#319: Typosquatting and Supply Chains Vulnerabilities
Talk Python To Me6 Kesä 2021

#319: Typosquatting and Supply Chains Vulnerabilities

One of the true superpowers of Python is the libraries over at the Python Package Index. They are all just a "pip install" away. Yet, like all code that you run on your system, it is done with some degree of trust. How do we know that all of those useful packages are trustworthy? That's the topic of this episode. Bentz Tozer and John Speed Meyers are here to share their research into typosquatting on PyPI and other sneaky deeds. But we also discuss some potential solutions and fixes.

Jaksot(542)

#495: OSMnx: Python and OpenStreetMap

#495: OSMnx: Python and OpenStreetMap

On this episode, I'm joined by Dr. Geoff Boeing, an assistant professor at the University of Southern California whose research spans urban planning, spatial analysis, and data science. We explore why...

24 Helmi 20251h 1min

#494: Update on Flet: Python + Flutter UIs

#494: Update on Flet: Python + Flutter UIs

As Python developers, we're incredibly lucky to have over half a million packages that we can use to build our applications with over at PyPI. However, when it comes to choosing a UI framework, the op...

21 Helmi 20251h

#493: Quarto: Open-source technical publishing

#493: Quarto: Open-source technical publishing

In this episode, I'm joined by JJ Allaire, founder and executive chairman at Posit, and Carlos Scheidegger, a software engineer at Posit, to explore Quarto, an open-source tool revolutionizing technic...

9 Helmi 20251h 5min

#492: Great Tables

#492: Great Tables

Join me as I chat with Rich Iannone and Michael Chow from Posit where we explore the transformative power of data tables with the Great Tables library. We'll cover practical applications of Great Tabl...

30 Tammi 20251h 4min

#491: DuckDB and Python: Ducks and Snakes living together

#491: DuckDB and Python: Ducks and Snakes living together

Join me for an insightful conversation with Alex Monahan, who works on documentation, tutorials, and training at DuckDB Labs. We explore why DuckDB is gaining momentum among Python and data enthusiast...

27 Joulu 20241h 2min

#490: Django Ninja

#490: Django Ninja

If you're a Django developer, I'm sure you've heard so many people raving about FastAPI and Pydantic. But you really love Django and don't want to switch. Then you might want to give Django Ninja a se...

24 Joulu 20241h 4min

#489: Anaconda Toolbox for Excel and more with Peter Wang

#489: Anaconda Toolbox for Excel and more with Peter Wang

Peter Wang has been pushing Python forward since the early days of its data science roots. We're lucky to have him back on the show. We're going to talk about the Anaconda Toolbox for Excel as well as...

20 Joulu 20241h 9min

#488: Multimodal data with LanceDB

#488: Multimodal data with LanceDB

LanceDB is a developer-friendly, open source database for AI. It's used by well-known companies such as Midjourney and Character.ai. We have Chang She, the CEO and cofounder of LanceDB on to give us a...

12 Joulu 202458min