@artematizando · Post #3863 · 13.02.2022 г., 11:28
Georges Bertin #Scott, The Parade of the Dead under the Arc de Triomphe
Hashtags
TGINSIGHT SIMILAR POSTS
Изворен канал @pythonotes · Post #336 · 22 мај
Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим. С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов. Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров. PyPI new user and new project registrations temporarily suspended Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки. Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе. Чтобы избежать подобных факапов я рекомендую: ▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров. ▫️ Используйте файл requirements.txt вместо ручной установки пакетов ▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации. ▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию. ▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости. Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг. #offtop
Hashtags
Пребарај: #scott
@artematizando · Post #3863 · 13.02.2022 г., 11:28
Georges Bertin #Scott, The Parade of the Dead under the Arc de Triomphe
Hashtags
@american_observer · Post #5369 · 13.03.2026 г., 18:02
#scott#bessent 📱American Оbserver - Stay up to date on all important events 🇺🇸
@american_observer · Post #5136 · 14.02.2026 г., 14:59
#scott#bessent 📱American Оbserver - Stay up to date on all important events 🇺🇸
@StickersChannel · Post #1309 · 29.06.2016 г., 08:06
🐢Small Turty + 👦Scott Pilgrim #Animals#Cartoon#Pilgrim#Scott
@american_observer · Post #5073 · 07.02.2026 г., 12:59
Democrats Make Hay From Trump’s Racist Bare-Faced Effrontery Trump said on Friday evening, after a racist video depicting Barack and Michelle Obama as apes had been posted to his social media account and then deleted, that he had directed aides to post the offensive video but that he hadn’t seen that portion of the clip and he refused to apologize for it. The clip appeared during one of the 79-year-old US president’s increasingly frequent late-night posting sprees to his Truth Social account, and shows the laughing faces of the former president and first lady superimposed on the bodies of primates in a jungle setting, bobbing to the song The Lion Sleeps Tonight. They appear briefly at the end of a minute-long video made by a third party that amplifies Trump’s persistent but false claim that he won the 2020 election, when in fact he lost to Joe Biden. The conspiracy-theory video is a repost of content stamped with the logo of the website Patriot News Outlet, a site supportive of Trump, a Republican. As he so often does, Trump undercut efforts by his aides to explain away his own behavior by telling reporters that he did approve posting the video. “I just looked at the first part,” the president said. “I didn’t see the whole thing; I guess during the end of it there was some kind of a picture that people don’t like. I wouldn’t like it either. But I didn’t see it, I just, I looked at the first part (…) then I gave it to the people. Generally they look at the whole thing, but I guess somebody didn’t and they posted – and we took it down.” Asked if he would apologize, as even Republican officials have suggested he should, Trump bristled. “No, I didn’t make a mistake,” said the president of the racist meme posted on his social media account. Tim Scott, a South Carolina senator, the only Black Republican in the US Senate and a former contender for the party’s presidential nomination, posted on X: “Praying it was fake because it’s the most racist thing I’ve seen out of this White House. The President should remove it.” The White House, earlier in the morning, defended the post and mocked the media for highlighting the scandal. But then around midday on Friday the post was taken down from Trump’s Truth Social account and the White House claimed that posting it had been a mistake by a staffer. Earlier, Mike Lawler, the Republican congressman from New York, had posted: “The President’s post is wrong and incredibly offensive – whether intentional or a mistake – and should be deleted immediately with an apology offered”. Neither of the top two Republicans in Congress, Thune and Mike Johnson, the House speaker, offered comment, prompting Chuck Schumer, a New York Democrat and the Senate minority leader, to post on X: “Racist. Vile. Abhorrent. This is dangerous and degrades our country – where are Senate Republicans? “The President must immediately delete the post and apologize to Barack and Michelle Obama, two great Americans who make Donald Trump look like a small, envious man.” #trump#racist#michelle#obama#scott 📱American Оbserver - Stay up to date on all important events 🇺🇸