{"id":148496,"date":"2025-11-15T23:12:02","date_gmt":"2025-11-15T21:12:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-pypi-vvedeno-podtverzhdenie-smeny-ustrojstva-s-kotorogo-osushhestvlyaetsya-vhod"},"modified":"2026-02-08T21:43:51","modified_gmt":"2026-02-08T19:43:51","slug":"v-pypi-vvedeno-podtverzhdenie-smeny-ustrojstva-s-kotorogo-osushhestvlyaetsya-vhod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/v-pypi-vvedeno-podtverzhdenie-smeny-ustrojstva-s-kotorogo-osushhestvlyaetsya-vhod","title":{"rendered":"Se ha introducido la confirmaci\u00f3n de cambio de dispositivo en PyPI.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Los desarrolladores del repositorio de paquetes de Python, PyPI (Python Package Index), han implementado un paso adicional de verificaci\u00f3n durante el inicio de sesi\u00f3n, que requiere la confirmaci\u00f3n de la operaci\u00f3n por correo electr\u00f3nico en caso de que se acceda desde un dispositivo o navegador que no se haya utilizado anteriormente para iniciar sesi\u00f3n. Esta confirmaci\u00f3n es necesaria adem\u00e1s de la autenticaci\u00f3n de dos factores existente, que requiere la entrada de un c\u00f3digo de un solo uso (TOTP \u2014 Time-based One-Time Password) adem\u00e1s de las credenciales normales. Al utilizar claves basadas en tecnolog\u00edas WebAuthn o Passkeys como segundo factor de autenticaci\u00f3n, no se requiere confirmaci\u00f3n adicional por correo electr\u00f3nico. <\/p>\n

La raz\u00f3n para a\u00f1adir esta nueva verificaci\u00f3n es mejorar la protecci\u00f3n contra el phishing. Recientemente, para eludir la protecci\u00f3n a trav\u00e9s de la autenticaci\u00f3n de dos factores, los atacantes<\/a> han comenzado a utilizar el proxy transparente de tr\u00e1fico desde sitios de phishing hacia el sitio real pypi.org, lo que genera en el usuario una sensaci\u00f3n de estar trabajando con el verdadero cat\u00e1logo de PyPI. La p\u00e1gina de inicio de sesi\u00f3n tambi\u00e9n es proxyada y los atacantes controlan no solo la contrase\u00f1a de acceso introducida inicialmente, sino tambi\u00e9n la respuesta a la verificaci\u00f3n del segundo factor de autenticaci\u00f3n. <\/p>\n

La solicitud adicional de confirmaci\u00f3n de credenciales con una advertencia sobre un intento de acceso desde un nuevo dispositivo evitar\u00e1 la compromisi\u00f3n en caso de interceptaci\u00f3n del c\u00f3digo TOTP y la contrase\u00f1a, as\u00ed como alertar\u00e1 a los desarrolladores que no han cambiado de hardware. Durante el proxy, los atacantes pueden interceptar los par\u00e1metros de la cuenta y el c\u00f3digo TOTP introducido, pero no pueden influir en la confirmaci\u00f3n por correo electr\u00f3nico, que requiere hacer clic en el enlace que se indica dentro del correo. <\/p>\n

Si el usuario ha recibido un correo de verificaci\u00f3n, pero no intent\u00f3 acceder al cat\u00e1logo de PyPI, no debe hacer clic en el enlace. Si se intent\u00f3 el acceso y no se ha cambiado de dispositivo, se debe verificar si se intent\u00f3 acceder a trav\u00e9s de un sitio de phishing y, en caso de detectar un ataque, cambiar urgentemente la contrase\u00f1a y verificar la actividad en la cuenta.
\n
Fuente: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u044d\u0442\u0430\u043f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u0445\u043e\u0434\u0430, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e email \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u043b\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u043d\u043d\u0435\u0435 \u043d\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043b\u0441\u044f \u0432\u0445\u043e\u0434. \u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0438\u043c\u0435\u044e\u0449\u0435\u0439\u0441\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0439 \u0432\u0432\u043e\u0434\u0430 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (TOTP — Time-based One-Time Password) \u043f\u043e\u043c\u0438\u043c\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-148496","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 En PyPI se ha implementado la confirmaci\u00f3n del cambio de dispositivo desde el cual se accede | ProHoster","description":"Los desarrolladores del repositorio de paquetes de Python PyPI (\u00cdndice de Paquetes de Python) han implementado un paso adicional de verificaci\u00f3n durante el acceso, que requiere la confirmaci\u00f3n de la operaci\u00f3n por correo electr\u00f3nico en caso de conexi\u00f3n desde un dispositivo o navegador que no hab\u00eda sido utilizado anteriormente.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/v-pypi-vvedeno-podtverzhdenie-smeny-ustrojstva-s-kotorogo-osushhestvlyaetsya-vhod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 PyPI \u0432\u0432\u0435\u0434\u0435\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0441\u043c\u0435\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0445\u043e\u0434 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u044d\u0442\u0430\u043f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u0445\u043e\u0434\u0430, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e email \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u043b\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0441.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/v-pypi-vvedeno-podtverzhdenie-smeny-ustrojstva-s-kotorogo-osushhestvlyaetsya-vhod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-11-15T21:12:02+00:00","article:modified_time":"2026-02-08T19:43:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"148496","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 19:43:52","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:01:19","updated":"2026-02-08 19:43:52","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/148496","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=148496"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/148496\/revisions"}],"predecessor-version":[{"id":157609,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/148496\/revisions\/157609"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=148496"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=148496"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=148496"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}