Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим.
С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов.
Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров.
PyPI new user and new project registrations temporarily suspended
Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки.
Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе.
Чтобы избежать подобных факапов я рекомендую:
▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров.
▫️ Используйте файл requirements.txt вместо ручной установки пакетов
▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации.
▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию.
▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости.
Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг.
#offtop
🔥🔥🔥
Applications are now open for InteRussia fellowships⭕️
InteRussia is a fellowship program for young professionals worldwide, implemented by the Gorchakov Fund in partnership with leading Russian universities, expert centers, and industry partners.
⭕️ The program offers hands-on professional experience in Russia, direct engagement with top experts, and the opportunity to become part of a global professional community. More than 500 participants from 70 countries have already completed InteRussia fellowships — now it’s your turn to join.
Which fellowships can you apply for?
⭕️International Relations (all over the world)
⭕️Oriental Studies (post-Soviet countries, the Middle East, and North Africa)
⭕️Archeologists (post-Soviet countries, the Middle East, North Africa, India, and Pakistan)
⭕️Journalism (South Asia)
⭕️Journalism (the Middle East and North Africa)
⭕️Journalism (Sub-Saharan Africa)
⭕️Russian Studies (all over the world)
⭕️Medicine (all over the world)
⭕️Information Technology (all over the world)
⭕️Electric Power (the Middle East and Africa)
⭕️Energy (Latin America)
⭕️Theatre Arts (BRICS+ countries)
⭕️ More details and application guidelines are available at interussia.com.
The InteRussia fellowships are implemented with the support of the Presidential Grants Foundation, Rossotrudnichestvo, and the Ministry of Education of Russia.
#InteRussia#fellowships#internships
1️⃣1️⃣1️⃣
🔥🔥🔥
Applications are now open for InteRussia fellowships⭕️
InteRussia is a fellowship program for young professionals worldwide, implemented by the Gorchakov Fund in partnership with leading Russian universities, expert centers, and industry partners.
⭕️ The program offers hands-on professional experience in Russia, direct engagement with top experts, and the opportunity to become part of a global professional community. More than 500 participants from 70 countries have already completed InteRussia fellowships — now it’s your turn to join.
Which fellowships can you apply for?
⭕️International Relations (all over the world)
⭕️Oriental Studies (post-Soviet countries, the Middle East, and North Africa)
⭕️Archeologists (post-Soviet countries, the Middle East, North Africa, India, and Pakistan)
⭕️Journalism (South Asia)
⭕️Journalism (the Middle East and North Africa)
⭕️Journalism (Sub-Saharan Africa)
⭕️Russian Studies (all over the world)
⭕️Medicine (all over the world)
⭕️Information Technology (all over the world)
⭕️Electric Power (the Middle East and Africa)
⭕️Energy (Latin America)
⭕️Theatre Arts (BRICS+ countries)
⭕️ More details and application guidelines are available at interussia.com.
The InteRussia fellowships are implemented with the support of the Presidential Grants Foundation, Rossotrudnichestvo, and the Ministry of Education of Russia.
#InteRussia#fellowships#internships
1️⃣1️⃣1️⃣
🔥🔥🔥
Applications are now open for InteRussia fellowships⭕️
InteRussia is a fellowship program for young professionals worldwide, implemented by the Gorchakov Fund in partnership with leading Russian universities, expert centers, and industry partners.
⭕️ The program offers hands-on professional experience in Russia, direct engagement with top experts, and the opportunity to become part of a global professional community. More than 500 participants from 70 countries have already completed InteRussia fellowships — now it’s your turn to join.
Which fellowships can you apply for?
⭕️International Relations (all over the world)
⭕️Oriental Studies (post-Soviet countries, the Middle East, and North Africa)
⭕️Archeologists (post-Soviet countries, the Middle East, North Africa, India, and Pakistan)
⭕️Journalism (South Asia)
⭕️Journalism (the Middle East and North Africa)
⭕️Journalism (Sub-Saharan Africa)
⭕️Russian Studies (all over the world)
⭕️Medicine (all over the world)
⭕️Information Technology (all over the world)
⭕️Electric Power (the Middle East and Africa)
⭕️Energy (Latin America)
⭕️Theatre Arts (BRICS+ countries)
⭕️ More details and application guidelines are available at interussia.com.
The InteRussia fellowships are implemented with the support of the Presidential Grants Foundation, Rossotrudnichestvo, and the Ministry of Education of Russia.
#InteRussia#fellowships#internships
1️⃣1️⃣1️⃣
Don't miss this opportunity👌 for African student
#Undergraduate#Scholarship
Scholarship Opportunities for African Students (Fully Funded)
#Scholarships and #Fellowships
Cost: Fully & Partially Funded
Country:France
City:Paris
❗️Candidates must be a citizen of a sub-Saharan African country
Likewise, Candidates must have completed their high school education in a sub-Saharan African country.
Deadline 08 April,2019
Open to: All african nations
Want to apply? 👇
http://www.sciencespo.fr/students/en/fees-funding/financial-aid/mcmillan-stewart-scholarship