News for hackers. Stuff that matters.

A comment on Malicious PyPI packages stealing credit cards and injecting code. Parent comment

Re:Malicious PyPI packages stealing credit cards and injecti... by landonxjames on Tuesday August 03, 2021 @12:43PM (#28051290)
Deno (a Node-like runtime by the original author of Node) has a security model kind of like this [0]. Its unfortunately not as granular as I think it should be (only operates on the module level and not individual dependencies), but its a start.

[0] https://deno.land/manual/getting_started/permissions

[ Parent | on HN ]
Re:Malicious PyPI packages stealing credit cards and injecti... by bredren on Tuesday August 03, 2021 @02:10PM (#28052233)
Ryan Dahl, (above mentioned creator of Deno), gave his second podcast interview ever this spring, it went live June 8th. [1]

It covers a lot of terrain including the connectivity permissions control.

I recommend it as an easy way to learn about Deno and how it is different from Node as it is today.

Node seems to have evolved to handle some of what Deno set out to do at the start. It is worth hearing from Dahl why Deno is still relevant and for what use cases.

Dahl speaks without ego and addresses interesting topics like the company built around Deno and monetization plans.

[1] https://changelog.com/podcast/443

[ Parent | on HN ]