Mastodon Feed
2 years ago I gave a talk which is, in part, about how Python virtual environments are unsandboxed by default. They don't run in containers. This is true of every other programming language's development environments, too; `npm install`, `cargo run`, all do vaguely the same thing at this level. https://pyvideo.org/pybay-2024/when-arbitrary-code-execution-is-working-as-intended-what-code-is-python-supposed-to-execute.html