Viewing profile — objectified

I was thinking the exact same thing. It gets a lot more attention on Youtube, really not understanding what's up.

> The moment you run LLM generated code, any hallucinated methods will be instantly obvious: you’ll get an error. You can fix that yourself or you can feed the error back into the …

The problem there though, is that with PoCs like this, as an attacker you want to have a ping back to your system so that you know the attack has been successful (in this case they…

At first I was excited to see that a new tool would solve the Python "packaging" problem. But upon further reading, I realized that this was about _package management_, not so much…

I don't think these are official public webcams. At least, that's how I interpret their FAQ: https://www.insecam.org/en/faq/

1. Like you already hinted at, it is really difficult to get right, and I hardly experience any larger website (with multiple teams working on it) that implement it effectively. So…

I'm not sure I understand your question correctly, but I'm talking specifically about outbound network traffic. Your API's application servers (where such evil libraries could be d…

This will keep happening, and not only will SSH And GPG keys be the target, but any interesting data will be stolen. And the problem is much larger than these typosquatting attacks…

In case you are still interested in reading about the security aspect of logging, there is the OWASP Logging Cheat Sheet dedicated to this: https://github.com/OWASP/CheatSheetSerie…

Lots of problems are merely I/O related, which can be solved just fine with Python threads. As for number crunching (let's assume that means CPU intensive tasks), you can always st…

CVSS is a common and open approach. CVSS scores that are particularly high, are often directly exploitable. If they aren't, then probably their calculation was done wrong. You can …

I think it's important to be careful with drawing conclusions about what might or might not be used by whatever is running in your container and exposed to end users, if only for t…

On premise deployed stacks are usually shielded off by network firewalls though, which cannot be said about most cloud based services (yes, I get it from a convenience point of vie…

But now you're hitting on one of the main points that was always criticized in PHP: the fact that it came with a lot of batteries included. The upside of this is that it makes PHP …

The article mentioned ctags, which actually gets you quite far in this regard. Combined with CtrlP (a vim plugin) and the Silver Searcher, I navigate large codebases quite quickly.…

That's a rather quick conclusion. In the blog post she writes that at least once she helped debugging code, so perhaps she just prefers to have some association around a problem, i…

Although you're right, one could argue that this is the world you most likely end up in when you "do Java", as most Java job openings seem to list at least one or two of the framew…

I must say that the more I read articles of this character, the more I feel that it would make sense to distinct between different types of "engineers". A lot of the proposed advic…

Probably a controversial topic, as this touches on holy grails. My personal take on this, given my own experience so far: 1) You don't strictly need to know Big O notation in order…

I could think of a few reasons why you would like to run something in a Docker container. - OS packaging is tedious to say the least, and "git clone and pull dependencies on produc…

Being able to ship a self contained binary of your application is a very powerful concept, on which many seem to agree. The way I see it, pip and virtualenv are not practical for d…

IMHO, this is a very important project as it makes up for one of the biggest shortcomings in the Python ecosystem - distribution of software. Distribution is clearly one of the rea…

There are many others, of which Wing IDE[1] and Komodo[2] are probably the most well known. There's also a page[3] on the Python wiki listing a bunch more. [1]: https://wingware.co…

I think that for the majority of use cases when it comes to packaging and shipping Python programs, we really want to ship OS packages. We don't want users (that includes sysadmins…

Well, one of the main advantages of using a configuration management tool is that the configurations you're writing are actually repeatable, and these tools tend to provide you wit…