runningmike

Full title is: "Understanding Python Linters through a Comprehensive and Systematic Empirical Study"

Source https://github.com/google/brotli for who wants to do a real security audit.

Security is always context dependent. For many use case it works. But if any one knows a better alternative that is battle tested and used please shout out!

“ Runs in your browser” when it is not FOSS , validation of this claim is impossible.

Full title: How Russia Censors Foreign TV, Midterm Battle for US Congress, Venezuela’s Collapsed Housing Towers, France’s Education Protests

And this release comes with a nice improvement of the landing page[1].

[1] https://panel.holoviz.org/

Correct, 100% speculative. It could be true, seeing the history of secret services. But this story is too good to be true! Real questions are: who benefits of this story? And why?

Dries was in the past imho excellent in inspiring people with his keynotes. Especially with his vision and roadmaps. This keynote was mediocre at best.

AI-AI-AI-AI...The big question was avoided: What is the relevance of Drupal in the AI era?

Most people who want to publish content in a nice looking way can now do that using just a prompt and using natural language. Content management, or managing the things online in a decent way is still an unsolved problem, since this is not a technical thing, but mostly sht work for content managers that nobody want to do. It is a matter of time till OpenAI or some other AI company can do what a CMS application can do, but than without the pain and complexity for users. I see no answer from this keynote in anyway!

This current strategy of Drupal has high risks in terms of maintainability, stability, security and privacy when leaning so heavy on AI-things that are still changing every 3 months.

Good news is that Pyodide[1] is still actively maintained and developed!

"The honest picture is that PyScript remained a niche." Running Python directly in the browser is great and gives lots of opportunities. However in the AI era generating sloppy for browser apps seems the way forward...

[1] Pyodide is a port of CPython to WebAssembly/Emscripten. https://pyodide.org/

“ we are perhaps watching a first actual on-orbit ASAT attack”

Agree upon that most people who know the difference between foss and oss have some ethical principles not captured in the formal license text.

By default gatekeepers should be distrusted since gatekeepers are seldom organised as open projects that can be replaced in a simple way.

There is no such thing as a AI culture. There are imho big tech AI companies that disrespect all ethical norms and legal rules in all ways. We need to create a real open alternative that is better in every aspect. Real open lllms are scare and can and will never compete with $$$$ shitware llms.

I advocate for free and open ML/AI. I dislike the fact that my code (foss)and text(cc-by) are used by all LLMs without respecting the licenses..And yes slob AI code is seldom useful to build upon as human…

“ AI generated code isn't FOSS” Foss is just a license on software code. Do not make a Foss license bigger than what it is. Just do not do this… Even AI slob under a Foss license meets the four core freedoms based on definitions from the Free Software Foundation.

There is no such thing as “the community” . There are people who like,dislike, use or neglect what you publish online. If you want positive feedback in public of published Foss software you will be disappointed very fast. Sharing is imho mostly not done for anonymous people, but for friends, colleagues or anyone in the universe who might benefit from the Foss software or idea!

It’s fun to share what you create. A FOSS project enables use, reuse and make it better. Even from scratch again. I love seeing new nice Foss projects that work. It sometimes gives some inspiration and input for renewed thinking.

See: Exposing AdFection How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware, https://citizenlab.ca/research/how-discover-tech-turned-targ...

“ AI agents are very effective at finding vulnerabilities in our software.” No! AI can find code weaknesses not vulnerabilities. All vulnerabilities are weaknesses, but not all weaknesses are vulnerabilities.

“ Software development has been a wonderful hobby of mine for almost 50 years, but it is no longer fun.”

If it is used by people, getting a new maintainer should not be hard…. Or has AI killed such libs?

PyPy is a Python interpreter, a drop-in replacement for CPython.

It depends do you want to maintain ii? Do you use AI? Performance issues can always be solved. Do you want to use browser’s capabilities or keep control in your own backend ? Less frameworks is better, use e.g the same for everything.

Parts of this nice read are AI generated it seems…

Interesting part “ Those sources said Rey had an ongoing beef with the Dutch hacker over control of the ShinyHunters brand and data, and that the inclusion of the oversized Umbreon Pokemon image in the FBI jobs site defacement was likely an attempt by Rey to pin the hack on the Dutchman.”

Nice! Do you have a repository where the MIT code is hosted?

100% disagree! Do not mix and cherry pick terms and definitions to make your point. That's not scientific -) Take e.g. a look in https://opensciencemooc.eu/ and check a nice accepted handbook like "The Turing Way" [1]

[1] https://book.the-turing-way.org/

Nice question! Plenty (open) research papers and thesis available the last 40 years -)

Some nice papers: https://arxiv.org/pdf/2002.07135 , https://arxiv.org/abs/2411.17343, https://doi.org/10.25300/MISQ/2025/49.1.075 or see https://arxiv.org/abs/2411.17343

There are many studies about this subject, but mind that complexity in code something different than 'complex' systems. You will need to dive into complexity science , but hard and 'soft' aspects should be taken into account when it comes to cyber security!

From a security perspective cc is highly relevant. I use it to get a solid rating of the security aspects of Python code. I use [1] which is solid and proven.

[1] https://nocomplexity.com/documents/codeaudit/complexitycheck...

"Today we are sharing the outcome: at its July 8 meeting, the PSF Board adopted the PSF Strategic Plan 2026, covering 2026 to 2031."

As someone who loves Python, but lives in the EU I see too much emphasis on PyCON_US and US Python users and US firms. The Python world is far larger than US...

The thing is how to deal with principles in practice? Good principles[1] are never trivial. A principle must have implications, some which you can never predict upfront. You will and must have continuous discussing when you use principles to steer your business / software or life.

[1] See e.g. https://nocomplexity.com/documents/0complexity/principles.ht...

Read one or more of the absolute best (free) Python books[1] and do some hands-on.

If you can not choose, just start with "Python Programming for Data Science". No barrier for starting, its cc-by and requires no account to read.

[1] Check: https://nocomplexity.com/documents/pythonbook/bookreferences...

Too bad that the focus is open source. This is a common ailment seen in many security research papers!

A real concern should be Code-Level Backdoors in COTS software. Backdoors that even many resellers and paying customers are not aware off..

Nice deep insight. I love the personal story at the start!

Is this worth watching?