Hacker News Reader

Comment by SteveNuts | Hacker News Reader

It’s very likely that project is a security nightmare. Just an OS old enough to support 2.7 would be problematic.

I just verified. You can install Python 2.7 on an up to date Windows install as well as an up to date Linux install. Python 2.7 hasn't received security updates (or really any updates) in years, but that does not mean it can't still work on an up to date OS.

The latest 2.7 seems to have a lot of CVEs (did not verify that manually though)

https://www.cvedetails.com/version-list/10210/18230/10/Pytho...

IIRC some commercial distros maintain patches for 2.7 but then you're paying for being 15 years behind the future.

Yeah, it's been 5 years (almost 6) since python 2.7 stopped receiving security updates, but it does still run on modern OS's.

Looking at the list, I'm actually kind of surprised there aren't more CVEs for python 2.7, but if you're only running it locally or on an intranet I could see letting it ride.

There are variants of Python 2.7 that are supported

2.7 gave me problems last time I tried to install it from source on redhat. Something about ssl incompatibility.

wouldn't it be faster/safer to upgrade to latest django/python rather than rewrite it in React/Go?

Python 2 to Python 3 in a Django codebase ... may be a full rewrite anyway.

Many people migrated Django projects from 2 -> 3. Certainly something that takes effort, but hardly a rewrite.

Nothing like a full rewrite. I migrated multiple projects, but while there is a significant amount of work involved its a tiny fraction of what a full rewrite would require.

Its fine, I ported quite a few Django libraries to python 3 at the time just because I wanted to use them.

2to3 gets you pretty far and theres not much in the rest.

Did it a couple of times. Not something you can do with your eyes closed, but not even close to the nightmare of upgrading a JS application or upgrading a rails app.

Reply on news.ycombinator.com