Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-29 Thread Nick Coghlan
On 29 April 2014 17:02, Stefan Krah wrote: > Mike Miller wrote: >> I have to say I'm a bit baffled. I expected disagreement, but >> didn't expect that multiple reasons against would be made up >> seemingly at random? I and a company I work for (that distributes >> Py) have been installing Pytho

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-29 Thread Mike Miller
On 04/30/2014 04:14 AM, Steve Dower wrote: Since we are talking about humans, I'd gather most of them trying to install something on Windows will have heard about ProgramFiles and not be too bothered at its inclusion in the path. Modifying PATH is not recommended by Microsoft... Sorry, I mea

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-29 Thread Stefan Krah
Mike Miller wrote: > I have to say I'm a bit baffled. I expected disagreement, but > didn't expect that multiple reasons against would be made up > seemingly at random? I and a company I work for (that distributes > Py) have been installing Python to ProgramFiles for almost a decade, > and can a

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-29 Thread Mike Miller
On 04/30/2014 04:14 AM, Steve Dower wrote: Here are some more minuses beyond those listed on the issue: I have to say I'm a bit baffled. I expected disagreement, but didn't expect that multiple reasons against would be made up seemingly at random? I and a company I work for (that distribut

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-29 Thread martin
Quoting "Stephen J. Turnbull" : Mike Miller writes: > However, this bug has been shitcanned for a decade. This is the > last chance to fix this bug in a branch that's going to be > supported until 2020! Probably. I'm not convinced. But that doesn't really matter. Your bigger concern is

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-29 Thread Stephen J. Turnbull
Mike Miller writes: > However, this bug has been shitcanned for a decade. This is the > last chance to fix this bug in a branch that's going to be > supported until 2020! Probably. I'm not convinced. But that doesn't really matter. Your bigger concern is the deafening silence from the seni

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-29 Thread Steve Dower
Mike Miller wrote: > Every change has pluses and minuses. I can't guarantee 100% benefits, only > trying to make the case that the benefits here outweigh them. If this is your case about the benefits, it's a weak case. Feel free to blog about how to secure a Python installation in multi-user envi

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-29 Thread anatoly techtonik
On Mon, Apr 28, 2014 at 11:07 PM, Mike Miller wrote: > On 04/29/2014 05:12 AM, Steve Dower wrote: >> >> This would be an incredibly painful change that would surprise and hurt a >> lot of >> people. > > > Hi, I think "incredibly painful" is overstating the case a bit. ;) We're > talking about an

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-29 Thread Mike Miller
Hi, Stepping back a bit... I doubt you'd take the idea this far, but that Python should need assembly by professionals before use doesn't match its "Batteries Included" spirit, nor the PC revolution for that matter. The reason I brought up the subject at 2.7.7 is because there are greater c

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-29 Thread Mike Miller
Hi, Every change has pluses and minuses. I can't guarantee 100% benefits, only trying to make the case that the benefits here outweigh them. Since we are talking about humans, I'd gather most of them trying to install something on Windows will have heard about ProgramFiles and not be too bot

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-29 Thread Mike Miller
On 04/29/2014 03:07 PM, Stephen J. Turnbull wrote: > I have no objection *at all* to making the change in the next feature > release. I think the "good citizenship" argument is more than > sufficient, ... > I'm questioning whether it is a sufficient reason to make a backwards- > incompatible cha

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Stephen J. Turnbull
Steven D'Aprano writes: > On Tue, Apr 29, 2014 at 12:07:00PM +0900, Stephen J. Turnbull wrote: > > Note that if users actually paid attention to these guidelines, we'd > > be getting complaints from *them*, not from you. I don't recall ever > > seeing that. That implies that "normal users" w

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Glenn Linderman
On 4/28/2014 8:52 PM, Steven D'Aprano wrote: I think that's unfair. I'm not a MS fan, not even close. I think their business practices in the past have been reprehensible. But if there is anyone who takes backwards-compatibility even more seriously than Python-Dev, it is them. I guess there is no

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Steven D'Aprano
On Tue, Apr 29, 2014 at 12:07:00PM +0900, Stephen J. Turnbull wrote: > Mike Miller writes: > > > Microsoft's guidelines on where to install software are clear, and > > don't make exceptions that "tools" should be installed to the root > > of the drive to bypass file system permissions, for conv

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Stephen J. Turnbull
Mike Miller writes: > Microsoft's guidelines on where to install software are clear, and > don't make exceptions that "tools" should be installed to the root > of the drive to bypass file system permissions, for convenience. But there's the rub. In this case, Microsoft doesn't have *security*

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Benjamin Peterson
On Mon, Apr 28, 2014, at 17:14, Brian Curtin wrote: > If it's an acceptable change to the release manager (Benjamin?), and > if there's actually time before the RC (I don't know when it is > planned), I am willing to backport my 3.3 change to get this in the > 2.7 installer. That's fine. > > How

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Brian Curtin
On Mon, Apr 28, 2014 at 7:04 PM, Steve Dower wrote: >> Mike Miller wrote: >> On 04/29/2014 05:12 AM, Steve Dower wrote: >>> This would be an incredibly painful change that would surprise and >>> hurt a lot of people. >> >> Hi, I think "incredibly painful" is overstating the case a bit. ;) We're >

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Steve Dower
> Mike Miller wrote: > On 04/29/2014 05:12 AM, Steve Dower wrote: >> This would be an incredibly painful change that would surprise and >> hurt a lot of people. > > Hi, I think "incredibly painful" is overstating the case a bit. ;) We're > talking > about an installer default, a setting that woul

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Chris Barker
On Mon, Apr 28, 2014 at 1:56 PM, Mike Miller wrote: > * watch Dave Beazley's PyCon 2014 talk for a good story involving one > >> of those manufacturer installed Pythons: >> https://www.youtube.com/watch?v=RZ4Sn-Y7AP8 >> > > Thanks, I'm trying to get thru all the talk will watch that shortly. ;) >

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Mike Miller
On 04/29/2014 08:38 AM, Brian Curtin wrote: The option to add the current install to your path was added 3.3. Ok, thanks. So there is some precedent it would be useful. Remember, python-dev's are not the target users of this package, and are a rather minuscule fraction of the user base. K

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Mike Miller
2.7.7. on Windows Message-ID: <771463774420395726.352685sturla.molden-gmail@news.gmane.org> "C:\Program Files\Python27" contains an empty space in the path. If you want to randomly break build tools for C extensions, then go ahead and ch

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Brian Curtin
On Mon, Apr 28, 2014 at 3:07 PM, Mike Miller wrote: > > On 04/29/2014 05:12 AM, Steve Dower wrote: >> >> This would be an incredibly painful change that would surprise and hurt a >> lot of >> people. > > > Hi, I think "incredibly painful" is overstating the case a bit. ;) We're > talking about an

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Mike Miller
On 04/29/2014 05:12 AM, Steve Dower wrote: This would be an incredibly painful change that would surprise and hurt a lot of people. Hi, I think "incredibly painful" is overstating the case a bit. ;) We're talking about an installer default, a setting that would still be changeable as it alw

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Antoine Pitrou
On Mon, 28 Apr 2014 19:52:48 +1200 Mike Miller wrote: > > I thought this might be a good time to make a final plea to fix a > long-standing security issue in the installer on Windows. By default it > installs Python to the root folder, thereby bypassing filesystem permissions: > > http://bugs.p

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Steve Dower
Mike Miller wrote: > I thought this might be a good time to make a final plea to fix a > long-standing security issue in the installer on Windows. By default it > installs > Python to the root folder, thereby bypassing filesystem permissions: > >http://bugs.python.org/issue1284316 This would be a

Re: [Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Sturla Molden
Mike Miller wrote: > The main rationale given (for not using the standard %ProgramFiles%) has been > that the full path to python is too long to type, and ease of use is more > important than the security benefits given by following Windows conventions. "C:\Program Files\Python27" contains an

[Python-Dev] Python 2.7.7. on Windows

2014-04-28 Thread Mike Miller
Greetings, I've just woken up and noticed Python 2.7.7 is on track to be released, and in a rather unique event contains a few security enhancements in addition to the usual fixes: http://legacy.python.org/dev/peps/pep-0466/ I thought this might be a good time to make a final plea to fix a lo