{"id":141202,"date":"2025-08-21T11:12:01","date_gmt":"2025-08-21T09:12:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-repozitorii-pypi-realizovana-blokirovka-email-s-osvobozhdyonnymi-domenami"},"modified":"2025-08-21T11:12:01","modified_gmt":"2025-08-21T09:12:01","slug":"v-repozitorii-pypi-realizovana-blokirovka-email-s-osvobozhdyonnymi-domenami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/v-repozitorii-pypi-realizovana-blokirovka-email-s-osvobozhdyonnymi-domenami","title":{"rendered":"Nel repository PyPI \u00e8 stata implementata una blocco delle email con domini liberati","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Gli sviluppatori del repository dei pacchetti Python PyPI (Python Package Index) hanno implementato una protezione contro la cattura dei progetti tramite l'acquisto di domini liberati, elencati nei parametri degli account. L'attacco consiste nel fatto che gli aggressori cercano account legati a email con domini scaduti, dopodich\u00e9 registrano un dominio liberato a proprio nome, reindirizzano il traffico email sul proprio server e, ottenendo il controllo sull'email, avviano il processo di recupero della password dimenticata. Nel 2022, in questo modo, \u00e8 stato ottenuto il controllo su un pacchetto Python chiamato ctx. <\/p>\n

Per proteggersi da simili attacchi, PyPI ha implementato un monitoraggio quotidiano della validit\u00e0 nomi di dominio<\/a>, degli indirizzi email. Gli indirizzi email con domini scaduti vengono ora automaticamente convertiti in uno stato non confermato. Per gli indirizzi non confermati, PyPI non consente di eseguire l'operazione di recupero della password. Solo il proprietario dell'account che conosce la password pu\u00f2 richiedere una nuova verifica. <\/p>\n

Dall'inizio di giugno, nel database degli utenti di PyPI sono stati identificati oltre 1800 indirizzi email legati a domini non rinnovati in tempo. A partire dal 1 gennaio 2024, il catalogo PyPI passer\u00e0 alla autenticazione a due fattori obbligatoria, senza l'attivazione della quale l'utente non potr\u00e0 eseguire operazioni di gestione del progetto. Tuttavia, per i vecchi utenti creati prima dell'introduzione dell'autenticazione a due fattori obbligatoria, rimane la possibilit\u00e0 di recuperare la password tramite conferma via email, senza necessit\u00e0 di verifica a due fattori.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u043a\u0443\u043f\u043a\u0438 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439. \u0410\u0442\u0430\u043a\u0430 \u0441\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u0438\u0441\u043a\u0438\u0432\u0430\u044e\u0442 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u043a email \u0441 \u043f\u0440\u043e\u0441\u0440\u043e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u0439 \u0434\u043e\u043c\u0435\u043d \u043d\u0430 \u0441\u0435\u0431\u044f, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 email, \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-141202","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nel repository PyPI \u00e8 stata implementata una blocco delle email con domini liberati | ProHoster","description":"Gli sviluppatori del repository dei pacchetti Python PyPI (Python Package Index) hanno implementato una protezione contro la cattura dei progetti tramite l'acquisto di domini liberati, elencati nei parametri degli account.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/v-repozitorii-pypi-realizovana-blokirovka-email-s-osvobozhdyonnymi-domenami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 PyPI \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 email \u0441 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f Python-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 PyPI (Python Package Index) \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u043a\u0443\u043f\u043a\u0438 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/v-repozitorii-pypi-realizovana-blokirovka-email-s-osvobozhdyonnymi-domenami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-08-21T09:12:01+00:00","article:modified_time":"2025-08-21T09:12:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"141202","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:56:45","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 14:23:19","updated":"2026-02-08 20:56:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/141202","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=141202"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/141202\/revisions"}],"predecessor-version":[{"id":158115,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/141202\/revisions\/158115"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=141202"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=141202"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=141202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}