{"id":104203,"date":"2022-06-01T09:37:06","date_gmt":"2022-06-01T07:37:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-npm-vklyuchena-obyazatelnaya-dvuhfaktornaya-autentifikacziya-dlya-500-samyh-populyarnyh-paketov"},"modified":"2022-06-01T09:37:06","modified_gmt":"2022-06-01T07:37:06","slug":"v-npm-vklyuchena-obyazatelnaya-dvuhfaktornaya-autentifikacziya-dlya-500-samyh-populyarnyh-paketov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/v-npm-vklyuchena-obyazatelnaya-dvuhfaktornaya-autentifikacziya-dlya-500-samyh-populyarnyh-paketov","title":{"rendered":"Az NPM-be k\u00f6telez\u0151 k\u00e9tt\u00e9nyez\u0151s hiteles\u00edt\u00e9s ker\u00fclt bevezet\u00e9sre a 500 legn\u00e9pszer\u0171bb csomag sz\u00e1m\u00e1ra.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A NPM-t\u00e1rol\u00f3ban k\u00f6telez\u0151 k\u00e9tt\u00e9nyez\u0151s hiteles\u00edt\u00e9s l\u00e9pett \u00e9letbe a 500 legn\u00e9pszer\u0171bb NPM-csomag fenntart\u00f3i fi\u00f3kjai sz\u00e1m\u00e1ra. A n\u00e9pszer\u0171s\u00e9g krit\u00e9riumak\u00e9nt a f\u00fcgg\u0151 csomagok sz\u00e1m\u00e1t haszn\u00e1lt\u00e1k. A list\u00e1n szerepl\u0151 csomagok fenntart\u00f3i azut\u00e1n v\u00e9gezhetnek el a rep\u00f3val kapcsolatos v\u00e1ltoztat\u00e1sokat, hogy bekapcsolt\u00e1k a k\u00e9tt\u00e9nyez\u0151s hiteles\u00edt\u00e9st, ami megk\u00f6veteli a bel\u00e9p\u00e9s meger\u0151s\u00edt\u00e9s\u00e9t egy egyszeri jelsz\u00f3val (TOTP), amelyet olyan alkalmaz\u00e1sok gener\u00e1lnak, mint az Authy, a Google Authenticator \u00e9s a FreeOTP, vagy hardveres kulcsok \u00e9s biometrikus olvas\u00f3k, amelyek t\u00e1mogatj\u00e1k a WebAuth protokollt. <\/p>\n

Ez az NPM-fi\u00f3kok megs\u00e9rt\u00e9s\u00e9nek megakad\u00e1lyoz\u00e1s\u00e1ra ir\u00e1nyul\u00f3 v\u00e9delem meger\u0151s\u00edt\u00e9s\u00e9nek harmadik l\u00e9pcs\u0151je. Az els\u0151 l\u00e9p\u00e9sben \u00e1t\u00e1ll\u00edtott\u00e1k az \u00f6sszes NPM-fi\u00f3kot, amelyn\u00e9l nem akt\u00edv a k\u00e9tt\u00e9nyez\u0151s hiteles\u00edt\u00e9s, egy kib\u0151v\u00edtett fi\u00f3kellen\u0151rz\u00e9sre, amely megk\u00f6veteli egy egyszeri k\u00f3d megad\u00e1s\u00e1t, amelyet emailben k\u00fcldenek el, amikor bejelentkez\u00e9s t\u00f6rt\u00e9nik az npmjs.com webhelyre vagy b\u00e1rmilyen hiteles\u00edtett m\u0171veletet hajtanak v\u00e9gre az npm eszk\u00f6zben. A m\u00e1sodik l\u00e9p\u00e9sben a k\u00f6telez\u0151 k\u00e9tt\u00e9nyez\u0151s hiteles\u00edt\u00e9st a 100 legn\u00e9pszer\u0171bb csomag eset\u00e9ben vezett\u00e9k be. <\/p>\n

Eml\u00e9keztet\u0151\u00fcl, a 2020-ban v\u00e9gzett kutat\u00e1s szerint mind\u00f6ssze a csomagok karbantart\u00f3inak 9,27%-a alkalmazta a k\u00e9tt\u00e9nyez\u0151s hiteles\u00edt\u00e9st a hozz\u00e1f\u00e9r\u00e9s v\u00e9delme \u00e9rdek\u00e9ben, \u00e9s az esetek 13,37%-\u00e1ban a fejleszt\u0151k a regisztr\u00e1ci\u00f3 sor\u00e1n megpr\u00f3b\u00e1lt\u00e1k \u00fajra felhaszn\u00e1lni a m\u00e1r kor\u00e1bban kompromitt\u00e1lt jelszavakat, amelyek ismert jelsz\u00f3leakokban szerepeltek. A haszn\u00e1lt jelszavak megb\u00edzhat\u00f3s\u00e1g\u00e1nak ellen\u0151rz\u00e9se sor\u00e1n 12%-os hozz\u00e1f\u00e9r\u00e9st siker\u00fclt el\u00e9rni az NPM fi\u00f3kjaihoz (13%-os pakkra vonatkoz\u00f3an) a j\u00f3slhat\u00f3 \u00e9s trivi\u00e1lis jelszavak, mint p\u00e9ld\u00e1ul a \"123456\" haszn\u00e1lata miatt. Probl\u00e9m\u00e1snak bizonyult 4 felhaszn\u00e1l\u00f3i fi\u00f3k a 20 legn\u00e9pszer\u0171bb csomag k\u00f6z\u00fcl, 13 fi\u00f3k, amelynek csomagjait havi t\u00f6bb mint 50 milli\u00f3 alkalommal t\u00f6lt\u00f6tt\u00e9k le, 40 fi\u00f3k, amelynek csomagjait havi t\u00f6bb mint 10 milli\u00f3 alkalommal t\u00f6lten\u00e9k le, \u00e9s 282 fi\u00f3k, amelynek csomagjai havi t\u00f6bb mint 1 milli\u00f3 let\u00f6lt\u00e9st \u00e9rtek el. Figyelembe v\u00e9ve a modulok l\u00e1ncolat\u00e1nak dependency-j\u00e9t, a megb\u00edzhatatlan fi\u00f3kok kompromitt\u00e1l\u00e1sa \u00f6sszesen ak\u00e1r 52%-\u00e1t is \u00e9rintheti az \u00f6sszes modulnak az NPM-ben.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0445 500 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 NPM-\u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u0440\u0438\u0442\u0435\u0440\u0438\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0421\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u043f\u0430\u0432\u0448\u0438\u0445 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441\u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0441 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 (TOTP), \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0442\u0430\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u0430\u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104203","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A NPM-ben k\u00f6telez\u0151 a k\u00e9tt\u00e9nyez\u0151s hiteles\u00edt\u00e9s az 500 legn\u00e9pszer\u0171bb csomag eset\u00e9ben | ProHoster","description":"A NPM-t\u00e1rol\u00f3ban k\u00f6telez\u0151 k\u00e9tt\u00e9nyez\u0151s hiteles\u00edt\u00e9s l\u00e9pett \u00e9letbe a 500 legn\u00e9pszer\u0171bb NPM-csomag fenntart\u00f3i fi\u00f3kjai sz\u00e1m\u00e1ra.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-npm-vklyuchena-obyazatelnaya-dvuhfaktornaya-autentifikacziya-dlya-500-samyh-populyarnyh-paketov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 NPM \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u043b\u044f 500 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0445 500 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 NPM-\u043f\u0430\u043a\u0435\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-npm-vklyuchena-obyazatelnaya-dvuhfaktornaya-autentifikacziya-dlya-500-samyh-populyarnyh-paketov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-06-01T07:37:06+00:00","article:modified_time":"2022-06-01T07:37:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104203","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 11:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-06-01 07:38:16","updated":"2026-01-25 11:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/104203","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=104203"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/104203\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=104203"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=104203"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=104203"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}