veyepar: Why does Python need security transparency?

Author(s):	Steve Dower
Location	Mystic Theatre
Date	dec Sat 02	Days Raw Files
Start	11:47	First Raw Start	11:34
Duration	0:25:0	Offset	0:12:19
End	12:12	Last Raw End	12:34
Chapters	00:00 0:17:41 0:25:51
Total cuts_time	25 min.

https://2017.northbaypython.org/schedule/presentation/2/
raw-playlist raw-mp4-playlist encoded-files-playlist host archive tweet mp4 svg png

assets release.pdf Why_does_Python_need_security_transparency.json
logs
Admin: episode episode list cut list raw files day marks day marks day image_files

State:

Locked:

clear this to unlock

Locked by:

user/process that locked.

Start:

initially scheduled time from master, adjusted to match reality

Duration:

length in hh:mm:ss

Name:

Video Title (shows in video search results)

Emails:

email(s) of the presenter(s)

Released:

has someone authorised pubication

Normalise:

Channelcopy:

m=mono, 01=copy left to right, 10=right to left, 00=ignore.

Thumbnail:

filename.png

Description:

markdown

The days of "software vulnerability" being a synonym for "buffer overflow" are over. Modern vulnerabilities are those that enable attackers to get into your network and stay in your network. Beyond simple bugs, any tool that can execute arbitrary code becomes a vulnerability - _especially_ if you don't know when it is doing that.

Python is a popular tool with attackers, in large part because it can download encrypted code, decrypt and execute it with a single line of code. And once that entire payload is running, nobody knows exactly what it is doing.

[PEP 551](https://www.python.org/dev/peps/pep-0551/) adds a range of auditing hooks to the Python runtime, enabling system administrators to see into how it is being used. You can inspect every piece of code that is compiled and executed, intercept calls that modify trace functions, and collect information on code that uses native functions through `ctypes`.

This session will look at why we need security transparency in Python. We will look at actual examples of malware written in Python, and see how the hooks provided by PEP 551 enable administrators to detect and prevent attacks on their systems.

Comment:

production notes

2017-12-02/11_34_51.ts Apply: 11:47:10 - 12:04:51 ( 00:17:41 ) S: 11:34:51 - E: 12:04:51 D: 00:30:00 (Start: 739.0) show more... TS=01:40:38.365 Please welcome Steve Dower to

vlc ~/Videos/veyepar/nbpy/nbpy17/dv/mystic/2017-12-02/11_34_51.ts :start-time=0739.0 --audio-desync=0

	Raw File	Cut List
	11:34:51		seconds: 739.0 Wall: 11:47:10
Duration	00:30:00
	12:04:51		seconds: 0.0 Wall: 11:34:51
Comments:		TS=01:40:38.365 Please welcome Steve Dower to
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete

2017-12-02/12_04_51.ts Apply: 12:13:01 - 12:13:08 ( 00:00:07 ) S: 12:04:51 - E: 12:34:50 D: 00:29:59 (Start: 490.0) (End: 497.0) show more... TE=02:06:34.553 token of our appreciation, and

vlc ~/Videos/veyepar/nbpy/nbpy17/dv/mystic/2017-12-02/12_04_51.ts :start-time=0490.0 --audio-desync=0

	Raw File	Cut List
	12:04:51		seconds: 490.0 Wall: 12:13:01
Duration	00:29:59
	12:34:50		seconds: 497.0 Wall: 12:13:08
Comments:		TE=02:06:34.553 token of our appreciation, and
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete