Posts by bbaugh@infosec.exchange
 (DIR) Post #ARiTzTFtR1M7o8wlfc by bbaugh@infosec.exchange
       2023-01-16T13:43:00Z
       
       1 likes, 0 repeats
       
       @stargirl I agree that where we are now is far from where we should/want/need to be. However, I disagree with the defeatist view. There is a very real need for a package management system that doesn’t let you install or use packages that were not intended. The solution will either be we make such a package management system or Python is excluded from a large swath of use cases that pay the bills so to speak. I choose to work towards such a system and to incentivize those who will benefit to support that effort.
       
 (DIR) Post #ARiU1srdC34loKkVg8 by bbaugh@infosec.exchange
       2023-01-16T22:17:06Z
       
       1 likes, 0 repeats
       
       @brettcannon @stargirl In short pip. There are a number a ways this can happen including typosquatting, abusing authority, abandon packages, etc. These are all real and persistent problems that can easily port to conda (via conda-forge or supply chain).  https://www.theregister.com/2021/03/02/python_pypi_purges/
       
 (DIR) Post #ATypgjZhVZg4dsZLsm by bbaugh@infosec.exchange
       2023-03-25T16:55:31Z
       
       0 likes, 0 repeats
       
       @TedUnderwood same. The web version is different. I won’t say better but different.
       
 (DIR) Post #AWMgXxPnxrZ5jtFMIq by bbaugh@infosec.exchange
       2023-06-03T17:02:11Z
       
       0 likes, 1 repeats
       
       Great discussion with @timkmak by @benjaminwittes. More justification to sign up for Tim’s Counteroffensive substack. https://overcast.fm/+vh1qk362E
       
 (DIR) Post #AXP6mMEFBC7FNuQLZY by bbaugh@infosec.exchange
       2023-07-06T02:08:16Z
       
       1 likes, 0 repeats
       
       @capitalweather here’s hoping you can find a posting tool that works with your flow. I certainly miss your content being here.
       
 (DIR) Post #AbcG93JZmrbw1In2Qq by bbaugh@infosec.exchange
       2023-11-09T02:30:22Z
       
       0 likes, 0 repeats
       
       @benjaminwittes the DC tash company will not pick up the whole can at times if they see it and the owner has to clean it up.
       
 (DIR) Post #B0w3LdOGVWbolk7VJY by bbaugh@infosec.exchange
       2025-12-05T10:23:43Z
       
       0 likes, 0 repeats
       
       @johnmacintosh pretty sure those are not real. Paper clips do not look like that and would not work if they did.