oblvious-earth

4 ms·

1.
by oblvious-earth 6mo ago
OpenAI just acquired Astral who have an index service called pyx, so they would have a step up. My understanding though is most corporations that take security seriously either build everything themselves in a sandbox, or use something like
2.
by oblvious-earth 1y ago
It does not work EXACTLY how pip works, big differences are covered here: https://docs.astral.sh/uv/pip/compatibility/ Some of these are uv following the standards while pip is still migrating away from legac
3.
by oblvious-earth 1y ago
PDM has plugins, such as being able to invoke conda commands: https://github.com/pdm-project/awesome-pdm Otherwise I don't know what they're talking about, it is indeed a Python package manager.
4.
by oblvious-earth 2y ago
If you're concerned about dependency confusion attacks you should host your own index and vet what goes on to it. But there is a better solution coming, PEP 708 was developed for this and is in prototype on pypi.org, so it's an ov
5.
by oblvious-earth 2y ago
No, it looks like it's been available on GitHub for a while, but development wasn't done there: https://star-history.com/#nginx/nginx&Date
6.
by oblvious-earth 2y ago
Thanks for the update, unfortunately I can no longer edit my top comment or title to reflect this. Would be happy for admin to do so, if that's something that's done on this site.
7.
A post by Guido van Rossum removed for violating Python community guidelines(discuss.python.org)
247 points by oblvious-earth 2y ago|261 comments
8.
by oblvious-earth 2y ago
The original text stated: > I don’t know much about voting systems, but I know someone who does. Unfortunately he’s currently banned. Maybe we can wait until his 3-month ban expires and ask him for advice? Currently, the text reads: >
9.
by oblvious-earth 2y ago
pip will not do that, it will attempt to use the latest version under the user requirements, only if there is a conflict between two packages will it backtrack on old versions of a package, uv does exactly the same. Further, if a package in
10.
by oblvious-earth 2y ago
I would say, as someone who works on performance of pip, no one else was able to reproduce OPs severe performance issue, not saying it didn't happen, just it was an edge case on specific hardware (I am assuming it was this issue https
11.
by oblvious-earth 2y ago
Write an issue on their GitHub if you don't already see one, they're very responsive
12.
by oblvious-earth 2y ago
> I doubt the typical LSP servers will be aware of dependencies specified in that way and so won't offer autocompletion etc for those libraries. Given this is a recently accepted standard (PEP 723), why would language servers not st
13.
by oblvious-earth 2y ago
Maybe it’s the fact it can be done with multiple operators and strong encryption that is hard to grok, but at least here is a very simple example of a limited partially homomorphic encryption: You have a 7-bit character representation (e.g.
14.
by oblvious-earth 2y ago
> The people who say "just use pip and venv" don't understand the issue. The people saying that say that because it works for them and it solved their problems. > setuptools is somewhat deprecated but not really setupto
15.
by oblvious-earth 3y ago
Is this comparable to Ibis or is it something that would be a backend for it?
16.
by oblvious-earth 3y ago
Discussion on Python discuss: https://discuss.python.org/t/deprecating-utcnow-and-utcfromt... I'm the one arguing against this move, I've already made my thoughts clear that it's a lot of churn, e.g. the
17.
by oblvious-earth 3y ago
> Python doesn't have a standards document. It has a reference implementation that defines the language. That's not quite strictly true, Python does have a documented "Language Reference": https://docs.pyth
18.
by oblvious-earth 3y ago
The main difference now is there is an actual standard rather than a de facto tool that becomes the standard. The idea is that different tools may rise and fall in popularity but they should all be following the standard so the compatabilit
19.
by oblvious-earth 3y ago
> It's a single script It's over 1200 lines of code, it's not like it's 100 lines of code and can fit on a single screen > Globals are fine--they're even marked as such I would argue that globals in this conte
20.
by oblvious-earth 3y ago
> I don't think globals are so awful for certain things. I prefer a more functional approach where you have simple composable standalone functions instead of classes. Obviously classes have a role, but I find they sometimes overly c
21.
by oblvious-earth 3y ago
Quickly skimming some points that would irratate me if I had to maintain this script: * Importing Paramiko but regularly call `ssh` via subprocess * Unused functions like `execute_network_commands_func` * Sharing state via a global instead
22.
by oblvious-earth 3y ago
In practice wouldn't this just mean part nationalizing the bank so you can keep paying the salaries of all the various bank tellers, IT staff, and accountants to allow the depositors and bond holders to withdraw their money. Given the
23.
by oblvious-earth 4y ago
> This is true, but now you're explicitly depending on all of your transitive dependencies They're constraints not dependencies they don't need to be installed and you can just update your requirements as you need and rege
24.
by oblvious-earth 4y ago
The simple solution to this with pip is constraints file: pip install <my_entire_universe_of_requirements> pip freeze > constraints.txt And now in any new environment: pip install <any_subset_of_requirements&g
25.
by oblvious-earth 4y ago
I know there's a large part of the Python community that loves Poetry but I've never understood why. It adds a lot of complexity and I've never found it does a good job of solving complex problems, where as requirements and c
26.
by oblvious-earth 4y ago
Yes, actually more like 2 generations once chips are commercially available, the Arizona factory has never been advertised as a cutting edge node. But there are 100s of media headlines basically implying that by listing high profile custome
27.
by oblvious-earth 4y ago
I think it depends how you count it. According to this setup their under load power consumption of the entire system was just shy of 700Ws https://pcper.com/2014/10/nvidia-gtx-980-3-way-and-4-way-sli... Back then
28.
by oblvious-earth 4y ago
Okay but my most common case for datetime.utcnow() is that I want the time in UTC for an external system that doesn't understand timezones, you really want me to do datetime.now(tz=timezone.utc).replace(tz=None)?
29.
by oblvious-earth 4y ago
The title is "Distinguished Engineer". I have no idea of the pay but based on my research of salaries for getting a job this year I would wildly speculate high 6 digits to low 7 digits.
30.
by oblvious-earth 4y ago
I don't disagree, but the positive thing about this is it's opt-in for extensions. If extensions don't support it it means you just can't use that extension when trying to run multiple interpreters in the same process. L

More ›