From what occasional echoes still hit me, or affect me through my day job, I'm really happy that I slowly drifted away from the #python community and never wrote any hobby projects that they could use to hold me hostage in python 3. It really was a warning sign. I guess that's what being influenced by big commercial corporations eventually does to a project. I still like most of the language, but if I went to a conference, I probably couldn't stay in the same room as some of those people.
se você ainda guarda senha com SHA-256 ou MD5, o banco de dados dos seus usuários é uma bomba-relógio esperando o próximo vazamento.
não é exagero. uma GPU moderna quebra bilhões de hashes SHA-256 por segundo. isso não é hipótese, é aritmética.
foi assistindo ao vídeo do @RenatoAugustoTech (https://youtu.be/VW2mywTTz80) que a ficha caiu de vez sobre o quanto esse tema é negligenciado. recomendo muito.
no novo post do blog eu fui um passo além e mostro como implementar Argon2id em Python do jeito certo — com salt automático, pepper no servidor (nunca no banco), rehash transparente quando os parâmetros evoluem e configuração separada por ambiente com Dynaconf.
o código está pronto. as libs são estáveis. a pergunta não é se o seu sistema vai vazar um dia — é se quando isso acontecer os hashes vão ser inúteis pro atacante.
🔗 https://www.riverfount.dev.br/posts/password_hash_argon2/
Help needed: Someone removed the #PyLadies #stockholm admins and changed the name of the meetup group, changed logo/header photos of the past event. I wrote about the person and their post in linkedin https://www.linkedin.com/feed/update/urn:li:activity:7435384140042039297/ I hope the larger #python #community can comment in the linkedin post and point out why this is bad. Please boost for more reach.
https://www.meetup.com/pyladiesstockholm/ this is the group.
New.
"The activity began in February 2026 and has continued in recent days."
Symantec: Seedworm: Iranian APT on Networks of U.S. Bank, Airport, Software Company https://www.security.com/threat-intelligence/iran-cyber-threat-activity-us #infosec #Python #threatintel #threatintelligence
New.
Securonix: VOID#GEIST: Stealthy Multi-Stage Python Loader https://www.securonix.com/blog/voidgeist-stealthy-multi-stage-python-loader/ #infosec #Python #threatresearch #malware
Picture from my #workshop Saturday the 14# February at Äänen Lumo, Helsinki (FI), showing how to process statistical data with #jupyterlab and #python to make them suitable for #datasonification with programs such as Pure Data.

Python Tip: slots for Memory
@dataclass(slots=True)
class Pixel:
x: int
y: int
color: str
# Uses 40% less memory than regular class
Adding slots=True to dataclasses prevents __dict__ creation. Saves ~40% memory per instance.
https://raccoonette.gumroad.com/l/Python-for-Beginners-From-Zero-to-Your-First-Projects
#Python #CodingTips #Programming
Python Tip: pathlib > os.path
from pathlib import Path
config = Path.home() / '.config' / 'app.json'
if config.exists():
data = config.read_text()
pathlib provides an object-oriented filesystem API. Cleaner than os.path string juggling.
https://raccoonette.gumroad.com/l/Python-for-Beginners-From-Zero-to-Your-First-Projects
#Python #CodingTips #Programming
Back home from Amsterdam.
I got an invite to visit the JetBrains Python Unplugged behind the scenes, which was super cool and also a fun place to meet new people and catch up with others.
It was definitely a highlight of my week. Thanks everyone!
Season 1 Lesson 6 Part 9 - Your First Steps - Percentage Formatting with - f String in Python #dataengineer #python #vibecoding #pythonprogramming #codingtutorial #softwaredeveloper #jupyternotebook #dataanalysis #learncoding #pythoncode
I built a bullshit detector for research papers. Then I pointed it at AI news.
A viral post claimed ChatGPT uninstalls spiked 295% after the Pentagon deal. Sounds like a stampede — until you add denominators. Against 300M+ users, that's ~0.06%. It's one weekend of data. And "users are switching apps" is a causal claim nobody has the data to prove.
The backlash is real. The numbers are just wearing a very flattering outfit.
pip install bullshit-detector
https://github.com/mycarta/bullshit-detector
#Python #OpenScience #DataScience
RE: https://mastodon.world/@zopyx/116177372177118372
So we have chardet 7.0 which has been vibe-coded for better functionality and better performance.
Well, here is my pre-dinner vibe-coding reimplementation in Rust which 20x - 100x faster 🙃
https://github.com/zopyx/chardet-rust