{"id":4278,"date":"2023-06-08T17:04:13","date_gmt":"2023-06-08T14:04:13","guid":{"rendered":"https:\/\/csirt.lacnic.net\/?p=4278"},"modified":"2023-06-08T17:04:14","modified_gmt":"2023-06-08T14:04:14","slug":"aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito","status":"publish","type":"post","link":"https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito","title":{"rendered":"Aportando un grano de arena en la seguridad de la red, un caso de \u00e9xito"},"content":{"rendered":"

Introducci\u00f3n<\/h3>\n

Seguramente algunos de ustedes conocen el proyecto IPv6 DNS Open Resolvers [1]<\/a> que lleva adelante LACNIC, un trabajo conjunto de WARP [2]<\/a> y de I+D donde identificamos servidores abiertos DNS con direccionamiento IPv6.
\nTradicionalmente no ofrecemos soporte de ning\u00fan tipo para la infraestructura de nuestros asociados, esto quiere decir que LACNIC \u201cno toca\u201d los equipos (servidores, dispositivos de red). Sin embargo siempre hemos extendido una mano de apoyo para colaborar en todo lo que podamos.<\/p>\n

Contexto<\/h3>\n

Luego de haber identificado una direcci\u00f3n IPv6 donde se encuentra una servidor DNS recursivo abierto, env\u00edamos un correo automatizado a la organizaci\u00f3n due\u00f1a de la direcci\u00f3n IP alertando la situaci\u00f3n. En \u00e9l explicamos las posibles consecuencias y recomendamos una serie de configuraciones para los servidores m\u00e1s usados. Dicho correo tiene un formato similar a:<\/p>\n

===
\nDATE DD-MM-AAAA<\/p>\n

Dear ORG-ID NAME. (OR-ID-LACNIC):<\/p>\n

You appear to be running a DNS – open recursive resolver at IP address 280X:XXXX:X:XXXX:XXXX:XXXX:XXXX:XXXX.<\/p>\n

It may have undesirable consequences on the Internet because it may participate in an attack against a selected target, causing a Denial of Service (DOS) attack. It generates large UDP responses to spoofed queries, with those responses becoming fragmented because of their size.<\/p>\n

We strongly recommend to reconfiguring your resolver. Here are some ways that may help you:<\/p>\n

– To only serve your customers and not respond to outside IP addresses (in BIND, this is done by defining a limited set of hosts in “allow-query”;)<\/p>\n

options {<\/p>\n

allow-query {<\/p>\n

192.168.196.0\/24;<\/p>\n

2001:db8::\/32;<\/p>\n

localhost;<\/p>\n

} \/\/ end of allow-query<\/p>\n

} \/\/ end of options<\/p>\n

– To only serve domains that it is authoritative for (in BIND, this is done by defining a limited set of hosts in “allow-query” for the server overall but setting “allow-query” to “any” for each zone)<\/p>\n

zone “example.com”{<\/p>\n

type master;<\/p>\n

file “example.com.db”;<\/p>\n

allow-query {<\/p>\n

192.168.196.0\/24;<\/p>\n

2001:db8::\/32;<\/p>\n

localhost;<\/p>\n

} \/\/ end of allow-query<\/p>\n

} \/\/ end of zone example.com<\/p>\n

In unbound you can achieve the same behavior with the access-control statement in the unbound.conf file. Would be something like:<\/p>\n

server:
\naccess-control: 2001:db8::\/32 allow<\/p>\n

If you are an ISP, please also look at your network configuration and make sure that you do not allow spoofed traffic (that pretends to be from external IP addresses) to leave the network. Hosts that allow spoofed traffic make possible this type of attack.<\/p>\n

References:
\nMore information on this type of attack and what each party can do to mitigate it can be found here: http:\/\/www.us-cert.gov\/ncas\/alerts\/TA13-088A<\/p>\n

Best regards,<\/p>\n

LACNIC’s WARP Team<\/p>\n

=======<\/p><\/blockquote>\n

Caso de \u00e9xito<\/h3>\n

Queremos presentarles este caso de \u00e9xito que comenz\u00f3 cuando una organizaci\u00f3n recibi\u00f3 el correo indicado anteriormente y se contact\u00f3 con WARP buscando recibir apoyo para aplicar las recomendaciones de seguridad en sus equipos. Por ser un proyecto nuevo no nos hab\u00eda ocurrido esta situaci\u00f3n anteriormente pero analizamos el caso decidimos proseguir por dos razones:<\/p>\n

    \n
  1. La persona que nos contact\u00f3 se mostr\u00f3 realmente interesada<\/li>\n
  2. El OS y el servidor DNS se encontraba en el grupo de los cuales tenemos experiencia<\/li>\n<\/ol>\n

    Comenzamos por identificar d\u00f3nde estaban los archivos de configuraci\u00f3n del servidor y los ACLs que \u00e9l mismo utilizaba. Luego le guiamos para implementar en la configuraci\u00f3n existente, las recomendaciones de seguridad gen\u00e9ricas que enviamos en el correo inicial.<\/p>\n

    La buena noticia fue que el miembro de LACNIC, siempre se mostr\u00f3 muy dado a recibir nuestra ayuda y la comunicaci\u00f3n fue muy fluida en todo momento. Al cabo de menos de dos semanas, con aproximadamente 8 correos intercambiados, el servidor que era una potencial amenaza se encontraba configurado de tal manera que solo permit\u00eda consultas DNS desde sus propios prefijos.
    \nPero esto no fue todo, la alerta que enviamos y por la cual fuimos contactados, refer\u00eda solo a uno de los servidores administrados por esta organizaci\u00f3n. Para completar nuestra tarea, nuestro miembro identific\u00f3 que otro servidor de su red se encontraba en las mismas condiciones que el anterior, por lo que tambi\u00e9n colaboramos en la aplicaci\u00f3n de las correcciones necesarias.<\/p>\n

    El caso lo consideramos muy exitoso por ser servidores que tienen direcciones IPv6 est\u00e1ticas las cuales eventualmente podr\u00edan ser descubiertas por algunos atacantes y traer consigo eventuales tareas maliciosas sobre la red.<\/p>\n

    Lo anterior no quiere decir que sea el \u00fanico caso de \u00e9xito ocurrido, muy posiblemente otros operadores han tomado acciones sobre sus servidores sin conocimiento alguno de LACNIC. Prontamente estaremos trabajando en identificar estos casos y publicaremos algunos resultados.<\/p>\n

    Referencias<\/h3>\n

    [1]<\/span> (https:\/\/labs.lacnic.net\/Identificando-servidores-DNS-IPv6-Open-Resolvers\/<\/a>)
    \n[2]<\/span> (    https:\/\/csirt.lacnic.net\/<\/a>)<\/p>\n","protected":false},"excerpt":{"rendered":"

    Introducci\u00f3n Seguramente algunos de ustedes conocen el proyecto IPv6 DNS Open Resolvers [1] que lleva adelante LACNIC, un trabajo conjunto de WARP [2] y de I+D donde identificamos servidores abiertos DNS con direccionamiento IPv6. Tradicionalmente no ofrecemos soporte de ning\u00fan tipo para la infraestructura de nuestros asociados, esto quiere decir que LACNIC \u201cno toca\u201d los […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[55,56,57,47],"tags":[],"class_list":["post-4278","post","type-post","status-publish","format-standard","hentry","category-arquivo-pt-br","category-articulos-tecnicos-pt-br","category-artigos-pt-br","category-nao-categorizado"],"acf":[],"yoast_head":"\nLACNIC CSIRT - Aportando un grano de arena en la seguridad de la red, un caso de \u00e9xito<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LACNIC CSIRT - Aportando un grano de arena en la seguridad de la red, un caso de \u00e9xito\" \/>\n<meta property=\"og:description\" content=\"Introducci\u00f3n Seguramente algunos de ustedes conocen el proyecto IPv6 DNS Open Resolvers [1] que lleva adelante LACNIC, un trabajo conjunto de WARP [2] y de I+D donde identificamos servidores abiertos DNS con direccionamiento IPv6. Tradicionalmente no ofrecemos soporte de ning\u00fan tipo para la infraestructura de nuestros asociados, esto quiere decir que LACNIC \u201cno toca\u201d los […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito\" \/>\n<meta property=\"og:site_name\" content=\"LACNIC CSIRT\" \/>\n<meta property=\"article:published_time\" content=\"2023-06-08T14:04:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-08T14:04:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/lacnic-csirt-2020.png\" \/>\n\t<meta property=\"og:image:width\" content=\"680\" \/>\n\t<meta property=\"og:image:height\" content=\"330\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Gianni Arena\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@lacnic_csirt\" \/>\n<meta name=\"twitter:site\" content=\"@lacnic_csirt\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/pt-br\\\/nao-categorizado\\\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/pt-br\\\/nao-categorizado\\\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito\"},\"author\":{\"name\":\"Gianni Arena\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#\\\/schema\\\/person\\\/d5c65fde1dbe338128788dcc20e9f5d3\"},\"headline\":\"Aportando un grano de arena en la seguridad de la red, un caso de \u00e9xito\",\"datePublished\":\"2023-06-08T14:04:13+00:00\",\"dateModified\":\"2023-06-08T14:04:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/pt-br\\\/nao-categorizado\\\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito\"},\"wordCount\":775,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#organization\"},\"articleSection\":[\"Arquivo\",\"Articulos Tecnicos\",\"Artigos\",\"N\u00e3o categorizado\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/csirt.lacnic.net\\\/pt-br\\\/nao-categorizado\\\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/pt-br\\\/nao-categorizado\\\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito\",\"url\":\"https:\\\/\\\/csirt.lacnic.net\\\/pt-br\\\/nao-categorizado\\\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito\",\"name\":\"LACNIC CSIRT - Aportando un grano de arena en la seguridad de la red, un caso de \u00e9xito\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#website\"},\"datePublished\":\"2023-06-08T14:04:13+00:00\",\"dateModified\":\"2023-06-08T14:04:14+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/pt-br\\\/nao-categorizado\\\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/csirt.lacnic.net\\\/pt-br\\\/nao-categorizado\\\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/pt-br\\\/nao-categorizado\\\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/csirt.lacnic.net\\\/pt-br\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Aportando un grano de arena en la seguridad de la red, un caso de \u00e9xito\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/\",\"name\":\"LACNIC CSIRT\",\"description\":\"Centro de Respuestas de Incidentes - LACNIC CSIRT\",\"publisher\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#organization\",\"name\":\"LACNIC CSIRT\",\"url\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/csirt.lacnic.net\\\/wp-content\\\/uploads\\\/lacnic-csirt-2020.png\",\"contentUrl\":\"https:\\\/\\\/csirt.lacnic.net\\\/wp-content\\\/uploads\\\/lacnic-csirt-2020.png\",\"width\":680,\"height\":330,\"caption\":\"LACNIC CSIRT\"},\"image\":{\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/lacnic_csirt\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/csirt.lacnic.net\\\/en\\\/#\\\/schema\\\/person\\\/d5c65fde1dbe338128788dcc20e9f5d3\",\"name\":\"Gianni Arena\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc620878b92e4930abb5951af723f7e852088c31f8489beda9016e53725fb1f2?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc620878b92e4930abb5951af723f7e852088c31f8489beda9016e53725fb1f2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc620878b92e4930abb5951af723f7e852088c31f8489beda9016e53725fb1f2?s=96&d=mm&r=g\",\"caption\":\"Gianni Arena\"},\"url\":\"https:\\\/\\\/csirt.lacnic.net\\\/pt-br\\\/author\\\/gianni\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"LACNIC CSIRT - Aportando un grano de arena en la seguridad de la red, un caso de \u00e9xito","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito","og_locale":"pt_BR","og_type":"article","og_title":"LACNIC CSIRT - Aportando un grano de arena en la seguridad de la red, un caso de \u00e9xito","og_description":"Introducci\u00f3n Seguramente algunos de ustedes conocen el proyecto IPv6 DNS Open Resolvers [1] que lleva adelante LACNIC, un trabajo conjunto de WARP [2] y de I+D donde identificamos servidores abiertos DNS con direccionamiento IPv6. Tradicionalmente no ofrecemos soporte de ning\u00fan tipo para la infraestructura de nuestros asociados, esto quiere decir que LACNIC \u201cno toca\u201d los […]","og_url":"https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito","og_site_name":"LACNIC CSIRT","article_published_time":"2023-06-08T14:04:13+00:00","article_modified_time":"2023-06-08T14:04:14+00:00","og_image":[{"width":680,"height":330,"url":"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/lacnic-csirt-2020.png","type":"image\/png"}],"author":"Gianni Arena","twitter_card":"summary_large_image","twitter_creator":"@lacnic_csirt","twitter_site":"@lacnic_csirt","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito#article","isPartOf":{"@id":"https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito"},"author":{"name":"Gianni Arena","@id":"https:\/\/csirt.lacnic.net\/en\/#\/schema\/person\/d5c65fde1dbe338128788dcc20e9f5d3"},"headline":"Aportando un grano de arena en la seguridad de la red, un caso de \u00e9xito","datePublished":"2023-06-08T14:04:13+00:00","dateModified":"2023-06-08T14:04:14+00:00","mainEntityOfPage":{"@id":"https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito"},"wordCount":775,"commentCount":0,"publisher":{"@id":"https:\/\/csirt.lacnic.net\/en\/#organization"},"articleSection":["Arquivo","Articulos Tecnicos","Artigos","N\u00e3o categorizado"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito#respond"]}]},{"@type":"WebPage","@id":"https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito","url":"https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito","name":"LACNIC CSIRT - Aportando un grano de arena en la seguridad de la red, un caso de \u00e9xito","isPartOf":{"@id":"https:\/\/csirt.lacnic.net\/en\/#website"},"datePublished":"2023-06-08T14:04:13+00:00","dateModified":"2023-06-08T14:04:14+00:00","breadcrumb":{"@id":"https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/csirt.lacnic.net\/pt-br\/nao-categorizado\/aportando-un-grano-de-arena-en-la-seguridad-de-la-red-un-caso-de-exito#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/csirt.lacnic.net\/pt-br"},{"@type":"ListItem","position":2,"name":"Aportando un grano de arena en la seguridad de la red, un caso de \u00e9xito"}]},{"@type":"WebSite","@id":"https:\/\/csirt.lacnic.net\/en\/#website","url":"https:\/\/csirt.lacnic.net\/en\/","name":"LACNIC CSIRT","description":"Centro de Respuestas de Incidentes - LACNIC CSIRT","publisher":{"@id":"https:\/\/csirt.lacnic.net\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/csirt.lacnic.net\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/csirt.lacnic.net\/en\/#organization","name":"LACNIC CSIRT","url":"https:\/\/csirt.lacnic.net\/en\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/csirt.lacnic.net\/en\/#\/schema\/logo\/image\/","url":"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/lacnic-csirt-2020.png","contentUrl":"https:\/\/csirt.lacnic.net\/wp-content\/uploads\/lacnic-csirt-2020.png","width":680,"height":330,"caption":"LACNIC CSIRT"},"image":{"@id":"https:\/\/csirt.lacnic.net\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/lacnic_csirt"]},{"@type":"Person","@id":"https:\/\/csirt.lacnic.net\/en\/#\/schema\/person\/d5c65fde1dbe338128788dcc20e9f5d3","name":"Gianni Arena","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/cc620878b92e4930abb5951af723f7e852088c31f8489beda9016e53725fb1f2?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/cc620878b92e4930abb5951af723f7e852088c31f8489beda9016e53725fb1f2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cc620878b92e4930abb5951af723f7e852088c31f8489beda9016e53725fb1f2?s=96&d=mm&r=g","caption":"Gianni Arena"},"url":"https:\/\/csirt.lacnic.net\/pt-br\/author\/gianni"}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/csirt.lacnic.net\/pt-br\/wp-json\/wp\/v2\/posts\/4278","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/csirt.lacnic.net\/pt-br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/csirt.lacnic.net\/pt-br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/csirt.lacnic.net\/pt-br\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/csirt.lacnic.net\/pt-br\/wp-json\/wp\/v2\/comments?post=4278"}],"version-history":[{"count":0,"href":"https:\/\/csirt.lacnic.net\/pt-br\/wp-json\/wp\/v2\/posts\/4278\/revisions"}],"wp:attachment":[{"href":"https:\/\/csirt.lacnic.net\/pt-br\/wp-json\/wp\/v2\/media?parent=4278"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/csirt.lacnic.net\/pt-br\/wp-json\/wp\/v2\/categories?post=4278"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/csirt.lacnic.net\/pt-br\/wp-json\/wp\/v2\/tags?post=4278"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}