{"id":112660,"date":"2024-01-02T09:10:17","date_gmt":"2024-01-02T07:10:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/katalog-pypi-pereshyol-na-obyazatelnuyu-dvuhfaktornuyu-autentifikacziyu"},"modified":"2024-01-02T09:10:17","modified_gmt":"2024-01-02T07:10:17","slug":"katalog-pypi-pereshyol-na-obyazatelnuyu-dvuhfaktornuyu-autentifikacziyu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/katalog-pypi-pereshyol-na-obyazatelnuyu-dvuhfaktornuyu-autentifikacziyu","title":{"rendered":"Le r\u00e9pertoire PyPI est pass\u00e9 \u00e0 l'authentification \u00e0 deux facteurs obligatoire","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Les d\u00e9veloppeurs du r\u00e9f\u00e9rentiel de paquets Python PyPI (Python Package Index) ont annonc\u00e9 l'impl\u00e9mentation de l'authentification \u00e0 deux facteurs obligatoire pour tous les utilisateurs. Sans l'activation de l'authentification \u00e0 deux facteurs, un utilisateur ne pourra plus t\u00e9l\u00e9charger des fichiers ni effectuer des actions li\u00e9es \u00e0 la gestion de son projet. Auparavant, l'authentification \u00e0 deux facteurs avait \u00e9t\u00e9 rendue obligatoire pour les comptes d'utilisateurs associant au moins un projet ou faisant partie des organismes de gestion des paquets. <\/p>\n

L'utilisation de l'authentification \u00e0 deux facteurs permettra de renforcer la protection du processus de d\u00e9veloppement et de s\u00e9curiser les projets contre les modifications malveillantes r\u00e9sultant de fuites de donn\u00e9es d'identification, de l'utilisation du m\u00eame mot de passe sur un site compromis, de violations du syst\u00e8me local du d\u00e9veloppeur ou de l'application de m\u00e9thodes de manipulation sociale. L'acc\u00e8s des cybercriminels suite \u00e0 la captation des comptes repr\u00e9sente l'une des menaces les plus dangereuses, car en cas d'attaque r\u00e9ussie, il peut \u00eatre possible d'introduire des modifications malveillantes dans d'autres produits et biblioth\u00e8ques utilisant le paquet compromis comme d\u00e9pendance. <\/p>\n

En tant que m\u00e9thode pr\u00e9f\u00e9r\u00e9e d'authentification \u00e0 deux facteurs, un sch\u00e9ma bas\u00e9 sur des jetons mat\u00e9riels compatibles avec la sp\u00e9cification FIDO U2F et le protocole WebAuthn a \u00e9t\u00e9 d\u00e9clar\u00e9, permettant d'atteindre un niveau de s\u00e9curit\u00e9 plus \u00e9lev\u00e9 par rapport \u00e0 la g\u00e9n\u00e9ration de mots de passe temporaires. En plus des jetons, des applications d'authentification bas\u00e9es sur des mots de passe \u00e0 usage unique, prenant en charge le protocole TOTP, comme Authy, Google Authenticator et FreeOTP, peuvent \u00e9galement \u00eatre utilis\u00e9es. Les d\u00e9veloppeurs sont \u00e9galement encourag\u00e9s \u00e0 opter pour la m\u00e9thode d'authentification \u00ab Trusted Publishers \u00bb bas\u00e9e sur la norme OpenID Connect (OIDC) ou \u00e0 utiliser des jetons API lors du t\u00e9l\u00e9chargement de paquets.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0411\u0435\u0437 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0442\u0435\u043f\u0435\u0440\u044c \u043d\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0441\u0432\u043e\u0438\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c. \u0420\u0430\u043d\u0435\u0435 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0434\u043b\u044f \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0445 \u0445\u043e\u0442\u044f \u0431\u044b \u043e\u0434\u0438\u043d \u043f\u0440\u043e\u0435\u043a\u0442 \u0438\u043b\u0438 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0432 \u043a\u0443\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112660","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Le catalogue PyPI est pass\u00e9 \u00e0 l'authentification \u00e0 deux facteurs obligatoire | ProHoster","description":"Les d\u00e9veloppeurs du r\u00e9f\u00e9rentiel de paquets Python PyPI (Python Package Index) ont annonc\u00e9 l'impl\u00e9mentation de l'authentification \u00e0 deux facteurs obligatoire pour tous les utilisateurs.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/katalog-pypi-pereshyol-na-obyazatelnuyu-dvuhfaktornuyu-autentifikacziyu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u0442\u0430\u043b\u043e\u0433 PyPI \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u043d\u0430 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/katalog-pypi-pereshyol-na-obyazatelnuyu-dvuhfaktornuyu-autentifikacziyu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-02T07:10:17+00:00","article:modified_time":"2024-01-02T07:10:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/112660","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=112660"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/112660\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=112660"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=112660"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=112660"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}