News for hackers. Stuff that matters.
Re:AI Supply Chain Attack: How Malicious Pickle Files Backdo... by westurner on Saturday March 22, 2025 @11:45AM (#43446588)
Code in packages should be signed.

Code in pickles should also be signed.

I have no need for the pickle module now, but years ago thought there might have been safer way to read data that was already in pickles.

For backwards compatibility, skipcode=False must be the default,

were someone to implement a pickle str parser that doesn't eval code.

JS/ES/TS Map doesn't map to JSON.

There are no comments on this comment yet.