BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.evolutio.pt//pycon-portugal-2026//speaker//HKYP3
 Q
BEGIN:VEVENT
UID:pretalx-pycon-portugal-2026-YETWYL@pretalx.evolutio.pt
DTSTART:20260904T120000Z
DTEND:20260904T123000Z
DESCRIPTION:Python developers are building APIs that expose industrial cont
 rol systems (PLCs and sensor networks via Modbus or OPC-UA) to the interne
 t\, often with basic authentication and outdated dependencies. When code c
 ontrols power grids\, water systems\, or manufacturing processes\, a compr
 omised API or a typosquatted package is not just a data leak\, it can disr
 upt operations.\n\nBecause of this\, the way these APIs are built introduc
 es security concerns that are not always visible during development. Many 
 of these applications depend on third-party packages\, which creates expos
 ure to supply chain risks.\n\nAttackers use techniques such as typosquatti
 ng\, publishing malicious packages with names similar to widely used libra
 ries (such as reqeusts instead of requests). Once installed\, these packag
 es can access environment variables\, API keys\, or system interfaces. Out
 dated dependencies introduce additional risk\, as libraries such as reques
 ts or urllib3 may contain known weaknesses\, including credential leakage 
 during redirects or improper SSL validation.\n\nThese patterns come from w
 eb development\, where their impact is often limited to data exposure. Whe
 n the same code is used in systems connected to infrastructure that contro
 ls physical processes\, the consequences change. Weak API design or a comp
 romised dependency can affect system behavior\, not just stored data.\n\nT
 his difference creates a gap between how Python applications are commonly 
 built and what is expected in these environments. Small decisions in Pytho
 n API design can reduce risk in systems where software directly affects ph
 ysical processes.\n\nThis talk shows Python developers how to secure these
  integrations through safer API design\, careful handling of dependencies\
 , and decisions that improve system resilience without requiring deep secu
 rity expertise.
DTSTAMP:20260819T142033Z
LOCATION:Auditorium
SUMMARY:Building Resilient Python APIs for Systems That Can't Afford to Fai
 l - Natalia Riveros Núñez
URL:https://pretalx.evolutio.pt/pycon-portugal-2026/talk/YETWYL/
END:VEVENT
END:VCALENDAR