Beefy Boxes and Bandwidth Generously Provided by pair Networks
Think about Loose Coupling
 
PerlMonks  

Re^2: (OT) Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies

by Corion (Patriarch)
on Mar 07, 2021 at 11:42 UTC ( #11129254=note: print w/replies, xml ) Need Help??


in reply to Re: (OT) Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies
in thread (OT) Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies

The simple approach is to run your own CPAN mirror and only import modules there that you have previously vetted.

Randomly pulling down packages from the internet is not a good strategy, no matter what assurances CPAN provides.

  • Comment on Re^2: (OT) Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies

Replies are listed 'Best First'.
Re^3: (OT) Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies
by LanX (Sage) on Mar 07, 2021 at 11:45 UTC
    Managing this reliably in a mid-sized team is already hard, even more in a company.

    Using a naming convention/namespace for internal stuff can't be wrong.

    Cheers Rolf
    (addicted to the Perl Programming Language :)
    Wikisyntax for the Monastery

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://11129254]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others browsing the Monastery: (4)
As of 2022-01-25 08:30 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?
    In 2022, my preferred method to securely store passwords is:












    Results (65 votes). Check out past polls.

    Notices?