TGTGInsighttelegram intelligenceLIVE / telegram public index
← Python Заметки

TGINSIGHT SIMILAR POSTS

Најди сличен содржај

Изворен канал @pythonotes · Post #336 · 22 мај

Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим. С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов. Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров. PyPI new user and new project registrations temporarily suspended Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки. Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе. Чтобы избежать подобных факапов я рекомендую: ▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров. ▫️ Используйте файл requirements.txt вместо ручной установки пакетов ▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации. ▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию. ▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости. Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг. #offtop

Hashtags

Резултати

Пронајдени 6 слични објави

Пребарај: #edps

当前筛选 #edps清除筛选
AI & Law

@ai_and_law · Post #670 · 02.10.2025 г., 07:04

🇪🇺Human Oversight in Automated Decision-Making: EDPS Weighs In The European Data Protection Supervisor (EDPS) has released a new TechDispatch examining the role and limits of human oversight in automated decision-making technologies (ADMT). The report highlights both the necessity of human involvement and the risks of overestimating its effectiveness. While oversight is often seen as a safeguard against bias, misclassification, and opacity in ADM systems, the EDPS warns that inserting humans into the process does not automatically guarantee fairer or safer outcomes. The paper underscores that flawed assumptions about human involvement can lead to weak or symbolic oversight, risking harm to individuals and undermining fundamental rights such as privacy, non-discrimination, and due process. For oversight to be meaningful, it must be carefully designed, accounting for the complexities of human-machine interaction and ensuring accountability remains with system providers and deployers. The EDPS calls for structured approaches that align oversight practices with ethical standards, societal values, and democratic principles. #AIRegulation#FundamentalRights#EDPS

AI & Law

@ai_and_law · Post #704 · 18.11.2025 г., 08:04

🇪🇺EDPS Releases New Guidance on AI Risk Management for EU Institutions The European Data Protection Supervisor has issued guidance designed to help data controllers assess risks when developing, procuring, or deploying AI systems. Although targeted at EU institutions, offices, and agencies, the document also serves as a practical reference for private organizations aiming to align AI practices with existing data protection obligations. The guidance outlines a structured approach to risk management methodology, emphasizes AI life cycle oversight, and integrates interoperability considerations. It also examines specific categories of risk and pairs them with corresponding technical mitigation measures — offering a clearer operational pathway for organizations working to embed data protection into AI governance. #AI#Law#AIGovernance#EDPS#DataProtection

AI & Law

@ai_and_law · Post #326 · 10.06.2024 г., 07:04

EDPS Issues Guidance on Data Protection for Generative AI Systems The European Data Protection Supervisor (EDPS) has released new guidance on ensuring data protection compliance when using generative AI systems. This guidance is pivotal, given the EDPS's crucial role in the AI Act. According to the AI Act, the EDPS will: ✅ Establish AI regulatory sandboxes for EUIs ✅ Participate as an observer in the European AI Board ✅ Supervise EUIs under the AIA ✅ Act as a market surveillance authority for EUIs ✅ Impose administrative fines on EUIs. These roles mean that the EDPS's interpretations and guidance on AI development and use will significantly impact other AI operators. Despite lack of specificity in some areas, the guidance provides a good initial overview of key challenges in generative AI. #AI#DataProtection#EDPS#AIAct#GenerativeAI

AI & Law

@ai_and_law · Post #792 · 25.03.2026 г., 08:04

🇪🇺EDPS Defines Role Under the EU AI Act The European Data Protection Supervisor (EDPS) published a report outlining its responsibilities as the AI Act market authority for AI systems used by EU institutions. The document sets out priority areas for the next two years as the EDPS assumes its new supervisory role. The report details the EDPS’s tasks under the AI Act mandate, the operational context for exercising its authority, and four strategic pillars that will guide its work as a market authority. #AIRegulation#EUAIAct#DataProtection#AIgovernance#EDPS

AI & Law

@ai_and_law · Post #745 · 19.01.2026 г., 08:04

🇪🇺EDPS Launches Podcast Series on Emerging AI Trends The European Data Protection Supervisor has launched a new podcast series examining key AI trends identified in its TechSonar 2025–26 report. The six-part series focuses on how emerging AI technologies intersect with data protection, security, and fundamental rights. The first episode discusses agentic AI, with EDPS officials addressing risks for personal data protection and potential impacts on individuals’ decision-making autonomy. Upcoming episodes will cover AI companions, automated proctoring, AI-driven personalized learning, coding assistants, and confidential computing. #AIRegulation#DataProtection#EDPS#AITrends#ResponsibleAI

AI & Law

@ai_and_law · Post #142 · 19.10.2023 г., 07:04

European Data Protection Supervisor Weighs In on AI Liability Rules Hello, everyone! The European Data Protection Supervisor (EDPS) provided valuable insights into the European Commission's two proposals, addressing liability rules for artificial intelligence products. These proposals focus on establishing liability for AI developers producing "defective products" and defining civil liability regulations for individuals negatively affected by AI systems. The EDPS presented several key recommendations. Notably, they emphasized the need for uniform protection levels, ensuring that individuals harmed by defective AI systems employed by EU institutions receive the same protection as those impacted by a private entity's use of such systems. These recommendations highlight the ongoing efforts to shape comprehensive AI liability frameworks in the European Union, aiming to balance innovation and safeguard individual rights. #AIandLaw#EDPS#AILiability#EURegulations