TGTGInsighttelegram intelligenceLIVE / telegram public index
← Python Заметки

TGINSIGHT SIMILAR POSTS

Најди сличен содржај

Изворен канал @pythonotes · Post #336 · 22 мај

Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим. С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов. Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров. PyPI new user and new project registrations temporarily suspended Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки. Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе. Чтобы избежать подобных факапов я рекомендую: ▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров. ▫️ Используйте файл requirements.txt вместо ручной установки пакетов ▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации. ▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию. ▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости. Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг. #offtop

Hashtags

Резултати

Пронајдени 9 слични објави

Пребарај: #noob

当前筛选 #noob清除筛选
Pensive|

@PensivePost · Post #5170 · 06.05.2021 г., 06:10

I knew a girl who liked to draw, Pictures for only her eyes. She was more artistic late at night. Her drawings were different, No paper, No pen. But she needed a bandage, And wore long sleeves twenty-four/seven. We stood by the river, Under the stars, When she rolled up her sleeves And showed me her scars. She felt embarrassed and stared at her shoe. Then I rolled up my sleeves and whispered, "I draw too." #review#yourreview#noob

Pensive|

@PensivePost · Post #4753 · 17.01.2021 г., 14:31

Honesty for one, behold my love. I'll come in your dreams, For every night that I'm gone. Honesty for one, Behold my Love. #review#noob#prose Author's note: This might not make sense because: There's a song that I only remember by the deep voice of the singer, the melody and the vague-not-so-understood lyrics. These are the words that match that voice and my feelings. And obviously not the exact lyrics.

Pensive|

@PensivePost · Post #5159 · 01.05.2021 г., 16:22

It came from something we can't even see, It took so many lives and gave us the malady, The death, the pain, the anger the disability, Old people say they never witnessed such calamity. With heavy heart, Hope is alive and this is the fact, May the God help us to face all of this, Some people are still doing something wrong, Hope they'll get the fruits of their Unholy act. #anon #noob #review

Pensive|

@PensivePost · Post #5158 · 01.05.2021 г., 16:21

It came from something we can't even see, It took so many lives and gave us the malady, The death, the pain, the anger the disability, Old people say they never witnessed such calamity. With heavy heart, Hope is high, will is strong and this is the fact, May the God help us to face all of this, Some people are still doing something wrong, Hope they'll get the fruits of their Unholy act. #anon #noob #review

Pensive|

@PensivePost · Post #5157 · 01.05.2021 г., 16:20

It came from something we can't even see, It took so many lives and gave us the malady, The death, the pain, the anger the disability, Old people say they never witnessed such calamity. With heave heart, Hope is high, will is strong and this is the fact, May the God help us to face all of this, Some people are still doing something wrong, Hope they'll get the fruits of their Unholy act. #anon #noob #review

Elf Crypto VIP

@elfcryptovip · Post #12659 · 11.05.2026 г., 10:34

📍 List of abbreviations commonly used in cryptocurrency trading: #ALTCOIN = Alternate cryptocurrency except bitcoin #SHITCOIN = A coin with no potential value or use #BEAR | #BEARISH = Negative price movement #BULL | #BULLISH = Positive price movement #LONG = Margin buy position #SHORT = Margin sell position #BTFD = Buy The Fucking Dip #DILDO = Long green or red candles 😆 #DYOR = Do Your Own Research #FA = Fundamental Analysis #TA = Technical Analysis #FOMO = Fear Of Missing Out #JOMO = Joy Of Missing Out #FUD = Fear Uncertainty & Doubt #HODL = Hold a position #MCAP = Market Capitalization #MOON = Continuous upward movement of price #OTC = Over The Counter #PUMP = Upward price movement #DUMP = To sell off a coin #REKT = When you have a bad loss #WHALE = Very wealthy trader/Market mover #AMA = Ask me anything #ATH = All Time High #ATL = All Time Low #DLT = Distributed ledger technology #IMO = In My Opinion #LAMBO = Lambo is symbol that becomes an elusive goal for most investors #NOOB = A person who is inexperienced #SAFU = Secure Asset Funds for Users #SHILL = Holder of altcoin who just wants to promote it for his own benefit ✅@ElfCryptoVIP