hacks – Devstyler.io https://devstyler.io News for developers from tech to lifestyle Mon, 07 Feb 2022 09:09:30 +0000 en-US hourly 1 https://wordpress.org/?v=6.5.2 Hackers linked to China are suspected in the News Corp Hacker Attack https://devstyler.io/blog/2022/02/07/hackers-linked-to-china-are-suspected-in-the-news-corp-hacker-attack/ Mon, 07 Feb 2022 09:09:30 +0000 https://devstyler.io/?p=80586 ...]]> A company filing reported that hackers with suspected links to China targeted News Corp’s third-party technology suppliers. 

News Corp said that the hack has accessed their emails and documents of journalists and other employees. The report of the break came days after Federal Bureau of Investigation Director Christopher Wray warned of Chinese-linked attempts to steal sensitive or valuable data.

In fact, over the past years, US officials have reported that it has been increasingly warning of criminal and nation-state hackers breaking into the computer systems of organizations through opaque supply chains for software and other technologies.

“relies on third-party providers for certain technology and ‘cloud-based’ systems and services that support a variety of business operations. In fact, one of these systems was the target of persistent cyberattack activity.”

A spokesman from News Corp declined to further comment.. In its email to staff, News Corp commented that computer systems housing consumer and financial data weren’t affected. Chief Technology Officer David Kline and Chief Information Security Officer Billy O’Brien wrote in the email:

“In addition, we have not experienced related interruptions to our business operations. Based on our investigation to date, we believe the threat activity is contained.”

On Friday, the WSJ clarified that the hackers had access to the company’s systems since at least February 2020, gaining full access to emails and Google Docs, including drafts of articles.

Runa Sandvik, a former senior director for information security at the New York Times, noted that gaining access to emails and documents could give hackers snapshots of reporters’ sources and plans for articles.

On Friday the company disclosed the hack to law-enforcement officials and is providing technical details of the attack to the Media and Entertainment Information Sharing and Analysis Center, a nonprofit organisation  that shares security information among the media industry.

Chris Taylor, director of the ME-ISAC, said that hackers are sending countless phishing emails to many potential targets in the hope of landing a victim. He clarified that specified attacks are much scarier but they are way less frequent, because they require attackers to do more thorough research. Mandiant Inc., a cybersecurity company that specializes in investigating hacks, is helping News Corp answer to the incident. David Wong, Mandiant’s vice president of consulting, commented:

“Mandiant assesses that those behind this activity have a China nexus, and we believe they are likely involved in espionage activities to collect intelligence to benefit China’s interests. China firmly opposes and combats cyber attacks and cyber theft in all forms,” a spokesman for the Chinese Embassy in Washington said in an email. “We hope that there can be a professional, responsible and evidence-based approach to identifying cyber-related incidents, rather than making allegations based on speculations.”

Moreover, the Biden administration has ordered federal agencies to more aggressively evaluate their vendors. They urged companies to do the same as they shore up their internal defenses.

]]>
New Features of Python 3.10 https://devstyler.io/blog/2021/10/07/new-features-of-python-3-10/ Thu, 07 Oct 2021 08:19:27 +0000 https://devstyler.io/?p=72842 ...]]> Python 3.10 is the latest development version of Python. Intrepid Python developers are advised to take appropriate precautions to test their code.

Python 3.10 doesn’t have many new key features, but one of the few features it has, structural pattern matching, could be the only most important addition to the language syntax.

Structural pattern matching

The result of an additional attempt that previously failed switch/case-Similar to Python syntax, structural pattern matching allows variables to match one of a set of possible values ​​(switch/case in other languages). However, you can also collate with a pattern of values. This greatly expands the range of possibilities and allows you to write code that quickly covers different scenarios.

More accurate error reporting

Python error reporting has long been at the mercy of the parser’s whims. Python 3.9 rolled out All new parser — The Python team is faster, more robust, easier to maintain, and less plagued by internal hacks.

Parameter specification variable

The Python typing module used to annotate code with type information allows you to describe the types of callable objects (such as functions). However, that type of information cannot be propagated between callable objects. This makes it difficult to annotate function decorators and the like.

Two new additions to typing, typing.ParamSpec – when typing.Concatenate, it allows you to annotate callable objects with more abstract type definition information.

Other major changes in Python 3.10.

  • Union types can be expressed as: X|Y, Excluding that Union[X,Y], To be concise (PEP 604).
  • NS zip The built-in that combines the results of multiple repeatable objects strict keyword. When set to True, That’s the cause zip Raises an exception if one of the iterables is exhausted before the other iterables (PEP 618).
  • You can now declare variables as type aliases. This improves forward references, more robust type-related errors, and the distinction between in-scope type declarations (PEP 613).
  • OpenSSL 1.1.1 or later is required to build CPython. This will update one of CPython’s major dependencies (PEP 644).
]]>