Skip to main content

防御供应链投毒“最小发布时长”（Minimum Release Age） 是应对软件供应链攻击的一种简单且被低估的防御手段

  1. OKHK 👀
    新电脑 brew install node 之后，一个小设置可以提升对供应链投毒的防御 vi ~/.npmrc 然后在里面加入这行： min-release-age=7 #TIL https://www.v2ex.com/t/1206416
    防御供应链投毒
    “最小发布时长”（Minimum Release Age） 是应对软件供应链攻击的一种简单且被低估的防御手段。

    https://daniakash.com/posts/simplest-supply-chain-defense/
    Daniakash
    Minimum Release Age is an Underrated Supply Chain Defense | Dani Akash
    Minimum Release Age is an Underrated Supply Chain Defense | Dani Akash
    A 7-day package delay would have blocked installs in most short-lived malicious publish attacks from the last 8 years
OKHK