Trojan Source Code - Can we trust open-source anymore?

Name: Trojan Source Code - Can we trust open-source anymore?
Start: 2022-05-26T08:30:00+00:00
End: 2022-05-26T09:00:00+00:00
Location: SMK

Talk 30 min May 26, 2022 at 08:30

Cheuk Ting Ho

Recently, a paper titled [Trojan Source](https://trojansource.codes/) is published to demonstrate how a visibly valid contribution can contain malicious code by exporting the Unicode control characters. Some of these have been tested on Python and it works. How can it happen? Shall the Python and open-source communities be concerned?