Maikel Mardjan
@nocomplexity.bsky.social
IT Architect, (System) Software Engineer, Technology Addict, IT Entrepreneur, Hacker, Track And Field Runner, and Problem solver!
Simplify IT -> https://nocomplexity.com/
Simplify IT -> https://nocomplexity.com/
Pinned
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code security analyzer based on distrust.
Codeaudit - Modern Python source code security analyzer based on distrust. - nocomplexity/codeaudit
github.com
What if you could Identify data exfiltration in #Python code?
I think Detecting and validating potential data exfiltration paths in Python applications is essential.
A critical step in mitigating #security and #privacy risks
github.com/nocomplexity...
I think Detecting and validating potential data exfiltration paths in Python applications is essential.
A critical step in mitigating #security and #privacy risks
github.com/nocomplexity...
Schedule for PyCon NL 2026 is published!
Time to claim your seat and Save the date 15-10-2026
Check www.pycon-nl.org/schedule
Dive into the latest #Python stuff and meet fellow coders at #PyConNL
#utrecht #jaarbeurs #pycon
www.pycon-nl.org
Time to claim your seat and Save the date 15-10-2026
Check www.pycon-nl.org/schedule
Dive into the latest #Python stuff and meet fellow coders at #PyConNL
#utrecht #jaarbeurs #pycon
www.pycon-nl.org
PyCon NL 2026
PyCon NL 2026
www.pycon-nl.org
September 15, 2026 at 6:30 PM
Schedule for PyCon NL 2026 is published!
Time to claim your seat and Save the date 15-10-2026
Check www.pycon-nl.org/schedule
Dive into the latest #Python stuff and meet fellow coders at #PyConNL
#utrecht #jaarbeurs #pycon
www.pycon-nl.org
Time to claim your seat and Save the date 15-10-2026
Check www.pycon-nl.org/schedule
Dive into the latest #Python stuff and meet fellow coders at #PyConNL
#utrecht #jaarbeurs #pycon
www.pycon-nl.org
Is That Python Script Safe? How to Check Before You Run.
nocomplexity.substack.com/p/how-to-saf...
#python #cybersecurity #appsec #codeaudit
nocomplexity.substack.com/p/how-to-saf...
#python #cybersecurity #appsec #codeaudit
How to Safely Use Python Programs from Untrusted Sources
Is That Python Script Safe? How to Check Before You Run
nocomplexity.substack.com
September 15, 2026 at 11:56 AM
Is That Python Script Safe? How to Check Before You Run.
nocomplexity.substack.com/p/how-to-saf...
#python #cybersecurity #appsec #codeaudit
nocomplexity.substack.com/p/how-to-saf...
#python #cybersecurity #appsec #codeaudit
Using causal loop diagrams helps you manage and solve complexity issues.
Solve your problem situation, use this(free!) online system dynamics tool now.
nocomplexity.com/causalloopdi...
#nocomplexity #solve #your #problems #cybersecurity #cld
Solve your problem situation, use this(free!) online system dynamics tool now.
nocomplexity.com/causalloopdi...
#nocomplexity #solve #your #problems #cybersecurity #cld
September 8, 2026 at 8:15 PM
Using causal loop diagrams helps you manage and solve complexity issues.
Solve your problem situation, use this(free!) online system dynamics tool now.
nocomplexity.com/causalloopdi...
#nocomplexity #solve #your #problems #cybersecurity #cld
Solve your problem situation, use this(free!) online system dynamics tool now.
nocomplexity.com/causalloopdi...
#nocomplexity #solve #your #problems #cybersecurity #cld
Voorkom #Cyber #Security incidenten. Simpel en effectief. Python Code Audit is de #opensource oplossing om kwetsbaarheden in Python programma’s te vinden.
Detecteer beveiligingsfouten in #Python voordat je er last van kan krijgen.
organisatieontwerp.nl/codeaudit/
Detecteer beveiligingsfouten in #Python voordat je er last van kan krijgen.
organisatieontwerp.nl/codeaudit/
Yuriatomoki Yuria & Riku: Playful Monkey Fun
ALT: Yuriatomoki Yuria & Riku: Playful Monkey Fun
static.klipy.com
September 5, 2026 at 8:05 AM
Voorkom #Cyber #Security incidenten. Simpel en effectief. Python Code Audit is de #opensource oplossing om kwetsbaarheden in Python programma’s te vinden.
Detecteer beveiligingsfouten in #Python voordat je er last van kan krijgen.
organisatieontwerp.nl/codeaudit/
Detecteer beveiligingsfouten in #Python voordat je er last van kan krijgen.
organisatieontwerp.nl/codeaudit/
Secure CSV Handling in #Python
The Tiny Python Trick That Blocks CSV DoS Attacks:
@validate_csv That’s it. The decorator runs a smart, fast and comprehensive set of checks before your function body executes.
medium.com/@maikelmardj...
#owasp #infosec #appsec #pycon #pydata
The Tiny Python Trick That Blocks CSV DoS Attacks:
@validate_csv That’s it. The decorator runs a smart, fast and comprehensive set of checks before your function body executes.
medium.com/@maikelmardj...
#owasp #infosec #appsec #pycon #pydata
Secure CSV Handling in Python: A Practical Guide
The Tiny Python Trick That Blocks CSV DoS Attacks
medium.com
September 3, 2026 at 3:24 PM
Cybersecurity is often surrounded by myths and perceived as an impossibly complex domain. While it is true that no perfect solution exists, effective security does not have to be difficult.
Check nocomplexity.com/documents/se...
#infosec #cybersec #security
Check nocomplexity.com/documents/se...
#infosec #cybersec #security
September 2, 2026 at 5:04 PM
Cybersecurity is often surrounded by myths and perceived as an impossibly complex domain. While it is true that no perfect solution exists, effective security does not have to be difficult.
Check nocomplexity.com/documents/se...
#infosec #cybersec #security
Check nocomplexity.com/documents/se...
#infosec #cybersec #security
The Simplest Way to Make Evil XML Files Harmless in Python
The majority of Python developers are not security experts, and nor should they have to be! However, AI tools offer little assistance, as LLMs are trained on massive amounts of insecure codebases.
nocomplexity.substack.com/p/defusing-x...
The majority of Python developers are not security experts, and nor should they have to be! However, AI tools offer little assistance, as LLMs are trained on massive amounts of insecure codebases.
nocomplexity.substack.com/p/defusing-x...
Defusing XML bombs and other exploits
The Simplest Way to Make Evil XML Files Harmless in Python
nocomplexity.substack.com
August 28, 2026 at 3:39 PM
The Simplest Way to Make Evil XML Files Harmless in Python
The majority of Python developers are not security experts, and nor should they have to be! However, AI tools offer little assistance, as LLMs are trained on massive amounts of insecure codebases.
nocomplexity.substack.com/p/defusing-x...
The majority of Python developers are not security experts, and nor should they have to be! However, AI tools offer little assistance, as LLMs are trained on massive amounts of insecure codebases.
nocomplexity.substack.com/p/defusing-x...
Processing XML Files is dangerous. So protect against all types of xml bombs with one simple API call…
@validate_xml
github.com/nocomplexity...
@validate_xml
github.com/nocomplexity...
GitHub - nocomplexity/fileaudit: Simplify building secure Python applications by default. Validate files before you use them.
Simplify building secure Python applications by default. Validate files before you use them. - nocomplexity/fileaudit
github.com
August 25, 2026 at 6:25 PM
Processing XML Files is dangerous. So protect against all types of xml bombs with one simple API call…
@validate_xml
github.com/nocomplexity...
@validate_xml
github.com/nocomplexity...
loading csv files can result in a security nightmare. so check!
@validate_csv
def process_csv(csv_path):
text = Path(csv_path).read_text(encoding="utf-8")
return f"Processed {len(text.splitlines())} lines from {csv_path}"
github.com/nocomplexity...
@validate_csv
def process_csv(csv_path):
text = Path(csv_path).read_text(encoding="utf-8")
return f"Processed {len(text.splitlines())} lines from {csv_path}"
github.com/nocomplexity...
GitHub - nocomplexity/fileaudit: Simplify building secure Python applications by default. Validate files before you use them.
Simplify building secure Python applications by default. Validate files before you use them. - nocomplexity/fileaudit
github.com
August 21, 2026 at 6:24 AM
loading csv files can result in a security nightmare. so check!
@validate_csv
def process_csv(csv_path):
text = Path(csv_path).read_text(encoding="utf-8")
return f"Processed {len(text.splitlines())} lines from {csv_path}"
github.com/nocomplexity...
@validate_csv
def process_csv(csv_path):
text = Path(csv_path).read_text(encoding="utf-8")
return f"Processed {len(text.splitlines())} lines from {csv_path}"
github.com/nocomplexity...
Hardening #Python Applications Against #Malicious JSON Payloads
One simple line – validates size, depth, existence and JSON syntax
result = validate_json(”json_demo_files/valid.json”)
nocomplexity.substack.com/p/implementi...
#pydata #appsec #infosec #zerotrust
One simple line – validates size, depth, existence and JSON syntax
result = validate_json(”json_demo_files/valid.json”)
nocomplexity.substack.com/p/implementi...
#pydata #appsec #infosec #zerotrust
Implementing Zero-Trust Input Validation for Python JSON Data
Hardening Python Applications Against Malicious JSON Payloads
nocomplexity.substack.com
August 18, 2026 at 4:52 PM
Hardening #Python Applications Against #Malicious JSON Payloads
One simple line – validates size, depth, existence and JSON syntax
result = validate_json(”json_demo_files/valid.json”)
nocomplexity.substack.com/p/implementi...
#pydata #appsec #infosec #zerotrust
One simple line – validates size, depth, existence and JSON syntax
result = validate_json(”json_demo_files/valid.json”)
nocomplexity.substack.com/p/implementi...
#pydata #appsec #infosec #zerotrust
TAR.GZ archives can embed zip #bombs, path-traversal payloads (../), oversized members, symlinks, device nodes, or excessively deep directory trees.
So Validate files before you use them.
github.com/nocomplexity...
#python #pycon #infosec #appsec
So Validate files before you use them.
github.com/nocomplexity...
#python #pycon #infosec #appsec
GitHub - nocomplexity/fileaudit: Simplify building secure Python applications by default. Validate files before you use them.
Simplify building secure Python applications by default. Validate files before you use them. - nocomplexity/fileaudit
github.com
August 17, 2026 at 8:12 PM
#Python Code should not contain #obfuscated content, particularly code that uses base64 (and related encodings) for encoding or decoding data is always suspected.
So check your code, run a quick #security check
github.com/nocomplexity...
So check your code, run a quick #security check
github.com/nocomplexity...
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code security analyzer based on distrust.
Codeaudit - Modern Python source code security analyzer based on distrust. - nocomplexity/codeaudit
github.com
August 10, 2026 at 5:01 PM
#Python Code should not contain #obfuscated content, particularly code that uses base64 (and related encodings) for encoding or decoding data is always suspected.
So check your code, run a quick #security check
github.com/nocomplexity...
So check your code, run a quick #security check
github.com/nocomplexity...
Hidden Security Risks of System Calls in Python
AI code reviews are limited: they cannot take into account the business context in which code runs and is used. That context is essential.
open.substack.com/pub/nocomple...
#PyTorch #pydata #pycon #owasp #mythos #appsec
AI code reviews are limited: they cannot take into account the business context in which code runs and is used. That context is essential.
open.substack.com/pub/nocomple...
#PyTorch #pydata #pycon #owasp #mythos #appsec
The Hidden Security Risks of System Calls in Python
Navigating the Pitfalls of Python System Calls
open.substack.com
July 28, 2026 at 2:16 PM
Measure the Internet, Solve #puzzles to advance research using #RNAs, reduce #Co2 #emissions from your computing, #reinvent programming and more!
Check our #Radical Open #Innovation News:
www.bm-support.org/roi-news-wee...
Check our #Radical Open #Innovation News:
www.bm-support.org/roi-news-wee...
Radical Open Innovation News week 30-2026 – Radical Open Innovation
www.bm-support.org
July 23, 2026 at 7:44 PM
Measure the Internet, Solve #puzzles to advance research using #RNAs, reduce #Co2 #emissions from your computing, #reinvent programming and more!
Check our #Radical Open #Innovation News:
www.bm-support.org/roi-news-wee...
Check our #Radical Open #Innovation News:
www.bm-support.org/roi-news-wee...
Is CPython Secure?
I think this question should be asked by everyone who uses Python applications or who creates Python applications for others.
medium.com/@maikelmardj...
#python #foss #cybersecurity #cpython #psf
I think this question should be asked by everyone who uses Python applications or who creates Python applications for others.
medium.com/@maikelmardj...
#python #foss #cybersecurity #cpython #psf
Is CPython Secure?
Short answer: Yes! So you can stop reading now.
medium.com
July 21, 2026 at 8:32 PM
Is CPython Secure?
I think this question should be asked by everyone who uses Python applications or who creates Python applications for others.
medium.com/@maikelmardj...
#python #foss #cybersecurity #cpython #psf
I think this question should be asked by everyone who uses Python applications or who creates Python applications for others.
medium.com/@maikelmardj...
#python #foss #cybersecurity #cpython #psf
Using importlib.util.spec_from_file_location() with importlib.util.module_from_spec can bypass the normal #Python import mechanism and allow arbitrary Python files to be executed.
I’ll want this detected in a Python #security code analyser.
So way I created github.com/nocomplexity...
#infosec
I’ll want this detected in a Python #security code analyser.
So way I created github.com/nocomplexity...
#infosec
GitHub - nocomplexity/codeaudit: Codeaudit - Modern Python source code security analyzer based on distrust.
Codeaudit - Modern Python source code security analyzer based on distrust. - nocomplexity/codeaudit
github.com
July 11, 2026 at 5:31 PM
Using importlib.util.spec_from_file_location() with importlib.util.module_from_spec can bypass the normal #Python import mechanism and allow arbitrary Python files to be executed.
I’ll want this detected in a Python #security code analyser.
So way I created github.com/nocomplexity...
#infosec
I’ll want this detected in a Python #security code analyser.
So way I created github.com/nocomplexity...
#infosec
Cross-Ecosystem Vulnerabilities in Python Applications
I am interested in #Python #security #research.
#weaknesses in Python applications are never exposed or registered as #CVE. The process for registering a CVE is long, painful, and very time-consuming.
open.substack.com/pub/nocomple...
I am interested in #Python #security #research.
#weaknesses in Python applications are never exposed or registered as #CVE. The process for registering a CVE is long, painful, and very time-consuming.
open.substack.com/pub/nocomple...
Cross-Ecosystem Vulnerabilities in Python Applications
Security-by-Design: Surviving Vulnerabilities in Your Python Dependencies
open.substack.com
July 8, 2026 at 5:44 PM
Cross-Ecosystem Vulnerabilities in Python Applications
I am interested in #Python #security #research.
#weaknesses in Python applications are never exposed or registered as #CVE. The process for registering a CVE is long, painful, and very time-consuming.
open.substack.com/pub/nocomple...
I am interested in #Python #security #research.
#weaknesses in Python applications are never exposed or registered as #CVE. The process for registering a CVE is long, painful, and very time-consuming.
open.substack.com/pub/nocomple...
Reposted by Maikel Mardjan
What the Halting Problem Means for Python Security
The Case for 100% Transparent, Open-Source Python SAST
open.substack.com/pub/nocomple...
#python #security #pydata #gpl
The Case for 100% Transparent, Open-Source Python SAST
open.substack.com/pub/nocomple...
#python #security #pydata #gpl
What the Halting Problem Means for Python Security
The Case for 100% Transparent, Open-Source Python SAST
open.substack.com
July 2, 2026 at 6:03 PM
What the Halting Problem Means for Python Security
The Case for 100% Transparent, Open-Source Python SAST
open.substack.com/pub/nocomple...
#python #security #pydata #gpl
The Case for 100% Transparent, Open-Source Python SAST
open.substack.com/pub/nocomple...
#python #security #pydata #gpl
Open #Python #Innovation News
SnakeCharmer, Python’s Lazy Imports, Fault Detection for C-Extended Python Projects, Uncovering Similar but Different Packages in #PyPI and more!
open.substack.com/pub/nocomple...
SnakeCharmer, Python’s Lazy Imports, Fault Detection for C-Extended Python Projects, Uncovering Similar but Different Packages in #PyPI and more!
open.substack.com/pub/nocomple...
Open Python Innovation News
I follow Python news, and especially Python security-related news articles.
open.substack.com
July 2, 2026 at 8:44 PM
Open #Python #Innovation News
SnakeCharmer, Python’s Lazy Imports, Fault Detection for C-Extended Python Projects, Uncovering Similar but Different Packages in #PyPI and more!
open.substack.com/pub/nocomple...
SnakeCharmer, Python’s Lazy Imports, Fault Detection for C-Extended Python Projects, Uncovering Similar but Different Packages in #PyPI and more!
open.substack.com/pub/nocomple...
What the Halting Problem Means for Python Security
The Case for 100% Transparent, Open-Source Python SAST
open.substack.com/pub/nocomple...
#python #security #pydata #gpl
The Case for 100% Transparent, Open-Source Python SAST
open.substack.com/pub/nocomple...
#python #security #pydata #gpl
What the Halting Problem Means for Python Security
The Case for 100% Transparent, Open-Source Python SAST
open.substack.com
July 2, 2026 at 6:03 PM
What the Halting Problem Means for Python Security
The Case for 100% Transparent, Open-Source Python SAST
open.substack.com/pub/nocomple...
#python #security #pydata #gpl
The Case for 100% Transparent, Open-Source Python SAST
open.substack.com/pub/nocomple...
#python #security #pydata #gpl
“there's no such thing as "age verification" for the internet. What we call "age verification" is actually mass surveillance, so invasive and pervasive that it makes the ad-tech industry's commercial surveillance look like some kind of cypherpunk darknet pirate utopia”
Today's threads (a thread)
Inside: Spying on kids to save kids from spying is very, very stupid; and more!
Archived at: pluralistic.net/2026/06/23/d...
#Pluralistic
1/
Inside: Spying on kids to save kids from spying is very, very stupid; and more!
Archived at: pluralistic.net/2026/06/23/d...
#Pluralistic
1/
June 23, 2026 at 8:29 PM
“there's no such thing as "age verification" for the internet. What we call "age verification" is actually mass surveillance, so invasive and pervasive that it makes the ad-tech industry's commercial surveillance look like some kind of cypherpunk darknet pirate utopia”
Using #python dynamic imports is a weakness and leads to security vulnerabilities!
Dynamic imports are dangerous if you cannot validate upfront what is being imported.
Allowing dynamic module imports makes it easy for #attackers to execute arbitrary code.
nocomplexity.github.io/pythonsecuri...
Dynamic imports are dangerous if you cannot validate upfront what is being imported.
Allowing dynamic module imports makes it easy for #attackers to execute arbitrary code.
nocomplexity.github.io/pythonsecuri...
Python Security Handbook - Python Security Handbook
Python Security essentials
nocomplexity.github.io
June 23, 2026 at 8:16 PM
Using #python dynamic imports is a weakness and leads to security vulnerabilities!
Dynamic imports are dangerous if you cannot validate upfront what is being imported.
Allowing dynamic module imports makes it easy for #attackers to execute arbitrary code.
nocomplexity.github.io/pythonsecuri...
Dynamic imports are dangerous if you cannot validate upfront what is being imported.
Allowing dynamic module imports makes it easy for #attackers to execute arbitrary code.
nocomplexity.github.io/pythonsecuri...
Shift Left, Stay Secure: Embedding Python Code Audit (SAST) into Your GitLab CI Workflow
open.substack.com/pub/nocomple...
#codeberg #sourcehut #appsec
open.substack.com/pub/nocomple...
#codeberg #sourcehut #appsec
Python SAST: Automate It in Your CI
Shift Left, Stay Secure: Embedding Python Code Audit (SAST) into Your GitLab CI Workflow
open.substack.com
June 22, 2026 at 4:14 PM
Shift Left, Stay Secure: Embedding Python Code Audit (SAST) into Your GitLab CI Workflow
open.substack.com/pub/nocomple...
#codeberg #sourcehut #appsec
open.substack.com/pub/nocomple...
#codeberg #sourcehut #appsec
XML parsing in Python can expose applications to severe security vulnerabilities, including denial of service #attacks, local file access, and firewall circumvention.
nocomplexity.github.io/pythonsecuri...
#python #code is not #securebydefault #pydata
nocomplexity.github.io/pythonsecuri...
#python #code is not #securebydefault #pydata
June 17, 2026 at 6:15 PM
XML parsing in Python can expose applications to severe security vulnerabilities, including denial of service #attacks, local file access, and firewall circumvention.
nocomplexity.github.io/pythonsecuri...
#python #code is not #securebydefault #pydata
nocomplexity.github.io/pythonsecuri...
#python #code is not #securebydefault #pydata
June 16, 2026 at 8:22 PM