Iyo NPM repository inosanganisira inosungirwa maviri-chinhu kusimbiswa kwemaakaundi anochengetedza mazana mashanu anozivikanwa zvikuru NPM mapakeji. Huwandu hwemapakeji anotsamira hwakashandiswa sechiratidzo chemukurumbira. Vagadziri vemapakeji akanyorwa vanozongokwanisa kuita mashandiro ane chekuita neshanduko pane repository chete mushure mekugonesa maviri-chinhu chechokwadi, icho chinoda kusimbiswa kwekupinda uchishandisa imwe-nguva passwords (TOTP) inogadzirwa nezvikumbiro zvakaita seAuthy, Google Authenticator uye FreeOTP, kana hardware makiyi uye biometric scanners, inotsigira WebAuth protocol.
Iyi inhanho yechitatu yekusimbisa dziviriro yeNPM kubva mukukanganisa account. Danho rekutanga raisanganisira kushandura maakaundi ese eNPM asina mbiri-chinhu chechokwadi chakagoneswa kushandisa advanced account verification, izvo zvinoda kuisa kodhi yenguva imwe chete inotumirwa neemail paunenge uchiedza kupinda npmjs.com kana kuita basa rakatendeseka munpm. utility. Muchikamu chechipiri, kutenderwa kwe-two-factor authentication kwakagoneswa kune 100 inonyanya kufarirwa mapakeji.
Ngatiyeukei kuti maererano neongororo yakaitwa muna 2020, 9.27% ββchete yevagadziri vepasuru vakashandisa mbiri-chinhu chechokwadi kuchengetedza kupinda, uye mu13.37% yezviitiko, pakunyoresa maakaundi matsva, vanogadzira vakaedza kushandisa zvakare mapassword akakanganiswa aionekwa anozivikanwa. password inodonha. Munguva yekuongorora kuchengetedza password, 12% yeNPM maakaunti (13% yemapakeji) yakawanikwa nekuda kwekushandiswa kweanofungidzira uye asina mapassword akadai se "123456." Pakati pezvainetsa paiva nemaakaundi mana emushandisi kubva kuPamusoro makumi maviri anonyanya kufarirwa mapakeji, gumi nematatu maakaundi ane mapakeji akatorwa kanopfuura 4 miriyoni pamwedzi, makumi mana aine anopfuura mamirioni gumi ekurodha pamwedzi, uye makumi maviri nemasere ane anopfuura miriyoni imwe yekurodha pamwedzi. Tichifunga nezve kurodha kwemamodule pamwe neketani yekutsamira, kukanganisa kwemaakaundi asina kuvimbika kunogona kukanganisa kusvika 20% yemamodule ese muNPM.
Source: opennet.ru