7

Featuring:

  • Identifying bundled libraries on Python distributions to help scanning for vulnerabilities.
  • Trusted Publisher adoption metrics.
  • GitHub push protection for PyPI API tokens.

Lots of great stuff!

[-] qwop@programming.dev 26 points 1 year ago

Great TIL, I hate it.

Excellent how the page alludes to other horrible things to imagine, like "don't pour hot oil into your ear", and "don't pour it in if there's a hole in your eardrum"

10
GitLab Outage - c/DevOps (programming.dev)

Cross Posting from DevOps, I hope this is the correct way of doing that and it's considered acceptable.

30
GitLab Outage - c/DevOps (programming.dev)

Cross Posting from DevOps, I hope this is the correct way of doing that and it's considered acceptable.

7
GitLab Outage (status.gitlab.com)

Seems to be back up now, still waiting for information on the cause, so far have the vague reason "config change" from the GitLab issue linked

[-] qwop@programming.dev 14 points 1 year ago

My general opinion for libraries is that it's fair to stop supporting Python versions as soon as they're EOL. It's unfair to ask maintaners to have to juggle supporting 6 or more Python versions at once, mostly for the benefit of a few companies who haven't updated yet.

I think it's also fair here, you'll still be able to use older versions, you just won't get the newest features, which clearly isn't your number 1 priority if you're still using Python 3.7.

[-] qwop@programming.dev 26 points 1 year ago

What sort of features 🤔

[-] qwop@programming.dev 16 points 1 year ago

Of the 1,723 adults surveyed across the UK, 73% said technology companies should, by law, have to scan private messaging for child sexual abuse and disrupt it in end-to-end encrypted environments.

Found this interesting. I found the survey results here: https://docs.cdn.yougov.com/68pn2b6b57/NSPCC_OnlineSafetyBill_230427_W.pdf

The exact question I believe is being referred to was:

And do you think technology companies should or should not be required by law to use accredited technology to identify child sexual abuse in end-to-end encrypted messaging apps?

This seems like a really bad question, since it implies a coexistence of end to end encryption and big tech companies being able to read people's messages, which doesn't really make sense (or at least requires more clarification on what that would mean). The question as it is is basically "do you think child sexual abuse is bad".

[-] qwop@programming.dev 11 points 1 year ago

I wish I could have extensions default to off and be able to turn them on selectively on sites. For things like darkreader I don't want to use it 90% of the time so it shouldn't need to have at access to site data.

By the way, I don't like the title of this article, how is it done "remotely", it's just a list in about:config, no? Sounds clickbaity.

[-] qwop@programming.dev 9 points 1 year ago

Haha, got a "network error" on my first attempt so clicked send again, I guess it did go through the first time after all :D

[-] qwop@programming.dev 16 points 1 year ago

I'm worried this will make it harder for people to transition to mastodon as it's more of a shock. It would help if someone made a mastodon frontend to mimic twitter (shitty UI, paywalled, occasionally insert low quality AI generated posts, ads, read limits) for a smoother transition /s

[-] qwop@programming.dev 15 points 1 year ago

Yeah, there currently seem to be a bunch of rough edges with Lemmy. Another is that iirc editing a comment increases the comment count shown on a post.

Nothing that can't be fixed though, and it's encouraging how good Lemmy feels already compared to reddit (for me at least).

[-] qwop@programming.dev 33 points 1 year ago

(for anyone wondering, a monad is just a monoid in the category of endofunctors)

[-] qwop@programming.dev 18 points 1 year ago* (last edited 1 year ago)

Ah, that's too boring. I have a range of responses to pick from to keep things interesting:

  • LGTM
  • Nice
  • Looks good
  • Thanks
  • Looks great
  • :thumbsup:
  • Looks good to me
  • :shipit:

For me, no text means "I haven't really reviewed this properly so don't want to write anything that could be used against me if (when?) this breaks something in prod"

10

See Seth's earlier post Announcing that he was taking up the place: https://sethmlarson.dev/security-developer-in-residence

20
Python 2 in Python 3! (programming.dev)
submitted 1 year ago* (last edited 1 year ago) by qwop@programming.dev to c/python@programming.dev

A post about how this community's banner used the python 2 print syntax - print "Hello World" - made me question, can we print a hello world message in Python 3 without using parentheses?

It turned out to be sort of a fun challenge, I've found 3 different approaches that work. I'd be interested to see what you come up with! (it seems I can't put spoilers in Lemmy, so I won't share my solutions yet in case y'all want to have a go).

Edit: Posted my solutions in the comments

[-] qwop@programming.dev 11 points 1 year ago

Agreed, and the questions I have that MDN doesn't answer would probably be ones even less likely for the AI explain to get right.

[-] qwop@programming.dev 15 points 1 year ago

To be fair, it's no worse than articles some people write on those nonsense websites.

view more: next ›

qwop

joined 1 year ago