NPM imaphatikizanso kutsimikizika kwazinthu ziwiri pamaphukusi apamwamba 500

Malo osungira a NPM akuphatikiza kutsimikizika kwazinthu ziwiri kumaakaunti omwe amasunga mapaketi 500 otchuka a NPM. Chiwerengero cha phukusi lodalira chinagwiritsidwa ntchito ngati muyeso wodziwika. Osamalira maphukusi omwe atchulidwa adzatha kuchita ntchito zokhudzana ndi kusinthidwa pamalo osungiramo pokhapokha atathandizira kutsimikizika kwazinthu ziwiri, zomwe zimafuna kutsimikiziridwa kolowera pogwiritsa ntchito mawu achinsinsi a nthawi imodzi (TOTP) opangidwa ndi mapulogalamu monga Authy, Google Authenticator ndi FreeOTP, kapena makiyi a hardware ndi ma scanner a biometric, akuthandizira protocol ya WebAuth.

Ili ndi gawo lachitatu lolimbitsa chitetezo cha NPM ku kusokoneza akaunti. Gawo loyamba lidakhudza kutembenuza maakaunti onse a NPM omwe alibe kutsimikizika kwazinthu ziwiri zomwe zimaloledwa kugwiritsa ntchito kutsimikizira kwaakaunti yapamwamba, zomwe zimafunikira kuyika nambala yanthawi imodzi yotumizidwa ndi imelo poyesa kulowa npmjs.com kapena kuchita ntchito yotsimikizika mu npm. zothandiza. Mu gawo lachiwiri, kutsimikizika kwazinthu ziwiri kovomerezeka kudathandizidwa pamaphukusi 100 otchuka kwambiri.

Tikumbukire kuti malinga ndi kafukufuku yemwe adachitika mu 2020, 9.27% ​​yokha ya omwe amasunga phukusi adagwiritsa ntchito kutsimikizika kwazinthu ziwiri kuti ateteze mwayi, ndipo mu 13.37% yamilandu, polembetsa maakaunti atsopano, opanga adayesa kugwiritsanso ntchito mapasiwedi osokonekera omwe adadziwika. kutayikira kwachinsinsi. Pakuwunika kwachitetezo chachinsinsi, 12% ya maakaunti a NPM (13% yamaphukusi) adafikiridwa chifukwa chogwiritsa ntchito mawu achinsinsi odziwika bwino monga "123456." Zina mwazovuta zinali maakaunti 4 a ogwiritsa ntchito pamapaketi 20 otchuka kwambiri, maakaunti 13 okhala ndi mapaketi amatsitsidwa nthawi zopitilira 50 miliyoni pamwezi, 40 ndikutsitsa kopitilira 10 miliyoni pamwezi, ndi 282 ndikutsitsa kopitilira 1 miliyoni pamwezi. Poganizira kutsitsa kwa ma module motsatira unyinji wodalira, kunyengerera kwa maakaunti osadalirika kumatha kukhudza mpaka 52% ya ma module onse mu NPM.

Source: opennet.ru