Hacker News new | ask | show | jobs
by robinson-wall 3432 days ago
This is nice work, but anyone wanting to try it for themselves should be warned that you shouldn't unpickle data received from an untrusted source.

https://blog.nelhage.com/2011/03/exploiting-pickle/

2 comments

I copied this method of loading datasets from Keras. https://github.com/fchollet/keras/blob/master/keras/datasets.... What's a better alternative.
Another serialization format which doesn't create objects, like JSON, XML, CSV,...
glad to see this as the first comment
Anti-pickler.