{"id":81518,"date":"2020-05-14T07:42:04","date_gmt":"2020-05-14T05:42:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/75-kommercheskih-prilozhenij-vklyuchayut-ustarevshij-otkrytyj-kod-s-uyazvimostyami"},"modified":"2020-05-14T07:42:04","modified_gmt":"2020-05-14T05:42:04","slug":"75-kommercheskih-prilozhenij-vklyuchayut-ustarevshij-otkrytyj-kod-s-uyazvimostyami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/75-kommercheskih-prilozhenij-vklyuchayut-ustarevshij-otkrytyj-kod-s-uyazvimostyami","title":{"rendered":"Il 75% delle applicazioni commerciali utilizza codice sorgente obsoleto con vulnerabilit\u00e0.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Azienda Synopsys ha analizzato<\/a><\/noindex> 1253 basi di codice commerciali e ha concluso che quasi tutte (99%) le applicazioni commerciali esaminate contengono almeno un componente open source, e il 70% del codice nei repository esaminati \u00e8 open source. A titolo di confronto, in uno studio simile del 2015 la quota di codice open source era del 36%.<\/p>\n

Tuttavia, nella maggior parte dei casi, il codice open source di terze parti utilizzato non viene aggiornato e presenta potenziali problemi di sicurezza \u2014 nel 91% dei database di codice esaminati ci sono componenti aperti che non sono stati aggiornati per oltre 5 anni o che sono rimasti abbandonati per almeno due anni e non sono supportati dagli sviluppatori. Di conseguenza, nel 75% del codice open source identificato nei repository ci sono vulnerabilit\u00e0 conosciute non corrette, di cui la met\u00e0 presenta un alto livello di pericolo. Nel campione del 2018, la percentuale di codice vulnerabile era del 60%.<\/p>\n

La vulnerabilit\u00e0 pericolosa pi\u00f9 comune \u00e8 stata
\nproblema CVE-2018-16487<\/a><\/noindex> (esecuzione remota di codice) nella libreria lodash<\/a><\/noindex> per Node.js, versioni vulnerabili riscontrate pi\u00f9 di 500 volte. La vulnerabilit\u00e0 non corretta pi\u00f9 antica \u00e8 stata un problema nel demone lpd (CVE-1999-0061<\/a><\/noindex>), corretto nel 1999.<\/p>\n

Oltre alla sicurezza, nelle basi di codice dei progetti commerciali si osservano anche negligenze nel rispetto delle condizioni delle licenze open source.
\nNel 73% delle basi di codice sono state riscontrate problematiche di legalit\u00e0 relative all'uso di codice open source, come ad esempio le incompatibilit\u00e0 di licenza (in genere, il codice GPL viene incluso in prodotti commerciali senza rilasciare il prodotto derivato) o l'uso di codice senza specifica della licenza. Il 93% di tutti i problemi di licenza si manifesta in applicazioni web e mobili. Nei giochi, nei sistemi di realt\u00e0 virtuale, nei programmi multimediali e di intrattenimento, le violazioni sono state osservate nel 59% dei casi.<\/p>\n

In totale, lo studio ha identificato 124 componenti open source standard che vengono comunemente utilizzati in tutte le basi di codice. I pi\u00f9 popolari tra questi sono: jQuery (55%), Bootstrap (40%), Font Awesome (31%), Lodash (30%) e jQuery UI (29%). In base ai linguaggi di programmazione, i pi\u00f9 utilizzati sono JavaScript (impiegato nel 74% dei progetti), C++ (57%), Shell (54%), C (50%), Python (46%), Java (40%), TypeScript (36%), C# (36%); Perl (30%) e Ruby (25%). La quota complessiva dei linguaggi di programmazione \u00e8:
\nJavaScript (51%), C++ (10%), Java (7%), Python (7%), Ruby (5%), Go (4%), C (4%), PHP (4%), TypeScript (4%), C# (3%), Perl (2%) e Shell (1%).<\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Synopsys \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 1253 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u0434\u043e\u0432\u044b\u0445 \u0431\u0430\u0437 \u0438 \u043f\u0440\u0438\u0448\u043b\u0430 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u043f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435 (99%) \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u0438\u043d \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0430 70% \u043a\u043e\u0434\u0430 \u0432 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c. \u0414\u043b\u044f \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f \u0432 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 2015 \u0433\u043e\u0434\u0430 \u0434\u043e\u043b\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 36%. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-81518","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4775% delle applicazioni commerciali includono codice open source obsoleto con vulnerabilit\u00e0 | ProHoster","description":"L'azienda Synopsys ha analizzato 1253 basi di codice commerciali e ha concluso che quasi.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/75-kommercheskih-prilozhenij-vklyuchayut-ustarevshij-otkrytyj-kod-s-uyazvimostyami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4775% \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0439 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Synopsys \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 1253 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u0434\u043e\u0432\u044b\u0445 \u0431\u0430\u0437 \u0438 \u043f\u0440\u0438\u0448\u043b\u0430 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u043f\u043e\u0447\u0442\u0438.","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/75-kommercheskih-prilozhenij-vklyuchayut-ustarevshij-otkrytyj-kod-s-uyazvimostyami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-14T05:42:04+00:00","article:modified_time":"2020-05-14T05:42:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"81518","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:56:25","updated":"2022-09-30 18:48:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/81518","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=81518"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/81518\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=81518"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=81518"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=81518"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}