0131zca g\u00fcncelleme yapmak, etkilenen operat\u00f6rler i\u00e7in kap\u0131y\u0131 tamamen kapatm\u0131yor. Ekip ayr\u0131ca, ek bir \u00f6nlem olarak LND makaronlar\u0131n\u0131n iptal edilmesini ve BTCPay taraf\u0131ndan olu\u015fturulan zincir \u00fcst\u00fc s\u0131cak c\u00fczdanda bulunan t\u00fcm fonlar\u0131n ta\u015f\u0131nmas\u0131n\u0131 tavsiye etti.<\/p>\n\n\n\n
Bu olay, Bitcoin altyap\u0131s\u0131na y\u00f6nelik daha geni\u015f kapsaml\u0131 bir inceleme dalgas\u0131n\u0131n ortas\u0131nda ger\u00e7ekle\u015fti. Galaxy Research’\u00fcn yakla\u015f\u0131k 1.719 BTC’ye (yakla\u015f\u0131k 111 milyon dolar de\u011ferinde) mal oldu\u011funu s\u00f6yledi\u011fi ayr\u0131 bir Coldcard sald\u0131r\u0131s\u0131n\u0131n ard\u0131ndan geldi.<\/p>\n","protected":false},"excerpt":{"rendered":"
BTCPay sunucusu, sald\u0131rganlar\u0131n kritik bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131ndan yararlanarak yaz\u0131l\u0131m\u0131n eski s\u00fcr\u00fcmlerini kullanan kullan\u0131c\u0131lar\u0131n paralar\u0131n\u0131 ba\u015far\u0131yla \u00e7ald\u0131\u011f\u0131n\u0131 do\u011frulad\u0131. A\u00e7\u0131k kaynakl\u0131, kendi<\/p>\n","protected":false},"author":1,"featured_media":8354,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[7],"tags":[23,24],"class_list":["post-8353","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kripto-paralar","tag-bitcoin","tag-kripto-para"],"_links":{"self":[{"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/posts\/8353","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8353"}],"version-history":[{"count":1,"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/posts\/8353\/revisions"}],"predecessor-version":[{"id":8355,"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/posts\/8353\/revisions\/8355"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=\/wp\/v2\/media\/8354"}],"wp:attachment":[{"href":"https:\/\/fxknews.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8353"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8353"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fxknews.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8353"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}