A woodcarver named Becky W (vortenjou.bsky.social, rosehip.wordpress.com) made a sculpture of my nuthatch comic, showing a white-breasted nuthatch sitting on real nuts and hatching one of them. I'm so happy

This is the food supply chain equivalent of “[software] is insecure because they put out a lot of CVEs” It’s GOOD that they patch and disclose a lot of vulnerabilities, actually. Who you really need to worry about are the ones who don’t think they have any

Core Dispatch 8 is live! We've got the latest 3.15 beta out (released with love from #EuroPython 💛), a bunch of lively PEP discussions, and a very unhinged "One More Thing" this time. Check it out 👇 coredispatch.xyz/editions/8

Excited for the #EuroPython morning keynote today from @yossarian.net, starting at 9AM in S1: ep2026.europython.eu/session/secu...

I'm speaking today at #EuroPython about learning from the #Python #Security Response Team and how to become a "Security Contributor" to an Open Source project. The talk is in Room S1 at 16:00 right before the evening keynote: ep2026.europython.eu/session/lear...

Today's the day! Come on out for story time and good ideas when I share details on the Anatomy of a Phishing Campaign I handled for #PyPI around this time last year. ep2026.europython.eu/session/anat... #EuroPython2026 #EP2026 #Python #OpenSource #SupplyChain #Security

I’m on the AI, Ethics, and Cybersecurity panel at #EuroPython today at 13:50 in Room S3A! Come join and learn the latest: ep2026.europython.eu/session/secu... #python #europython2026

I wrote about how, like many other open-source projects, CPython is experiencing a huge increase in security reports. Charts inside! hugovk.dev/blog/2026/se... #Python #security #OpenSource

It’s that time of year again, new foods announced for the Minnesota State Fair!!! 😋 www.mnstatefair.org/new/food

I published a guide for how to play the “Second Quest” of Legend of Zelda: Four Swords Adventures featuring levels that were cut late into development of the game restored by a game modding group “Eternal Dream Arabization”: sethmlarson.dev/legend-of-ze... #zelda #gaming #retrogaming #gamecube

New #Pillow release! 🛞 Wheels for Python 3.15 beta 🧾 An SBOM in all the wheels 🚅 Performance improvements thanks to @akx 🔒 Security fixes ❌ No longer a wheel for experimental free-threaded 3.13 pillow.readthedocs.io/en/latest/re... #Python #Pillow #PythonPillow #release #security #Python315 #SBOM

I solved a Super Mario mystery, but the real treasure was learning about the history of playing cards along the way.

If you use GitHub Actions to publish to #PyPI, I wrote a blog post outlining what I consider the key things you can do to secure your publishing workflow. snarky.ca/how-to-publi... If you don't use GitHub Actions for publishing, this post will NOT be of interest to you.

You shouldn’t trust Trusted Publishing https://blog.yossarian.net/2026/07/07/You-shouldnt-trust-trusted-publishing #python #security #oss

Bit if an experimental one, comparing Mario Kart World game mechanics and media without seams or ceremonies: sethmlarson.dev/mario-kart-w...

📡 Core Dispatch #7 is out! 🐍 3.15 beta 3 shipped; beta 4 lands Jul 18 🏎 PEP 836 "JIT Go Brrr" charts the JIT's path to a supported feature 🎉 Pieter Eendebak is now a core dev 🎥 PyCon US core team talks are landing on YouTube ...and more in this edition! coredispatch.xyz/editions/7

I'll be honest, out of the three, Nintendo is still basically the only one I can somewhat trust long term. For all the years that I have datamined Nintendo Classics, it's rare to mention but the emulators are consistently updated all the time, something Virtual Console never quite did before.

I had a great time chatting with Seth Larson, a #CyberSecurity expert from #PSF at #PyConUS Watch and learn about how to keep your #Python project safe: youtu.be/k6E7v_4sEV4#CyberSecurity#PSF#PyConUS#Python#PyCharm #JetBrains

I want to boost this again and specifically highlight the fact that this is entirely open source, including detailed schematic notes on the design and component choice. It's a brilliant piece of engineering that gifts so much knowledge to the world.

Last week I attended and managed a session for UN Open Source Week 2026. I've published my notes and a few thoughts following the event. Thanks to @sovereign.tech and Alpha-Omega for sponsoring my attendance at the event. 👉 sethmlarson.dev/un-open-sour... #opensource #oss #security #supplychain

Somehow, launching a random soccer game by Konami ends up triggering a special debug mode in the Japanese+ version of Animal Crossing... but, how does this work? Join me as we dive into this neat exploit in a brand new video, now live on my YouTube channel. Hope you enjoy! ⚽️ youtu.be/9-dvmJTm0R0

Join Seth Michael Larson (@sethmlarson.dev) at EuroPython for "Learning from the not-so-secret Python security "cabal"" talk: ep2026.europython.eu/9JALSN

This is what collaborative, coordinated, responsible disclosure looks like. It was a pleasure to work with @gitguardian.com on this #PyPI #security investigation to help protect the global #Python #SupplyChain blog.gitguardian.com/hunting-leak...

Completely remediating this report was a massive coordinated team effort and would not be possible without paid security staffing at the PSF. Confirmed remediation in 48 hours from report with extensive follow-up auditing, hardening, and coordinating a third-party audit from Trail of Bits.

I’m representing @python.org with @sethmlarson.dev and @miketheman.com at #UNOpenSourceWeek today and Thursday! No name tags so this is what I look like; if you’re here say hi:-) #OpenSourceWeek

If you're trying to organize a future event on Discord/Slack with everyone in the channel: don't use "@here", it might not do what you think! sethmlarson.dev/til-at-here-... #discord #slack #til

For the second year, we are bringing a delegation of #OpenSource maintainers to #UNOpenSourceWeek in NYC. The experts who actually build and maintain critical digital infrastructure are rarely represented in the international conversations about how that infrastructure is sustained and maintained.

UN OSS Week "Maintain-a-thon" schedule is published, it will be difficult to choose between the two tracks: www.sovereign.tech/news/maintai... I'm co-leading a session with Mirko Swillus on software vulnerabilities in our new reality of LLMs. Excited to discuss the challenges and paths forward:

Did you miss #PyConUS this year? 🐍🛡️ Here's a summary of everything security at @pycon.us 2026, including the new security talk track, an update from PSF security engineers, and notes from the OSS maintainer security open space. #Security #OpenSource #SupplyChain #SBOM

While the killers of Renée Good and Alex Pretti walk free, the DOJ is busy bringing bogus charges against protesters. The Administration thinks intimidation will make us back down. They keep learning the same lesson: Minnesotans don't scare easily. We organize for our rights ✊🏽

I wrote about the stuff I got up to during the Sovereign Tech Fellowship pilot last year. Turns out it was a lot! Expect more this year! hugovk.dev/blog/2026/so... #Python #SovereignTechFellowship @sovereign.tech

Is that a semicolon in a Python pull request diff? Linting is important: screen included. sethmlarson.dev/linting-scre...

Cranking up demands for self-surveillance on human artists is such a grotesque response to AI. I don't let robots anywhere near my writing but I would never use this. I edit *on paper*and then transcribe! When I'm unwell, I use dictation. No one gets a fucking log of my waking time. Come on.

⚽️🍃

Every code generation LLM model available will at some point suggest insecure code as a part of “code completion”. Should this behavior be considered a vulnerability? #security #opensource #programming sethmlarson.dev/are-insecure...

Is the donut in Super Smash Bros. Brawl from Mister Donut? You decide! 🍩🍩 sethmlarson.dev/is-the-donut...

It’s Donut Day, celebrate by exploring this museum of donut flavours from Japan. 1971 onwards. www.misterdonut.jp/enjoy/zukan/...

Hi. Today is my birthday. In lieu of wrapped gifts, I'm asking you to have a look at Mario 101, my project about weird Mario history. And if you have already looked and think it does not suck, please share this link somewhere.

The PSF's Strategic Plan full draft is available and we want your feedback. After sharing high-level goals in May, we're opening a 3-week community feedback window. Read the full draft and tell us: Are these the right goals? Is anything missing? #Python #PyPI pyfound.blogspot.com/2026/06/psf-...

Want to support the PSF and stock up on #Python books at the same time? The @nostarchpress.bsky.social @humblebundle.com has 15 titles (including Automate the Boring Stuff + Python Crash Course) for just $36. Offer ends June 18th! www.humblebundle.com/books/python...

NEW VIDEO! The Game Boy Advance e-Reader has had quite the decade so far, I got so much to tell you! ► 8 home brew games reviewed ► 2 developer interviews ► Tons of other discoveries from the community Really proud of this one, hope you like it ☠ youtu.be/0U9fVOmbmjc ☠

Thanks to @sethmlarson.dev we have a new #Python security policy. I like how it starts: "Python Security Response Team (PSRT) members balance this work against many other responsibilities. Please be thoughtful about the time and attention your report requires." devguide.python.org/security/pol...

@miketheman.com and @sethmlarson.dev share some of the accomplishments of the PSF security team this year. That’s a lot of work for two people! And shoutout to the sponsors who make it possible to fund their roles.

#urllib3 is now available on flopPyPI! 💾 #pycon #pyconus #pyconus2026

The #PyConUS #Security Track fires back up after lunch! See you at 1:45PM in Room 103ABC where Python core developer Emma Smith (@emmatyping.dev) will be talking about “Rust and CPython”. Don't miss it!! 🦀🐍 us.pycon.org/2026/schedul... #rust #python #pyconus2026 #supplychain #memorysafety #pypi

The #PyConUS Security Track is today!! Come to room 103ABC to learn all about #Python #Security 🐍🛡️ us.pycon.org/2026/schedul...

🚨🚨 We're still looking for #PyConUS volunteers tomorrow! We need session chairs, runners, info desk, and registration. Help us beat Friday's record for volunteer hours and sign up today via the volunteering page: us.pycon.org/2026/volunte...

The “ #OpenSource Maintainer #Security Forum” Open Space will be in Room 202C at 3PM today 🐍🛡️ If you’re a project maintainer and want to discuss project security or how to handle vulnerability reports: come and find us! 👋 👉 us.pycon.org/2026/schedul... #Python #PyConUS #PyConUS2026

The “ #OpenSource Maintainer #Security Forum” Open Space will be in Room 202C at 3PM today 🐍🛡️ If you’re a project maintainer and want to discuss project security or how to handle vulnerability reports: come and find us! 👋 👉 us.pycon.org/2026/schedul... #Python #PyConUS #PyConUS2026

💡 Security Track Spotlight: In his talk “GitHub Actions Security in Python Packages” at #PyConUS 2026 @andrewnez.bsky.social shares findings from scanning thousands of workflows and practical ways to harden Python package releases. #security us.pycon.org/2026/schedul...