Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим.
С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов.
Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров.
PyPI new user and new project registrations temporarily suspended
Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки.
Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе.
Чтобы избежать подобных факапов я рекомендую:
▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров.
▫️ Используйте файл requirements.txt вместо ручной установки пакетов
▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации.
▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию.
▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости.
Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг.
#offtop
🇮🇪#Ireland: A 66-year-old man has been arrested and charged after a car bomb exploded outside a police station in Dunmurry, west Belfast, last Saturday.
The perpetrator allegedly hijacked a delivery driver’s car and forced him to drive it to the location, where a gas cylinder had been placed inside and later detonated remotely.
While some sources report he has been charged with attempted murder, others say he is also facing terrorism-related offences. Police believe the attack may be linked to the dissident republican group known as the New IRA.
(via The Guardian, BBC & birminghammail)
🇮🇪#Ireland: A suspected car bomb has exploded outside a police station in Dunmurry, Northern Ireland.
Regional reports, including those from the Belfast Telegraph, state that the vehicle had been hijacked before being driven next to the police station, where it subsequently exploded.
Police have cordoned off streets in the Kingsway area and are treating the situation as a “security incident.” No further details have been released at this time.
(via Belfast Telegraph & @spicebag32; 📹 via @NiResponsevids on X)
🇮🇪#Ireland: A man armed with a hammer breached security at Shannon Airport and climbed onto an American C-130 aircraft earlier today.
Once on top of the plane, he attempted to damage it with the hammer. The man, who is in his 40s, was quickly arrested. No motive has been released, and his identity has not been disclosed.
🇮🇪#Ireland: Up to 100 Gardaí were deployed to the Whitegate refinery, where protests have entered their fourth day amid rising fuel prices linked to the US and Israeli war against Iran.
Footage shows Irish police forcibly attempting to remove trucks and tractors blocking the roads, with violent scenes breaking out. Officers can be seen kicking and stomping on farmers. Meanwhile, other videos appear to show protesters as young as 14 being pepper-sprayed by Gardaí.
🇮🇪#Ireland: The Irish Army is set to be deployed across the country to remove heavy & agricultural vehicles blocking fuel depots, as protests over fuel prices enter their third day. Slow-moving convoys are targeting these sites over increasing fuel prices caused by the US and Israeli war against Iran.
Police are now treating these actions as “blockades", with Gardaí (Irish police) reportedly requesting the assistance of the Irish army.
In a statement, the Irish Minister for Justice said that once the army is deployed, people should not complain about any damage caused during the removal.
(via CNN & limerickleader)
🇮🇪#Ireland: ONH members fired a volley of shots in the Currynerin area of Derry last week. A 31-year-old man was arrested in connection with the event (though later released on bail) and a vehicle was seized. The PSNI have promised to increase ‘reassurance patrols as well as house-to-house enquiries and vehicle checkpoints in response.
Repost via @spicebag32
🇮🇪#Ireland: A new Irish militant group calling itself the "New Republican Movement" has announced its formation.
In a video, where all members are armed, a masked man lists several motivations for creating the group, mostly focusing on mass immigration. They threaten Irish politicians with "immediate action", claiming to have their addresses.
(via @real_eire on X)
📍Ireland’s architectural heritage – a journey back to the 19th century🇮🇪
📏
📏
📏
📏
📏
📏
📏
📏
🌟With its stunning castles, ancient ruins, and charming Victorian buildings, Ireland offers a glimpse into the past, where history and beauty come together in every stone.
📏
📏
📏
📏
📏
📏
📏
📏
#Ireland🇮🇪@voyage
📍Ireland’s architectural heritage – a journey back to the 19th century🇮🇪
📏
📏
📏
📏
📏
📏
📏
📏
🌟With its stunning castles, ancient ruins, and charming Victorian buildings, Ireland offers a glimpse into the past, where history and beauty come together in every stone.
📏
📏
📏
📏
📏
📏
📏
📏
#Ireland🇮🇪
@voyage
Ireland, Rock of Cashel 🇮🇪
The Rock of Cashel is one of the most visited landmarks in Ireland, also known as St. Patrick's Rock. It is also referred to as the Rock of Kings. ⛰
🏰 Located in the ancient Celtic cathedral in County Tipperary, Ireland. The castle, built in the 4th century, was the royal residence of the provinces of southern Ireland; after 100 years, St. Patrick settled there. After Cromwell's army attacked, the castle complex became a symbol of the resilience and courage of the Irish people.
The castle grounds still preserve residential buildings, structures for agricultural purposes, and the ruins of the cathedral.
#Ireland
@voyage