ltpoll
Re:When str.lower() is a security vulnerability in Python – Seth Larson
on Wednesday August 26, 2026 @07:30AM (#49447142)
Python itself should not be used at all to handle any server, or heaven forbid, TLS connections.
The Python core developers barely know anything about SSL apart from aggressively updating openssl versions and making a big show of the "security" implied by the updates.
Naturally the jocks [1] from AlphaOmega sponsor this bottomless pit. They didn't give curl access to Mythos, but if you talk the talk, projects beyond repair get money.
My advice to college students: Create a completely broken project with a big foundation and many president and director titles. Talk and network at conferences until you get money to perpetually fix the mess.
[1] A look at their website should disabuse dreamers of the recent notion that nerds and "weird" people will be in charge in the future.
Re:When str.lower() is a security vulnerability in Python – Seth Larson
on Wednesday August 26, 2026 @07:23AM (#49447055)
This sums up the whole Unicode disaster in Python3. People are conditioned to "encode" and "decode".