Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим.
С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов.
Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров.
PyPI new user and new project registrations temporarily suspended
Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки.
Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе.
Чтобы избежать подобных факапов я рекомендую:
▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров.
▫️ Используйте файл requirements.txt вместо ручной установки пакетов
▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации.
▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию.
▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости.
Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг.
#offtop
And as you fall and shatter.
Darling, think of the glory of your rise.
Think of the potential that lies.
You must gather all that lay scattered.
First on your knees
and then finally,
you stand on your feet.
#poetry#review#grace
On this day I conclude my body
and blend in God
to discover all those
whom I'd once lost!
I tasted every bit; every risk.
Blessings were showered abundantly;
every moment was a gift!
I cherish the smiles
that came into existence
because of my presence.
But now, my body has perished.
So don't you cry O My Beloved!
For I'll always be there,
in times of your happiness
even in times of despair!
I happily dive in my Creator
and bid adieu to His beautiful creations!
#review#grace#poetry
So rich and rare.
You hold me up
and blend me in your air.
I scent your breath,
your body!
I make you go insane
about your own-self
because I make you smell
like a wild rose
with gold petals!
You bring me close
and I spread kisses all over your body.
I peck your wrist,
you inhale me unnoticed!
You are privileged
to own me,
to keep me a secret,
for I am too precious to reveal
and too exotic to be concealed.
I'll be one of those perfume bottles
you'd love to keep
even after there's nothing left of me!
#grace#poetry#review
I seek motivation from within..
I hold the will to try
until my goal is fulfilled...!!
Afterall,
my despair got some faithful hope
and a chance to try once more....
When I look into the mirror,
I just don't see a person
burdened with numerous reasons
to fall for sadness
but an absolutely distinct soul
crawling around the space alone
to fetch happiness
in its own universe.
Just like the moon is scarred with craters
but still gentle with its coldness,
so is my universe scratched
with shooting stars
but holds galaxies of
unbearable positive energy
vibing with my soul!
#review#poetry#grace
Poems lay beneath my soul
patiently waiting to be unleashed
to devour every anxiety that runs through
and tie broken pieces
of my unloved heart
with lost yet enchanting phrases!
#poetry#review#grace
The roots of thy vices
shalt be slashed with dagger
of thy utmost morality
for tis but an illusion that
thou consider thyself a saint
dressed in extravagance!
#review#grace#quote
LILIES AND ROSE
I rushed to the store
and bought a bouquet of lilies and a red rose.
I was like an enthusiastic guitar,
gleeful; cheerful and indeed, grateful.
I decorated the house with fairy lights
and the rooms with crimson ribbons and balloons.
I smile through the memories
as how on our first Valentine's Day
I proposed her with a ring of platinum
and bouquet of lilies!
Lilies are her favourite
and so are mine!
I love my babe,
I love her pleasant smile!
I remember brushing her cheeks with white lilies
and did I tell you
that her name too, is Lily!
Must be wondering
why I bought a red rose!?
Let me tell you as I drive along.
An hour ago,
Lily gave birth to a baby girl,
who owns that velvet rose
and happiness of many more!
Perfect. I reached in time.
There's my family.
Mom, dad, in-laws.
Numerous smiles;
blooming happiness.
The moment, I wish I could pause!
I push the door
and see my lifelines;
my queen and my princess!
"Papa's here with lovely lilies
and Wow, a crimson rose! ", she says
as I kiss her forehead
and hand her the bouquet I bore.
I look at my precious child.
Her daddy-like features
and mom-like skin pinkish white!
The rose adorns my angel
as I rest her in my arms.
I gently peck her little fingers
and pray,
"let there be more love in the world my lord,
for I'm blessed with so much;
what more can I want! "
#ballad#review#grace