Menu

#Sethmlarson

2 posts

Feed·
2 of 2 posts
When str.lower() is a security vulnerability in Python
📰
178Read More

When str.lower() is a security vulnerability in Python

Hacker News·2 months ago
#sby7P6M3
#sethmlarson#python#unicode#idna#stringprep

Some internet standards only support ASCII characters, but the world uses much more than the Latin alphabet. Thus, a mapping from Unicode to ASCII for use in domain names is required. NamePrep was...

15s
Are insecure code completions a vulnerability?
📰
47Read More

Are insecure code completions a vulnerability?

Hacker News·5 months ago
#bq4VzEkm
#sethmlarson#code#urllib3#line#behavior

Three months ago I saw that PyCharm shipped with a “Full Line Completion” plugin that “uses a local deep learning model to suggest entire lines of code”. These suggestions manifest as whole-line su...

15s