Comment

Comment by nurettin

* Insecure: If you are unpickling insecure code, you have other problems. Deserializers should not be used as a protection against hacking.

* Old pickles look like old code: Again, convert your object into json and serialize that to your database. Oh no, you are missing an attribute. Pickle should not be used so you don't have to employ a release engineer.

* Implicit: No software works everywhere with defaults. So use copyreg.

* Over-serializes: USE copyreg.

* __init__ isn’t called: USE COPYREG.

* Python only: what's this for, then? http://www.picklingtools.com/

* Unreadable: Great feature.

* Appears to pickle code: Another great feature.

* Slow: check again, it has been 8 years. I can't find any faster method.

parent nurettin 6 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton