Tag: python

All the articles with the tag "python".

• Dangerous Python Functions, Part 3

  Published:Jan 30, 2017

  |1 min read

  A brief follow-up to the dangerous Python functions series, with an embedded exploit example for jsonpickle deserialization.

• DevOps from Scratch, Part 1: Vagrant & Ansible

  Published:Sep 19, 2016

  |16 min read

  A step-by-step Flask setup using Vagrant and Ansible to automate a local server, with Gunicorn and nginx. Part one of a 2016 tutorial series.

• Answers to Django Security Questions

  Published:Oct 16, 2015

  |9 min read

  I found a list of Django security questions but couldn't find clear answers anywhere. So I dug in and wrote them myself, covering everything from CSRF and SQL injection to password hashing and mass assignment.

• Using Bandit in the Field

  Published:Sep 25, 2015

  |7 min read

  A field report from testing Bandit on Python projects in 2015: running scans, interpreting warnings, and deciding which findings need attention.

• Finding Vulnerabilities with Bandit

  Published:Sep 24, 2015

  |2 min read

  Slides from my SoCal Python talk on Bandit, including findings from scanning 16 open-source Python projects for potential security flaws.

• Dangerous Python Functions, Part 2

  Originally:Aug 15, 2015 | updated Feb 21, 2026

  |6 min read

  The second installment covers pickle and YAML deserialization, SQL injection, and information leakage, with examples and safer alternatives.

• Dangerous Python Functions

  Originally:Jul 26, 2015 | updated Feb 21, 2026

  |4 min read

  Examples of command and code injection through Python's shell calls, exec, and eval, with safer alternatives for handling untrusted input.

• Python / Django Talks

  Published:Aug 18, 2014

  |2 min read

  Notes from my commute listening: four Python and Django talks on service architecture, migrations, Unicode, and testable code.

• Submitting a Patch to CPython

  Published:Aug 3, 2014

  |2 min read

  An experiment with UUID performance led me to submit a CPython patch. The benchmarks, proposed change, and steps I followed to contribute.

• 7 Lessons Learned from Teaching My Brother to Program

  Published:Jun 10, 2014

  |4 min read

  Teaching my brother to program over weekend Skype calls taught me to keep projects simple, let him own the work, and make room for mistakes.