Plurrrr

Sun 14 Aug 2022

Java Heap Dump Analysis with Examples

I am a big fan of Java Memory Management and in this article, I will try to explain how to take and analyze heap dump with examples, but let’s refresh our minds and remember what we know about this domain. After some theoretical information, we will take a heap dump and will analyze it for a simple application.

Source: Java Heap Dump Analysis with Examples, an article by Huseyin Babal.

Loading Dangerously: PyYAML and Safety by Design

The Python standard library json.load does not have “side effects” besides reading a stream of text input. Because I assumed YAML was equivalent to JSON and had not read the 23,000+ word spec, I assumed that PyYAML’s yaml.load had the same properties. Last June, I learned that this was incorrect.

In tip #7 of 10 Common Security Gotchas in Python, I learned that using yaml.load could run arbitrary code. While the danger of this possibility is limited only by your imagination, the article provided the very plausible example of having your passwords emailed to a hacker.

Source: Loading Dangerously: PyYAML and Safety by Design, an article by Cameron Yick.