RubyGems now requires multi-factor auth for top package maintainers
In 2018, the paper's authors claim, there were 100 million malicious packages that together accounted for 600 million downloads. RubyGems presently containsThe most common supply-chain attack involves typosquatting – submitting malicious packages to registries using names that are substantially similar to popular packages, in the hope of a fat-fingered fiasco by a developer.
But account takeovers offer the opportunity for broader distribution of malware, given a sufficiently popular account. According to the supply-chain attack paper, account takeovers haven't received as much attention as they might due to the code community's focus on security improvements through bug fixes.
"Account hijacking takes place because of weak credentials that attackers can guess and social engineering attacks exploit the collaborative nature of open-source projects as seen in many attacks," the paper's authors, from the Georgia Institute of Technology in the US, explain.
Belgique Dernières Nouvelles, Belgique Actualités
Similar News:Vous pouvez également lire des articles d'actualité similaires à celui-ci que nous avons collectés auprès d'autres sources d'information.
Muncaster Castle and gardens are a multi-award-winning visitor attraction – book your tickets online and get 10% offIf you’re looking for summer holiday fun, adventure and a fabulous family day out then the multi-award-winning Muncaster Castle is a must-see.
Lire la suite »
Liverpool venue named one of the most Instagrammable bars in UKIt made the list alongside bars in London, Edinburgh, Manchester, Birmingham and more
Lire la suite »
Love Island’s Cheyanne Kerr shares her £15 secret product for glowing skinCheyanne has revealed the top glowy illuminator product she used in the Love Island villa. Read more on heatworld.
Lire la suite »
Must Watch: Top 3 runs of Red Bull Joyride, including Lemoine's insane send!Watch the highlights of the world’s pinnacle slopestyle mountain bike competition at Whistler's mecca for mountain biking.
Lire la suite »
Legacy of teenager Charlotte Hope tops £32,000 after memorial football day'We raised a ridiculous amount of money at the event and we never expected anything like that, but the way it has shot up, we thought we would be closing on £30,000, now it is £32,500.'
Lire la suite »
YouTuber misinterprets Covid-19 vaccine evidence on children from Singapore - Full FactDr John Campbell claims that new evidence shows more children “suffered a severe reaction to vaccine” than required oxygen therapy for Covid-19. But this is incorrect, and the comparison is flawed.
Lire la suite »