miketheman

7 ms·

31.
PyPI Blog: Project Quarantine(blog.pypi.org)
92 points by miketheman 2y ago|60 comments
32.
PyPI now supports digital attestations(blog.pypi.org)
218 points by miketheman 2y ago|186 comments
33.
PyPI Safety and Security Engineer: First Year in Review(blog.pypi.org)
3 points by miketheman 2y ago|0 comments
34.
PyPI Blog: Malware Distribution and Domain Abuse(blog.pypi.org)
1 points by miketheman 2y ago|0 comments
35.
by miketheman 3y ago
How so? PyPI launched in 2003, PyPy's first release was in 2007. https://www.pypa.io/en/latest/history/#before-2013
36.
2FA Required for PyPI(blog.pypi.org)
4 points by miketheman 3y ago|0 comments
37.
2FA Requirement for PyPI begins 2024-01-01(blog.pypi.org)
2 points by miketheman 3y ago|0 comments
38.
Support Python in 2023 (fundraiser and membership drive)(python.org)
2 points by miketheman 3y ago|0 comments
39.
TestPyPI now requires 2FA in advance of PyPI 2024 requirement(blog.pypi.org)
1 points by miketheman 3y ago|0 comments
40.
by miketheman 3y ago
Apologies for any frustration, user registrations are now open now that admins have returned.
41.
by miketheman 3y ago
Depends on funding. Ask your employer to pitch in!
42.
PyPI has completed its first security audit(blog.pypi.org)
137 points by miketheman 3y ago|22 comments
43.
by miketheman 3y ago
Check out https://chrisholdgraf.com/blog/2022/install-github-from-pypr... which breaks down a few ways to to this.
44.
PyPI Reports on Inbound Malware Notices(blog.pypi.org)
26 points by miketheman 3y ago|0 comments
45.
GitHub now scans public issues for PyPI secrets(blog.pypi.org)
4 points by miketheman 3y ago|0 comments
46.
by miketheman 3y ago
So sorry to hear that. I looked at our account recovery requests repo and didn't see anything from `arnon` or similar usernames. We have the published account recovery process here: https://pypi.org/help/#account-r
47.
by miketheman 3y ago
If you are the sole owner of a project, you can still delete the project. That's not great right now. There's a conversation topic that you might find interesting: https://discuss.python.org/t/stop-allowing-de
48.
by miketheman 3y ago
None taken :) PEP 458 describes the path forward for PyPI. https://peps.python.org/pep-0458/ Here's the in-progress roadmap: https://github.com/pypi/warehouse/issues/10672 If there&
49.
by miketheman 3y ago
Project deletion would fall under "management". Account deletion is excluded so you can elect to remove your account at any time.
50.
by miketheman 3y ago
Turns out we already do! When setting up 2FA, select WebAuthN and create a label for your device. When prompted, follow directions on your device.
51.
by miketheman 3y ago
Thanks for the suggestion! The image you showed is in regards to Passkeys, which PyPI doesn't support yet. For TOTP, we support a single entry, and can't set a custom name. For WebAuthn, we allow a custom label value, is that what
52.
PyPI Requires 2FA for New User Registrations(blog.pypi.org)
112 points by miketheman 3y ago|73 comments
53.
by miketheman 3y ago
Software's software ;)
54.
PSF Hires PyPI Safety and Security Engineer(pyfound.blogspot.com)
65 points by miketheman 3y ago|34 comments
55.
by miketheman 3y ago
> I would never use Python for a fully interactive high traffic service sitting on the open internet. So, nothing like Instagram, Dropbox, or YouTube?
56.
PyPI Enforces Token Use for Uploads from Users with 2FA(blog.pypi.org)
8 points by miketheman 3y ago|0 comments
57.
Reducing Stored IP Data in PyPI(blog.pypi.org)
15 points by miketheman 3y ago|1 comments
58.
Securing PyPI Accounts via Two-Factor Authentication(blog.pypi.org)
10 points by miketheman 3y ago|1 comments
59.
Python 3.10 runtime now available in AWS Lambda(aws.amazon.com)
2 points by miketheman 3y ago|1 comments
60.
Reduce AWS Lambda Latencies with Keep-Alive in Python(miketheman.net)
1 points by miketheman 4y ago|0 comments

More ›