5 ms·

As a Python developer, I am so happy right now.

by IgorPartola 5y ago

CodeSheikh 5y ago
But are you really really happy, mate?
- hulitu 5y ago
  No, he is just long long happy.
  - mrlonglong 5y ago
    Paging me?
cjfd 5y ago
https://www.google.com/search?q=python+security+vulnerablities https://www.google.com/search?q=python+security+vulnerabliti...
niyikiza 5y ago
But what TYPE of happy are you?
- bussierem 5y ago
  He's leaving it up for interpretation
- linkdd 5y ago
  as long as happy is implemented, it does not matter what type of happy.
- asymptotic 5y ago
  If you walk as if you’re happy, talk as if you’re happy, and quack like a happy person, then you are happy. This is the Way.
  - pavon 5y ago
    Unless you're happy in a slightly different way than expected. Oh and we aren't going to bother documenting what we mean by happy, and it may be different for different functions, and we may change it at any time as a side effect of normal code maintenance.
- IgorPartola 5y ago
  I don’t give a duck.
- baq 5y ago
  don't have to know to be keep being happy!
- speedgoose 5y ago
  Don't trust his hints.
- dotancohen 5y ago
  He's a Python dev. He's the duck type of happy.
kgeist 5y ago
Today I was tasked to audit our system for uses of log4j and I was so relieved to learn all our services are written in Go or PHP. Also noticed we were continously scanned for the vulnerability (random "jndi:ldap" in requests) from different IPs, some from China
- dotancohen 5y ago
  > ...relieved to learn all our services are written in ... PHP. Testimony to just how bad this issue is!
bdamm 5y ago
There's nothing about Python that actually stops this kind of attack. It just happens to be Java this time around. But providing expansive evaluation of variables is definitely something Python should be concerned about. This would be a good time to check if poor patterns around logging and having untrusted strings in trusted contexts exists in your code base, no matter the language.

5 ms·

As a Python developer, I am so happy right now.

by IgorPartola 5y ago

As a Python developer, I am so happy right now.

CodeSheikh 5y ago
But are you really really happy, mate?
- hulitu 5y ago
  No, he is just long long happy.
  - mrlonglong 5y ago
    Paging me?
cjfd 5y ago
https://www.google.com/search?q=python+security+vulnerablities https://www.google.com/search?q=python+security+vulnerabliti...
niyikiza 5y ago
But what TYPE of happy are you?
- bussierem 5y ago
  He's leaving it up for interpretation
- linkdd 5y ago
  as long as happy is implemented, it does not matter what type of happy.
- asymptotic 5y ago
  If you walk as if you’re happy, talk as if you’re happy, and quack like a happy person, then you are happy. This is the Way.
  - pavon 5y ago
    Unless you're happy in a slightly different way than expected. Oh and we aren't going to bother documenting what we mean by happy, and it may be different for different functions, and we may change it at any time as a side effect of normal code maintenance.
- IgorPartola 5y ago
  I don’t give a duck.
- baq 5y ago
  don't have to know to be keep being happy!
- speedgoose 5y ago
  Don't trust his hints.
- dotancohen 5y ago
  He's a Python dev. He's the duck type of happy.
kgeist 5y ago
Today I was tasked to audit our system for uses of log4j and I was so relieved to learn all our services are written in Go or PHP. Also noticed we were continously scanned for the vulnerability (random "jndi:ldap" in requests) from different IPs, some from China
- dotancohen 5y ago
  > ...relieved to learn all our services are written in ... PHP. Testimony to just how bad this issue is!
bdamm 5y ago
There's nothing about Python that actually stops this kind of attack. It just happens to be Java this time around. But providing expansive evaluation of variables is definitely something Python should be concerned about. This would be a good time to check if poor patterns around logging and having untrusted strings in trusted contexts exists in your code base, no matter the language.