Next stop: Tübingen! I’m looking forward to Tuebix and catching up with old friends. #Tubix #Linux

On my way to a flying visit to Berlin. Tomorrow, the Python Users Berlin (@python.berlin) are meeting for a talk by Sam Bail on PySpark: www.meetup.com/python-users... #Python #Berlin

Critical libssh2 vulnerability with a proof-of-concept exploit already published. curl, PHP and libgit2 are also affected. nvd.nist.gov/vuln/detail/... #ssh #Vulnerability #ITSecurity #curl

#TIL that there is also a pre-commit check for uv audit: www.python4data.science/en/latest/pr... #Python #CVE #Vulnerability #Git #ITSecurity #SupplyChain

🐍🚀 Out now: Python 3.15 beta 3! 💤 Lazy imports! 🧊 frozendict builtin! 💂 sentinel builtin! 📉 Tachyon profiler! 🖼️ Frame pointers everywhere! 🎨 More colour! 🚌 & more! Library maintainer? Add 3.15 to your CI and send us those bugs reports! discuss.python.org/t/python-3-1... #Python #Python315 #release

Guardrails enable you to defend against prompt injection or jailbreak attacks by your coding agents. In our tutorial, we show you the options available to you for this purpose: agentic-software-engineering.readthedocs.io/en/latest/se... #PromptInjection #Jailbreak #AI #Agentic #Coding #ITSecurity

Spack v1.2.0 is out, loaded with features and performance improvements! Highlights: 🧵Parallel installer 🛠️Concretization groups 🧠Concretization caching 📝SBOMs 🔒spack isolate 🏖️ experimental sandboxing Get it now! github.com/spack/spack/... Demo: asciinema.org/a/755827

We have added a section on @tiangolo.com’s Library Skills to our agent-based software engineering tutorial: agentic-software-engineering.readthedocs.io/en/latest/sh... #AI #Agentic #Coding #Skills

I’m organising the next @pyberlin meet-up, featuring a talk by Sam Bail on PySpark: www.meetup.com/python-users... #Python #Berlin #DataScience

Taking Measure spoke to Guido van Rossum to find out more about #Python, what he gets up to in his spare time, and his brief spell at #NIST: www.nist.gov/blogs/taking...

Taking Measure spoke to Guido van Rossum to find out more about #Python, what he gets up to in his spare time, and his brief spell at #NIST: www.nist.gov/blogs/taking...

Der Artikel »Wie LLM-Agenten Open-Source-Projekte gefährden« von Frank Hofmann und mir ist im Linux-Magazin erschienen: www.linux-magazin.de/ausgaben/202... #OpenSource #LLM #SLOP

We have expanded our tutorials to include answers to the question of how coding agents can assist data scientists with programming: • python-basics-tutorial.readthedocs.io/de/latest/li... • github.com/veit/python-... #Python #DataScience #CodingAgents #Claude #Cursor

With uv≥0.11.19, you can check dependencies in your project for known vulnerabilities: • python-basics-tutorial.readthedocs.io/en/latest/li... • www.python4data.science/en/latest/pr... #Python #uv #Vulnerability #ITSecurity

📆 On 13 August, all #Berlin #Python user groups – @pyladiesberlin.bsky.social , @python.berlin, dub, PyBerlin, etc. will be getting together again for a BBQ @c-base.org: www.meetup.com/python-users...

I wrote a new post for the Astral blog about how we’re building more vulnerability and malware defenses directly into uv: astral.sh/blog/uv-audit

If uv is not available in a Python environment, you can still specify the versions using pylock.toml. We have described how to do this here: python-basics-tutorial.readthedocs.io/en/latest/li... #Python #DevSecOps #ITSecurity

GitHub Actions security in Python packages - a written version of the talk I gave at @pycon.us last week. nesbitt.io/2026/05/25/g...

GitHub has confirmed that around 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension: www.bleepingcomputer.com/news/securit... #GitHub #DataBreach #ITSecurity

Google Search is over – at least as we know it. Instead of links, we’ll see AI agents that generate answers directly. Whilst this sounds convenient, there’s a catch: the sources are obscured and publishers continue to lose search engine traffic. techcrunch.com/2026/05/19/g... #Google#AI #SEO

It’s hard enough these days to keep up to date with Linux security. Dirty Frag and Copy Fail are already keeping countless Linux admins busy, and then, the day before yesterday, Fragnesia came along: github.com/v12-security... #Linux #ITSecurity #Fragnesia

Daniel Stenberg (@bagder.mastodon.social.ap.brid.gy) provides important security advice for FOSS maintainers: daniel.haxx.se/blog/2026/05... #ITSecurity #FOSS #OpenSource #AI

Yesterday, the article by Frank Hofmann and me on open licences for documents, images, audio, video, fonts and hardware was published in Linux Magazine: www.linux-magazine.com/Issues/2026/... #OpenSource #OpenHardware

Now elementary-data has also been hit: for just under half a day, a malicious version 0.23.3 was available on PyPI, which had stolen credentials such as SSH keys, AWS login details, API tokens and wallet files. www.elementary-data.com/post/securit... #Python #PyPI #GitHub #ITSec

pip 26.1 is an incredible release, thank you to the pip maintainers!! 💜 – Relative dependency cooldown support! – Installing from pylock.toml – Multiple security fixes Read the full blog post by Richard Si: ichard26.github.io/blog/2026/04... #python #pypi #pip #security #oss #opensource

We have integrated two features from Git 2.54: • Git history: www.python4data.science/en/latest/pr... • Configuration-based Git hooks: www.python4data.science/en/latest/pr... #Git

The testing section has been extensively revised: • Test examples for cusy.tasks • Added Hypothesis extensions • Agile software development using test-driven development and behaviour-driven development python-basics-tutorial.readthedocs.io/en/latest/te... #Python #pytest #Agile #TDD #BDD

🔎🔐 PyPI has completed its second external #security audit! Thanks to @sovereign.tech#securityfor funding, Trail of Bits for the audit, and Alpha-Omega for supporting rapid remediation. Find the full report on the Trail of Bits publication page. #Python #PyPI

Enshitification at scale – Anthropic appears to be introducing an identity verification process for Claude. This is handled by Persona, a service provider with links to Peter Thiel, and may require photo ID: support.claude.com/en/articles #Enshitification #Anthropic #Claude #Persona #PeterThiel

Today is our last day at PyConDE (@pyconde.bsky.social). We’re looking forward to having lots more interesting conversations with you, whether there are any new developments in research software using Python or on LLM coding agents #PyConDE #RSE #Python #AI #LLM

Final preparations for PyConDE & PyData next week in Darmstadt. We’d love to see you there. Please feel free to arrange a meeting with us: cusy.io/en/about/eve... @pyconde.bsky.social #Python #PyData

We have analysed the attacks on the software #SupplyChain of LiteLLM and Telnyx and now recommend dependency cooldowns alongside immutable references, trusted publishers and digital attestations to secure deployments: • python-basics-tutorial.readthedocs.io/en/latest/pa... #Python #ITSec #DevSecOps

Many thanks to @sethmlarson.dev and @miketheman.com for their ongoing work on securing the Python infrastructure.

That wasn’t an April Fool's joke.

Have you had your identity verified on LinkedIn to get the blue tick? If so, I’m afraid I have to tell you that your passport, ID and biometric data are now stored with ‘Persona Identities’, a company funded by Peter Thiel. thelocalstack.eu/posts/linked... #LinkedIn #Privacy

In future, Open Research Europe (ORE) will no longer be open solely to projects funded under the EU Programmes for Research; instead, all research institutions in the participating countries will be able to use the platform free of charge: research-and-innovation.ec.europa.eu/news/all-res...

We have now significantly expanded our collection of open data and organised it by topic: www.python4data.science/en/latest/da... #Python #DataScience #OpenData #Agriculture #Biology #Chemistry #Climate #Weather #ComputerNetwork #Energy #Finance #GeoScience #Healthcare #ImageProcessing #Medicine

OpenAI will acquire Astral and integrate its tools into the Codex ecosystem. Perhaps it’s time for forks: openai.com/index/openai... #OpenAI #Astral #Python

Social media algorithms prioritize right-wing content and influence the political views and behavior of real users. This is the finding of the recent study “The political effects of X’s feed algorithm”: www.nature.com/articles/s41... #SocialMedia #Algorithm #BigTech @algorithmwatch.org

The German Research Association (@dfg.de) has established a binding framework for the use of AI. The aim is to ensure the legally compliant and transparent use of AI: www.dfg.de/en/news/news... #Research #RSE #Science #DataScience #ArtificialIntelligence #AI #Compliance

“Security for LLM Agents” has now been published in @linux-magazine.com: www.linux-magazine.com/Issues/2026/... #ITSecurity #AI #LLM

Mehrsprachige SVGs erleichtern die Wartung und Pflege von Datenvisualisierungen erheblich. Danke an @[email protected] für den Hinweis. www.cusy.design/viz/diagram-... #Multilingual #SVG #Dataviz

Donald Knuth is quite enthusiastic about his recent experiences with generative AI: cusy.io/en/blog/knut... #Knuth #GenAI #AI #Claude #Anthropic

… and now we have also moved the pytest configuration to the pyproject.toml file: python-basics-tutorial.readthedocs.io/en/latest/te... #Python #Testing #pytest

Since tox 4.44.0, tox.ini has been frozen. Only the toml configuration is supported for further development. We have therefore updated our tutorial accordingly: python-basics-tutorial.readthedocs.io/en/latest/te... #Python #testing #tox

📅 Am 23. April ist Girls’Day. 👩‍💻Schülerinnen können mit uns in die Welt der Softwareentwicklung eintauchen und entdecken, wie toll es ist, selbst Software zu schreiben. Weitere Infos findet ihr unter cusy.io/de/about/eve... #GirlsDay #WomenInTech #WomenInSTEM

tox TOML now supports every feature INI ever had, which means tox.ini is officially “frozen” — it’s not dead, it’s just enjoying a very stable retirement 🧓🧊 The future is tox.toml 🚀: tox.wiki/en/4.44.0/re...

Tonight Valentin Haenel will give a talk on Numba, a Python just-in-time (JIT) compiler. We would be delighted to see many of you there: www.meetup.com/python-users... #Python #Berlin

I have been thinking about how LLM agents pose a threat to open source projects and what strategies can offer us at least some protection. Nevertheless, this is likely to remain a challenge: cusy.io/en/blog/how-... #OpenSource #Ai #LLM #AISlop

EU Parliament blocks AI tools. Members should avoid exposing work emails, documents or internal information “to AI features that scan or analyze content,” be “cautious” with third-party AI apps and “avoid granting broad access to data”: www.politico.eu/article/eu-p... #EU #AI #ITSecurity