4 ms·
The dependency confusion article on Medium was a great read.
by losthobbies 5y ago
The dependency confusion article on Medium was a great read.
- airstrike 5y agoIt's a really good article and apologies to the author for nitpicking but even as a bona fide Python fanboy I had to raise my eyebrows at this statement: > Some programming languages, like Python, come with an easy, more or less official method of installing dependencies for your projects.
- nawgz 5y agoI mean, have you ever used a language like Java? Python has a bad package manager story, sure, but it has a package manager story - that's not actually particularly global afaik
- remus 5y agoBeautifully simple! Exfiltrating data via a DNS request was a nice little trick too.
- deleted 5y ago[deleted]
- baobabKoodaa 5y agoIt's amazing that such a simple vulnerability can be leveraged in practice to gain access to so many machines on so many different organizations. Props to the researcher!
- btown 5y agoLink for those who went straight to comments: https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610 https://medium.com/@alex.birsan/dependency-confusion-4a5d60f...