{"id":115126,"date":"2024-04-17T14:30:08","date_gmt":"2024-04-17T12:30:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/popytki-polucheniya-kontrolya-nad-otkrytymi-proektami-pohozhie-na-sluchaj-s-paketom-xz"},"modified":"2024-04-17T14:30:08","modified_gmt":"2024-04-17T12:30:08","slug":"popytki-polucheniya-kontrolya-nad-otkrytymi-proektami-pohozhie-na-sluchaj-s-paketom-xz","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/popytki-polucheniya-kontrolya-nad-otkrytymi-proektami-pohozhie-na-sluchaj-s-paketom-xz","title":{"rendered":"P\u00ebrpjekjet p\u00ebr t\u00eb marr\u00eb kontroll mbi projektet e hapura, t\u00eb ngjashme me rastin e paket\u00ebs xz.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Organizata OpenSSF (Open Source Security Foundation), e krijuar n\u00ebn mb\u00ebshtetje t\u00eb Linux Foundation p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar sigurin\u00eb e softuerit t\u00eb hapur, njoftoi komunitetin p\u00ebr identifikimin e aktiviteteve t\u00eb lidhura me p\u00ebrpjekjet p\u00ebr t\u00eb marr\u00eb kontrollin mbi projekte t\u00eb njohura t\u00eb hapura, t\u00eb ngjashme me stilin e veprimit t\u00eb haker\u00ebve gjat\u00eb p\u00ebrgatitjes p\u00ebr vendosjen e nj\u00eb backdoor n\u00eb projektin xz. N\u00eb nj\u00eb ngjarje t\u00eb ngjashme me sulmin ndaj xz, individ\u00eb me dyshime, q\u00eb m\u00eb par\u00eb nuk ishin thell\u00ebsisht t\u00eb involvuar n\u00eb zhvillim, p\u00ebrpiqeshin t\u00eb p\u00ebrdorin metoda t\u00eb ingjinieris\u00eb sociale p\u00ebr t\u00eb arritur objektivat e tyre. <\/p>\n
Sulmuesit hyn\u00eb n\u00eb nj\u00eb komunikim me an\u00ebtar\u00ebt e bordit drejtues t\u00eb organizat\u00ebs OpenJS Foundation, e cila funksionon si nj\u00eb platform\u00eb neutrale p\u00ebr zhvillimin e p\u00ebrbashk\u00ebt t\u00eb projekteve t\u00eb hapura t\u00eb JavaScript, si Node.js, jQuery, Appium, Dojo, PEP, Mocha dhe webpack. N\u00eb k\u00ebt\u00eb komunikim, i cili p\u00ebrfshinte disa zhvillues t\u00eb jasht\u00ebm me nj\u00eb histori t\u00eb dyshimt\u00eb zhvillimi t\u00eb softuerit t\u00eb hapur, u b\u00ebn\u00eb p\u00ebrpjekje p\u00ebr t\u00eb bindur drejtimin p\u00ebr domosdoshm\u00ebrin\u00eb e azhurnimit t\u00eb nj\u00eb prej projekteve m\u00eb t\u00eb njohura t\u00eb JavaScript, q\u00eb menaxhohet nga organizata OpenJS. <\/p>\n
Si arsye p\u00ebr p\u00ebrdit\u00ebsimin u caktua ne nevoj\u00ebn p\u00ebr t\u00eb shtuar \"mbrojtje nga \u00e7do dob\u00ebsi kritike\". Megjithat\u00eb, nuk u dhan\u00eb detaje p\u00ebr natyr\u00ebn e dob\u00ebsive. P\u00ebr t\u00eb realizuar ndryshimet, nj\u00eb zhvillues i dyshimt\u00eb propozi q\u00eb t\u00eb p\u00ebrfshihej n\u00eb grupin q\u00eb mbik\u00ebqyr projektin, n\u00eb t\u00eb cilin ai ka marr\u00eb pjes\u00eb vet\u00ebm n\u00eb m\u00ebnyr\u00eb t\u00eb vog\u00ebl m\u00eb par\u00eb. P\u00ebr m\u00eb tep\u00ebr, skenar\u00eb t\u00eb ngjash\u00ebm t\u00eb dyshimt\u00eb p\u00ebr t\u00eb imponuar kodin e tij jan\u00eb zbuluar n\u00eb dy projekte t\u00eb njohura t\u00eb JavaScript, t\u00eb pa lidhura me organizat\u00ebn OpenJS. Supozohet se k\u00ebto raste nuk jan\u00eb t\u00eb vetme dhe ata q\u00eb mbik\u00ebqyrin projektet e hapura duhet t\u00eb mos humbasin vigjilenc\u00ebn gjat\u00eb pranimit t\u00eb kodit dhe miratimit t\u00eb zhvilluesve t\u00eb rinj. <\/p>\n
Mes shenjash q\u00eb mund t\u00eb tregojn\u00eb p\u00ebr aktivitet t\u00eb keqdash\u00ebs, p\u00ebrmendet nj\u00eb sjellje miq\u00ebsore, por n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb agresive dhe ngulmuese, nga an\u00ebtar\u00eb t\u00eb panjohur t\u00eb komunitetit q\u00eb i drejtohen ose udh\u00ebheq\u00ebsve t\u00eb projekteve me iden\u00eb e promovimit t\u00eb kodit t\u00eb tyre ose ofrimit t\u00eb statusit si mb\u00ebshtet\u00ebs. Duhet gjithashtu t\u00eb vihet re shfaqja e nj\u00eb grupi mb\u00ebshtet\u00ebs rreth ideve t\u00eb promovuara, i formuar nga persona t\u00eb rrem\u00eb, q\u00eb nuk kan\u00eb marr\u00eb pjes\u00eb m\u00eb par\u00eb n\u00eb zhvillim ose jan\u00eb bashkuar s\u00eb recenti me komunitetin. <\/p>\n
Kur ndryshimet b\u00ebhen, duhet t\u00eb merren si shenja t\u00eb veprimeve potencialisht t\u00eb d\u00ebmshme, p\u00ebrpjekjeve p\u00ebr t\u00eb p\u00ebrfshir\u00eb t\u00eb dh\u00ebna binar\u00eb n\u00eb k\u00ebrkesat p\u00ebr bashkimin (p\u00ebr shembull, nj\u00eb backdoor n\u00eb xz u d\u00ebrgua n\u00eb arkiva p\u00ebr testimin e dekompresorit) ose kodit t\u00eb mb\u00ebshtjell\u00eb ose t\u00eb v\u00ebshtir\u00eb p\u00ebr t'u kuptuar. Duhet t'i kushtohet v\u00ebmendje p\u00ebrpjekjeve provuese p\u00ebr t\u00eb b\u00ebr\u00eb ndryshime q\u00eb paksojn\u00eb sigurin\u00eb, t\u00eb d\u00ebrguara p\u00ebr t\u00eb vler\u00ebsuar reagimin e komunitetit dhe p\u00ebr t\u00eb kontrolluar n\u00ebse ka individ\u00eb q\u00eb ndjekin ndryshimet (p\u00ebr shembull, n\u00eb xz funksioni Safe_fprintf u z\u00ebvend\u00ebsua me fprintf). Po ashtu, duhet t\u00eb ngjall\u00eb dyshime ndryshimet e pazakonta n\u00eb metodat e kompilimit, nd\u00ebrtimit dhe dislokimit t\u00eb projektit, angazhimi i artefakteve t\u00eb jashtme dhe krijimi i ndjenj\u00ebs s\u00eb nevoj\u00ebs urgjente p\u00ebr pranimin e ndryshimeve. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"