Malicious Python Packages Replace Crypto Addresses in Developer Clipboards

Re:Malicious Python Packages Replace Crypto Addresses in Dev... by lifeisstillgood on Monday November 07, 2022 @04:42PM (#33512940)

At some point we need to give up on "everyone can run their home security better than the CIA room Tom Cruise abseiled into".

If every time I wanted to pay for a coffee I was risking losing all my savings, then I (and millions of others) would go back to cash

I am not sure where that leaves us for "digital native cash". Perhaps phones and secure enclaves will save us, perhaps we just have to pay the Visa tax.

[ Parent | on HN ]

Re:Malicious Python Packages Replace Crypto Addresses in Dev... by louislang on Monday November 07, 2022 @04:45PM (#33512989)

Absolutely don't disagree with this sentiment. The fact of the matter is the attackers only have to be "right" once. Whereas the rest of us have to be right hundreds or thousands of times. If it's a numbers game, the odds are definitely in favor of the attackers.

Cryptocurrency aside, it definitely looks like these attacks are ramping up and we - the developers with access to critical infrastructure - are the primary targets. Today its crypto, tomorrow it's SSH keys.

It's both worrisome and tremendously annoying.

[ Parent | on HN ]

Re:Malicious Python Packages Replace Crypto Addresses in Dev... by lifeisstillgood on Monday November 07, 2022 @05:51PM (#33513669)

Yeah that point about SSH keys just worried me.

The keys to pretty much every online kingdom are only 2048 bits long and once the methods to exfiltrate crypto have been honed it's worth looking at ways to weaponise the others.

[ Parent | on HN ]