GitHub shpalli se p\u00ebrfshirja n\u00eb repozitor\u00ebt e NPM autentifikimin me dy faktor\u00eb t\u00eb detyruesh\u00ebm p\u00ebr 100 paketat NPM, t\u00eb p\u00ebrfshira si var\u00ebsi n\u00eb numrin m\u00eb t\u00eb madh t\u00eb paketa. M\u00ebnyrat p\u00ebr t\u00eb mb\u00ebshtetur k\u00ebto paketa tani do t\u00eb mund t\u00eb realizojn\u00eb veprimet q\u00eb k\u00ebrkojn\u00eb autentifikim vet\u00ebm pas aktivizimit t\u00eb autentifikimit me dy faktor\u00eb, q\u00eb k\u00ebrkon konfirmimin e hyrjes p\u00ebrmes kodave t\u00eb p\u00ebrkohsh\u00ebm (TOTP), t\u00eb gjeneruar nga aplikacione t\u00eb tilla si Authy, Google Authenticator dhe FreeOTP. S\u00eb shpejti, p\u00ebrve\u00e7 TOTP pritet t\u00eb shtohet mund\u00ebsia e p\u00ebrdorimit t\u00eb \u00e7el\u00ebsave harduerik\u00eb dhe skaner\u00ebve biometrik\u00eb q\u00eb mb\u00ebshtesin protokollin WebAuth. <\/p>\n
M\u00eb 1 mars \u00ebsht\u00eb planifikuar kalimi i t\u00eb gjitha llogarive NPM, p\u00ebr t\u00eb cilat nuk \u00ebsht\u00eb aktivizuar autentifikimi me dy faktor\u00eb, n\u00eb p\u00ebrdorimin e verifikimit t\u00eb avancuar t\u00eb llogarive, i cili k\u00ebrkon hyrjen e nj\u00eb kodi t\u00eb p\u00ebrkohsh\u00ebm, t\u00eb d\u00ebrguar n\u00eb email gjat\u00eb p\u00ebrpjekjeve p\u00ebr t\u00eb hyr\u00eb n\u00eb faqen npmjs.com ose p\u00ebr t\u00eb kryer nj\u00eb operacion autentikimi n\u00eb utilitarin npm. Kur aktivizohet autentifikimi me dy faktor\u00eb, verifikimi i avancuar p\u00ebrmes email-it nuk aplikohet. M\u00eb 16 dhe 13 shkurt do t\u00eb ket\u00eb nj\u00eb lan\u00e7im prov\u00eb p\u00ebr nj\u00eb dit\u00eb t\u00eb verifikimit t\u00eb avancuar p\u00ebr t\u00eb gjitha llogarit\u00eb. <\/p>\n
T\u00eb kujtojm\u00eb se sipas nj\u00eb studimi t\u00eb realizuar n\u00eb vitin 2020, vet\u00ebm 9.27% e mbajt\u00ebsve t\u00eb paketave p\u00ebrdornin autentifikimin me dy faktor\u00eb p\u00ebr t\u00eb mbrojtur aksesin, nd\u00ebrsa n\u00eb 13.37% t\u00eb rasteve, gjat\u00eb regjistrimit t\u00eb llogarive t\u00eb reja, zhvilluesit p\u00ebrpiqeshin t\u00eb riciklonin fjal\u00ebkalimet e komprometuara, t\u00eb p\u00ebrfshira n\u00eb rrjedhjet e njohura t\u00eb fjal\u00ebkalimeve. Gjat\u00eb verifikimit t\u00eb siguris\u00eb s\u00eb fjal\u00ebkalimeve t\u00eb p\u00ebrdorura, u arrit t\u00eb p\u00ebrcaktohej nj\u00eb akses n\u00eb 12% t\u00eb llogarive n\u00eb NPM (13% t\u00eb paketave) p\u00ebr shkak t\u00eb p\u00ebrdorimit t\u00eb fjal\u00ebkalimeve t\u00eb parashikueshme dhe triviale, si «123456». Nga problemet, u regjistruan 4 llogari p\u00ebrdoruesish nga Top20 paketat m\u00eb t\u00eb njohura, 13 llogari, paketat e t\u00eb cilave shkarkoheshin m\u00eb shum\u00eb se 50 milion her\u00eb n\u00eb muaj, 40 - m\u00eb shum\u00eb se 10 milion shkarkime n\u00eb muaj dhe 282 me m\u00eb shum\u00eb se 1 milion shkarkime n\u00eb muaj. Duke marr\u00eb parasysh shkarkimin e moduleve p\u00ebrmes var\u00ebsive, komprometimi i llogarive t\u00eb pasigurta mund t\u00eb kishte goditur deri n\u00eb 52% t\u00eb t\u00eb gjitha moduleve n\u00eb NPM. GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f 100 NPM-\u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u0430\u043a \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0421\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043e\u0442\u043d\u044b\u043d\u0435 \u0441\u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0441 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 (TOTP), \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0442\u0430\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u0430\u043a Authy, Google Authenticator \u0438 FreeOTP. \u0412 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103184","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47N\u00eb NPM \u00ebsht\u00eb aktivizuar verifikimi i dyfisht\u00eb i detyruesh\u00ebm p\u00ebr 100 paketat m\u00eb t\u00eb njohura | ProHoster","description":"GitHub ka shpall se do t\u00eb b\u00ebhet e detyrueshme autentikimi me dy faktor\u00eb p\u00ebr 100 paketat NPM q\u00eb jan\u00eb p\u00ebrfshir\u00eb si var\u00ebsi n\u00eb numrin m\u00eb t\u00eb madh t\u00eb paketimeve.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/v-npm-vklyuchena-obyazatelnaya-dvuhfaktornaya-autentifikacziya-dlya-100-samyh-populyarnyh-paketov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 NPM \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u043b\u044f 100 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 | ProHoster","og:description":"GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 NPM \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f 100 NPM-\u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u0430\u043a \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u043f\u0430\u043a\u0435\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/v-npm-vklyuchena-obyazatelnaya-dvuhfaktornaya-autentifikacziya-dlya-100-samyh-populyarnyh-paketov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-02-03T13:36:52+00:00","article:modified_time":"2022-02-03T13:36:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103184","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-02-03 13:38:01","updated":"2022-10-08 08:35:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/103184","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=103184"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/103184\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=103184"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=103184"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=103184"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"