I've migrated 200k LoC python 2.7 codebases to python 3. It certainly wasn't painless but tools like black, flake8, 2to3 and other stuff helped. It's not impossible and can be executed in 2-4 weeks

> you expect there to be budget or time to rewrite it into python 3 for literally no reason other then “2.7 is deprecated”

2.7 is not just deprecated. It's dead. There's no more updates. It's not "millions cheaper" to not migrate. I posit you'd save a LOT of money from the sheer performance improvements and bug fixes from migrating than anything else. In my own case we saved a few hundred dollars a month from not having to spawn new containers and EC2 instances

This is what happens, when no one is maintaining software.

Security is more important that anything, certainly than having time or not to update your code.

You're 100% in the wrong here, and Google is 100% in the right, and I hate Google more than spammers, more than pretty much any other company there is.

They're not wrong here, and it hurts me to support their stance.

Fix your stuff. Stop blaming others. I doesn't matter why you're in the situation you're in, you're wrong to be there. No matter what.

If you think security is an afterthought, you're doing it wrong.

this also really highlights the problem with python's 2 vs 3 split: there is a large body of work that will never be updated and will forever run 2 including actual web/publicly facing code. And saying "just upgrade because security" isn't going get much of that code upgraded.

This sort of thinking, is why places get hacked. You don't know what the access vector is. Stop making excuses. Secure your shit.

I would be so happy if a law was passed, and such actions were criminal.

Your code took a month, not everyone’s will.

so again something is just running and working why spend the money and or time when there are potentially far more important things to spend limited resources on?

op even said “yes I’m gonna but I don’t have the time” be