Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим.
С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов.
Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров.
PyPI new user and new project registrations temporarily suspended
Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки.
Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе.
Чтобы избежать подобных факапов я рекомендую:
▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров.
▫️ Используйте файл requirements.txt вместо ручной установки пакетов
▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации.
▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию.
▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости.
Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг.
#offtop
Appian CEO Challenges AI Industry to Prioritize Trust
Matt Calkins, CEO of Appian, has called on the AI industry to prioritize responsible development and trust. At a critical moment for AI, Calkins unveiled guidelines promoting data transparency, user consent, and respect for intellectual property.
"We must ensure AI flourishes by building trust," Calkins stated. His four principles include disclosing data sources, using private data with consent, anonymizing personally identifiable data, and compensating for copyrighted information. These steps aim to shift AI development from a data race to a trust race.
As AI faces increasing scrutiny, Calkins positions Appian as a leader in responsible AI, encouraging others to join this movement. Trust, he argues, will unlock AI's full potential and redefine industry success.
#AI#ResponsibleAI#DataPrivacy#Appian#TechLeadership
🚀 ICT WEEK UZBEKISTAN 2026
The future isn’t coming.
It’s being built — right here, right now.
This September, Tashkent becomes the meeting point of global innovation. Visionary leaders, fast-growing startups, top tech companies, policymakers, and international partners will gather to shape the next era of digital transformation in Central Asia and beyond.
🌍 Discover breakthrough technologies
🤝 Meet decision-makers and global partners
💡 Turn bold ideas into real projects
📈 Unlock new markets and opportunities
This is not just an event.
Whether you are a government leader, investor, entrepreneur, tech professional, or innovator —
ICT Week Uzbekistan is where you need to be.
✨ Why attend?
✔️ High-level networking with global tech leaders
✔️ Startup & innovation showcases
✔️ Strategic forums and policy dialogues
✔️ Investment and partnership opportunities
✔️ Access to the fast-growing Central Asian tech market
📍 Tashkent, Uzbekistan
📅 September 22–25, 2026
Be part of the conversations that will define your tomorrow.
Join ICT Week Uzbekistan 2026.
Let’s connect. Let’s collaborate. Let’s build the future — together.
#ICTWeekUzbekistan2026#ICTWeek#DigitalTransformation#Innovation#TechLeadership#CentralAsia#FutureIsNow#Uzbekistan
🚀 ICT WEEK UZBEKISTAN 2026
The future isn’t coming.
It’s being built — right here, right now.
This September, Tashkent becomes the meeting point of global innovation. Visionary leaders, fast-growing startups, top tech companies, policymakers, and international partners will gather to shape the next era of digital transformation in Central Asia and beyond.
🌍 Discover breakthrough technologies
🤝 Meet decision-makers and global partners
💡 Turn bold ideas into real projects
📈 Unlock new markets and opportunities
This is not just an event.
Whether you are a government leader, investor, entrepreneur, tech professional, or innovator —
ICT Week Uzbekistan is where you need to be.
✨ Why attend?
✔️ High-level networking with global tech leaders
✔️ Startup & innovation showcases
✔️ Strategic forums and policy dialogues
✔️ Investment and partnership opportunities
✔️ Access to the fast-growing Central Asian tech market
📍 Tashkent, Uzbekistan
📅 September 22–25, 2026
Be part of the conversations that will define your tomorrow.
Join ICT Week Uzbekistan 2026.
Let’s connect. Let’s collaborate. Let’s build the future — together.
#ICTWeekUzbekistan2026#ICTWeek#DigitalTransformation#Innovation#TechLeadership#CentralAsia#FutureIsNow#Uzbekistan
Trump Signs AI Development Plan
President Trump has signed an executive order to establish the U.S. as the world leader in AI. A 180-day deadline is set for creating an AI Action Plan aimed at strengthening America's global dominance in this field. Additionally, Trump has tasked his AI advisor to eliminate policies from the previous administration. This announcement was made during his speech at the World Economic Forum, affirming plans for leadership in AI and cryptocurrency.
For more details, check the full articles: Forklog News
#AI#Crypto#Policy#TechLeadership
#AI#Crypto#Policy#TechLeadership#Trump#Innovation#Economy#NationalSecurity#ExecutiveOrder#Davos#ActionPlan#America#FutureTech#Leadership#GlobalDominance
Market Trends Impact Developer Salaries
Developers face salary stagnation as the job market grows competitive. With more candidates than job openings, mid-senior professionals find job switches yield minimal salary increases. Becoming a tech lead is rare and corporations limit hiring senior candidates. Stability may lie in entrepreneurship or pet projects instead. Consider exploring these options for long-term financial health.
#JobMarket#DeveloperSalaries#Entrepreneurship#PetProject#IT#CareerGrowth#TechIndustry#EmploymentTrends#SalaryTrends#BusinessModel#Stability#Competition#JobSwitch#MidCareer#SeniorDevelopers#MarketAnalysis#ITCareers#FinancialPlanning#TechJobs#Startup#TechLeadership