flâneur

Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies

medium.com · 2,436 words · saved by 1 readers

The Story of a Novel Supply Chain Attack

Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies The Story of a Novel Supply Chain Attack Alex Birsan 11 min read · Feb 9, 2021 -- 57 Listen Share Press enter or click to view image in full size Ever since I started learning how to code, I have been fascinated by the level of trust we put in a simple command like this one: pip install package_name Some programming languages, like Python, come with an easy, more or less official method of installing dependencies for your projects. These installers are usually tied to public code repositories where anyone ca

saved by

related reading