Cheuk Ting Ho: Trojan Source Malware - Can we trust open-source anymore?

Speaker:: Cheuk Ting Ho

Track: PyCon: Python Language
Recently, a paper is published to demonstrate how a visibly valid contribution can contain malicious code by exporting the Unicode control characters. Some of these attacks has been tested on Python and it works. Shall the Python and open-source communities be concerned?
Recorded at the PyConDE & PyData Berlin 2022 conference, April 11-13 2022.
https://2022.pycon.de
More details at the conference page: https://2022.pycon.de/program/HYGPW9
Twitter: https://twitter.com/pydataberlin
Twitter: https://twitter.com/pyconde

Видео Cheuk Ting Ho: Trojan Source Malware - Can we trust open-source anymore? канала PyConDE