← Feed

Posts

• View post

  The Python Software Foundation is hiring a Security Developer to join @miketheman@hachyderm.io and I on triaging vulnerability reports and mitigating malware published to PyPI. If you've got experience with Python, security, and collaborating with open source projects then we'd love to hear from you: https://jobs.pyfound.org/apply/ei03ut60y4/Security-Developer?referrer=20260730140256DSN5BCNCWZA5MXAO #python #security #pypi #supplychain #vulnerability

• View post

  RE: https://fosstodon.org/@pycon/116538489589981492 This talk from @andrewnez grows more and more important as the days go on... it's a must watch! #Python #PyPI #PyConUS #PyConUS2026 #security

• View post

  RE: https://mastodon.social/@bagder/116566403633172153 #Python has been reproducible since October 2023 (Python 3.12.0) https://sethmlarson.dev/security-developer-in-residence-weekly-report-14

• View post

  Hey #Python library maintainers! 👋 I sometimes see pull requests from well-meaning users about bumping minimum versions of dependencies to "fix security vulnerabilities". Here's a resource you can link to about why this strategy doesn't work in practice: https://sethmlarson.dev/library-version-specifiers-not-for-vulnerabilities #python #security #oss #opensource #vulnerability

• View post

  The #PyConUS 2026 app is available and you can see the NEW “Trailblazing Python Security” talk track in the app! ⭐ Smash that “Favorite all Trailblazing Python Security” talks button and I'll see you in Long Beach soon 🤩 Apple App Store: https://apps.apple.com/us/app/pycon-us/id6446810296 Google Play Store: https://play.google.com/store/apps/details?id=org.pycon.us&pli=1

• View post

  pip 26.1 is an incredible release, thank you to the pip maintainers!! 💜 – Relative dependency cooldown support! – Installing from pylock.toml – Multiple security fixes Read the full blog post by @ichard26 https://ichard26.github.io/blog/2026/04/whats-new-in-pip-26.1/ #python #pypi #pip #security #oss #opensource

• View post

  RE: https://mastodon.social/@andrewnez/116478133377243019 Workflow security continues to be a common cause of compromises of open source projects. If you're using GitHub Actions and don't want this to happen to your project: use Zizmor and treat the findings seriously, especially insecure triggers and user-controllable template injections. https://docs.zizmor.sh #github #actions #security #oss #opensource #python

• View post

  RE: https://mastodon.social/@mdn/116381006037132695 This is amazing, and it already reflects in the user experience. The pages load instantly! 💜 https://developer.mozilla.org/en-US/blog/mdn-front-end-deep-dive/

• View post

  RE: https://fosstodon.org/@pycon/116397402294000942 @ThePSF + @rust = 🦀❤️🐍

• View post

  Anyone who maintains an #opensource project that accepts vulnerability reports, I highly recommend reading “Brocards for vulnerability triaging” by my friend @yossarian: #security #oss #vulnerability #supplychain https://blog.yossarian.net/2026/04/11/Brocards-for-vulnerability-triage

• View post

  It's the 25th anniversary of “Dōbutsu no Mori” (“Animal Forest”) being released on the N64 in Japan! 🎉 To celebrate I've created digital calendars for events across all first-generation games and villager birthdays. https://sethmlarson.dev/animal-crossing-calendar #animalcrossing #acnh #gamecube #gaming

• View post

  RE: https://fosstodon.org/@pypi/116335453780319113 There is a ton in this report, like how @pypi is able to respond so quickly to malware thanks to our network of trusted reporters and how to keep yourself secure both as a maintainer and user of Python packages.

• View post

  I'm happy to announce that #urllib3 has a new lead maintainer: @illiav 👏 Illia has been contributing to urllib3 for over 3 years now and I'm confident will make a great lead of the project. I'll continue to maintain the project alongside my other co-maintainers @quentinpradet and @shazow https://github.com/urllib3/urllib3/issues/3629

• View post

  I built a small progress calculator for #RetroAchievements using their API, and it's showing ~23h to beat LOZ Oracle of Seasons based on my progress speed. Compare that to 18h estimate from "Time to Beat"... this has been accurate to my feelings. I've been loving the @delta_emulator + Pocket Taco + RetroAchievements combination so far :) https://github.com/sethmlarson/retroachievements-play-activity #gaming #retrogaming #gameboy

• View post

  I just received my pre-ordered GameSir “Pocket Taco” this morning and found the setup to be non-trivial for pairing with an iPhone and configuring the controller with the @delta_emulator Here’s the exact steps to setup and start playing with this new controller: 🌮 https://sethmlarson.dev/getting-started-with-gamesir-pocket-taco-iphone-delta-emulator #gaming #delta #emulation #retrogaming #controller #gamesir #pockettaco #iphone #ios

• View post

  :calculator: LAN Party Calculator for Mario Kart, Kirby Air Ride, and F-Zero https://sethmlarson.dev/lan-party-calculator-for-mario-kart-kirby-air-riders-and-f-zero #gaming #mariokart #kirbyairriders #fzero #nintendo

• View post

  The popular #Python library “Requests” needs your help! @nateprewitt plans to add type hints to the API and is requesting feedback: https://sethmlarson.dev/python-library-requests-is-adding-type-hints-and-needs-your-help #typing #http #typehints

• View post

  ICYMI, there is a new blog for #Python ! 🥳 https://blog.python.org Give it a follow in your #RSS reader of choice, I am hoping to see more exciting Python content beyond just release notes published there.

• View post

  Respecting maintainer time should be in security policies. Even better: you don't even have to mention the elephant in the room! https://sethmlarson.dev/respecting-maintainer-time-should-be-in-security-policies #opensource #oss #security