Búsquedas recientes

No hay búsquedas recientes

Opciones de búsqueda

Solo disponible si inicias sesión.
masto.es es uno de los varios servidores independientes de Mastodon que puedes usar para participar en el fediverso.
Bienvenidos a masto.es, el mayor servidor de Mastodon para hispanohablantes de temática general. Registros limitados actualmente a invitaciones.

Administrado por:

Estadísticas del servidor:

1,9 K
usuarios activos

masto.es: Acerca deEstadoDirectorio de perfilesPolítica de privacidad

Mastodon: Acerca deObtener la aplicaciónAtajos de tecladoVer código fuentev4.4.2

#python

181 publicaciones155 participantes12 publicaciones hoy
Continuó el hilo
danzin

Here's how lafleur works:

Starts from a corpus of seed files (generated by fusi)l. It runs each file and parses the JIT debug output to record micro ops (UOPs) and edges between them.

Then it applies mutations to these files and when a mutation results in a new UOP or edge, it adds the mutated file to the corpus.

All the while, it monitors the execution of these files for crashes.

And it's smart about which file to mutate next.

Simple, eh?

#Python#CPython#fuzzer
danzin

One obvious thing from fuzzing the CPython JIT with the lafleur fuzzer is that finding crashes is much lower probability than fuzzing CPython with fusil.

Whenever fusil found a crash, it would find hits for it again and again pretty quickly.

With lafleur, we only got 3 hits (2 issues) in thousands of fuzzing hours.

I'm throwing more compute at it, but maybe we'll need to improve the core ideas to get better results.

github.com/devdanzin/lafleur

A feedback-driven, evolutionary fuzzer for the CPython JIT compiler. - devdanzin/lafleur
GitHubGitHub - devdanzin/lafleur: A feedback-driven, evolutionary fuzzer for the CPython JIT compiler.A feedback-driven, evolutionary fuzzer for the CPython JIT compiler. - devdanzin/lafleur
#Python#CPython#fuzzer
Continuó el hilo
Elio Campitelli

Zen of #python: There should be one-- and preferably only one --obvious way to do it.

Reality of python: there are 20 ways of installing packages and managing environments and nothing is obvious about how to use them.

TechnoTenshi :verified_trans: :Fire_Lesbian:

Popular Python package num2words v0.5.15 was flagged as compromised after being published without a GitHub tag. Linked to the "Scavenger" threat actor, it was quickly removed from PyPI. Projects using automated tools may have already pulled the malicious version. Check and downgrade if needed.

stepsecurity.io/blog/supply-ch

www.stepsecurity.ioSupply Chain Security Alert: num2words PyPI Package Shows Signs of Compromise - StepSecurityPopular Python Package num2words v0.5.15 Published Without Repository Tag, Linked to Known Threat Actor
#Python#SupplyChainSecurity#PyPI
Respondió en el hilo
*
grobi

From technic960183

spherimatch:
A Python package for cross-matching and self-matching in spherical coordinates.

spherimatch is a Python package for efficient cross-matching and self-matching of astronomical catalogs in spherical coordinates. Designed for use in astrophysics, where data is naturally distributed on the celestial sphere, the package enables fast matching with an algorithmic complexity of O(NlogN). It supports Friends-of-Friends (FoF) group identification and duplicate removal in spherical coordinates, and integrates easily with common data processing tools such as pandas.

github.com/technic960183/spher

technic960183.github.io/spheri
technic960183.github.io/spheri

pypi.org/project/fofpy/
linuxtut.com/en/68a22081e84803

A Python package for cross-matching and self-matching in spherical coordinates. - technic960183/spherimatch
GitHubGitHub - technic960183/spherimatch: A Python package for cross-matching and self-matching in spherical coordinates.A Python package for cross-matching and self-matching in spherical coordinates. - technic960183/spherimatch
#space#code#python
En tendenciaCronologías
Acerca de