Snakes in the cloud for a spreadsheet
-
-
The attack surface for this is so unbelievably large, it’ll provide content for years to come.
-
Excel + Python =
-
on one hand. that's got a lot of really neat applications.
on the other hand..... ooofh the VBA virii that plagued us.....
on the gripping hand
-
@accalia said in Snakes in the cloud for a spreadsheet:
on the gropping hand
Is that anything like a groping hand?
-
@HardwareGeek said in Snakes in the cloud for a spreadsheet:
@accalia said in Snakes in the cloud for a spreadsheet:
on the gropping hand
Is that anything like a groping hand?
ask @Perverted_Vixen she's know better.
-
Being a cloud-only offer it gets a meh from me.
Im curious about how the tension between MS-long-time-backward-compatibility versus (Python-1-year-release-cadence-5-years-end-of-life, plus third party libraries dropping support for pythons < current - k) will go.
-
-
@topspin said in Snakes in the cloud for a spreadsheet:
The attack surface for this is so unbelievably large, it’ll provide content for years to come.
The attack surface is smaller than you might think, as Python will be running in a VM in Azure. The attack surface for dependencies isn't very special in this day and age; the Python ecosystem is rather more careful about that stuff than Node...
There will be problems, but they will be mostly ones of the users' own making. (It's more likely to be things like getting an Azure bill that is much larger than expected.)
-
@dkf said in Snakes in the cloud for a spreadsheet:
The attack surface for dependencies isn't very special in this day and age; the Python ecosystem is rather more careful about that stuff than Node
Not really, it just has the benefit of not needing a bunch of tiny simple utilities thanks to actually sensible standard library.
-
@Bulb It's partially a culture difference. Python libraries tend to be larger, so there isn't so much importing stuff for every little thing. That reduces the surface (but makes the impact of a successful supply chain attack more direct).
Doesn't mean I like the language.
-
@dkf said in Snakes in the cloud for a spreadsheet:
There will be problems, but they will be mostly ones of the users' own making. (It's more likely to be things like getting an Azure bill that is much larger than expected.)
So it is a Great Offer. From Microsoft's point of view.
