News for hackers. Stuff that matters.

A comment on Investigating a backdoored PyPI package targeting FastAPI applications. Parent comment

Re:Investigating a backdoored PyPI package targeting FastAPI... by christophetd on Thursday November 24, 2022 @08:22AM (#33731014)
Hello! One of the authors of the post here. Just added a sentence in the introduction to make it crystal clear:

> While FastAPI itself is not impacted, this is an interesting occurrence of an attacker attempting to deploy a FastAPI-specific backdoor.

Appreciate your feedback!

[ Parent | on HN ]
Re:Investigating a backdoored PyPI package targeting FastAPI... by flutas on Thursday November 24, 2022 @12:00PM (#33733526)
FYI: You left a name and email in the github history.

I know they are public via GH, but it feels weird to redact every piece of PII including avatar, then leaving a name and email in there.

[ Parent | on HN ]
Re:Investigating a backdoored PyPI package targeting FastAPI... by christophetd on Thursday November 24, 2022 @12:20PM (#33733793)
Thanks for the heads-up, the goal was mostly avoiding that typing the author's name in Google brings up this post. I'll have it blurred for the sake of consistency, though.
[ Parent | on HN ]