Ilogo yePyTorch
Kutshanje siinkcukacha ngohlaselo zakhutshwa ukuba iziseko ezisetyenzisiweyo kuphuhliso lwesakhelo sokufunda koomatshini zichaphazelekile I-PyTorch. Phakathi kweenkcukacha zobuchwepheshe eziveziweyo, kukhankanyiwe ukuba Umhlaseli ukwazile ukukhupha izitshixo zokufikelela ekuvumelayo ukuba ubeke idata engafunekiyo kwindawo yokugcina yeGitHub kunye ne-AWS, buyisela ikhowudi kwisebe eliphambili lendawo yokugcina, kwaye wongeze umva ngokuxhomekeka.
Esi siganeko ibeka umngcipheko omkhulu, ekubeni i-spoofing yeenguqulelo ze-PyTorch zingasetyenziselwa ukuhlasela iinkampani ezinkulu ezifana ne-Google, i-Meta, i-Boeing kunye ne-Lockheed Martin, esebenzisa i-PyTorch kwiiprojekthi zabo.
Kwiinyanga ezine ezidlulileyo, u-Adnan Khan kunye nam sasebenzisa ubungozi obubalulekileyo be-CI/CD ePyTorch, elinye lamaqonga aphambili okufunda koomatshini. Isetyenziswa zii-titans ezinje ngoGoogle, iMeta, iBoeing, kunye neLockheed Martin, iPyTorch yeyona nto iphambili ekujoliswe kuyo kubaduni kunye namazwe-amazwe ngokufanayo.
Ngethamsanqa, sathatha ithuba lobu buthathaka ngaphambi kokuba abantu ababi benze.
Senze ngolu hlobo ke.
Ngokuphathelele uhlaselo, kuthethwa ukuba oku Iza phantsi kwikhono lokuqhuba ikhowudi kwiiseva zokudibanisa eziqhubekayo eyenza ukwakhiwa kwakhona kwaye iqhube imisebenzi ukuvavanya utshintsho olutsha olutyhalelwe kwindawo yokugcina. Lo mba uchaphazela iiprojekthi ezisebenzisa abaqhubi bangaphandle “abaSelf-Hosted Runner” ngeGitHub Actions. Ngokungafaniyo neZenzo zeGitHub zemveli, abalawuli abazibambileyo abaqhubeki kwiziseko ezingundoqo ze-GitHub, kodwa kwiiseva zabo okanye koomatshini bokwenene abagcinwe ngabaphuhlisi.
Ukuqhuba imisebenzi yokwakha kwiiseva zakho kukuvumela ukuba uququzelele ukukhutshwa kwekhowudi engakwazi ukuskena inethiwekhi yangaphakathi yenkampani, khangela i-FS yendawo yezitshixo ze-encryption kunye namathokheni okufikelela, kwaye uhlalutye ukuguquguquka kokusingqongileyo kunye neeparitha zokufikelela kugcino lwangaphandle okanye iinkonzo zefu kunye nale nto, ngokusebenzisa aba baqhubi, umhlaseli wakwazi ukwenza imisebenzi yokudibanisa kwiiseva zabo, nto leyo eyabavumela ukuba bahlolisise inethiwekhi yangaphakathi yenkampani ukukhangela izitshixo zofihlo kunye neempawu zokufikelela.
KwiPyTorch kunye nezinye iiprojekthi ezisebenzisa i-Self-Hosting Runner, Los Abaphuhlisi banokuqhuba imisebenzi yokwakhan kuphela emva kokuba utshintsho lwakho lujongiwe. Nangona kunjalo, umhlaseli ukwazile ukudlula le nkqubo ngokuthumela kuqala utshintsho oluncinci kwaye emva koko, xa yamkelwe, ifumene imo "yomdibanisi" ngokuzenzekelayo ekuvumelayo ukuba usebenzise ikhowudi kuyo nayiphi na i-GitHub Actions Runner bume ehambelana nendawo yokugcina okanye eyongamele umbutho. Ngethuba lohlaselo, izitshixo zokufikelela kwi-GitHub kunye nezitshixo ze-AWS zabanjwa, zivumela umhlaseli ukuba adibanise isiseko.
Ikhonkco kwisimo "somnikeli" kwavela ukuba kulula ukudlula: kwanele ukuba uqale ungenise utshintsho oluncinci kwaye ulinde ukuba lwamkelwe kwisiseko sekhowudi, emva koko umthuthukisi ufumana ngokuzenzekelayo isimo somthathi-nxaxheba osebenzayo. izicelo zabo zokutsalwa zinokuvavanywa kwisiseko se-CI ngaphandle kokuqinisekiswa okwahlukileyo. Ukufezekisa imeko yomphuhlisi osebenzayo, umfuniselo uquke utshintsho oluncinci lwezithambiso ukulungisa iitypos kumaxwebhu. Ukufumana ukufikelela kwindawo yokugcina kunye nokugcinwa kweenguqulelo zePyTorch, ngexesha lohlaselo xa uqhuba ikhowudi kwi "Self-Hosted Runner", ithokheni ye-GitHub esetyenziselwa ukufikelela kwindawo yokugcina ukusuka kwiinkqubo zokwakha yabanjwa (GITHUB_TOKEN ivunyelwe ukufikelela kokubhala ), ngokunjalo. njengezitshixo ze-AWS ezibandakanyekayo ekugcineni iziphumo zokwakha.
Kananjalo, kuyakhankanywa ukuba lo mba awungqalanga kwiPyTorch kwaye uchaphazela ezinye iiprojekthi ezinkulu ezisebenzisa uqwalaselo olungagqibekanga lwe "Self-Hosting Runner" kwi-GitHub Actions.
Ukongeza, ukubakho kokuhlaselwa okufanayo kwi-cryptocurrency, i-blockchain, iMicrosoft Deepspeed, iTensorFlow kunye nezinye iiprojekthi sele zikhankanyiwe, ezineziphumo ezibi kakhulu. Abaphandi bangenise ngaphezulu kwezicelo ezingama-20 kwiinkqubo ze-bug bounty, befuna imbuyekezo exabisa amakhulu amawaka eedola.
ekugqibeleni ukuba ukhona unomdla wokwazi ngakumbi ngayo, ungazijonga iinkcukacha kwi ukulandela ikhonkco.