{"id":101315,"date":"2021-09-18T10:22:44","date_gmt":"2021-09-18T08:22:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-profinansiruet-audit-bezopasnosti-8-vazhnyh-otkrytyh-proektov"},"modified":"2021-09-18T10:22:44","modified_gmt":"2021-09-18T08:22:44","slug":"google-profinansiruet-audit-bezopasnosti-8-vazhnyh-otkrytyh-proektov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/google-profinansiruet-audit-bezopasnosti-8-vazhnyh-otkrytyh-proektov","title":{"rendered":"Google finanzier\u00e0 un'audit di sicurezza su 8 importanti progetti open source","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Il Fondo OSTIF (Open Source Technology Improvement Fund), creato per rafforzare la sicurezza dei progetti open source, ha annunciato una collaborazione con Google, che ha espresso la sua disponibilit\u00e0 a finanziare un audit di sicurezza indipendente per otto progetti open source. Con i fondi ricevuti da Google, si prevede di eseguire l'audit di Git, della libreria JavaScript Lodash, del framework PHP Laravel, del framework Java Slf4j, delle librerie JSON Jackson (Jackson-core e Jackson-databind) e dei componenti Java Apache Httpcomponents (Httpcomponents-core e Httpcomponents-client). <\/p>\n

In precedenza, con i fondi raccolti tramite donazioni, il fondo OSTIF ha gi\u00e0 condotto audit sui progetti OpenSSL, VeraCrypt, OpenVPN, Monero, Unbound DNS e QRL. Inoltre, la comunit\u00e0 ha gi\u00e0 raccolto fondi per l'audit del framework PHP Symfony. In caso di ulteriore finanziamento, sono previsti anche gli audit per i progetti Systemd, Electron, Rails, Drupal, Joomla, WebPack, Reprepro, Ceph, React Native, Salt, Ansible, Angular, Gatsby e Guava. <\/p>\n

La selezione \u00e8 stata effettuata empiricamente, basata sulla valutazione dell'impatto della sicurezza del progetto sull'ecosistema del software open source e sui potenziali benefici per la comunit\u00e0 derivanti dall'aumento della sicurezza dei progetti considerati. Per circa 100.000 progetti su GitHub \u00e8 stato calcolato un coefficiente che tiene conto di fattori come la popolarit\u00e0 come dipendenza, la richiesta nelle infrastrutture, il numero di sviluppatori, l'attivit\u00e0 di sviluppo, il numero di bug chiusi e aperti, il numero di organizzazioni che supportano il progetto, la frequenza degli aggiornamenti, la storia delle vulnerabilit\u00e0, ecc.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0424\u043e\u043d\u0434 OSTIF (Open Source Technology Improvement Fund), \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0441 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Google, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0440\u0430\u0437\u0438\u043b\u0430 \u0433\u043e\u0442\u043e\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 8 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u041d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u043e\u0442 Google \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0440\u0435\u0448\u0435\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0443\u0434\u0438\u0442 Git, JavaScript-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Lodash, PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Laravel, Java-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Slf4j, JSON-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a Jackson (Jackson-core \u0438 Jackson-databind) \u0438 Java-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Apache Httpcomponents […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101315","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google finanzia un audit di sicurezza per 8 importanti progetti open source | ProHoster","description":"Il fondo OSTIF (Open Source Technology Improvement Fund), creato per rafforzare la sicurezza dei progetti open source, ha annunciato una collaborazione con Google, che ha espresso la disponibilit\u00e0 a finanziare un audit di sicurezza per 8 progetti open source. I fondi ricevuti da Google saranno utilizzati per condurre un audit su Git, la libreria JavaScript Lodash, il framework PHP Laravel, il framework Java Slf4j, le librerie JSON Jackson (Jackson-core e Jackson-databind) e i componenti Java di Apache Httpcomponents.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/google-profinansiruet-audit-bezopasnosti-8-vazhnyh-otkrytyh-proektov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u043e\u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u0443\u0435\u0442 \u0430\u0443\u0434\u0438\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 8 \u0432\u0430\u0436\u043d\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 | ProHoster","og:description":"\u0424\u043e\u043d\u0434 OSTIF (Open Source Technology Improvement Fund), \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0441 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Google, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0440\u0430\u0437\u0438\u043b\u0430 \u0433\u043e\u0442\u043e\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 8 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u041d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u043e\u0442 Google \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0440\u0435\u0448\u0435\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0443\u0434\u0438\u0442 Git, JavaScript-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Lodash, PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Laravel, Java-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Slf4j, JSON-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a Jackson (Jackson-core \u0438 Jackson-databind) \u0438 Java-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Apache Httpcomponents","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/google-profinansiruet-audit-bezopasnosti-8-vazhnyh-otkrytyh-proektov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-18T08:22:44+00:00","article:modified_time":"2021-09-18T08:22:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101315","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-18 09:11:01","updated":"2022-10-03 11:54:45"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/101315","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=101315"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/101315\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=101315"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=101315"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=101315"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}