I te wāhanga o mua, Ngā Kete Kino Pūtake Tuwhera: Te Raru, i kōrero mātou he aha i pērā ai ngā kaiwhakaari mōrearea he hihiri ki te whakaputa i ngā wāhanga kino hou, ki te werohanga rānei i te pūmanawa kino ki ngā putanga hou o ngā wāhanga o nāianei: Mā te hanganga pūtake tuwhera ka taea e te tangata katoa i hea te waihanga i tētahi pūkete rangitahi i roto i tētahi rēhita wāhanga (pēnei i te NPM, PyPI, Docker Hub, Visual Studio Marketplace rānei) i tētahi tūāpapa whakawhanake mahi tahi rānei (pēnei i te GitHub). Kāore he utu, ā, he maha ngā whai wāhitanga hei whakamahi i te whakawhirinaki nui o ngā tīma pūmanawa ki ngā wāhanga tuatoru.
Ko te rerekētanga i waenga i te ngāwari o te tohatoha a ngā kaiwhakaeke i ngā pūmanawa kino mā te whakamahi i te hanganga e wātea ana mō te pūtake tuwhera, me te uaua o te whakahaere e whakawhanake ana i ngā pūmanawa (katoa?) ki te karo i te pangia e te pūmanawa kino (me te tuku pūmanawa kino i roto i te pūmanawa e tohatohahia ana e rātou mā ētahi atu), i arahina ai ki te ekenga o te hauwhā miriona o ngā mōkihi kino i te tau kua hipa.
He raruraru nui rawa tēnei, kāore e taea e te whakahaere kotahi te whakaoti, ā, kei te whakahou te hapori i te tukanga pūtake tuwhera e pā ana ki te whakawhirinaki, ngā mātāpono haumaru-mā-te-taunoa me te haumaru-mā-te-hoahoa, me te huringa ora o ngā wāhanga. Ka tirohia e tātou ēnei whakaaro i te wāhanga e whai ake nei. Te Tiaki i ngā Mōkihi Kino Pūtake Tuwhera: He aha ngā Mea (Kāore) e Mahi ana.
Kia maumahara kei te kōrero tātou mō ngā wāhanga pūmanawa e hono ana ki te nuinga o te wā. ngā mōkihi pūmanawa: ngā wāhanga ka taea te whakamahi anō kua tākaihia kia taea ai te tohutoro hei whakawhirinakitanga i roto i tētahi whakaaturanga pūmanawa, ā, ka tāutahia ki tētahi kaiwhakahaere mōkihi, ki tētahi taputapu hanga rānei. Kia mōhio koe ka taea te whakawhānui ake i tēnei take kia uru atu ai te tūmatanui ngā whakaahua ipu (e whakamahia ana e ngā wā whakahaere ipu me ngā tūāpapa whakarite rite ki a Kubernetes), me ngā toronga ki ngā taputapu pūmanawa (mō te hanga, te aunoatanga, me te whakatinanatanga).
I konei ka tātarihia e mātou te āhua o tēnei rautaki whakaeke i runga i ngā wāhanga kino e mahi ana, e ai ki ngā tauira o mua me ngā mea kua kitea e mātou i roto i tā mātou tūāpapa mō te Whakatūpato Mōrearea Pūmanawa Kino (MEW). Ka wetewetehia e mātou ngā wāhanga kino i roto i ngā āhuatanga rerekē:
(1) te huarahi i whiriwhiria mō te tohatoha (te rēhita i whakamahia, i roto i tētahi wāhanga hou, i tētahi wāhanga o nāianei rānei, me te tikanga i whakamahia hei pangia te putanga wāhanga kua whakaputaina), (2) te āhua o te whakahohenga, te whakaoho rānei i te pūmanawa kino, (3) te whanonga kino, arā, ko ēhea ngā mahi kino e kitea ana, ā, ko tēhea te take o te kaiwhakaeke, (4) ko ēhea ngā tikanga e whakamahia whānuitia ana mō te huna, te huna kia kore e kitea, te nekehanga taha, te whakawhitiwhiti kōrero ki ngā kaihautū whakahau me te mana whakahaere (C2), me ētahi atu; me (5) ngā tikanga hei whiwhi rongonui me te whakawhirinaki kia tāuta ai te wāhanga e ngā patunga.
Te Tikanga Tohatoha i Kōwhiria
Ka kitea e mātou he "haruru papamuri"o ngā mōkihi kino koretake e whakamahi ana i te tātuhi hei hītinihanga i ngā kaiwhakawhanake kore tupato me te tātuhi i te ingoa mōkihi mō tā rātou whakawhirinakitanga. He maha ngā mōkihi rongonui e whiwhi ana i te rerenga o ngā mōkihi rite te ingoa me ngā tātuhi, me te tumanako ka hītinihanga rātou i ētahi kaiwhakawhanake kore tupato.
Ka whakamahia e rātou he pūkete rangitahi, ka whakaputa i tētahi rōpū mōkihi typosquat, ka waihanga i tētahi atu, ka whakaputa i tētahi atu rōpū… Mā te whakamahi i ētahi mahi aunoa me te auaha ka taea e rātou te whiwhi i ētahi pūkenga, engari he iti noa iho te tikanga. Ka karangahia rātou e mātou i roto i te "anchoviesKo te tahae i ngā tohu tuakiri te whāinga matua, engari i ētahi wā ka kitea e tātou he pūmanawa torotoro e tango ana i te waehere pūtake, i ngā raraunga tairongo rānei pērā i ngā mōhiohio whaiaro (PII), te hopu papatuhituhi, me ētahi atu āwangawanga.
I te putanga mai i te kikorangi ka kite tātou i ngā wāhanga kino matatau ake, arā, ko ngā "mango". Ko te hunga tokoiti e aro ana ki ngā rōpū, ki ngā whakahaere rānei, ko te nuinga he whakamahi i ngā taputapu keri moni matihiko, i ngā taputapu tirotiro tukutuku rānei e whakahohehia ana i runga i te tikanga, e whai ana pea i te huarahi e kitea ana i roto i te aituā rere-huihuinga o te wetemuna i te kawenga whakaeke ina tohutorohia te mōkihi mai i tētahi mōkihi ūnga.
I tātarihia te tikanga tohatoha i roto i te pepa pai rawa atu, ā, he mea rongonui ināianei, "Ko te Kohinga Maripi a Backstabber: He Arotake o ngā Whakaekenga Mekameka Tuku Pūmanawa Pūtake Tuwhera", he mea me pānui. Kua kite pea koe i tēnei tūtohi pai i mua:
I tūhuratia ngā huarahi katoa, tae atu ki ngā mōkihi hou me ngā mōkihi o nāianei; te pā ki te waehere pūtake, te pūnaha hanga, te wāhanga kua tākaihia rānei; te whakamahi i ngā tohu tuakiri tahaetia, te hangarau pāpori rānei; te tahae i ngā pūkete me ngā putunga kua whakarērea, te whakapōrearea rānei i ngā mea kua tiakina. Ko ētahi whakaeke i whiwhi ingoa (Te pato-kōpiko, Te Pōhēhētanga o te Whakawhirinakitanga, Te Pōhēhētanga Whakakitenga, Te whakapūtanga o te repo. me ētahi atu) ā, kua kōrerotia kētia i ētahi atu wāhi.
Ā, me pēhea ngā rēhita kua whiriwhiria?
Kei te arahi tonu a NPM i te maha o ngā mōkihi kino, engari i kite mātou i te pikinga mai i tēnei tau i runga i a PyPI. He pūnaha rongonui a Python mō te pūtaiao raraunga me te ako mīhini. Inaa, he nui ake te maha o ngā pūmanawa kino i roto i a PyPI i tō NPM.
Te āhua o te whakaoho i te pūmanawa kino
E 4 noa iho i roto i te 10 ngā take ka puta ai ngā mōkihi kino i te wā tāutanga (i ngā tau tata nei tata ki te 6 i roto i te 10). Ko te toenga ka whakahaere i ngā whanonga kino i te wā whakahaere, me te 1 i roto i te 100 ka puta i te wā e whakahaere ana i ngā whakamātautau. Te āhua nei e mōhio ana ngā hoariri kua monokia te whakahaerenga kore mana whakahaere o ngā tuhinga tāutanga i roto i te maha o ngā wāhi.
He aha ngā mea e riro mai ana i ngā tāngata kino?
Ka whakarārangihia e mātou ngā kāwai whanonga kino, ko te mea tino rongonui i te tuatahi. Kia mōhio mai, he rerekē rawa ngā pānga: a muru He tino kaha te whakangaro, engari kāore i te noa, ā, i kitea noa i roto i ētahi wā torutoru, e pā ana ki ngā pakanga ipurangi kua arotahihia, ki te mahi tinihanga nanakia rānei. He tino noa ēnei kāwai:
- InfoStealer / Kaipupuri TaipitopitoKo te mea tino kitea, neke atu i te 90% o ngā whakaekenga koretake he tahae noa iho, e rapu ana i ngā tohu tuakiri pēnei i ngā kupuhipa, ngā tohu urunga, ngā kī API, me ngā kī tūmataiti (mō te SSH me ērā atu mea). Koinei pea te mea tino māmā ki te tuhi (me ngā kaihoroi?). Ka whakarārangihia e rātou ngā kōnae/whaiaronga e mōhiotia ana me ētahi atu puna (hei tauira, ngā kī rēhita), ka tākaihia ngā ihirangi, ka tukuna aua raraunga ki tētahi tūmau C2. He māmā noa te whakaaro: "Ka whakaputa ahau i tētahi tahae mō ngā tohu tuakiri hītinihanga, kia taea ai e au te whakamahi i ngā tohu tuakiri hei whakarewa i tētahi whakaekenga kua tohua".
Ko te whatunga C2 e kitea ana he iti te utu, he paru hoki, pērā i ngā hongere Telegram, ngā taputapu keri rua rite ki te ngrok (he maha ngā wā i roto i te ahua o ngā takawaenga whakamuri e whakaatuhia ana mā roto i ngā IP putanga VPN). He rau (!) ngā mea ka taea, me te maha o ngā kaupapa GitHub i raro i te kaupapa tahae kupuhipaHe onge ngā mahi motuhake pēnei i ngā keylogger mō ngā mōkihi kino me ngā whakaahua ipu, engari he maha ake ngā wā i roto i ngā toronga taputapu, e tumanakohia ana te taunekeneke a te kaiwhakamahi.
- Kaiwhakataka / TikiakeKo te tuarua o ngā mea rongonui, ko te nuinga o te wā ka puta tuatahi i roto i ngā whakaekenga maha-wāhanga. Neke atu i te kotahi i roto i te toru o ngā wāhanga kino he droppers (mēnā kei roto i te mōkihi te kawenga kino) he downloaders rānei (ka tangohia te kawenga mai i tētahi pito i raro i te mana o te kaiwhakaeke). He maha ngā wā ko te kawenga he momo pūmanawa kino rua e mōhiotia ana, ā, ka whakahaerehia, ā, i ētahi wā ka mau tonu, mō te tāuta i ngā backdoors, ngā spyware, ngā crypto drainers, me ētahi atu whakamahinga. Ka tīmata te kawenga kua tangohia, kua whakatinanahia rānei i tētahi whakaekenga wāhanga tuarua me te mana katoa e whakaratohia ana e ngā pūnaha kino rua o nāianei. Ka taea te tohatoha i ngā pūnaha rua i roto i te mōkihi, he maha ngā wā ka whakaahuahia hei whakaahua, hei momo kōnae rānei e kiia ana he kore kino, kia kore ai e kitea i te wā e hono ana ki ngā pae ohorere.
- Ngā Kaitahae Moni Mamati / Ngā Kaimaina. Kei te hiahia ngā hoa whawhai e hihiri ana ki te taha pūtea ki te whakamahi i ō rawa kapua hei whakahaere i ngā kaimaina matihiko (ka kitea e rātou mēnā kei te whakahaere rātou i roto i te VM kapua). Kāore rātou e aro ki te ōwehenga hua iti o te $1 mō ia $53 e utua ana ki te patunga mō te hanganga kapua i tahaetia. Tērā pea kāore ngā patunga e mōhio ki tēnei kia tae rā anō ki te whiwhinga o tētahi pire ohorere. Waimarie, ka haere mai, ka haere atu tēnei. Cryptojacking ka puta ake ngā kaupapa i roto i ngā mōkihi kino, kātahi ka memeha haere, ka hītinihanga mō ngā kaiwhakamahi pēke moni, ka mutu rānei ka aro atu ki te kaiwhakarato pēke moni, pērā i te Whakaekenga pukapuka kaute.
Ko ētahi atu whanonga, pērā i te whakatinanatanga o tētahi Tuhinga mō te whakahaere waehere mamao mā te whakatuwhera i tētahi anga whakamuri he iti ake te auau inaianei i mua. Hei tauira, ko te 123rf_kaitākoha_tukutuku ka tuwhera te mōkihi (kua tangohia inaianei mai i te rēhita) me te kore he whakapoauau, ka tāruatia, ka whakapirihia te anga whakamuri mai i te Pepa Tinihanga Anga Whakamuri:
Haunga ngā wāhanga tika me ngā wāhanga kino, kua kitea e mātou ētahi mahi tukino, tae atu ki:
Ngā mōkihi pāme
E mano tini ngā mōkihi iti, ko te nuinga kei roto i te NPM, kāore he pūmanawa kino engari e oati ana ki te whiwhi moni ngāwari, te hinu nakahi, ngā hononga ki ngā tuku Viagra, me ērā atu mea katoa. He iti noa ngā kaiwhakamahi e whakaputa ana i aua momo pāme, ā, ka tangohia he nui te whānui o te rohe mai i te rēhita. Ko tētahi atu kaiwhakaari pea nō Indonesia i ngana ki te tango hua mā te te whakamahi kino i te tīRank i hangaia hei utu mō ngā kaiwhakawhanake pūtake tuwhera, mā te waihanga i ngā tekau mano o ngā mōkihi NPM e hono tahi ana me ngā putunga rūpahu GitHub e pā ana. He takahi mārama tēnei i ngā tikanga whakamahi.
Ngā tinihanga mō te utu mō ngā pepeke me ngā rangahau haumarutanga
Ina whakaahuahia e tētahi mōkihi he raraunga e tangohia ana mō ngā kaupapa pai, pērā i te kimi i ngā hapa haumarutanga mō ngā kaupapa utu pepeke, te rangahau rānei i ētahi āhuatanga o te pūnaha rauropi. Kua kite mātou i ngā mano tini mōkihi i roto i tēnei kāwai, e tiki ana i ngā raraunga tautuhi engari kāore i te tino tairongo ki tētahi wāhitau Burp Collaborator mai i PortSwigger (hei tauira, te manaaki i te rohe oastify.com). He maha ngā wā i kite mātou i ngā tārua o te Te Pōhēhētanga o te Whakawhirinakitanga te taunakitanga-o-te-kaupapa nā Alex Birsan, pērā i te aurora-mēra-pro mōkihi (kua tangohia mai i te rēhita), e whakahaere noa ana i tēnei waehere kino i roto i te tuhinga tāuta-mua:
Ā, i whakaurua hoki he "Koinei te Whakaekenga Pōhēhē Māmā mō te Whakawhirinakitanga me te Whakaū i te Ariā"whakaahuatanga whakakape i roto i te mōkihi.jsonHe takahi mārama tēnei i ngā tikanga ratonga, ahakoa kāore he whakaaro kino.
He rongo pai? Kāore anō kia kitea (i tēnei wā) ngā whakaekenga ransomware e tukuna ana mā roto i ngā wāhanga kino. Mō ngā take kāore i te mōhiotia, te ahua nei he pai ake ki ngā kaipahua ipurangi ngā tikanga tuku iho mō te hītinihanga īmēra, te RDP, me te tuku tango taraiwa-mā-roto.
Ngā Tikanga Tāpiri i Kitea
He maha ngā tikanga i whakamahia mō te tohetohe, te karo i te parepare, te kohikohi mōhiohio, te whakawhitiwhiti kōrero ki ngā kaihautū whakahaere me ngā kaihautū, me te whakaurunga ki waho.
Te manawanui i roto i ngā wāhanga kino ka whiwhihia mā te whakamahi i ngā āhuatanga pumau i roto i te pūmanawa kino rua-wāhanga tuarua, engari i ētahi wā kei roto te whanonga i te waehere mōkihi, ko ngā mahi kua whakaritea me ngā huringa i roto i te rēhita Windows te mea tino noa.
Tuhinga he mea noa, engari he koretake. Ko te nuinga o ngā mōkihi patopato (kia mahara ki te "anchovies"?) kāore e whakamahi i te whakapōrearea i te katoa; he maha e whakamahi ana i ngā mea iti noa (te whakawaehere base64/hex, ngā whakakōrero whakakapinga rānei pērā i te rot13) e whakamahi ana rānei i ngā whakapōrearea waehere me te whakaitiiti e wātea ana, e ngāwari ana te huri mā te whakamahi i ngā taputapu tika. Ko ngā "mango" anake e mahi ana i te whakapōrearea tūturu, pakeke, e uaua ana ki te huri whakamuri.
Ahakoa pea ka hunaia te whakaekenga e te whakapōrearea, he aha rā te take e hiahiatia ai te whakapōrearea i te waehere i roto i tētahi wāhanga tuwhera-pūtake? He taunakitanga kei reira me huna tētahi mea kia kore e kitea? He maha ngā tauira kua kitea e mātou o ngā mōkihi kore-kino e whakamahi ana i te whakapōrearea hei tiaki i ngā taonga hinengaro, he mea e rerekē ana ki te "pūtake tuwhera". Ka taea te whakamahi i te whakapōrearea hei taunakitanga mō te pūmanawa kino, engari kāore i te tino whakatau. He uaua hoki te wetewete i te whakapōrearea.
whakataha mai i ngā mana whakahaere parepare e whakamahi ana i ngā tikanga māmā. He maha ngā wā ka tiakina te waehere kino i roto i ngana … hopukia ngā poraka e kore e aro ki ngā tūponotanga, nō reira kāore e whakaaturia ngā mahi rerekē i roto i ngā rangitaki. He onge te manatoko i te taiao (e rere ana i roto i te VM, i te ipu rānei), engari mō ngā pūmanawa kino e aro ana ki tētahi whakahaere, ki tētahi taiao rānei.
Ko te huna i ngā kōnae rua i roto i ngā whakaahua me ngā kōnae PDF (he momo steganography) tētahi atu tikanga i kitea hei karo i te kitenga.
Nā te mea ko ngā wāhanga kino e tino kitea ana ko ngā tahae mōhiohio, kohinga raraunga he mea nui. Ko ngā mea ngaro (kupuhipa, tohu urunga, kī API, kī whakamuna) ka matawaihia i roto i ngā kōnae takiuru, i ngā taurangi taiao, tae atu ki te papa papatuhi (e kitea ana me ngā trojan peeke me ngā tahae crypto). He mea noa hoki te tango i te waehere pūtake, nā te mea he maha ngā wā ka tāutahia te mōkihi i roto i tētahi pūnga whanaketanga ka taea te tārua i ngā putunga git ā-roto. Kua kite tātou i ngā mōkihi e whakarārangi ana i ngā whaiaronga e rapu ana i ngā putunga git. He mea tino noa te rapu i ngā wāhi pēnei i te .env, private.pem, settings.py, app.js, application.properties rānei.
Ko te exfiltration tētahi atu mahi e whakamahia whānuitia ana. He iti noa iho ngā mōkihi kino e ngana ana ki te huna i te ūnga o ngā raraunga kua tangohia. Ngā hongere Telegram me ngā kauhanga rite ki te ngrok e whakamahia pinepinetia ana. Ā, he maha ngā ngā rohe kua whakamāhia i te nuinga o te wā e whakamahia ana mō te tango i te tātaritanga.
Kāore i te tino kitea ētahi atu tikanga, pērā i te whakanui ake i te mana, te nekehanga taha rānei.
Te Whiwhi Rongonui me te Whakawhirinakitanga
Whakaarohia tētahi tangata tinihanga hangarau me tētahi kaikōhuru kua oti kē te hanga, e whakaaro ana: "Me pēhea taku hanga i tēnei mea para kia pono ki aua wairangi kore whakaaro?"
Ko te tikanga o tēnā ko te hanga i te tāurunga mō te wāhanga kino hei whakaatu i ngā whetū/mārau maha (mō te rongonui), me ngā putanga/take me pull requests (mō ngā mahi). Ko te whakaaro kia rongonui noa iho (ngā whetu) me ngā tāngata e whakawhirinaki ana ki a rātou, me te titiro whakamīharo mō te hiranga me te tiaki.
Kāore te rēhita e tirotiro mēnā e ōrite ana ngā ihirangi o tētahi kaupapa GitHub me ngā ihirangi o te mōkihi.He take rongonui tēnei i roto i te mekameka tuku pūmanawa. He poka totohu nunui ngā rēhita tūmatanui e horomia ana ngā mea katoa e makaia ana ki a rātou. Ka taea e koe te hono atu ki tētahi putunga raraunga.
Mena ka pā te hapa taipa kino ki tētahi mōkihi rongonui, he māmā noa iho: tirohia noa te putunga GitHub o nāianei i roto i te whakaaturanga whakawhirinakitanga e whakamahia ana mō te waihanga i te mōkihi me te whakaputa ki te rēhita. Mō ngā mōkihi hou i runga i tētahi putunga GitHub rūpahu, me nui ake pea tō pūkenga auaha, me te waihanga pea i ngā mea rūpahu. te mātakitaki whetu/te wehewehe Ngā pūkete GitHub mā te tuhi tuhinga.
Ā, ki te mea he rite tonu ngā ihirangi o tō kete ki te putunga, tāpirihia ētahi huringa kua hoahoatia pai ki konei, ki reira… Ka taea e koe te werowero i tō pūmanawa kino ki roto i tētahi kete hou e rite ana ki tētahi mea rongonui e tohutoro ana ki te putunga o te mea o mua, ā, tatari mō ngā hapa pato. Ki te maia tetahi ki te whakarite i ngā ihirangi o te tarball kete ki ngā ihirangi mai i te putunga GitHub, ka ngaro noa iho ngā rerekētanga i ngā wāhi werowero pūmanawa kino. He maha ngā wā kua kite tātou i tēnei huarahi i mua.
He tikanga e taea ai e tētahi wāhanga te whakaputa kōrero ārai-whakarerekē mō te takenga mai, te āhua o te hanganga o te kete, nō hea mai, me wai hoki e whakamahi ana. Engari he kōrero anō tēnā.
He pūmanawa kino a te wāhanga X?
He pātengi raraunga (whānui) kei reira mō ngā mōkihi kino? Kāore. He CVE ID kua tohua ki ngā ngoikoretanga pūtake tuwhera, engari he torutoru noa iho ngā mōkihi kino (ina koa ko ngā mea e rongonui ana) ka hoatu ki a rātou. Ko te CWE mō ngā mōkihi kino ko CWE-506 (waehere kino kua whakauruhia).
Kāore ngā taputapu pūmanawa kino noa (VirusTotal, MalwareBazaar, SOREL-20M…) e whakarite ana i ngā whakaritenga mō ngā wāhanga kino. He mea pai tēnā!
He tauira pātengi raraunga rangahau me ngā huinga raraunga hei tātari (e whakamahia ana e mātou ētahi), engari ka whakahoutia ngā whakaurunga ina mōhiotia te mōkihi kino, he maha ngā wā kua roa rawa. Ki te hiahia koe, ko te OpenSSF Ngā Mōkihi Kino he tīmatanga pai.
I te pou e whai ake nei, ka matapakihia e tātou me pēhea te mōhio mēnā he kino te mōkihi kua tukuna. He tohu kino: āe, he huarahi hei tirotiro wawe i ngā wāhanga kino i te wā e whakaatuhia ana, i mua i te tango a te rēhita i tētahi wāhanga kino e mōhiotia ana.
Te korero ano
I te wāhanga e whai ake nei "Te Tiaki i ngā Mōkihi Kino Pūtake Tuwhera: He aha ngā Mea (Kāore) e Mahi ana" Ka matapakihia e mātou ngā mea e tika ana me ngā mea kāore e tika ana mō te haumarutanga pūtake tuwhera. He māramatanga tō te nuinga o ngā tohunga e mōhio ana ki te haumarutanga mō te whakahaere i tēnei tūmomo riri, engari he maha ngā whakaaro hē.
Ka arotakehia e mātou ngā take i hē ai ēnei whakaaro, me te whai wāhi atu o ēnei whakaaro hē ki te rongonui o tēnei tikanga whakaeke, me te mōrearea nui e pā ana ki ngā whakahaere. Kātahi ka haere tonu mātou ki te kōrero mō ngā mea e whai hua ana, me te kaha me ngā rauemi e hiahiatia ana.
Waihoki, ka pānuitia e mātou te whanaketanga o ngā mōkihi kino e pā ana ki te whāinga, te tikanga werohanga, me ngā tikanga whakaeke.
Kia ora!
