Pickle Serialization in Data Science

Oddly fixing the security problem of pickle is actually easy and not mentioned in the article: limit what callables that are allowed to be called during unpickling.

The pickle module doesn't directly supports doing this as one has to implement a Unpickler subclass to override find_class to permit only the callables from modules that are acceptable to be called.

Blog post on the dangers of pickle files in data science!