News for hackers. Stuff that matters.

A comment on AIsbom – open-source CLI to detect "Pickle Bombs" in PyTorch models. Parent comment

Re:AIsbom – open-source CLI to detect "Pickle Bombs" in PyTo... by ivape on Tuesday December 16, 2025 @01:19PM (#46292113)
Consider adding a little UI to this. If I can just right-click a model/zip/folder and click "scan", then there's really no reason not to have this around (speaking in terms of removing any practical barrier, including laziness).
[ Parent | on HN ]
Re:AIsbom – open-source CLI to detect "Pickle Bombs" in PyTo... by lab700xdev on Tuesday December 16, 2025 @02:13PM (#46292972)
That barrier to entry ("laziness") is the #1 security vulnerability. If it takes 3 minutes to set up a scanner, nobody does it. That's actually why we built the Web Viewer - so you can just drag-and-drop the JSON output rather than reading terminal logs. But a native OS "Right Click --> Scan with AIsbom" Context Menu integration is a fantastic idea for a future desktop release. Thanks.
[ Parent | on HN ]