News for hackers. Stuff that matters.

A comment on Dozens of malicious PyPI packages discovered targeting developers. Parent comment

Re:Dozens of malicious PyPI packages discovered targeting de... by jjav on Wednesday November 02, 2022 @05:53PM (#33443419)
This is essentially the fine-grained control the Java Security Manager enabled. But hardly anyone used it and it was deprecated sadly.
[ Parent | on HN ]
Re:Dozens of malicious PyPI packages discovered targeting de... by charleslmunger on Wednesday November 02, 2022 @07:34PM (#33444364)
And it didn't really work in practice. Every callback or thread hop is a security vulnerability by default.
[ Parent | on HN ]