#435: PyPI Security

Talk Python To Me

Michael Kennedy

Technology

4.8 • 635 Ratings

🗓️ 25 October 2023

⏱️ 63 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Do you worry about your developer / data science supply chain safety? All the packages for the Python ecosystem are much of what makes Python awesome. But the are also a bit of an open door to your code and machine. Luckily the PSF is taking this seriously and hired Mike Fiedler as the full time PyPI Safety & Security Engineer (not to be confused with the Security Developer in Residence staffed by Seth Michael Larson). Mike is here to give us the state of the PyPI security and plans for the future.

Transcript

Click on a timestamp to play from that location

0:00.0	Do you worry about your developer, data science, supply chain safety?
0:03.7	All the packages for the Python ecosystem are much of what makes Python awesome.
0:08.8	But they are also a bit of an open door to your code and machine.
0:13.4	Luckily, the PSF is taking this seriously and hired Mike Fiedler as the full-time PiPi safety and security engineer.
0:20.6	Not to be confused with a security developer and residence
0:23.6	staffed by Seth Michael Larson.
0:25.8	Mike Fiedler is here to give us the state of PiPI security
0:29.6	and their plans for the future.
0:32.0	This is Talk Pythonomy, episode 435, recorded September 18th, 2023.
0:36.9	Thank you. episode 435 recorded September 18th, 2023.
0:54.3	Welcome to Talk Python, a weekly podcast on Python.
0:56.0	This is your host, Michael Kennedy.
1:01.2	Follow me on Massadon, where I'm at M. Kennedy, and follow the podcast using at TalkPython,
1:03.5	both on Bostadon.org.
1:08.6	Keep up with the show and listen to over seven years of past episodes at TalkPython.fm.
1:12.6	We've started streaming most of our episodes live on YouTube. Subscribe to our YouTube channel over at Talk Python.fm. We've started streaming most of our episodes live on YouTube. Subscribe to our YouTube channel over at TalkPython.fm slash YouTube to get notified about upcoming shows and be part of that episode.
1:20.6	This episode is sponsored by Century. Don't let those errors go unnoticed. Use Century. Get Get started at TalkPython.fm slash Sentry.
1:29.8	And it's also brought to you by us over at Talk Python training. Did you know that we have over 250 hours of Python courses?
1:38.7	Yeah, that's right. Check him out at TalkPython.fm slash courses.
1:43.1	Hey, Mike. Hey, Michael.
1:44.6	Welcome to Talk Python.
1:45.9	It's awesome to have you here.
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from Michael Kennedy, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Michael Kennedy and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.