News for hackers. Stuff that matters.

A comment on Python Pickle Security Problems and Solutions. Parent comment

Re:Python Pickle Security Problems and Solutions by travcunn on Thursday November 19, 2015 @10:48AM (#10595363)
It doesn't stop a lot of people from using it though. A quick search of Python code on GitHub for 'import pickle' shows almost 800,000 results: https://github.com/search?l=python&q=import+pickle&type=Code... And that's just public repos. Who knows how much it is used in private repos?
[ Parent | on HN ]
Re:Python Pickle Security Problems and Solutions by dalke on Thursday November 19, 2015 @01:47PM (#10596663)
My own code uses pickle. The problem is using untrusted pickles. My scan of a few dozen of those pages shows no insecure use.
[ Parent | on HN ]