Malicious software libraries found in PyPI posing as well known libraries

Re:Malicious software libraries found in PyPI posing as well... by jsty on Friday September 15, 2017 @12:59PM (#15258703)

> I can't think of a good reason why code in any well-behaved application should be allowed to make random outbound network calls

If your application implements webhooks, then there's a valid use case? I'm in complete agreement however that you should default to deny and open up as required.

[ Parent | on HN ]

Re:Malicious software libraries found in PyPI posing as well... by hathawsh on Friday September 15, 2017 @01:38PM (#15259080)

For security, you should call outbound webhooks using a server dedicated to that purpose, where the main server and webhook caller are connected through an async message passing system such as RabbitMQ. That way you can maintain strict firewall rules on the main server.

[ Parent | on HN ]

Re:Malicious software libraries found in PyPI posing as well... by anthony_barker on Friday September 15, 2017 @02:32PM (#15259503)

Aws Sqs write only queue for external facing servers is what we do. What worries me is not servers... It's admin/Dev machines...

[ Parent | on HN ]