in case you're not sure who dhh is, he's a danish counterstrike player and race car owner who writes essays like "i am smarter than you" and "foreigners bad" rich enough not to worry about consequences but at the very same time, still desperate for status, a man two friends short of a podcast

🚫 Robotaxis ✅ Diátaxis

Look, I've had some rough conference experiences myself, but it has never occurred to me to compare one of them to the Nazi invasion of Poland.

Today's a good day to remind people Richard Stallman once wrote he saw nothing wrong with "voluntary" sexual relationships between adults and children, and downplayed an alleged rape of a child to defend a friend associated with Epstein. And he is somehow a member in good standing of the FSF Board.

I do not want him on the Board. I do not think he struck a chord. I would not trust him with a groat. I did not trust him with my vote. I don't want Python in his hands. I did not vote for Angry Franz.

Increasingly convinced that anti-passkeys rants are just Jade Helm type conspiracy theories for tech people who are susceptible to that stuff.

Whenever someone says “attestation”, mentally replace it with “public-key cryptography” and re-evaluate the statement.

PyPI now checks for expired domains to prevent domain resurrection attacks, a type of supply-chain attack where someone buys an expired domain and uses it to take over #PyPI accounts through password resets. #Python #OpenSource #SupplyChain #Security

If you know someone who’s harassing itch.io staffers over something they didn’t do and don’t control, you can do your part to make the world a better place by unplugging that person’s internet connection.

Redis Labs, 2018: “We want to address your questions and be crystal clear: the license for open source Redis was never changed. It is BSD and will always remain BSD.” redis.io/blog/redis-l...

Finished a long-overdue transition away from subscribing to the Planet Python RSS feed, which has become close to unusable, and now am subscribed individually to a bunch of interesting people.

New blog post: I've mentioned before that #litestar is by far my favorite of the new generation of #python web frameworks, and I've finally found time to write about why. www.b-list.org/weblog/2025/...

The growing tide of worthless slop that shows up in search results for technical topics (which did not begin with LLMs but has been accelerated by them) has had the interesting side effect of getting me to buy books about programming again after many years of not doing so.

Doing a twist on the meme that's going around: One like on this post = one hot (or at least lukewarm) take on tech.

There are people who insist that Test-Driven Development (TDD) delivers massive gains to multiple aspects of software development, and so, they tell us, everyone should switch to TDD.

Happy 20th birthday Django! 💝🎂🎉 www.djangoproject.com/weblog/2025/... Our open source journey started 20 years ago today, on July 13th 2005. Come celebrate this big milestone at one of our many community events this year #Python #Django #OpenSource #DjangoBirthday

#Python packaging question: I'm looking at pip's documentation and I see an explanation of how to generate a pylock.toml file, but nothing which indicates pip could then install from that file. Can it? If so, what's the right combination of arguments?

If everybody who benefits from Hynek's open source work paid in just one (1) unit of currency, this balance would be positive again by the end of the day.

Days since running coverage on tests found a bug in the tests: 0 This time, a generator had already been exhausted, before we tried to iterate over it. The lack of coverage highlighted the problem. hugovk.dev/blog/2025/ru... #Python #tests #coverage

A frequently-overlooked part of "vibe coding" success stories is how often the "vibe coded" portion of the app is a language or tech the LLM user is unfamiliar/unqualified with and may even look down on as not worthy of their time or understanding. Very often that means frontend, specifically CSS.

I saw this recently and decided to add it to my collection of fun interview-question solutions. Here's the credited-and-lightly-edited version which uses #Python 3.12 type-hint syntax and passes mypy: techhub.social/@fabianveal/... github.com/ubernostrum/...

while people are hand-wringing, I'm already window-shopping for my first yacht bought from my first check as a Professional AI Slop Unfucker.

Wikipedia's article on the Visitor pattern has a #python example, but mentions the methods have different names because "Python does not support method overloading". But you can do a classic Visitor in Python, via overloading, with functools.singledispatchmethod docs.python.org/3/library/fu...

For clarification: Rylance is the actor acclaimed for his portrayal of Thomas Cromwell in “Wolf Hall”. Pylance is the VS Code extension providing Python Language support. Best not to mix them up. Rylance is *very* good at looking sad when you do.

It is a sad truth that a phishing email's links will point at something that looks like the real site's domain, while the real site's genuine emails will have links to like 3520953205-mail.afef098ewug90es8ug.capture-eegr98gu98rt.7263eyufr.click-track.sdfw6ef56.verified-biz Shit's fucked, yo.

Static typing in action

Comparing JSON objects in #Python can be tricky because the default equality checks care about ordering (of items in lists, of keys in dicts, etc.) in ways *you* might not. Some fancy JSON comparison packages solve this properly, but instead I used a horrible good-enough hack in a script this week.

PEP 751 has been accepted! peps.python.org/pep-0751/ This means #Python now has a lock file standard that can act as an export target for tools that can create some sort of lock file. And for some tools the format can act as their primary lock file format as well instead of some proprietary format.

New #python / #django package release: pwned-passwords-django 5.1.2 fixes a bug where the fallback to Django’s common password validator didn’t always work reliably: pypi.org/project/pwne...

The Planet Python aggregator is getting increasingly difficult to use because of the huge volume of low-quality blogs that post the same very basic things over and over again for SEO. Anyone know of a better one? Should I just manually curate a list of actual Python humans' RSS feeds?

Upgraded my laptop a bit ahead of cycle due to, y'know, *waves hands*. My traditional test of performance is to compile Python from source. On an M4 Max with 128GB RAM: pyenv install 3.13.1 88.09s user 27.64s system 150% cpu 1:16.77 total

People getting safety advice from an LLM during a disaster is going to be a nightmare with how there’s been such a rush to force “AI” into every goddamn thing. There’s going to be a body count.

1,400 reposts and 3,800 likes on this quote of the most inflammatory paragraph from the Ars Technica article, which was an irresponsible reframing of an unproven claim bsky.app/profile/karl...

My song, save this, is little worth; I lay the weary pen aside, And wish you health, and love, and mirth, As fits the solemn Christmas-tide. As fits the holy Christmas birth, Be this, good friends, our carol still— Be peace on earth, be peace on earth, To men of gentle will.

I'm knee-deep trying to figure out a chunk of code somebody (who no longer works here) wrote years ago and left zero documentation for, and I'm thinking of all the people who always say "but documentation goes stale as code changes" and wishing I could make them deal with this mess.

Yes, we're starting from version v5.1.x. Made a conscious decision to adopt DjangoVer (h/t @ubernostrum.bsky.social) in hopes that it's easy to see what version of Django the language server supports.

Interviewer: can you explain this gap in your resume? Software engineer: I’m actually really bad at LaTeX

The primary value of static typing (in languages with mandatory explicit static typing) is not "correctness", it's forcing programmers, kicking and screaming and against their will, to write even the most minimal hint of a facsimile of something that's slightly usable as documentation for the code.

Congrats to @kjaymiller.com for becoming a Python Software Foundation Fellow!! 👏👏👏👏👏 kjaymiller.com/blog/on-beco...

Results are in for the Django 6.x Steering Council elections! www.djangoproject.com/weblog/2024/... Congratulations @carltongibson.bsky.social, @emma.has-a.blog, @fwiles.bsky.social, Lily Foote, @timschilling.bsky.social 🫶

hey new friends, help a girl out - what would y'all want to see in a part 2 of the "Design of Everyday APIs" talk? anything more to dig in on, or missed topics, or inspired ideas? https://www.roguelynn.com/talks/everyday-apis/

I voted in the #django Steering Council election and hope to see a strong slate of new faces elected to provide the next generation of Django’s technical leadership. If you are a DSF member, you should have received a ballot. Voting is open for one week only!

I do not say this lightly: PULL_REQUEST_TARGET CONSIDERED HARMFUL

Legitimate supply-chain attack affecting Python package "Ultralytics" abused multiple levels of GitHub Actions shell injection vulnerabilities in workflows to publish malware to PyPI.

I've noticed a concerning trend of "slop security reports" being sent to open source projects. Here are thoughts about what platforms, reporters, and maintainers can do to fight back: #oss #opensource #security #vulnerability #vuln #cve #slop #ai #llm sethmlarson.dev/slop-securit...

Postel's Law is not actually useful in practice, because *both* ends of it have to be upheld. And if everybody's doing that of their own volition, you don't need Postel's Law. On the other hand, if people produce garbage and don't care to fix it, you shouldn't feel obligated to support that.

Meet Anna Makarudze, one of the #HiddenFiguresofPython. Anna is a Software Engineer based in Harare. Django Girls Foundation Fundraising Coordinator since June 2017 and lead maintainer of the Django Girls website and resources since 2020 and former DSF Board member! #Python #podcast

I had a hilarious joke about Kafka, but people said not to post it because it was topical humor.

Please do not put your #Python code _inside_ of your virtual environments. Consider virtual environments: - Disposable - Not relocatable - Contents managed by Python and package installers See the bullet point list at docs.python.org/3/library/ve... if you need official docs backing this up.