Search Engine Vulnerabilities, Ghost Tokens, Anna Kournikova
Hacker And The Fed
00:00
Giaraffe Security: How to Find Dependency Confusions in Large Tech Companies
Python is a language of unarguably the worst dependency management system. With Python, it is extremely easy to misconfigure installation scripts and to be prone to dependency confusion. An example shows a command to pip install kaboom and then of course the extra index URL which points to an extra URL. Despite having known this for years now, it is still widely used.
Transcript
Play full episode
