News for hackers. Stuff that matters.
Re:Typosquatting programming language package managers by zardeh on Wednesday June 08, 2016 @06:38PM (#11866249)
Perfect, if each of those 10K hosts downloads the library 100 times you can now typo-attack the zope.event (working in python) library, which gets ~100 downloads per day, many of which are automated and so invulnerable to your attack. Your attack vector gets you, we'll say 1 new hit every 2 days at most, and likely only one a week or so (according to some math, on `requst` vs. requests)

There are no comments on this comment yet.