How to take over the computer of a Maven Central user
For those of you in the Python world concerned about such a thing, check out Peep: <a href="https://pypi.python.org/pypi/peep" rel="nofollow">https://pypi.python.org/pypi/peep</a><p>It's a pip wrapper that expects you to provide hashes for your dependencies in requirements.txt.<p>There was a lightning talk at PyCon this year, it seems super easy to use (though admittedly I'm not using it regularly yet).