Security & Fellow of Python Software Foundation (@python.org) 🐍 Minnesoootan, he/him, #Python, #opensource, #security #retrogaming 🌐 https://sethmlarson.devhttps://bsky.app/profile/sethmlarson.devhttps://bsky.app/profile/sethmlarson.dev/post/3mlyokptswc2p#urllib3 is now available on flopPyPI! 💾 #pycon #pyconus #pyconus202616 May 2026 20:25 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mlyokptswc2phttps://bsky.app/profile/sethmlarson.dev/post/3mlyo5hna7c2kThe #PyConUS #Security Track fires back up after lunch! See you at 1:45PM in Room 103ABC where Python core developer Emma Smith (@emmatyping.dev) will be talking about “Rust and CPython”. Don't miss it!! 🦀🐍 https://us.pycon.org/2026/schedule/presentation/1/ #rust #python #pyconus2026 #supplychain #memorysafety #pypi16 May 2026 20:18 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mlyo5hna7c2khttps://bsky.app/profile/sethmlarson.dev/post/3mlyewn4c722oThe #PyConUS Security Track is today!! Come to room 103ABC to learn all about #Python #Security 🐍🛡️ https://us.pycon.org/2026/schedule/talks/#May1616 May 2026 17:33 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mlyewn4c722ohttps://bsky.app/profile/sethmlarson.dev/post/3mlvt7phl2s2gThe “ #OpenSource Maintainer #Security Forum” Open Space will be in Room 202C at 3PM today 🐍🛡️ If you’re a project maintainer and want to discuss project security or how to handle vulnerability reports: come and find us! 👋 👉 https://us.pycon.org/2026/schedule/open-spaces/#OpenSpace-43 #Python #PyConUS #PyConUS202615 May 2026 17:10 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mlvt7phl2s2ghttps://bsky.app/profile/sethmlarson.dev/post/3mlvt7phl2s2gThe “ #OpenSource Maintainer #Security Forum” Open Space will be in Room 202C at 3PM today 🐍🛡️ If you’re a project maintainer and want to discuss project security or how to handle vulnerability reports: come and find us! 👋 👉 https://us.pycon.org/2026/schedule/open-spaces/#OpenSpace-43 #Python #PyConUS #PyConUS202615 May 2026 17:10 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mlvt7phl2s2ghttps://bsky.app/profile/sethmlarson.dev/post/3mlofdfdlbk27This talk from @andrewnez.bsky.social grows more and more important as the days go on... it's a must watch! #Python #PyPI #PyConUS #PyConUS2026 #security [contains quote post or other embedded content]12 May 2026 18:13 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mlofdfdlbk27https://bsky.app/profile/sethmlarson.dev/post/3mlgo55qstk2m#PyConUS is only a few days away! 🤩 As usual I’ll be covering the event on Mastodon (specifically the NEW “Trailblazing #Python Security” talk track on Saturday May 16th). Time to reshare my hack for quick #Mastodon toot templates with event #hashtags: https://sethmlarson.dev/quick-mastodon-toot-templates-for-event-hashtags09 May 2026 16:29 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mlgo55qstk2mhttps://bsky.app/profile/sethmlarson.dev/post/3mlefdhd55c27Little blog post for anyone who's interested in Epilogue #Retrace and is like me: has a per-USB-C iPhone and runs Linux instead of Windows or macOS 😢 https://sethmlarson.dev/epilogue-retrace-iphone-13-pro-ubuntu #gaming #retrogaming #gameboy #epilogue #gb08 May 2026 18:47 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mlefdhd55c27https://bsky.app/profile/sethmlarson.dev/post/3mlbplpoq222qHey #Python library maintainers! 👋 I sometimes see pull requests from well-meaning users about bumping minimum versions of dependencies to "fix #security vulnerabilities". Here's a resource you can link to about why this strategy doesn't work in practice: https://sethmlarson.dev/library-version-specifiers-not-for-vulnerabilities07 May 2026 17:12 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mlbplpoq222qhttps://bsky.app/profile/sethmlarson.dev/post/3ml4hdcmm2c2fNot one but two of my blog posts are on the HN front page simultaneously... that's a new one! 🤯05 May 2026 15:01 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3ml4hdcmm2c2fhttps://bsky.app/profile/sethmlarson.dev/post/3ml2nii7xwc2iI'm running a “#Security for #OpenSource Maintainers” space at #PyConUS 2026 again this year. Bring challenges and your experiences with the security tooling or “landscape” to share and learn from others. Date will be announced closer to the event, see you there :) https://us.pycon.org/2026/events/open-spaces/#openspace-4304 May 2026 21:46 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3ml2nii7xwc2ihttps://bsky.app/profile/sethmlarson.dev/post/3mksav6at322uThe only difference in holidays between the North American (NTSC) and PAL “Animal Crossing: Population Growing” calendars is Spring Cleaning Day and Labor Day. Read more: https://sethmlarson.dev/animal-crossing-calendar#regional-differences #retrogaming #animalcrossing #gaming #gamecube01 May 2026 13:39 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mksav6at322uhttps://bsky.app/profile/sethmlarson.dev/post/3mkpxbvviqc2q🐸🔔 Kaeru no Tame ni Kane wa Naru or “The Frog for Whom the Bell Tolls” is a quick and funny puzzle “RPG” with many references and shared DNA with some of my favorite games. Recommended as a snack between games in your backlog 💜 https://sethmlarson.dev/the-frog-for-whom-the-bell-tolls #gameboy #gb #retrogaming #nintendo30 Apr 2026 15:42 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mkpxbvviqc2qhttps://bsky.app/profile/sethmlarson.dev/post/3mkpxbvviqc2q🐸🔔 Kaeru no Tame ni Kane wa Naru or “The Frog for Whom the Bell Tolls” is a quick and funny puzzle “RPG” with many references and shared DNA with some of my favorite games. Recommended as a snack between games in your backlog 💜 https://sethmlarson.dev/the-frog-for-whom-the-bell-tolls #gameboy #gb #retrogaming #nintendo30 Apr 2026 15:42 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mkpxbvviqc2qhttps://bsky.app/profile/sethmlarson.dev/post/3mknsrn4kh22rThe #PyConUS 2026 app is available and you can see the NEW “Trailblazing Python Security” talk track in the app! ⭐ Smash that “Favorite all Trailblazing Python Security” talks button and I'll see you in Long Beach soon 🤩29 Apr 2026 19:16 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mknsrn4kh22rhttps://bsky.app/profile/sethmlarson.dev/post/3mkisanuk7c2lWorkflow security continues to be a common cause of compromises of open source projects. If you're using GitHub Actions use Zizmor and treat the findings seriously, especially insecure triggers and template injections. docs.zizmor.sh #github #actions #security #oss #opensource #python https://docs.zizmor.sh27 Apr 2026 19:23 +0000at://did:plc:lpx4s2ddgn54cocsxs7q3n4a/app.bsky.feed.post/3mkisanuk7c2l