undefined | Better HN

0 pointsxorcist3y ago0 comments

The weird bit is that quality control is so completely out of the question that it's not even mentioned, but authentication is seen as more important than anything else. I wonder how accurate that threat model really is.

I mean, node-ipc would have happened regardless of how many authentication factors were involved in uploading. And offers to buy ownership will keep coming. What happened to Sourceforge wasn't lack of security.

Turns out those distribution people did more than just wrap software in other formats. Turns out that multi stakeholder thing had merit. Who would have thought?

0 comments

2 comments · 1 top-level

woodruffw3y ago· 1 in thread

Quality control isn't out of the question, per se: it's part of a different threat model. The goal behind 2FA is to limit the latent threat of account takeover attempts, which increases as packages' criticality does.

Quality control belongs more closely to the "integrity" category of threats, which is much broader in scope than account takeover. It's something that we're thinking about as part of designing additional security schemes for PyPI; you can follow some of that work under the PEP 480 and PEP 458 umbrellas.

xorcistOP3y ago

You are likely completely right. It's just that tiny detail that there's an elephant in the room.

j / k navigate · click thread line to collapse