Fiona Markus

#Python’s built-in subprocess is powerful for executing external commands. However, it also introduces significant #security risks if misused. Legacy subprocess functions carry a high severity rating. Solution check and improve github.com/nocomplexity/code… #pydata #infosec

Python code can introduce serious risks onto your system. Use this checklist of the must-do and should-do actions before you install or execute any #Python program. #pydata #pycon #owasp #PHP2Shell #CVEALERT #DataScience

How To Use Secrets in Python Code: Keep Your Secrets Safe: Modern Practices for Python Code Never ever use the Python dotenvproject or .envfiles for managing secrets in Python applications. medium.com/@maikelmardjan/ho… #python #secrets #owasp #pydata

#datalek moe? Security by Design:Leer hoe je beveiliging vanaf het begin meeneemt in het ontwerp. organisatieontwerp.nl/securi… Python File Audit beschermd…Secure Programming is zo simpel. github.com/nocomplexity/file… #infosec #informatiebeveiliging

#datalek moe? Security by Design:Leer hoe je beveiliging vanaf het begin meeneemt in het ontwerp. organisatieontwerp.nl/securi… Python File Audit beschermd…Secure Programming is zo simpel. github.com/nocomplexity/file… #infosec #informatiebeveiliging

#Gratis toegang tot de allerbeste #Python boeken? Check: nocomplexity.com/documents/p… Geen gedoe! Alles is 100% open (cc-by), geen account nodig, geen paywall en geen inbreuk op je #privacy of vieze #trackingcookies ! #gratis #leren #AI #datascience

Running third-party or unknown Python code is one of the fastest ways to introduce serious risk onto your system. medium.com/@maikelmardjan/ho… #python #cybersecurity #cybersecuritytips

Obfuscation using Base64 is a simple technique to conceal malicious code in #Python projects. It enables #attackers to hide payloads that would otherwise be easily identified. So use github.com/nocomplexity/code… #pydata #openai #mythos #infosec #owasp

Een online tool om direct een Causal Loop Diagram(CLD) te maken. Een CLD tool helpt je om voor complexe systemen en problemen oorzaak-en-gevolg relaties snel, overzichtelijk te visualiseren en te analyseren. nocomplexity.com/causalloopd… #architectuur #oplossingen #cld #ontwerp

Processing untrusted GZip files can lead to: •Zip bombs •Denial of service •Path traversal •TOCTOU attacks and more #unwanted things So use just one line @validate_gz To be #secure github.com/nocomplexity/file… #python #infosec #pydata #hackernews #mythos

Defusing XML #bombs and other exploits Protect Your #Python Application From Evil #XML Files in Seconds validate_xml(xml_file) #python #infosec #mythos #DataProtection medium.com/@maikelmardjan/de…

loading csv files can result in a security nightmare. So check! @validate_csv def process_csv(csv_path): text = Path(csv_path).read_text(encoding="utf-8") return f"Processed {len(text.splitlines())} lines from {csv_path}" github.com/nocomplexity/file… #infosec #pydata #appsec

File Audit – Simplify #Python Secure Programming by adding one line! Build secure Python applications by default. Validate files before you use them. Be resilient for #mythos and #ai #threat github.com/nocomplexity/file… #pycon #PyTorch #pydata #pandas