From 609b477090955554cb83aedc1edfafecbec634e9 Mon Sep 17 00:00:00 2001 From: lkxed Date: Tue, 26 Apr 2022 09:27:27 +0800 Subject: [PATCH] =?UTF-8?q?=E5=88=A0=E9=99=A4=E8=BF=87=E6=97=B6=E6=96=B0?= =?UTF-8?q?=E9=97=BB?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- ...alizes Own Code In Anti-Russian Protest.md | 45 ------------------- 1 file changed, 45 deletions(-) delete mode 100644 sources/news/20220422 Open Source Software maintainer Vandalizes Own Code In Anti-Russian Protest.md diff --git a/sources/news/20220422 Open Source Software maintainer Vandalizes Own Code In Anti-Russian Protest.md b/sources/news/20220422 Open Source Software maintainer Vandalizes Own Code In Anti-Russian Protest.md deleted file mode 100644 index ca79634535..0000000000 --- a/sources/news/20220422 Open Source Software maintainer Vandalizes Own Code In Anti-Russian Protest.md +++ /dev/null @@ -1,45 +0,0 @@ -[#]: subject: "Open Source Software maintainer Vandalizes Own Code In Anti-Russian Protest" -[#]: via: "https://www.opensourceforu.com/2022/04/open-source-software-maintainer-vandalizes-own-code-in-anti-russian-protest/" -[#]: author: "Laveesh Kocher https://www.opensourceforu.com/author/laveesh-kocher/" -[#]: collector: "lkxed" -[#]: translator: " " -[#]: reviewer: " " -[#]: publisher: " " -[#]: url: " " - -Open Source Software maintainer Vandalizes Own Code In Anti-Russian Protest -====== -![swam][1] - -An open source piece of software has been hacked and modified to delete data from PCs. What’s interesting about this scenario is that the saboteur was the code’s creator. In this case, the developer, a Russian, appears to have committed cyber-vandalism as a kind of retaliation against his own country as a result of the Ukraine conflict. The consequences, on the other hand, go beyond national lines. - -The node-ipc package, which is part of the npm java package management for the JavaScript programming language, appears to have been purposefully damaged by the open source software package maintainer. - -The example shows the dangers that come with various types of Free Open Source Software, and why organisations should be cautious about the software they use. Sally Vincent, Senior Threat Research Engineer at LogRhythm, is investigating this odd instance for Digital Journal. - -There are certain lessons to be learned from this situation, according to Vincent: “The inclusion of “protestware” in the open-source node-ipc module serves as reminder to all organizations that use of open-source software comes with security risks.” - -The following factors, according to Vincent, are constantly in play: - -– Organizations should have open-source software governance policies in place, as well as monitoring policies for updates from open-source repositories. - -– Developers should be aware of the security concerns associated with incorporating open-source repositories into their work. - -– Any project that relies on open-source repositories should always double-check its source code to ensure dangerous code isn’t hidden therein. - -Vincent warns that the potential for repeating this event is pretty simple, noting: “This incident shows how easily malicious code can be introduced to an open-source project.” This is irrespective as to the motivations for doing so, as Vincent states: “It’s notable for the fact that the person who introduced it claims that it is part of a peaceful protest.” She adds: “Regardless of intent, the code is a potentially very harmful. Any projects that use node-ipc should be immediately checked to make sure they not on a malicious source code thread.” - --------------------------------------------------------------------------------- - -via: https://www.opensourceforu.com/2022/04/open-source-software-maintainer-vandalizes-own-code-in-anti-russian-protest/ - -作者：[Laveesh Kocher][a] -选题：[lkxed][b] -译者：[译者ID](https://github.com/译者ID) -校对：[校对者ID](https://github.com/校对者ID) - -本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出 - -[a]: https://www.opensourceforu.com/author/laveesh-kocher/ -[b]: https://github.com/lkxed -[1]: https://www.opensourceforu.com/wp-content/uploads/2022/04/swam-696x348.jpg