News for hackers. Stuff that matters.
Re:Malicious PyPI packages stealing credit cards and injecti... by fortran77 on Tuesday August 03, 2021 @09:31AM (#28048912)
It's nice to have a build machine that can complete a build when it's disconnected from the Internet
Re:Malicious PyPI packages stealing credit cards and injecti... by kawsper on Tuesday August 03, 2021 @09:32AM (#28048929)
How often does that happen?
Re:Malicious PyPI packages stealing credit cards and injecti... by oauea on Tuesday August 03, 2021 @09:42AM (#28049043)
Re:Malicious PyPI packages stealing credit cards and injecti... by jrockway on Tuesday August 03, 2021 @09:56AM (#28049214)
Docker Hub also has rate limits and outages, so yet another thing you want to cache if you promise customers "we'll install our software in your Kubernetes cluster in 15 minutes 99.95% of the time".
Re:Malicious PyPI packages stealing credit cards and injecti... by kawsper on Wednesday August 04, 2021 @07:52AM (#28059891)
I don't see how any of those are build machines that are offline.
Re:Malicious PyPI packages stealing credit cards and injecti... by oauea on Wednesday August 04, 2021 @09:50AM (#28060972)
Build machines generally want to be 'online' so they can connect to the internet. They want to connect to the internet so they can access services hosted on the internet. Many of those services use Cloudflare, Akamari or Github. If any of those are down, those services are down. Now it's great that your build machine is online, but the packages it's trying to fetch won't be available because their CDN is offline.

Now if only you had a local caching proxy.

Re:Malicious PyPI packages stealing credit cards and injecti... by 83457 on Tuesday August 03, 2021 @09:40AM (#28049016)
Sometimes I use an air gapped test lab. Setup of certain software and projects is a real pain. Sounds like this approach could help.
Re:Malicious PyPI packages stealing credit cards and injecti... by ex_amazon_sde on Tuesday August 03, 2021 @11:24AM (#28050278)
It's standard practice in many large companies.