How to take over the computer of a Maven Central user
For those of you in the Python world concerned about such a thing, check out Peep: https://pypi.python.org/pypi/peepIt's a pip wrapper that expects you to provide hashes for your dependencies in requirements.txt.There was a lightning talk at PyCon this year, it seems super easy to use (though admittedly I'm not using it regularly yet).