louislang

11 ms·

61.
We Can Cure Disease by Editing a Person’s DNA. Why Aren’t We?(nytimes.com)
2 points by louislang 4y ago|0 comments
62.
by louislang 4y ago
(Disclaimer: I'm one of the co-founders at Phylum) Our system has been alerting us to this actor's activities all morning (beginning sometime last night). They have been wildly active, and have continued to publish packages as we&
63.
Ransomware Python Packages Currently Being Published to PyPI(blog.phylum.io)
7 points by louislang 4y ago|3 comments
64.
by louislang 4y ago
I’m the guy that opened that issue. To be clear, I’m NOT affiliated with datadog. I am co-founder of a software supply chain company https://phylum.io . We scan all the open source packages as they’re published, and got a hit for
65.
Disrupting a PyPI Software Supply Chain Threat Actor(blog.phylum.io)
5 points by louislang 4y ago|0 comments
66.
The Shrinking Future of College(vox.com)
44 points by louislang 4y ago|21 comments
67.
ATM/Kiosk Hacking(boschko.ca)
1 points by louislang 4y ago|0 comments
68.
by louislang 4y ago
That's fair, thanks for the feedback!
69.
by louislang 4y ago
That’s a different, unrelated campaign!
70.
by louislang 4y ago
Absolutely don't disagree with this sentiment. The fact of the matter is the attackers only have to be "right" once. Whereas the rest of us have to be right hundreds or thousands of times. If it's a numbers game, the odd
71.
by louislang 4y ago
no problem, happy to chat whenever!
72.
by louislang 4y ago
This is wonderfully absurd in the best sort of way
73.
by louislang 4y ago
Oh I meant malware generating addresses that look directionally similar to the address the user expects (as opposed to a random address that's hardcoded). I'm not sure if this is a thing, or just conjecture from others.
74.
by louislang 4y ago
Working on it! https://github.com/phylum-dev/birdcage Allows you to specify the allowed permissions in a toml file. Still a wip, but would love some feedback!
75.
by louislang 4y ago
> Securing the ecosystem is going to be serious work Oh it _absolutely_ is! We're working extremely hard here and I think we're making great strides. More hard work to come, but I think it's absolutely worth the effort!
76.
by louislang 4y ago
We haven't seen this particular sort of thing just yet in packages. There was a similar attack from a few years ago called "pastejacking" that did something directionally similar to what you're suggesting though!
77.
by louislang 4y ago
This would be an incredibly useful feature, I think. It was part of the motivation for our sandbox, honestly. It should mostly operate as a pass through the the various package managers - but with some extra security checks. In this way a `
78.
by louislang 4y ago
We are basically ingesting and analyzing every package as it gets published to the various ecosystems (currently NPM, PyPI, Rubygems, Maven and Nuget; Go and Crates support landing in beta soon). This is currently offered as a SaaS solution
79.
by louislang 4y ago
There was some discussion of this over on Reddit. I didn't see evidence of it, but the claim was that this had already happened. I'd be curious if someone had some examples of it in the wild.
80.
by louislang 4y ago
We're trying to stay on top of this as much as possible. I'm hoping if we can be quick to report, the attackers will have wasted a bunch of effort on this campaign and not see a dime.
81.
by louislang 4y ago
Awesome seeing this posted! Full disclosure: I'm a co-founder at Phylum. This campaign is ongoing. Our system just notified us of two more packages, which have been reported to PyPI. I expect this list to continue to grow throughout th
82.
Ghidra 10.2 Released(github.com)
2 points by louislang 4y ago|0 comments
83.
CVE-2022-33679 Windows Kerberos Elevation of Privilege(github.com)
1 points by louislang 4y ago|0 comments
84.
The Android Malware’s Journey: From Google Play to Banking Fraud(cleafy.com)
2 points by louislang 4y ago|0 comments
85.
by louislang 4y ago
Containers aren't great security boundaries. To get the safety you'd really need, you should absolutely use a VM.
86.
by louislang 4y ago
Oh absolutely. Unless everyone wants to be cool and stop publishing malware, gotta take a defense in depth approach here.
87.
by louislang 4y ago
Hashing solves one side of the coin. Namely, whether or not you got the thing you expected (or perhaps, got the thing you expected from the individual you expected it to come from). On the other side, we have to contend with the fact that m
88.
by louislang 4y ago
This is really cool work! Also a fan of Grapl.
89.
by louislang 4y ago
Phylum's extension framework is built on Deno for this exact reason. The ability to provide granular permissions was something we were really interested in. Deno is a really cool project, imo.
90.
by louislang 4y ago
This is one of the projects we're working on (and open sourcing)! Currently allows you to specify allowed resources during the package installation in a way very similar to what you've outlined [1]. The sandbox itself lives here [

More ›