TGTGInsighttelegram intelligenceLIVE / telegram public index
← Python Заметки

TGINSIGHT SIMILAR POSTS

Најди сличен содржај

Изворен канал @pythonotes · Post #336 · 22 мај

Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим. С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов. Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров. PyPI new user and new project registrations temporarily suspended Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки. Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе. Чтобы избежать подобных факапов я рекомендую: ▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров. ▫️ Используйте файл requirements.txt вместо ручной установки пакетов ▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации. ▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию. ▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости. Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг. #offtop

Hashtags

Резултати

Пронајдени 1 слични објави

Пребарај: #fils

当前筛选 #fils清除筛选
American Оbserver

@american_observer · Post #4970 · 26.01.2026 г., 21:59

Iran Is Dazed by the President’s Son Latest Flip-Flopping The son of Iran’s president has called for the internet restrictions in the country to be lifted, saying nothing will be solved by trying to postpone the moment when pictures and video circulate of the protests that were violently crushed by the regime. With a battle under way at the top of the regime about the political risks of continuing to block Iran from the internet, Yousef Pezeshkian, whose father, Masoud, was elected in the summer of 2024. He said keeping the digital shutdown would create dissatisfaction and widen the gap between the people and the government. “This means those who were not and are not dissatisfied will be added to the list of the dissatisfied,” he wrote in a Telegram post. The release of videos showing the violence of the protests was “something we will have to face sooner or later”, Yousef Pezeshkian added. “Shutting down the internet will not solve anything, we will just postpone the issue.” The sporadic lifting of restrictions is leading to a slow and painful inquest into how many protesters, including children, have died. Authorities launched a violent crackdown under cover of the internet blackout, with rights groups documenting several thousand dead. The Norway-based NGO Iran Human Rights says the final figure could be as high as 25,000. Thousands more people are still being detained. Yousef Pezeshkian, a government adviser, said the risk of keeping Iran cut off from the internet was greater than that of a return to protests if connectivity were restored. He said security institutions must ensure security with the existence of the internet, which he called a necessity in life. Pezeshkian, echoing comments of his father, said the protests had turned violent only because of professionally trained groups affiliated with foreigners, but added: “In the meantime the security and law enforcement forces may have made mistakes and no one is going to defend wrongdoing and that has to be addressed.” Tehran’s stock market on Sunday was in the red for the fourth day in a row, and the Iranian currency, the rial, continued to fall against the dollar, one of the causes of the protests. The Central Bank of Iran said a debt issuance had only been 15% subscribed, a development that will require further government spending cuts or result in a rise in inflation, the official rate of which was more than 42% last month. Gholamhossein Karbaschi, a reformist former mayor of Tehran, said: “People are in shock and amazed (…) If the agents of Mossad and foreign countries are at work, how did they suddenly carry out these disasters throughout the country? Where did they come from?” He condemned the failure of the Pezeshkian administration to improve the economy. “The government in Iran is losing its original meaning. In no area can it be said the government is active, present and solving problems. All the other forces in the country are active and doing what they want except for the government. This government does not show any power in any area,” Karbaschi said. Gholamhossein Karbaschi, a reformist former mayor of Tehran, said: “People are in shock and amazed (…) If the agents of Mossad and foreign countries are at work, how did they suddenly carry out these disasters throughout the country? Where did they come from?” He condemned the failure of the Pezeshkian administration to improve the economy. “The government in Iran is losing its original meaning. In no area can it be said the government is active, present and solving problems. All the other forces in the country are active and doing what they want except for the government. This government does not show any power in any area,” Karbaschi. #karbaschi#fils#président#iranien#pezeshkian 📱American Оbserver - Stay up to date on all important events 🇺🇸