{"id":112660,"date":"2024-01-02T09:10:17","date_gmt":"2024-01-02T07:10:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/katalog-pypi-pereshyol-na-obyazatelnuyu-dvuhfaktornuyu-autentifikacziyu"},"modified":"2024-01-02T09:10:17","modified_gmt":"2024-01-02T07:10:17","slug":"katalog-pypi-pereshyol-na-obyazatelnuyu-dvuhfaktornuyu-autentifikacziyu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/katalog-pypi-pereshyol-na-obyazatelnuyu-dvuhfaktornuyu-autentifikacziyu","title":{"rendered":"Katalogu PyPI ka kaluar n\u00eb autentifikimin dy-faktor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Zhvilluesit e repository-t t\u00eb paketave Python, PyPI (Python Package Index), shpall\u00ebn zbatimin e autentifikimit me dy faktor\u00eb p\u00ebr t\u00eb gjith\u00eb p\u00ebrdoruesit. Pa aktivizimin e autentifikimit me dy faktor\u00eb, p\u00ebrdoruesi tani nuk do t\u00eb mund t\u00eb ngarkoj\u00eb skedar\u00eb dhe t\u00eb kryej\u00eb veprime t\u00eb lidhura me menaxhimin e projektit t\u00eb tij. M\u00eb par\u00eb, autentifikimi me dy faktor\u00eb ishte aktivizuar detyrimisht p\u00ebr llogarit\u00eb e p\u00ebrdoruesve q\u00eb mb\u00ebshtesin t\u00eb pakt\u00ebn nj\u00eb projekt ose q\u00eb jan\u00eb pjes\u00eb e paketeve t\u00eb organizat\u00ebs. <\/p>\n
P\u00ebrdorimi i autentifikimit me dy faktor\u00eb do t\u00eb forcoj\u00eb mbrojtjen e procesit t\u00eb zhvillimit dhe do t\u00eb siguroj\u00eb projektet nga ndryshimet e d\u00ebmshme t\u00eb shkaktuara nga rrjedhja e kredencialeve, p\u00ebrdorimi i t\u00eb nj\u00ebjtit fjal\u00ebkalim n\u00eb nj\u00eb faqe t\u00eb komprometuar, thyerjet e sistemit lokal t\u00eb zhvilluesit ose p\u00ebrdorimi i teknikave t\u00eb inxhinieris\u00eb sociale. Qasja e keqb\u00ebrsve n\u00ebp\u00ebrmjet kapjes s\u00eb llogarive \u00ebsht\u00eb nj\u00eb nga k\u00ebrc\u00ebnimet m\u00eb t\u00eb rrezikshme, sepse n\u00eb rast t\u00eb nj\u00eb sulmi t\u00eb suksessh\u00ebm mund t\u00eb realizohen ndryshime t\u00eb d\u00ebmshme n\u00eb produkte e tjera dhe biblioteka q\u00eb p\u00ebrdorin paket\u00ebn e komprometuar si var\u00ebsi. <\/p>\n
Si m\u00ebnyr\u00eb e preferuar p\u00ebr autentifikimin me dy faktor\u00eb, \u00ebsht\u00eb deklaruar skema bazuar n\u00eb token\u00ebt harduerik\u00eb t\u00eb p\u00ebrputhsh\u00ebm me specifikimin FIDO U2F dhe protokollin WebAuthn, i cili siguron nj\u00eb nivel m\u00eb t\u00eb lart\u00eb sigurie n\u00eb krahasim me gjenerimin e fjal\u00ebkalimeve t\u00eb p\u00ebrkohshme. P\u00ebrve\u00e7 token\u00ebve, mund t\u00eb p\u00ebrdoren edhe aplikacione autentikimi t\u00eb bazuara n\u00eb fjal\u00ebkalime t\u00eb p\u00ebrkohshme q\u00eb mb\u00ebshtesin protokollin TOTP, si\u00e7 jan\u00eb Authy, Google Authenticator dhe FreeOTP. Gjat\u00eb shkarkimit t\u00eb paketave, zhvilluesve u rekomandohet gjithashtu t\u00eb kalojn\u00eb n\u00eb p\u00ebrdorimin e metod\u00ebs s\u00eb autentikimit 'Trusted Publishers' t\u00eb bazuar n\u00eb standardin OpenID Connect (OIDC) ose t\u00eb aplikojn\u00eb token\u00ebt API. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"