Uploaded September 2026 | Updated September 2026, 5 hours ago
(Nicky Ringland, Ash) In the good ol' days, we worried about individual maintainers becoming overburdened, or ripple effects from surprise deletions in dependency graphs. Now, with the power of AI, we get to worry about these things on a much bigger scale: on repeat, across entire ecosystems!
As AI agents outpace humans in code output, we’re entering a delightful time where vibe-coded pull requests are checked in because they "look right," even if they’ve silently re-introduced classes of security vulnerabilities we thought we'd eliminated.
In this talk, we’ll look at some delicious data from [suggested redaction during CFP review of the dataset] to see just how big the problem is (so far). We’ll explore AI slopsquatting, DDOSing maintainers through vulnerability reports (valid or superfluous), and whether "living at HEAD" (with its security risks) might be our best security strategy.
We’ll also talk: private forks, dynamic cooldowns, and whether or not that one legend in Nebraska has already left the chat. Come for the existential dread; stay for the practical tips on not letting your dependency graph become (more of) a dumpster fire.
https://2026.pycon.org.au/schedule/RQR97D/
python, pycon, australia, programming, conference, technical, developers, panel, sessions, libraries, frameworks, community, sysadmins, students, education, data, science
Videos licensed as CC-BY-NC-SA 4.0
PyCon AU is the national conference for the Python programming community, bringing together professional, student and enthusiast developers, sysadmins and operations folk, students, educators, scientists, statisticians, and many others besides, all with a love for working with Python.
Licensed as CC BY-NC-SA - creativecommons.org/licenses/by-nc-sa/4.0
Produced by Next Day Video Australia: https://nextdayvideo.com.au
Fri Aug 28 13:30:00 2026 AEST (UTC+10) at Ballroom 2
(Nicky Ringland, Ash) In the good ol' days, we worried about individual maintainers becoming overburdened, or ripple effects from surprise deletions in dependency graphs. Now, with the power of AI, we get to worry about these things on a much bigger scale: on repeat, across entire ecosystems!
As AI agents outpace humans in code output, we’re entering a delightful time where vibe-coded pull requests are checked in because they "look right," even if they’ve silently re-introduced classes of security vulnerabilities we thought we'd eliminated.
In this talk, we’ll look at some delicious data from [suggested redaction during CFP review of the dataset] to see just how big the problem is (so far). We’ll explore AI slopsquatting, DDOSing maintainers through vulnerability reports (valid or superfluous), and whether "living at HEAD" (with its security risks) might be our best security strategy.
We’ll also talk: private forks, dynamic cooldowns, and whether or not that one legend in Nebraska has already left the chat. Come for the existential dread; stay for the practical tips on not letting your dependency graph become (more of) a dumpster fire.
https://2026.pycon.org.au/schedule/RQR97D/
python, pycon, australia, programming, conference, technical, developers, panel, sessions, libraries, frameworks, community, sysadmins, students, education, data, science
Videos licensed as CC-BY-NC-SA 4.0
PyCon AU is the national conference for the Python programming community, bringing together professional, student and enthusiast developers, sysadmins and operations folk, students, educators, scientists, statisticians, and many others besides, all with a love for working with Python.
Licensed as CC BY-NC-SA - creativecommons.org/licenses/by-nc-sa/4.0
Produced by Next Day Video Australia: https://nextdayvideo.com.au
Fri Aug 28 13:30:00 2026 AEST (UTC+10) at Ballroom 2
