{"id":100611,"date":"2021-06-27T10:23:04","date_gmt":"2021-06-27T08:23:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/79-vstroennyh-v-kod-storonnih-bibliotek-nikogda-ne-obnovlyayutsya"},"modified":"2021-06-27T10:23:04","modified_gmt":"2021-06-27T08:23:04","slug":"79-vstroennyh-v-kod-storonnih-bibliotek-nikogda-ne-obnovlyayutsya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/79-vstroennyh-v-kod-storonnih-bibliotek-nikogda-ne-obnovlyayutsya","title":{"rendered":"79% din bibliotecile externe \u00eencorporate \u00een cod nu sunt niciodat\u0103 actualizate.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Veracode a publicat rezultatele unei cercet\u0103ri asupra problemelor de securitate cauzate de integrarea bibliotecilor open source \u00een aplica\u021bii (\u00een loc de legarea dinamic\u0103, multe companii copiaz\u0103 pur \u0219i simplu bibliotecile necesare \u00een proiectele lor). Ca rezultat al scan\u0103rii a 86 de mii de repository-uri \u0219i a unui sondaj realizat pe aproximativ dou\u0103 mii de dezvoltatori, s-a constatat c\u0103 79% din bibliotecile externe incluse \u00een codul proiectelor nu sunt niciodat\u0103 actualizate ulterior. <\/p>\n

\u00cen acela\u0219i timp, codul \u00eenvechit al bibliotecilor devine cauza problemelor de securitate, care \u00een 92% din cazuri pot fi evitate printr-o simpl\u0103 actualizare a codului bibliotecii. Scuzele conform c\u0103rora actualizarea bibliotecilor nu se efectueaz\u0103 din cauza posibilelor probleme de compatibilitate sunt, \u00een majoritatea cazurilor, nefondate, deoarece \u00een 69% din cazuri vulnerabilit\u0103\u021bile au fost remediate \u00een versiunile corective, f\u0103r\u0103 a modifica func\u021bionalitatea. <\/p>\n

Influen\u021ba este, de asemenea, determinat\u0103 de informarea dezvoltatorilor cu privire la apari\u021bia vulnerabilit\u0103\u021bilor \u2014 \u00een cazul \u00een care dezvoltatorii au fost anun\u021ba\u021bi despre problem\u0103 \u00een bibliotec\u0103, \u00een 17% din cazuri problema a fost rezolvat\u0103 \u00eentr-o or\u0103, iar \u00een 25% \u2014 \u00eentr-o s\u0103pt\u0103m\u00e2n\u0103. C\u00e2nd exist\u0103 informa\u021bii despre modul \u00een care vulnerabilitatea din bibliotec\u0103 poate duce la compromiterea aplica\u021biei, \u00een 50% din cazuri, corectarea a fost lansat\u0103 \u00eentr-o perioad\u0103 de trei s\u0103pt\u0103m\u00e2ni, iar f\u0103r\u0103 furnizarea de informa\u021bii \u2014 eliminarea vulnerabilit\u0103\u021bii a trebuit a\u0219teptat\u0103 timp de 7 sau mai multe luni. O p\u0103trime dintre dezvoltatorii chestiona\u021bi au afirmat c\u0103, \u00een alegerea bibliotecii pentru integrare, se pune accent pe func\u021bionalitate \u0219i pe licen\u021ba codului, iar abia apoi se ia \u00een considerare securitatea. <\/p>\n

Este demn de remarcat faptul c\u0103 situa\u021bia cu verificarea licen\u021belor codului nu este mai bun\u0103 \u2014 54% dintre chestiona\u021bi au recunoscut c\u0103 nu verific\u0103 \u00eentotdeauna licen\u021ba codului bibliotecii \u00eenainte de integrarea acesteia \u00een produsul lor. Verificarea obligatorie a compatibilit\u0103\u021bii licen\u021belor este practicat\u0103 doar de 27% dintre responden\u021bi.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Veracode \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (\u0432\u043c\u0435\u0441\u0442\u043e \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043a\u043e\u043f\u0438\u0440\u0443\u044e\u0442 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043d\u0443\u0436\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438). \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f 86 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0438 \u043e\u043f\u0440\u043e\u0441\u0430 \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u0442\u044b\u0441\u044f\u0447 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043e, \u0447\u0442\u043e 79% \u043f\u0435\u0440\u0435\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044e\u0442\u0441\u044f. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100611","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4779% din bibliotecile externe incluse \u00een cod nu sunt niciodat\u0103 actualizate | ProHoster","description":"Compania Veracode a publicat rezultatele unei cercet\u0103ri asupra problemelor de securitate cauzate de integrarea bibliotecilor open source \u00een aplica\u021bii (\u00een loc de legarea dinamic\u0103, multe companii copiaz\u0103 pur \u0219i simplu bibliotecile necesare \u00een proiectele lor.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/79-vstroennyh-v-kod-storonnih-bibliotek-nikogda-ne-obnovlyayutsya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4779% \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u043e\u0434 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044e\u0442\u0441\u044f | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Veracode \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (\u0432\u043c\u0435\u0441\u0442\u043e \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043a\u043e\u043f\u0438\u0440\u0443\u044e\u0442 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u0441\u0432\u043e\u0438\u0445.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/79-vstroennyh-v-kod-storonnih-bibliotek-nikogda-ne-obnovlyayutsya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-27T08:23:04+00:00","article:modified_time":"2021-06-27T08:23:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100611","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-27 08:25:35","updated":"2022-09-30 08:04:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100611","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=100611"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100611\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=100611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=100611"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=100611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}