{"id":148496,"date":"2025-11-15T23:12:02","date_gmt":"2025-11-15T21:12:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-pypi-vvedeno-podtverzhdenie-smeny-ustrojstva-s-kotorogo-osushhestvlyaetsya-vhod"},"modified":"2026-02-08T21:43:51","modified_gmt":"2026-02-08T19:43:51","slug":"v-pypi-vvedeno-podtverzhdenie-smeny-ustrojstva-s-kotorogo-osushhestvlyaetsya-vhod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/v-pypi-vvedeno-podtverzhdenie-smeny-ustrojstva-s-kotorogo-osushhestvlyaetsya-vhod","title":{"rendered":"A PyPI-n bevezet\u00e9sre ker\u00fclt az eszk\u00f6zv\u00e1lt\u00e1si meger\u0151s\u00edt\u00e9s, amely a bejelentkez\u00e9s sor\u00e1n sz\u00fcks\u00e9ges","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Python-csomagok PyPI (Python Package Index) t\u00e1rol\u00f3j\u00e1nak fejleszt\u0151i tov\u00e1bbi ellen\u0151rz\u00e9si l\u00e9p\u00e9st vezettek be a bejelentkez\u00e9s sor\u00e1n, amely megk\u00f6veteli a m\u0171velet meger\u0151s\u00edt\u00e9s\u00e9t e-mailben, ha olyan eszk\u00f6zr\u0151l vagy b\u00f6ng\u00e9sz\u0151b\u0151l csatlakoznak, ahonnan kor\u00e1bban m\u00e9g nem t\u00f6rt\u00e9nt bejelentkez\u00e9s. A meger\u0151s\u00edt\u00e9s sz\u00fcks\u00e9ges a megl\u00e9v\u0151 k\u00e9tfaktoros hiteles\u00edt\u00e9s mellett, amely megk\u00f6veteli az egyszer haszn\u00e1latos k\u00f3d (TOTP \u2014 Time-based One-Time Password) megad\u00e1s\u00e1t a szok\u00e1sos hiteles\u00edt\u0151 adatok mellett. Ha WebAuthn vagy Passkeys alap\u00fa technol\u00f3gi\u00e1kon alapul\u00f3 kulcsokat haszn\u00e1lnak m\u00e1sodik hiteles\u00edt\u00e9si t\u00e9nyez\u0151k\u00e9nt, akkor tov\u00e1bbi e-mailes meger\u0151s\u00edt\u00e9s nem sz\u00fcks\u00e9ges. <\/p>\n

The reason for adding the new verification is to strengthen protection against phishing. Recently, attackers have been circumventing the two-factor authentication protection by<\/a> using transparent traffic proxying from phishing sites to the real pypi.org site, creating the illusion for the user of interacting with the actual PyPI catalog. The login page is also proxied, and attackers control not only the initially entered login password but also the response to the second-factor authentication validation request. <\/p>\n

An additional request for authority confirmation with a warning about the attempt to log in from a new device will prevent compromise in case of interception of the TOTP code and password, and will alert developers who have not changed their equipment. During proxying, attackers can intercept the account parameters and the entered one-time TOTP code, but they cannot affect the email confirmation that requires clicking on the link provided in the email. <\/p>\n

If a user receives a verification email but has not attempted to log into the PyPI catalog, they should not click on the link. If the login attempt was made but the device has not changed, it should be checked whether the login attempt was through a phishing site, and in case of detecting an attack, it is urgent to change the password and check account activity.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u044d\u0442\u0430\u043f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u0445\u043e\u0434\u0430, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e email \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u043b\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u043d\u043d\u0435\u0435 \u043d\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043b\u0441\u044f \u0432\u0445\u043e\u0434. \u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a \u0438\u043c\u0435\u044e\u0449\u0435\u0439\u0441\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0439 \u0432\u0432\u043e\u0434\u0430 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (TOTP — Time-based One-Time Password) \u043f\u043e\u043c\u0438\u043c\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-148496","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 PyPI has introduced confirmation for changing the device from which login is performed | ProHoster","description":"A Python Package Index (PyPI) repository developers have implemented an additional verification step during login that requires email confirmation for operations when connecting from a device or browser that has not been previously logged in.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-pypi-vvedeno-podtverzhdenie-smeny-ustrojstva-s-kotorogo-osushhestvlyaetsya-vhod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 PyPI \u0432\u0432\u0435\u0434\u0435\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0441\u043c\u0435\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0445\u043e\u0434 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u044d\u0442\u0430\u043f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u0445\u043e\u0434\u0430, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e email \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u043b\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0441.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-pypi-vvedeno-podtverzhdenie-smeny-ustrojstva-s-kotorogo-osushhestvlyaetsya-vhod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-11-15T21:12:02+00:00","article:modified_time":"2026-02-08T19:43:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"148496","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 19:43:52","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:01:19","updated":"2026-02-08 19:43:52","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/148496","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=148496"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/148496\/revisions"}],"predecessor-version":[{"id":157609,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/148496\/revisions\/157609"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=148496"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=148496"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=148496"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}