Hacker News Reader

xtreak29on Two malicious Python libraries caught stealing SSH and GPG keys

At pypistats.org download numbers of the last half year can be found. * python3-dateutil has 271 downloads from non-mirrors in last month[1]

* jeilifish has only 106 downloads from non-mirrors in last month[2]

[1]:https://pypistats.org/packages/python3-dateutil

[2]: https://pypistats.org/packages/jeilyfish

https://news.ycombinator.com/item?id=21702973

xtreak29on Lack of cdnjs activity

And infrastructure cost is 2-3 million dollars per year to have PyPI running. https://twitter.com/dstufft/status/1127320131359653890

xtreak29on PyPy's New JSON Parser

Yes, maintainer of the bpo also showed some demos of REST API addition to build other features and gsoc student working on few features like markdown support during this year core dev sprints. There is a separate pep for actual migration https://www.python.org/dev/peps/pep-0588/ . I am not sure when it would take effect or so given the depth of bpo in core dev workflow. There is also an open issue to track workflows that are missing in GitHub but present in bpo : https://github.com/python/core-workflow/issues/359

xtreak29on PyPy's New JSON Parser

There is an accepted PEP to transition to GitHub issues : https://www.python.org/dev/peps/pep-0581/ . But there is another PEP to keep using roundup to address concerns raised.

xtreak29on PyPy's New JSON Parser

Python 3.9 would also include some optimizations for parsing large strings : https://bugs.python.org/issue37587

xtreak29on Clojure 1.11 planning

Clojure had kept the core lean and simple and has grown through the years with libraries for features like spec. It makes the language as a whole stable with features developed and tested like spec being a library in alpha.

xtreak29on V8 adds support for top-level await

Top level awaits are allowed with a compiler flag now in Python 3.8 : https://bugs.python.org/issue34616

python -m asyncio

Starts a new repl with the compiler flag to explore top level await in a repl

xtreak29on Show HN: A dbg(...) macro for C++

I proposed the idea but the debugging notation seemed to serve a different audience : https://discuss.python.org/t/filename-and-line-number-in-f-s...

xtreak29on Show HN: A dbg(...) macro for C++

Python 3.8 has similar feature for f-strings : https://bugs.python.org/issue36817

print(f"{name=}") expands to print(f"name={name}")

xtreak29on Firefox 69.0 Released

Curious over what it does. This seems to be the meta bug tracking this : https://bugzilla.mozilla.org/show_bug.cgi?id=1535711 . There are lot of linked issues and there is no clear description over this behavior. Can someone add in a link?

xtreak29on US Visa Forms DS-160, 260 Has Social Media Questions Now – Samples

How does this work with platforms that create shadow profiles like platforms that gather information from internet and form an entity out of the details without the person knowing it.

xtreak29on A Secure Runtime for JavaScript and TypeScript Built with V8, Rust, and Tokio

Ryan Dahl, creator of node.js started this project and is also a lead contributor.

xtreak29on India reportedly wants to build its own WhatsApp for government communications

This was an issue with Python's email parser. Relevant issue : https://bugs.python.org/issue34155

xtreak29on Good Quality DOSBox Video Capture and FFmpeg Options

Seems to be based on this repo : https://github.com/susam/susam.in

xtreak29on Python 3.8.0b1 is available for testing

* f-string debugging.

* `python -m asyncio` gives a async repl that supports top level await statements.

* unittest.mock now has AsyncMock that can mock async for, async with and other async related code.

* math.comb to compute binomial coefficients. math.perm and math.isqrt were added.

* unittest gained support for async test case.

* importlib.metadata got merged providing API to access package metadata.

* Threading module now has an API to get native thread ID.

* multiprocessing.parent_process got added.

PEPs merged. 4 PEPs were merged in a single day with a week before beta release.

* [Runtime audit hooks got merged PEP 578](https://bugs.python.org/issue36842)

* typing related PEPs were merged : Add final qualifier (PEP 591), Literal types (PEP 586) and TypedDict (PEP 589)

* [Python embedding got better with PEP 587](https://bugs.python.org/issue36763)

* [Vectorcall for functions got merged PEP 590](https://bugs.python.org/issue36922)

* [New pickle protocol with performance improvements PEP 574](https://bugs.python.org/issue36785)

xtreak29on “Python's batteries are leaking”

I think he was probably frustrated by Python 2 support. If twisted has 50% userbase in Python 2 that don't upgrade and requiring more volunteer time on Python 2 just handcuffs language development on Python 3. Python 2 has been deprecated for long time and if people still want free Python 2 support I think it's just indigenous to the language contributors to spend their already constraint free time on Python 2.

xtreak29on Python at Netflix

I am wondering if PyPy is used somewhere for workloads that need performance.

xtreak29on Firefox 66.0 Aims to Reduce Online Annoyances

http://www.erahm.org/2019/03/13/doubling-the-number-of-conte...

xtreak29on Travis CI Is Laying Off Senior Engineer Staff

From the tweet [0] it seems there is going to be a huge tech debt. I don't know how Idera is planning to expand upon the acquisition after letting go people like this.

> Some know the skinny on dozens of different open source projects and ecosystems, others understand run time and dep mgmt for like 17 languages and even more tooling, and automated image mastering to handle it all. > Others are rewriting what it means to manage communities in this era. They had to garden github issue repos with 1000s of tickets and find the patterns, and know a wide swath of the open source community in ways most people will never get to again

[0] https://mobile.twitter.com/carmatrocity/status/1098538650525...

xtreak29on Ask HN: What's the Best Tool to Create Slides Using a Markup Language

For simpler ones with markdown I found marp very easy to work with : https://github.com/yhatt/marp

xtreak29on On Being a Principal Engineer

Is there a path where one can get to work on code without getting to design and architectural space. Is this thought as career stagnation when someone doesn't wants to work more on higher level design and to remain close to implementation side of things?

xtreak29on How many keywords I can fit into a single C# expression?

Not with keywords but this reminded me of Black Perl : https://en.m.wikipedia.org/wiki/Black_Perl

xtreak29on Python 3.8.0a1 is now available for testing

There were notable performance improvments with several positional argument only functions made 1.3-1.7x faster in stdlib https://bugs.python.org/issue35582.

namedtuple attr access is also now 1.7x faster https://github.com/python/cpython/pull/10495

Other performance improvments : https://github.com/python/cpython/pulls?q=is%3Apr+sort%3Aupd...

xtreak29on NumPy 1.16 is the last release to support Python 2.7

> The expectation is that Python 3.4.10 will be released in March of 2019, and this will be the final release of Python 3.4.

https://www.python.org/dev/peps/pep-0429/#release-schedule

xtreak29on Python governance vote results

Mailing list announcement : https://mail.python.org/pipermail/python-committers/2018-Dec...

xtreak29on Why we’re changing Flickr free accounts

https://www.flickr.com/lookingahead/

> Free members with more than 1,000 photos or videos uploaded to Flickr have until Tuesday, January 8, 2019, to upgrade to Pro or download content over the limit. After January 8, 2019, members over the limit will no longer be able to upload new photos to Flickr. After February 5, 2019, free accounts that contain over 1,000 photos or videos will have content actively deleted -- starting from oldest to newest date uploaded -- to meet the new limit.

xtreak29on Ask HN: What open source project, in your opinion, has the highest code quality?

Though core has some bad API due to maintaining backwards compatibility a lot of the third party libraries like requests, Flask have great focus on API design and code quality.

The authors have good quality repos :

https://github.com/kennethreitz

https://github.com/mitsuhiko

xtreak29on Adding Mercurial support to Gitlab

I use hg at work and git for open source. I can agree that GitHub and GitLab add momentum to git. Bitbucket is the almost the only provider. I feel hg can do the same things like git but a lot of that power is hidden under extensions in hg. I also love git releases that add a lot of UX improvements. Git is also fast compared to hg due to python startup time and it's one of the reasons hg still remains on python2. There is some effort on reorganizing python startup layout which will lay the foundation for faster hg. I hope with GitLab support hg gets more support and visibility.

xtreak29on Type annotations in Python's error messages

Author here, feedback welcome on the error message format.

xtreak29on iTerm2 has a new drawing engine that uses Metal 2

Thanks much for iTerm 2 :)