← Feed

Posts

• Post #4243065

  The Python Software Foundation is hiring a Security Developer to join @miketheman@hachyderm.io and I on triaging vulnerability reports and mitigating malware published to PyPI. If you've got experience with Python, security, and collaborating with open source projects then we'd love to hear from you: https://jobs.pyfound.org/apply/ei03ut60y4/Security-Developer?referrer=20260730140256DSN5BCNCWZA5MXAO #python #security #pypi #supplychain #vulnerability

• Post #2543528

  RE: https://fosstodon.org/@pycon/116538489589981492 This talk from @andrewnez grows more and more important as the days go on... it's a must watch! #Python #PyPI #PyConUS #PyConUS2026 #security

• Post #2543523

  RE: https://mastodon.social/@bagder/116566403633172153 #Python has been reproducible since October 2023 (Python 3.12.0) https://sethmlarson.dev/security-developer-in-residence-weekly-report-14

• Post #2296208

  Hey #Python library maintainers! 👋 I sometimes see pull requests from well-meaning users about bumping minimum versions of dependencies to "fix security vulnerabilities". Here's a resource you can link to about why this strategy doesn't work in practice: https://sethmlarson.dev/library-version-specifiers-not-for-vulnerabilities #python #security #oss #opensource #vulnerability

• Post #2140944

  Have you ever noticed that the food graphics in Super Smash Bros. and Kirby Air Riders is flat “billboarded” stock images of food? This artistic decision from director Masahiro Sakurai has persisted through 8 games over nearly 25 years. While researching every game with this art style and all 150+ unique food images I ended up fixing wikis, reviewing a seasonal KitKat flavor, and preserving an uncatalogued image of tempura soba. #gaming #smashbros #nintendo https://sethmlarson.dev/food-jpegs-...

• Post #1875519

  The #PyConUS 2026 app is available and you can see the NEW “Trailblazing Python Security” talk track in the app! ⭐ Smash that “Favorite all Trailblazing Python Security” talks button and I'll see you in Long Beach soon 🤩 Apple App Store: https://apps.apple.com/us/app/pycon-us/id6446810296 Google Play Store: https://play.google.com/store/apps/details?id=org.pycon.us&pli=1

• Post #1831458

  pip 26.1 is an incredible release, thank you to the pip maintainers!! 💜 – Relative dependency cooldown support! – Installing from pylock.toml – Multiple security fixes Read the full blog post by @ichard26 https://ichard26.github.io/blog/2026/04/whats-new-in-pip-26.1/ #python #pypi #pip #security #oss #opensource

• Post #1734886

  RE: https://mastodon.social/@andrewnez/116478133377243019 Workflow security continues to be a common cause of compromises of open source projects. If you're using GitHub Actions and don't want this to happen to your project: use Zizmor and treat the findings seriously, especially insecure triggers and user-controllable template injections. https://docs.zizmor.sh #github #actions #security #oss #opensource #python

• Post #1177373

  RE: https://mastodon.social/@mdn/116381006037132695 This is amazing, and it already reflects in the user experience. The pages load instantly! 💜 https://developer.mozilla.org/en-US/blog/mdn-front-end-deep-dive/

• Post #1177372

  Got my pre-release order in for “Dizzy Sheep Disaster DX”, a new #Nintendo #GBA #eReader game! 🐑 https://bsky.app/profile/sarahlynne.bsky.social/post/3mjfadgfi7s2g That means I have now 8 new games for the e-Reader... I may need to create a YouTube video about these given the physical aspect of this medium :)

• Post #1169478

  RE: https://fosstodon.org/@pycon/116397402294000942 @ThePSF + @rust = 🦀❤️🐍

• Post #1169431

  Anyone who maintains an #opensource project that accepts vulnerability reports, I highly recommend reading “Brocards for vulnerability triaging” by my friend @yossarian: #security #oss #vulnerability #supplychain https://blog.yossarian.net/2026/04/11/Brocards-for-vulnerability-triage

• Post #1151485

  It's the 25th anniversary of “Dōbutsu no Mori” (“Animal Forest”) being released on the N64 in Japan! 🎉 To celebrate I've created digital calendars for events across all first-generation games and villager birthdays. https://sethmlarson.dev/animal-crossing-calendar #animalcrossing #acnh #gamecube #gaming

• Post #1019651

  Deprecate confusing APIs like “os.path.commonprefix()”. After fixing a vulnerability in #pip, I started digging into the confusing API and found more than I expected. 👉 https://sethmlarson.dev/deprecate-confusing-apis-like-os-path-commonprefix #python #oss #opensource #security

• Post #993730

  RE: https://fosstodon.org/@pypi/116335453780319113 There is a ton in this report, like how @pypi is able to respond so quickly to malware thanks to our network of trusted reporters and how to keep yourself secure both as a maintainer and user of Python packages.

• Post #976722

  I'm happy to announce that #urllib3 has a new lead maintainer: @illiav 👏 Illia has been contributing to urllib3 for over 3 years now and I'm confident will make a great lead of the project. I'll continue to maintain the project alongside my other co-maintainers @quentinpradet and @shazow https://github.com/urllib3/urllib3/issues/3629

• Post #976195

  I built a small progress calculator for #RetroAchievements using their API, and it's showing ~23h to beat LOZ Oracle of Seasons based on my progress speed. Compare that to 18h estimate from "Time to Beat"... this has been accurate to my feelings. I've been loving the @delta_emulator + Pocket Taco + RetroAchievements combination so far :) https://github.com/sethmlarson/retroachievements-play-activity #gaming #retrogaming #gameboy

• Post #776122

  I just received my pre-ordered GameSir “Pocket Taco” this morning and found the setup to be non-trivial for pairing with an iPhone and configuring the controller with the @delta_emulator Here’s the exact steps to setup and start playing with this new controller: 🌮 https://sethmlarson.dev/getting-started-with-gamesir-pocket-taco-iphone-delta-emulator #gaming #delta #emulation #retrogaming #controller #gamesir #pockettaco #iphone #ios

• Post #776119

  :calculator: LAN Party Calculator for Mario Kart, Kirby Air Ride, and F-Zero https://sethmlarson.dev/lan-party-calculator-for-mario-kart-kirby-air-riders-and-f-zero #gaming #mariokart #kirbyairriders #fzero #nintendo

• Post #739761

  The popular #Python library “Requests” needs your help! @nateprewitt plans to add type hints to the API and is requesting feedback: https://sethmlarson.dev/python-library-requests-is-adding-type-hints-and-needs-your-help #typing #http #typehints

• Post #621932

  ICYMI, there is a new blog for #Python ! 🥳 https://blog.python.org Give it a follow in your #RSS reader of choice, I am hoping to see more exciting Python content beyond just release notes published there.

• Post #611024

  Happy 6-year blogiversary to me! 🎉 To celebrate I want to talk about other peoples' blogs, specifically blogrolls. Blogrolls are “lists of other sites that you read, are a follower of, or recommend”. Any blog can host a blogroll, or sometimes websites can be one big blogroll. Read more: https://sethmlarson.dev/blogrolls-are-the-best-rolls #blog #rss #rssfeed #indieweb #www

• Post #572477

  Respecting maintainer time should be in security policies. Even better: you don't even have to mention the elephant in the room! https://sethmlarson.dev/respecting-maintainer-time-should-be-in-security-policies #opensource #oss #security

• Post #298065

  Interesting blog post about text classification using compression, specifically the new "compression.zstd" module contributed by @emmatyping https://maxhalford.github.io/blog/text-classification-zstd/ #compression #zstd #zstandard #classification