Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим.
С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов.
Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров.
PyPI new user and new project registrations temporarily suspended
Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки.
Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе.
Чтобы избежать подобных факапов я рекомендую:
▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров.
▫️ Используйте файл requirements.txt вместо ручной установки пакетов
▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации.
▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию.
▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости.
Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг.
#offtop
DIFFERENT DISEASE CAN ENTER OUR FARM DUE TO RELATED AND UNRELATED CAUSES AND CAUSE DAMAGE
.
#Infectious agent, for example, virus, bacteria, fungi, parasites
# food deficiency
#management problems
#Environmental problems
#food poisoning
Symptoms of disease in unhealthy chickens depend on the pathogen and the part of the body affected, and for the most part most diseases show these symptoms.
✔️ Shaving
✔️ Throwing wings
✔️ Diarrhea
✔️ Decreased appetite
✔️ Manbat
✔️ Paralysis
✔️ Sudden death
These and similar symptoms:-
When it occurs, it is important to identify sick chickens by careful observation and to consult a nearby specialist. Apart from this, giving medicine without properly identifying the disease and consulting a specialist may expose them to drug resistance, so it is appropriate to take necessary precautions.
https://t.me/starvetbooks
Local Conference of Youth on Climate Change was launched in Astana as part of the annual UN Climate Change Conference of Youth. The event was organized by the National Conservation Initiative, Sustainable Development Solutions Network and Nazarbayev University.
"The world needs a collective effort to limit global warming to 1.5 degrees. We are not on track. #Kazakhstan and #CentralAsia are one of the regions to bear the most acute effects of climate change. The imminence of the #environmental degradation requires immediate action and unwavering commitment to the #climategoals the region has set. As Kazakhstan is taking steps towards #carbonneutrality by 2060, we support the government, industry and civil society to underpin this with concrete actions," - said Johannes Baur, Head of Сooperation at the EU Delegation to Kazakhstan.
The fifth season of the International Prize #WEARETOGETHER has been launched.
▫️ Foreign citizens and NGOs can apply until June 23, 2025 on the official website of the Prize https://wearetogetherprize.com.
🌐 The Prize is available for volunteers and NGOs from across the globe. The laureates will receive a cash prize valued at $10,000 and an invitation to take part in the International Forum of Civil Participation #WEARETOGETHER, which is traditionally held in December in Moscow.
👉🏻 Prize nominations:
♻️“Sustainable Future”
For those who are leading projects in the field of environmental protection, environmental education, ecological consumption, “green” economy and technologies
#ecology#urbanism#biodiversity#recycling#environmental protection
🕊️“Human Assistance”
For those who run projects aimed at improving the well-being of vulnerable categories of citizens, providing social and humanitarian assistance to people, discovering talents and nurturing individuals, developing education and volunteerism.
▫️ Apply here: https://wearetogetherprize.com/
#social_help#medicine#donorship#healthcare#emergencies
🔜The fifth season of the International Prize #WEARETOGETHER has been launched. Foreign citizens and NGOs can apply until June 23, 2025 on the official website of the Prize.
The Prize is available for volunteers and NGOs from across the globe. The laureates will receive a cash prize valued at $10,000 and an invitation to take part in the International Forum of Civil Participation #WEARETOGETHER, which is traditionally held in December in Moscow.
Prize nominations:
✔️“Sustainable Future”
For those who are leading projects in the field of environmental protection, environmental education, ecological consumption, “green” economy and technologies
#ecology#urbanism#biodiversity#recycling#environmental protection
✔️ “Human Assistance”
For those who run projects aimed at improving the well-being of vulnerable categories of citizens, providing social and humanitarian assistance to people, discovering talents and nurturing individuals, developing education and volunteerism.
Apply here
#social_help#medicine#donorship#healthcare#emergencies