AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Giaraffe Security: How to Find Dependency Confusions in Large Tech Companies
Python is a language of unarguably the worst dependency management system. With Python, it is extremely easy to misconfigure installation scripts and to be prone to dependency confusion. An example shows a command to pip install kaboom and then of course the extra index URL which points to an extra URL. Despite having known this for years now, it is still widely used.