[Python-Dev] Re: Mixed Python/C debugging

"Debugging a Mixed Python and C Language Stack" (2023) https://developer.nvidia.com/blog/debugging-mixed-python-and-c-language-stack/ https://news.ycombinator.com/item?id=35706687 On Mon, Dec 2, 2019, 10:59 AM Skip Montanaro wrote: > Thanks for the responses. I know there are multiple tools out

[Python-Dev] Re: Contributing the Pyston jit?

Heads up: if CPython is JIT faster, it may then be (even more) vulnerable to branch prediction vulns like Spectre and Meltdown: https://groups.google.com/g/dev-python/c/67Et2KtpzG4 There's not a PEP for this work either, and one will need to be rebased first, and are there even merge collisions?

[Python-Dev] Re: Contributing the Pyston jit?

Please consider colesbury/nogil in rebasing? https://github.com/colesbury/nogil On Thu, Feb 23, 2023, 1:20 PM Kevin Modzelewski wrote: > Hello all, we on the Pyston team would like to propose the contribution of > our JIT >

[Python-Dev] RFC: New/update the Docs Sphinx theme: responsive, edit page links,

Where would be the best place to discuss or just improve the CPython docs sphinx theme? What would Python need in a {PyData,} Sphinx theme fork: - [ ] ENH: add links to every docs page - [ ] ENH: responsive breakpoints for mobile devices - [ ] ENH: responsive fonts - [ ] ENH: toggle-able dark th

[Python-Dev] Re: [slightly OT] cryptographically strong random.SystemRandom()

are https://en.wikipedia.org/wiki//dev/random On Sat, Jul 10, 2021 at 7:54 PM Wes Turner wrote: > * Citation: https://cryptography.io/en/latest/random-numbers/ > > On Sat, Jul 10, 2021 at 7:53 PM Wes Turner wrote: > >> FWIW, here is what https://cryptography.io has re: random (/

[Python-Dev] Re: [slightly OT] cryptographically strong random.SystemRandom()

* Citation: https://cryptography.io/en/latest/random-numbers/ On Sat, Jul 10, 2021 at 7:53 PM Wes Turner wrote: > FWIW, here is what https://cryptography.io has re: random (/? rng python > cryptography) > > ```rst > Random number generation > > >

[Python-Dev] Re: [slightly OT] cryptographically strong random.SystemRandom()

FWIW, here is what https://cryptography.io has re: random (/? rng python cryptography) ```rst Random number generation When generating random data for use in cryptographic operations, such as an initialization vector for encryption in :class:`~cryptography.hazmat.primitiv

[Python-Dev] Re: In what tense should the changelog be written?

On Fri, Apr 30, 2021, 16:28 wrote: > This was also my understanding. The last time I looked at writing good > commit messages (a similar form), the standard was to finish the sentence: > "This commit will...", e.g. "This commit will fix buffalo.spam" from "Fix > buffalo.spam". > I like this a lo

[Python-Dev] Re: Have virtual environments led to neglect of the actual environment?

Is there a tool that (1) detects import name collisions; and (2) attempts to read package metadata and package file checksums (maybe from the ZIP 'manifest')? In order to: - troubleshoot module shadowing issues - $PATH - sys.path - `python -m site` - incomplete and overlapping uninstall

[Python-Dev] Re: Have virtual environments led to neglect of the actual environment?

ction even if you have pytest_requires installed. Perhaps distros would do well to implement support for integration and per-package tests. On Thu, Feb 25, 2021, 12:55 Fred Drake wrote: > On Thu, Feb 25, 2021 at 5:35 AM Wes Turner wrote: > >> The challenge with version conflic

[Python-Dev] Re: Have virtual environments led to neglect of the actual environment?

The challenge with version conflicts is often less that you need to go update the constraints (which has little to do with sysadmin'ing, TBH) and more that you have insufficient *integration tests* and you're relying upon something else running the per-package tears. On Thu, Feb 25, 2021, 00:10 Pe

[Python-Dev] Re: Have virtual environments led to neglect of the actual environment?

Would it be better to have an (os, os_release, arch) to [site_packages_dirs] map within CPython or are the patches too varied to be replaced by a centralized map and a runtime conditional? For development convenience, having writeable site-packages dirs before unwriteable site-packages is easy; B

[Python-Dev] Re: Have virtual environments led to neglect of the actual environment?

hat doesn't get called as frequently as `apt-get upgrade -y`: ```bash pip install -U certifi ``` https://github.com/certifi/python-certifi (Mozilla's CA bundle extracted into a Python package) ```bash apt-get install -y ca-certificates dnf install -y ca-certificates ``` On 2/24/21, Wes

[Python-Dev] Re: Have virtual environments led to neglect of the actual environment?

On 2/23/21, Random832 wrote: > I was reading a discussion thread > about > various issues with the Debian packaged version of Python, and the following > statement stood out for me as shocking: > > Christian Heimes wrote: >> Core dev

[Python-Dev] Re: Security releases of CPython

bpython3.6m.so.1.0: PASS: GOT/PLT relocations > are read only. > Hardened: /usr/lib64/libpython3.6m.so.1.0: PASS. > > More information about annobin: > https://developers.redhat.com/blog/2018/02/20/annobin-storing-information-binaries/ > > Victor > -- > Night gathers, and now

[Python-Dev] Re: Python standardization

https://awesome-safety-critical.readthedocs.io/en/latest/ https://awesome-safety-critical.readthedocs.io/en/latest/#software-safety-standards What is and is not constant time in Python could be added to structured data elements in (implementations') docstrings. * "The Python Language Referen

[Python-Dev] Re: Should set objects maintain insertion order too?

Due to version and platform constraints, a SAT solver is necessary for conda and (now) pip. Libsolv is one of the fastest around. https://github.com/QuantStack/mamba is conda implemented with libsolv (and parallel downloading of *declarative* dependency metadata). For general purpose graphs with

[Python-Dev] Re: Should set objects maintain insertion order too?

A table with these columns might be helpful for performance comparisons: [ structure, operation, big_o, keyset, # signed ints, randstrs timeit_output, system_load, architecture, # x86_84, aarch64 os, ] Does anyone have a recommendation for a tool that stores such benchmark data in JSON and merge

[Python-Dev] Re: Should set objects maintain insertion order too?

Got it. Thanks On Fri, Dec 20, 2019, 2:34 AM Inada Naoki wrote: > On Fri, Dec 20, 2019 at 4:15 PM Wes Turner wrote: > > > > How slow and space-inefficient would it be to just implement the set > methods on top of dict? > > Speed: Dict doesn't cache the positio

[Python-Dev] Re: Should set objects maintain insertion order too?

How slow and space-inefficient would it be to just implement the set methods on top of dict? Do dicts lose insertion order when a key is deleted? AFAIU, OrderedDict do not lose insertion order on delete. Would this limit the utility of an ordered set as a queue? What set methods does a queue need

[Python-Dev] Re: Should set objects maintain insertion order too?

OrderedSet implementations: - https://github.com/methane/cpython/pull/23/files - https://pypi.org/search/?q=orderedset - https://pypi.org/project/orderedset/ - https://code.activestate.com/recipes/576694/ - https://pypi.org/project/ordered-set/ - https://github.com/pandas-dev/pandas/blob/m

[Python-Dev] Re: Mixed Python/C debugging

Your question is specifically about IDEs with support for mixed-mode debugging (with gdb), so I went looking for an answer: https://wiki.python.org/moin/DebuggingWithGdb (which is not responsive and almost unreadable on a mobile device) links to https://fedoraproject.org/wiki/Features/EasierPython

[Python-Dev] Re: Steering Council Update (July through October)

Thanks for these minutes and for cc'ing the list with them! :+1: :clap: (markdown emoji) I know that I can: - click 'Watch' on the GitHub repo [1] to get notifications when there are changes - get an 'Activity Summary' digest email from discuss.python.org (Discourse) when I haven't logged in late

[Python-Dev] Re: Inline links in Misc/NEWS entries

- [ ] A page or section in the Sphinx docs would be helpful for many, I think https://github.com/sphinx-doc/sphinx/tree/master/doc ``__ .. index:: Implicit reference .. _implicit-reference: Implicit ref --- `implicit ref`_

[Python-Dev] Re: Inline links in Misc/NEWS entries

Could a bot be written to suggest upgraded markup for Misc/NEWS entries as a PR? Most e.g. class, method, and function references probably need ReST markup AND a more specific fully-qualified reference? Can class, method, and function lookups be done with the existing Sphinx API index? On Tuesda

[Python-Dev] Re: Sponsoring Python development via the PSF

yors can be significant. > > --Hobson > > > > On Thu, Jun 27, 2019 at 10:40 AM Wes Turner wrote: > >> >> >> On Thursday, June 27, 2019, Ewa Jodlowska wrote: >> >>> >>> >>> On Thu, Jun 27, 2019 at 11:16 AM Wes Turner >

[Python-Dev] Re: Sponsoring Python development via the PSF

"PSF Prospectus 2018-2019.pdf" https://www.dropbox.com/s/a479lb6jz4yhr4x/PSF%20Prospectus%202018-2019.pdf On Thu, Jun 27, 2019 at 2:12 PM Wes Turner wrote: > > > On Thu, Jun 27, 2019 at 1:27 PM Wes Turner wrote: > >> Is there a way for third party organizations

[Python-Dev] Re: Sponsoring Python development via the PSF

On Thu, Jun 27, 2019 at 1:27 PM Wes Turner wrote: > Is there a way for third party organizations to say, "yeah, we sponsored > this or that". > > When I go to the donation page, can I see all of the ways to contribute > time, trained resources, and money? Maybe I

[Python-Dev] Re: Sponsoring Python development via the PSF

"yeah, we sponsored this or that". When I go to the donation page, can I see all of the ways to contribute time, trained resources, and money? Maybe I'm looking for a shirt, maybe I'm looking to send in our best guy to let's get it done here On Thursday, June 27, 2019, Wes

[Python-Dev] Re: Sponsoring Python development via the PSF

On Thursday, June 27, 2019, Ewa Jodlowska wrote: > > > On Thu, Jun 27, 2019 at 11:16 AM Wes Turner wrote: > >> >> From GuideStar (which, like Charity Navigator, also has nonprofit >> evaluation criteria) >> https://trust.guidestar.org/bitcoin-what-nonprofi

[Python-Dev] Re: Sponsoring Python development via the PSF

discourse - Software Development GitHub pull requests - Release management - More Fundraising & Marketing & PyCon *We could* sponsor a part or full-time developer as an employee of our organization, or donate to PSF to sponsor sprints and/or developers On Thursday, June 27, 2019, Wes Turne

[Python-Dev] Sponsoring Python development via the PSF

On Thursday, June 27, 2019, Ewa Jodlowska wrote: > > > > On Wed, Jun 26, 2019 at 8:28 PM Wes Turner wrote: > >> When companies donate as PyCon sponsors (and get brand recognition) do >> those donations also go to PSF? > > > Yes, the PSF produces PyCon. PyCon

[Python-Dev] Re: Sponsoring Python development via the PSF

When companies donate as PyCon sponsors (and get brand recognition) do those donations also go to PSF? You can add the **Python Software Foundation** to a Charity Navigator "Giving Basket" and get one receipt: https://www.charitynavigator.org/index.cfm?bay=search.profile&ein=043594598 "Charity N

[Python-Dev] Re: python-ideas and python-dev migrated to Mailman 3/HyperKitty

Thanks for getting these upgraded. IMHO, being able to copy URLs from list message footers as references in e.g. issues will be a great boost in productivity. On Friday, June 7, 2019, Stephen J. Turnbull < turnbull.stephen...@u.tsukuba.ac.jp> wrote: > Barry Warsaw writes: > > On Jun 6, 2019, at

Re: [Python-Dev] Online Devguide mostly not working

https://cpython-devguide.readthedocs.io/ seems to work but https://devguide.python.org/* does not https://readthedocs.org/projects/cpython-devguide/ lists maintainers, who I've cc'd AFAIU, there's no reason that the HTTP STS custom domain CNAME support would've broken this: https://github.com/rtf

Re: [Python-Dev] Actor Model in Python

https://trio.readthedocs.io/en/latest/reference-core.html#synchronizing-and-communicating-between-tasks https://pypi.org/search/?q=Actor+model https://en.wikipedia.org/wiki/Actor_model https://en.wikipedia.org/wiki/Bulk_synchronous_parallel#The_model On Friday, April 26, 2019, Eric Snow wrot

Re: [Python-Dev] Need help to fix HTTP Header Injection vulnerability

1. Is there a library of URL / Header injection tests e.g. for fuzzing that we could generate additional test cases with or from? 2. Are requests.get() and requests.post() also vulnerable? 3. Despite the much-heralded UNIX pipe protocols' utility, filenames containing newlines (the de-facto line

Re: [Python-Dev] datetime.timedelta total_microseconds

You could specify the return value type annotations in the docstring of a convert()/to_unit() method, or for each to_unit() method. Are they all floats? div and floordiv are not going away. Without reading the docs, I, too, wouldn't have guessed that division by the desired unit is the correct way

Re: [Python-Dev] OpenSSL 1.1.1 update for 3.7/3.8

Thanks, as always On Tue, Feb 26, 2019 at 4:45 PM Christian Heimes wrote: > On 26/02/2019 21.31, Wes Turner wrote: > >> IMHO it's > > fine to ship the last 2.7 build with an OpenSSL version that was EOLed > > just 24h earlier. > > > > Is this a t

Re: [Python-Dev] OpenSSL 1.1.1 update for 3.7/3.8

> IMHO it's fine to ship the last 2.7 build with an OpenSSL version that was EOLed just 24h earlier. Is this a time / cost issue or a branch policy issue? If someone was to back port the forthcoming 1.1.1 to 2.7 significantly before the EOL date, could that be merged? There are all sorts of e.g.

Re: [Python-Dev] pickle5 backport updated

Maybe a bit OT: is there a way to *not pickle any callables*? On Wednesday, January 16, 2019, Wes Turner wrote: > Thanks! Apache Arrow may also be worth a look: > > > Apache Arrow is a cross-language development platform for in-memory > data. It specifies a standardized langu

Re: [Python-Dev] pickle5 backport updated

Thanks! Apache Arrow may also be worth a look: > Apache Arrow is a cross-language development platform for in-memory data. It specifies a standardized language-independent columnar memory format for flat and hierarchical data, organized for efficient analytic operations on modern hardware. It also

Re: [Python-Dev] "Deprecation" of os.system in favor of subprocess?

dundant. >> > > You have not shown this. Posting quotes followed by an unrelated > conclusion isn't a very compelling form of argument :) > > Cheers, > Steve > ___ > Python-Dev mailing list > Pyth

Re: [Python-Dev] Petr Viktorin as BDFL-Delegate for PEP 580

On Wednesday, October 3, 2018, INADA Naoki wrote: > > 2018年10月3日(水) 21:24 Jeroen Demeyer : > >> Hello, >> >> >> I am well aware of the current governance issues, but several people >> have mentioned that the BDFL-Delegate process can still continue for >> now. > > > Really? > I don't know process

Re: [Python-Dev] Petr Viktorin as BDFL-Delegate for PEP 580

a better place to discuss PEP process going forward] """ > > > Cheers, > Jeroen Demeyer. > ___ > Python-Dev mailing list > Python-Dev@python.org > https://mail.py

Re: [Python-Dev] SEC: Spectre variant 2: GCC: -mindirect-branch=thunk -mindirect-branch-register

On Friday, September 21, 2018, Mark Lawrence wrote: > On 21/09/18 08:11, Wes Turner wrote: > >> I feel like you are actively undermining attempts to prevent exploitation >> of known vulnerabilities because the software in question is currently too >> slow. >>

Re: [Python-Dev] SEC: Spectre variant 2: GCC: -mindirect-branch=thunk -mindirect-branch-register

, 2018, Franklin? Lee wrote: > On Thu, Sep 20, 2018 at 2:10 PM Wes Turner wrote: > > > > On Thursday, September 20, 2018, Stefan Ring > wrote: > >> > >> On Tue, Sep 18, 2018 at 8:38 AM INADA Naoki > wrote: > >> > >> > I think this topic

Re: [Python-Dev] SEC: Spectre variant 2: GCC: -mindirect-branch=thunk -mindirect-branch-register

On Thursday, September 20, 2018, Stefan Ring wrote: > On Tue, Sep 18, 2018 at 8:38 AM INADA Naoki > wrote: > > > I think this topic should split to two topics: (1) Guard Python > > process from Spectre/Meltdown > > attack from other process, (2) Prohibit Python code attack other > > processes by

Re: [Python-Dev] SEC: Spectre variant 2: GCC: -mindirect-branch=thunk -mindirect-branch-register

ished or official statement or investigation from the Python community regarding Spectre (or Meltdown) vulnerabilities. Here's a good write-up: Safety_instructions_for_Meltdown_and_Spectre Have a good day! On Monday, September 17, 2018, Steve Dower wrote: > On 17Sep2018 1158, Wes Turner wro

Re: [Python-Dev] SEC: Spectre variant 2: GCC: -mindirect-branch=thunk -mindirect-branch-register

On Mon, Sep 17, 2018 at 2:58 PM Wes Turner wrote: > > I thought I read that RH has a kernel flag for userspace? > "Controlling the Performance Impact of Microcode and Security Patches for CVE-2017-5754 CVE-2017-5715 and CVE-2017-5753 using Red Hat Enterprise Linux T

Re: [Python-Dev] SEC: Spectre variant 2: GCC: -mindirect-branch=thunk -mindirect-branch-register

nly can both directly exploit and indirectly enable remote exploitation of Spectre and Meltdown vulnerabilities. Most users of python are installing arbitrary packages (without hashes or signatures). > > Cheers, > Steve > > On 16Sep2018 0707, Wes Turner wrote: > >> Should

Re: [Python-Dev] SEC: Spectre variant 2: GCC: -mindirect-branch=thunk -mindirect-branch-register

ps://mail.python.org/pipermail/python-ideas/2018-September/053175.html > ~ Do trampolines / nested functions in C extensions switch off the NX bit? On Sunday, September 16, 2018, Nathaniel Smith wrote: > On Wed, Sep 12, 2018, 12:29 Joni Orponen wrote: > >> On Wed, Sep 12, 2018 at 8:48

Re: [Python-Dev] SEC: Spectre variant 2: GCC: -mindirect-branch=thunk -mindirect-branch-register

On Sunday, September 16, 2018, Wes Turner wrote: > Should Python builds add `-mindirect-branch=thunk > -mindirect-branch-register` to CFLAGS? > > Where would this be to be added in the build scripts with which > architectures? > > /QSpectre is the MSVC build flag for Spectre

[Python-Dev] SEC: Spectre variant 2: GCC: -mindirect-branch=thunk -mindirect-branch-register

5.7 and later. https://docs.microsoft.com/en-us/cpp/build/reference/qspectre?view=vs-2017 security@ directed me to the issue tracker / lists, so I'm forwarding this to python-dev and python-ideas, as well. # Forwarded message From: *Wes Turner* Date: Wednesday, September 12, 2018 Subj

Re: [Python-Dev] Official citation for Python

URL really is easiest to aggregate the edges of/for. - [ ] Link to the new citation(s) page in the Python docs from the SciPy citing page https://www.scipy.org/citing.html NP. YW! > Thoughts? > > (Once we nail down one or many, I think we can then move into the details > of the conten

Re: [Python-Dev] Official citation for Python

lated note, you should ask the list admin to append a URL to each mailing list message whenever this list is upgraded to mm3; so that you can all be appropriately cited. On Thursday, September 13, 2018, Wes Turner wrote: > Do you guys think we should all cite Grub and BusyBox and bash a

Re: [Python-Dev] Official citation for Python

Do you guys think we should all cite Grub and BusyBox and bash and libc and setuptools and pip and openssl and GNU/Linux and LXC and Docker; or else it's plagiarism for us all? #OpenAccess On Wednesday, September 12, 2018, Stephen J. Turnbull < turnbull.stephen...@u.tsukuba.ac.jp> wrote: > Chris

Re: [Python-Dev] Official citation for Python

On Sunday, September 9, 2018, Wes Turner wrote: > "Python Programming Language" (van Rossum, et. Al) > > ? > > Should there be a URL and/or a DOI? > http://www.python.org/~guido/Publications.html https://gvanrossum.github.io/Publications.html lists a number of P

Re: [Python-Dev] Official citation for Python

I also see reproducibility and citation graphs as distinct concepts. If it's reproducibility you're after, bibliographic citations are very unlikely to enable someone else to assemble an identical build environment from which the same conclusion should be repeatably derivable. A ScholarlyArticle

Re: [Python-Dev] Official citation for Python

"Python Programming Language" (van Rossum, et. Al) ? Should there be a URL and/or a DOI? Figshare and Zenodo will archive a [e.g. tagged] [GitHub] revision and generate a DOI, AFAIU On Sunday, September 9, 2018, Steven D'Aprano wrote: > On Sun, Sep 09, 2018 at 03:43:13PM -0400, Jacqueli

Re: [Python-Dev] The history of PyXML

_ > Python-Dev mailing list > Python-Dev@python.org > https://mail.python.org/mailman/listinfo/python-dev > Unsubscribe: https://mail.python.org/mailman/options/python-dev/wes. > turner%40gmail.com > ___

Re: [Python-Dev] (Looking for) A Retrospective on the Move to Python 3

gt; long time. https://github.com/python/cpython/blame/master/Lib/__future__.py > > -- > ~Ethan~ > ___ > Python-Dev mailing list > Python-Dev@python.org > https://mail.python.org/mailman/listi

Re: [Python-Dev] Drop/deprecate Tkinter?

On Thursday, May 3, 2018, Steven D'Aprano wrote: > On Thu, May 03, 2018 at 07:39:05AM +0200, Matěj Cepl wrote: > > > I have my doubts about IDLE though. I know, the same > > argument applies, but really, does anybody use IDLE for > > development for long time > > Yes, tons of beginners use it. On

Re: [Python-Dev] Every Release Can Be a Mini "Python 4000", Within Reason (was (name := expression) doesn't fit the narrative of PEP 20)

On Sunday, April 29, 2018, Eitan Adler wrote: > On 29 April 2018 at 01:34, Jeff Allen wrote: > > On 27/04/2018 08:38, Greg Ewing wrote: > > > I speculate this all goes back to some pre-iteration version of FORmula > > TRANslation, where to its inventors '=' was definition and these really > were

Re: [Python-Dev] (name := expression) doesn't fit the narrative of PEP 20

de.py On Friday, April 27, 2018, Tim Peters wrote: > Wes, sorry, but I really don't follow what you're saying. For example, > > [Wes Turner ] > > Do not do this: > > > > x = 2 > > if (x == 3) or (x := 3): > >print(x) > > > &g

Re: [Python-Dev] (name := expression) doesn't fit the narrative of PEP 20

On Friday, April 27, 2018, Tim Peters wrote: > [Chris Angelico ] > > ... > > I don't understand why people bring up all these arguments that have > > absolutely nothing to do with the proposal at hand. None of this has > > in any way changed. > > That's easy: any time there's a long thread to wh

Re: [Python-Dev] (name := expression) doesn't fit the narrative of PEP 20

On Friday, April 27, 2018, Chris Angelico wrote: > On Sat, Apr 28, 2018 at 6:06 AM, Wes Turner wrote: > > > > > > On Friday, April 27, 2018, Chris Angelico wrote: > >> > >> On Fri, Apr 27, 2018 at 8:18 PM, Wes Turner > wrote: > >> > ID

Re: [Python-Dev] (name := expression) doesn't fit the narrative of PEP 20

On Friday, April 27, 2018, Chris Angelico wrote: > On Fri, Apr 27, 2018 at 8:18 PM, Wes Turner wrote: > > IDK, I could just be resistant to change, but this seems like something > that > > will decrease readability -- and slow down code review -- without any > real >

Re: [Python-Dev] (Looking for) A Retrospective on the Move to Python 3

On Thursday, April 26, 2018, Eric Snow wrote: > In pondering our approach to future Python major releases, I found > myself considering the experience we've had with Python 3. The whole > Py3k effort predates my involvement in the community so I missed a > bunch of context about the motivations,

Re: [Python-Dev] (name := expression) doesn't fit the narrative of PEP 20

So, the style guidelines for this new feature -- and also ternary expressions and comprehension -- would need to mention that: - debuggers have no idea what to do with all of this on one line - left-to-right doesn't apply to comprehensions results = [(x, y, x/y) for x in input_data if (y := f(x

Re: [Python-Dev] (name := expression) doesn't fit the narrative of PEP 20

On Wednesday, April 25, 2018, Łukasz Langa wrote: > > On 25 Apr, 2018, at 5:20 PM, Chris Angelico wrote: > > On Thu, Apr 26, 2018 at 10:11 AM, Yury Selivanov > wrote: > > Just yesterday this snippet was used on python-dev to show how great the > new syntax is: > > my_func(arg, buffer=(

Re: [Python-Dev] Introducing python.zulipchat.com

On Sunday, April 22, 2018, Paul Moore wrote: > On 22 April 2018 at 15:39, Nick Coghlan wrote: > > On 22 April 2018 at 21:47, Paul Moore wrote: > >> On 22 April 2018 at 00:05, Brett Cannon wrote: > >>> The Zulip project maintainers are active on our instance so after you > join > >>> go to the

Re: [Python-Dev] ssl module and LibreSSL CVE-2018-8970

+1. Thanks! Which tests? On Wednesday, April 4, 2018, Christian Heimes wrote: > Hi, > > I like to share the story of a critical security bug with you. Contrary > to other issues in TLS/SSL, it's a story with happy ending. Nobody was > harmed. The bug was fixed before it affected the general pop

Re: [Python-Dev] Move ensurepip blobs to external place

AFAIU, the objectives (with no particular ranking) are: - minimize git clone time and bandwidth - include latest pip with every python install - run the full test suite with CI for every PR (buildbot) - the full test suite requires pip - run the test suite locally when developing a PR - minimize

Re: [Python-Dev] How is the GitHub workflow working for people?

On Wednesday, February 21, 2018, Nick Coghlan wrote: > On 22 February 2018 at 08:19, Barry Warsaw wrote: > > As for the bug tracker, I still do like Roundup, and we have a huge > investment in it, not just in resources expended to make it rock, but also > in all the history in it and everything

Re: [Python-Dev] How is the GitHub workflow working for people?

On Friday, February 23, 2018, Nick Coghlan wrote: > On 23 February 2018 at 03:09, Eric Snow > wrote: > > So, coupled with slow CI, linting failures were > > particularly onerous. We all got in the habit of locally running the > > linter frequently. IIRC, I even set up VIM to run the linter whe

Re: [Python-Dev] LibreSSL support

LibreSSL is not a pressing need for me; but fallback to the existing insecure check if LibreSSL is present shouldn't be too difficult? On Thursday, January 18, 2018, Christian Heimes wrote: > On 2018-01-18 19:42, Wes Turner wrote: > > Is there a build flag or a ./configure-time

Re: [Python-Dev] LibreSSL support

Is there a build flag or a ./configure-time autodetection that would allow for supporting LibreSSL while they port X509_VERIFY_PARAM_set1_host? On Thursday, January 18, 2018, Christian Heimes wrote: > On 2018-01-16 21:17, Christian Heimes wrote: > > FYI, master on Travis CI now builds and uses O

Re: [Python-Dev] Python 3.7: Require OpenSSL >=1.0.2 / LibreSSL >= 2.5.3

On Tuesday, January 16, 2018, Christian Heimes wrote: > On 2018-01-16 12:28, Wes Turner wrote: > > > > > > On Tuesday, January 16, 2018, Steve Dower > <mailto:steve.do...@python.org>> wrote: > > > > From my perspective, we can’t keep an Open

Re: [Python-Dev] Python 3.7: Require OpenSSL >=1.0.2 / LibreSSL >= 2.5.3

On Tuesday, January 16, 2018, Steve Dower wrote: > From my perspective, we can’t keep an OpenSSL-like API and use Windows > platform libraries (we *could* do a requests-like API easily enough, but > even urllib3 is painfully low-level). > > Support for Windows SChannel and Apple SecureTransport i

Re: [Python-Dev] Python 3.7: Require OpenSSL >=1.0.2 / LibreSSL >= 2.5.3

FWIW, anaconda and conda-forge currently have 1.0.2 X https://anaconda.org/anaconda/openssl https://anaconda.org/conda-forge/openssl On Sunday, January 14, 2018, Ned Deily wrote: > On Jan 14, 2018, at 08:39, Christian Heimes wrote: > > On 2018-01-14 09:24, Matt Billenstein wrote: > >> Correct

Re: [Python-Dev] PEPs: ``.. code:: python`` or ``::`` (syntax highlighting)

: > On 3 December 2017 at 12:32, Wes Turner > wrote: > > Pending a transition of PEPs to ReadTheDocs (with HTTPS on a custom > domain? > > and redirects?) (is there a gh issue for this task?), > > See https://github.com/python/peps/projects/1 and > https://github.com

Re: [Python-Dev] PEPs: ``.. code:: python`` or ``::`` (syntax highlighting)

Pending a transition of PEPs to ReadTheDocs (with HTTPS on a custom domain? and redirects?) (is there a gh issue for this task?), for the pythondotorg project is it as simple as `pip install pygments` and rebuilding each .rst with docutils with pygments installed? On Saturday, December 2, 2017, Ma

Re: [Python-Dev] Third and hopefully final post: PEP 557, Data Classes

On Thursday, November 30, 2017, Wes Turner wrote: > Could these be things in types? > > types.ClassType > types.InstanceType > > types.DataClass > types.DataClassInstanceType (?) > types.DataClass(types.ClassType) types.DataClassInstanceType(types.InstanceType) Would be

[Python-Dev] PEPs: ``.. code:: python`` or ``::`` (syntax highlighting)

In ReStructuredText, this gets syntax highlighted because of the code directive [1][2][3]: .. code:: python import this def func(*args, **kwargs): pass This also gets syntax highlighted as python[3]: .. code:: python import this def func(*args, **kwargs): pass This d

Re: [Python-Dev] Third and hopefully final post: PEP 557, Data Classes

ghting, \r, character set, LEDs,) On Thursday, November 30, 2017, Wes Turner wrote: > Could these be things in types? > > types.ClassType > types.InstanceType > > types.DataClass > types.DataClassInstanceType (?) > > I sent a PR with typo fixes and ``.. code:: python`` dire

Re: [Python-Dev] Third and hopefully final post: PEP 557, Data Classes

Could these be things in types? types.ClassType types.InstanceType types.DataClass types.DataClassInstanceType (?) I sent a PR with typo fixes and ``.. code:: python`` directives so that syntax highlighting works (at least on GitHub). https://github.com/python/peps/blob/master/pep-0557.rst htt

Re: [Python-Dev] Python possible vulnerabilities in concurrency

CWE (Common Weakness Enumeration) has numbers (and URLs) and a graph model, and code examples, and mitigations for bugs, vulnerabilities, faults, design flaws, weaknesses. https://cwe.mitre.org/ Research Concepts https://cwe.mitre.org/data/definitions/1000.html Development Concepts https://cwe.mi

Re: [Python-Dev] OrderedDict(kwargs) optimization?

Got it. Thanks! On Wednesday, November 8, 2017, INADA Naoki wrote: > > That'd be great for preserving kwargs' order after a pop() or a del? > > To clarify, order is preserved after pop in Python 3.6 (and maybe 3.7). > > There is discussion about breaking it to optimize for limited use cases, > b

[Python-Dev] OrderedDict(kwargs) optimization?

On Wednesday, November 8, 2017, Guido van Rossum wrote: > It seems there must be at least two threads for each topic worth > discussing at all. Therefore I feel compelled to point to > https://mail.python.org/pipermail/python-dev/2017-November/150381.html, > where I state my own conclusion about

Re: [Python-Dev] Migrate python-dev to Mailman 3?

On Thursday, October 26, 2017, Mark Sapiro wrote: > On 10/26/2017 07:28 AM, Wes Turner wrote: > > > > > > On Thursday, October 26, 2017, Paul Moore > wrote: > > > > On 26 October 2017 at 10:24, Victor Stinner > > > wrote: > > &

Re: [Python-Dev] iso8601 parsing

On Thursday, October 26, 2017, Chris Barker wrote: > On Wed, Oct 25, 2017 at 7:37 PM, Wes Turner > wrote: > >> ISO 8601 support offsets, but not time zones -- presumably the __str__ >>> supports the full datetime tzinfo somehow. Which may be why .isoformat() >>&g

Re: [Python-Dev] Migrate python-dev to Mailman 3?

On Thursday, October 26, 2017, Paul Moore wrote: > On 26 October 2017 at 10:24, Victor Stinner > wrote: > > We are using Mailman 3 for the new buildbot-status mailing list and it > > works well: > > > > https://mail.python.org/mm3/archives/list/buildbot-sta...@python.org/ > > > > I prefer to rea

Re: [Python-Dev] iso8601 parsing

On Wednesday, October 25, 2017, Chris Barker wrote: > On Wed, Oct 25, 2017 at 4:22 PM, Alexander Belopolsky < > alexander.belopol...@gmail.com > > wrote: > >> > times. The only difference is that instead of calling the type directly, >> > you call the appropriate classmethod. >> > >> > What am I

[Python-Dev] PEP 564: Add new time functions with nanosecond resolution

; > _______ > Python-Dev mailing list > Python-Dev@python.org > https://mail.python.org/mailman/listinfo/python-dev > Unsubscribe: https://mail.python.org/mailman/options/python-dev/wes. > turner%40gmail.com > ___ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Re: [Python-Dev] PEP 564: Add new time functions with nanosecond resolution

On Monday, October 23, 2017, Thomas Jollans wrote: > On 22/10/17 17:06, Wes Turner wrote: > > There are current applications with greater-than nanosecond precision: > > > > - relativity experiments > > - particle experiments > > > > Must they alway

Re: [Python-Dev] PEP 564: Add new time functions with nanosecond resolution

d timelike curves) yet. Aligning simulation data in context to other events may be enlightening: is there a good library for handing high precision time units in Python (and/or CFFI)? ... http://opendata.cern.ch/ http://opendata.cern.ch/getting-started/CMS > > > On Oct 22, 2017 8:10 AM, &qu

Re: [Python-Dev] PEP 564: Add new time functions with nanosecond resolution

On Saturday, October 21, 2017, Nick Coghlan wrote: > On 22 October 2017 at 09:32, Victor Stinner > wrote: > >> Le 21 oct. 2017 20:31, "francismb" > > a écrit : >> >> I understand that one can just multiply/divide the nanoseconds returned, >> (or it could be a factory) but wouldn't it help for fu

Re: [Python-Dev] To reduce Python "application" startup time

On Wednesday, September 6, 2017, INADA Naoki wrote: > > How significant is application startup time to something that uses > > Jinja2? Are there short-lived programs that use it? Python startup > > time matters enormously to command-line tools like Mercurial, but far > > less to something that's

Re: [Python-Dev] HTTPS on bugs.python.org

Here's e.g. Jupyter Notebook w/ letsencrypt in a Makefile: https://github.com/jupyter/docker-stacks/blob/master/examples/make-deploy/letsencrypt.makefile ... https://github.com/jupyter/docker-stacks On Fri, Sep 1, 2017 at 9:08 AM, Wes Turner wrote: > > ## HTTP STS > - Wi

  1   2   >