Writing secure code in Python｜Yan Orestes｜PyCon APAC 2022

PyCon APAC 2022｜一般演講 Talks｜國泰金控 Cathay Financial Holdings / 美光科技 Micron 冠名贊助

✏️ 共筆 Note：https://hackmd.io/@pycontw/S1CeDpXJj 🖐🏻 Slido：https://app.sli.do/event/pahqjwBL6eQNto2TDS2qog 🪧 投影片 Slides：https://speakerdeck.com/yyyyyyyan/pycon-apac-2022-writing-secure-code-in-python 💬 語言 Language：英文 English 🎯 層級 Level：中階 Intermediate 🔎 分類 Category：資訊安全 Security

💡 摘要 Abstract 💡 The talk will analyze a series of vulnerabilities that given some common mistakes might end up damaging your Python programs. At the end, a precaution and audit method will be presented.

🪄 說明 Description 🪄 Is your Python code secure? This talk will show how some inattentions, mistakes and assumptions that we, as developers, carry in our code can lead to serious vulnerabilities in our applications. All of that, of course, with lots of examples! At the end, the talk will present a simple way to audit Python code in order to facilitate the maintenance of your security with the identification of possible vulnerabilities.

• Learn how eval(), pickle, and pip are vulnerable to arbitrary code execution
• Understand the importance of cryptographically-secure randomness
• Learn how to audit your code and keep your programs secure
• And more!

🚀 關於講者 About Speaker - Yan Orestes 🚀 Yan Orestes is a Brazilian Python developer, speaker, privacy freak and security enthusiast. He's worked as a teacher and takes education as a true passion in his life. Whenever he finds time, Yan ends up writing blog posts and essays and talking in conferences everywhere, following what he believes is most important in the world - sharing knowledge.

#pycontw #pyconapac2022 #python #datasecurity

Follow “PyCon Taiwan” ⭐️ Official Website: https://tw.pycon.org ⭐️ Facebook: https://www.facebook.com/pycontw ⭐️ Instagram: https://www.instagram.com/pycontw ⭐️ Twitter: https://twitter.com/PyConTW ⭐️ LinkedIn: https://www.linkedin.com/company/pycontw ⭐️ Blogger: https://pycontw.blogspot.com ... https://www.youtube.com/watch?v=lcYCbwZ3Uug