Lendbuzz is hiring IT Systems Administrator (New York)

🔧 #python
🌎 New York, United States
⏰ Full-time
🏢 Lendbuzz

Job details https://jobsfordevelopers.com/jobs/it-systems-administrator-new-york-at-lendbuzz-com-sep-24-2026-5cc9ba?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring

Python Tip #309 (of 365):

Match dictionaries by their keys with match-case.

>>> response = {"type": "rectangle", "width": 3, "height": 4}
>>> match response:
... case {"type": kind}:
... print(f"Object is {kind}")
... case {"error": message}:
... print(f"Error: {message}")
... case _:
... print("Unknown response")
...
Object is rectangle

🧵 (1/3)

#Python #DailyPythonTip

Python Tip #308 (of 365):

Match tuple-like data by shape with match-case.

>>> point = (3, 4)
>>> match point:
... case (x, y):
... print(f"2D point ({x}, {y})")
... case (x, y, z):
... print(f"3D point ({x}, {y}, {z})")
...
2D point (3, 4)

🧵 (1/3)

#Python #DailyPythonTip

Cloudflare is hiring IAM Security Engineer

🔧 #python #typescript #ansible #kubernetes #terraform #securityengineer
🌎 Hybrid
⏰ Full-time
🏢 Cloudflare

Job details https://jobsfordevelopers.com/jobs/iam-security-engineer-at-cloudflare-com-sep-11-2026-490153?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring

So let me get this right #Python foundation: After unilaterally dropping support for decentralised community-owned attestation, you (PSF) are supporting only the centralised untrustworthy megacorporations, *and* you're scaring the crap out of people if a package maintainer rightly does not use those? Have you really been paying so little attention?

This fearmongering is giving the lie to the idea PSF ever want to support community-owned solutions. https://github.com/pypi/warehouse/issues/17001

@zzzeek

Introduction time, since new server.
Ecologist, did some university environmental stuff, then #memetics policy analysis (6 years)
No PhD (#burnout) then turned to IT.
Ciso #infosec now for a Dutch #youthcare organization
Found out I'm #autistic at age 53,, #actuallyAutistic. 2 kids, married with photographer
Interested in many many things, but deeply into #trees # nature #insects #ecology #memes #neoliberalism (as a #memeplex) Also like to use #python to make cool things to fill @bomengidsnl
Also posts on #Ukraine war, its not that far from here #europe

Oh joined #canadian server since Canada is cool, and has bears

#python typo of the day: deef

When the eMudhra Intermediate CA was compromised, the #Python ecosystem had to move fast.

Within two days, fixes shipped for certifi, Python, pip, uv, sigstore, virtualenv, conda & more, with PyPI and python.org patched as well.

Read how PSF #security staffing made the difference, and what’s next:
https://pyfound.blogspot.com/2026/11/how-python-ecosystem-responded-to.html

I'm finally finding time for open source work again.

gh-profiler 0.10.0 allows you to make a list of trusted contributors and bots. It looks for a gh-profiler.toml file, and trusts any GH user found in those lists.

This is most visible in CI. If the user that opened a PR or Issue is in one of those lists, their profile information will not be written to the PR or Issue.

#Python #OpenSource

Alt...

# gh-profiler.toml # Don't profile these trusted contributors. # This can be overridden with `--ignore-trusted`. trusted_contributors = [ "ehmatthes", "hugovk", ... ] trusted_bots = [ "dependabot[bot]", ]

Alt...

gh_profiler$ uvx gh-profiler ehmatthes User ehmatthes is a trusted contributor.

Alt...

gh_profiler$ uvx gh-profiler ehmatthes --concise --ignore-trusted GitHub user: ehmatthes 🟢 No concerns found with user's profile. 🟢 No concerns found with recent PR activity. 🟢 No concerns found with recent issue activity. For a more detailed report, run `gh-profiler ehmatthes`.

Question to FreeBSD python users, how do you install cryptography in a venv?

Do you just suck it up and install a rust compiler? How about non-root?

I'm thinking that the best/only way is to run a VM on hopefully a similar enough release and build a wheel.

#FreeBSD #Python

Release candidate 10.8.14.rc1 of 🐙passagemath, the pip-installable modularized portable compatible full-featured fork of #SageMath; a comprehensive #OpenSource #Mathematics system in #Python.
github.com/passagemath/...

Hey friends!

#ProgrammingIsMagic is back today - I'm going to be chatting very low level computing today and how it all relates to software as it's written today. How things are the same and how things are different!

Join me now at https://www.twitch.tv/srilyk

It won't be a deep dive, but I'll be touching on #python #javascript #java #rust #go #c and #dotnet

Don't you love the modern era where you don't have to care about formatting because everything is going to be reformatted anyway by a pre-commit hook?

Except when for some completely random reason the pre-commit hook on your machine gives completely different formatting than the one running in CI, so it mixes tons of unrelated formatting changes into your change, and then these changes are rejected by CI that wants to reformat them back, so you have to disable pre-commit hooks, start over and make sure to manually format everything in the way CI expects.

…and that's already after wasting 15 minutes on trying to get the formatter do the thing expected from it.

#Python #ruff

@freakboy3742 @phildini For a long time, my editor of choice for #Python has been #Spyder

Ello Ello!

I am looking for #opensource #rust freelance jobs. I have extensive experience profiling and optimizing rust codebase for performance(CPU time and memory). And I am interested in similar projects. e.g. #hpc. I am also fluent with #Python. Have intermediate skill with #CommonLisp. And I am familiar with C/C++.

Other than these, I work well with theories, even though I haven't got formal university degree. I can study and understand references, academic papers, RFCs, and I can also dive deep into source code of other softwares to find the answer I'm looking for.

I would be more interested if the project has got close ties with #AI and #ML. For instance, #MachineLearning inference or training engine would be very much interesting! If the project is about research, even better! Personally, I've been hanging around #GeneticProgramming last few years.

I am also interested in learning GPU Programming, C/C++ and #Julia if the project requires them.

I don't want any job from entities based in the US. Such as corporations, companies or organizations.

You can ping me here on Fedi or otherwise email me(address below) to get more information about what I've done. However, the best way to prove meself is doing a task.

fkz [a] riseup [d] net

Boosts appreciated!

#FediHire #GetFediHired #Foss #artificial_intelligence #artificialInteligence #highperformancecomputing

It's long overdue, but since I'm still out of work I figure I should put out another #GetFediHired post!

Unfortunately, compared to many of these posts I see, I'm a nobody. I've never worked for anyone you've heard of, I've never been a major contributor for any software you've used, I've never lectured at a college or university (I barely even attended!), and I've never made waves on social media.

But, from everything I've seen and experienced, I'm a better software developer than most. I care about resilience, maintainability, and sustainability; I care about understanding systems deeply; I care about how things connect; and I care about the people that have to interact with these systems! I love making things that people appreciate, that make their lives better.

I've been working with #WebDev (HTML, CSS, JS, etc.) for ~30 years, #Python for ~20, #Clojure(Script) for ~5, #TypeScript for ~4, plus dabblations in many other languages and technologies - including 10 years with #Godot! 😊 I've mainlined #Linux - on desktop and server - for over 20 years; working the stack from web apps to API services to devops to system maintenance. I've been both solo and as part of small teams - both leading and not.

I'm based in #Oslo #Norway but open to remote, and flexible on timezones and project or part-time work - English or Norwegian.

Or if you have advice for alternative career paths for an undiagnosed #AuDHD introvert, please feel free to share that too!

#FediHire #Development #Norge

Watched a dozen different people with unpinned dependencies pull coverage==7.17.1 within a few hours of each other, and run into https://github.com/coveragepy/coveragepy/issues/2356

Pin your dependencies, folks! Including the stuff for tests!

#python #coveragepy

3000 🎉
github.com/passagemath/...
#Python #SageMath #OpenSource #Mathematics

macaulay2-mcp, the Model Context Protocol #MCP server by Youngsu Kim, providing functionality from #Macaulay2 for Gröbner bases, resolutions, Betti tables, etc., now supports using M2 from the passagemath-macaulay2 wheels on PyPI.
pypi.org/project/maca...
#Python #OpenSource #Mathematics

Release candidate 10.8.14.rc0 of 🐙passagemath, the pip-installable modularized portable compatible full-featured fork of #SageMath; a comprehensive #OpenSource #Mathematics system in #Python.
github.com/passagemath/...

Release passagemath-10.8.14.rc...

I need to maintain a version of python 3.12 locally, indefinitely.
What is the best way to do this, so I can build it on a new system OR docker.

#python #python312

Err, so there's this systemic problem that a lot of people are running software on systems with lots of outdated or missing packages that cannot be upgraded or installed for a variety of reasons: lack of (up-to-date) distribution packages, lack of root access, dependency conflicts, but also badly written libraries with unstable API/ABI, too aggressive deprecation schedules and software not being kept up to date.

Unfortunately, rather than attempting to address the systemic problem, a lot of software developers have embraced workarounds to make their users' lives easier, and they started bundling everything. When you bundle something, your users don't need to have it installed. Your users don't have to worry about an API change breaking stuff. You can ensure the dependencies are up-to-date and secure.

Of course, some people also realize that supporting system dependencies is a hassle. You don't have to be bothered with sudden API changes when you have full control over the version you're building against. You don't have to wait for upstreams to release new features, you can take them straight from the VCS. You don't have to communicate with upstreams at all; you can just fork everything and add whatever changes you need right now. And nowadays, you don't even have to do it yourself, you can just ask a chatbot to do it for you.

So here we are, with everyone rolling their software with bundled dependencies, sometimes supporting system libraries and sometimes not, sometimes working only with old versions of system libraries and sometimes outright requiring custom forks. And then a major #security vulnerability happens and suddenly everyone is engaged in patching their bundled dependency. Well, except for software packages that aren't really maintained right now and are stuck with a vulnerable bundled dependency.

And what happens next? Well, some people realize that their users are now running vulnerable dependencies, and start introducing another layer of workarounds. Because surely there's no way to sort the systemic problem out, we just need more hacks.

Yes, I'm talking about random packages making releases just for the sake of bumping their certifi dependency, to make sure people update it in the pathological world of #Python virtual environments. And I'm talking about #CPython adding hacks to workaround vulnerable certificate stores.

Yeah, so remember how I complained about crap quality of #AWS #Python packages? It's a gift that keeps on giving.

So the eMudhra incident made me learn that botocore bundles their own CA certificate pack. Good news is, it's used only as a fallback for when certifi is not available, so we weren't really affected. Except for awscli-2, where random modules refer to the "default" (i.e. bundled) path rather than using the one taken from certifi.

Then, botocore-1 has gotten Python 3.15 fixes a long time ago. But the bundled botocore-2 used by awscli-2 never got these fixes, so now I need to backport them. Of course there's no point in submitting fixes upstream, since they only care about their braindead setup with bundled obsolete Python interpreter.

Community exhibitor from @pycascades present at #SeaGL2026 #python

It's kinda funny that the certificate compromise comes just after another round of upstreams bashing at distro packaging.

Let me get this straight for the people in the back. In a perfect world, you'd just upgrade a single package on your system and be good. Unfortunately, we're far removed from even a reasonably good world.

Pretty much everything that matters in #Python uses certifi. dev-python/certifi in #Gentoo is a fork that uses system certs, so our system install is good. But in every virtual environment (venv, conda, etc.), you need to upgrade certifi.

certifi is also bundled in a bunch of packages, including pip. dev-python/pip in Gentoo has certifi unbundled, but you need to upgrade pip in your virtual environments (using vulnerable pip!). On Gentoo systems, you also need to upgrade dev-python/ensurepip-pip, which is the upstream wheel which we couldn't figure out how to unbundle.

pip is also bundled in Python to bootstrap venvs. In Gentoo, we're configuring Python to use our system dev-python/ensurepip-pip package, so as soon as you upgrade it, you're good. But where this isn't the case, you need to wait for new Python releases and upgrade, because otherwise venvs will start with vulnerable pip. On the plus side, you can remember to upgrade it after creating a new venv.

Lock files are particularly popular in the Python world, and a dependency cooldown is the new fad. You will need to update certifi in them, and exclude it from dependency cooldown.

Many #RustLang packages (think uv) also use a bundled certificate store. All these packages need a lockfile update and rebuilding, meaning downstream patching or new upstream release. So yes, everyone (including Gentoo users, because Rust doesn't really support dynamic linking, great design for #security) need to update uv, and possibly wait to discover more random Rust packages that are vulnerable.

I'm also going to guess that all flatpakers are affected, all popular browsers, and possibly everyone else who knows better than to use distro packaging. All containers are affected, and will need to be rebuilt, with new system certificate stores and all the packages that bundle their own stores…

And the best part is, most of these upstream package distribution systems have no other security layer except for TLS certificates. You can update Gentoo packages safely, because we are using our own key infrastructure. But pip, uv and so on are subject to a MITM risk while upgrading the vulnerable packages.

This is the true definition of clusterfuck.

Time for a work-related announcement that I take as a personal successes as well:

• PEP 817 ("Wheel Variants: Beyond Platform Tags") has been updated to a high-level overview and solution comparison. https://peps.python.org/pep-0817/ (discussion: https://discuss.python.org/t/pep-817-wheel-variants-beyond-platform-tags-overview-pep/109567)

• PEP 850 ("Wheel Variants: Providers") is now in draft / discussion stage. https://peps.python.org/pep-0850/ (discussions: https://discuss.python.org/t/pep-850-wheel-variants-providers/109568 plus https://discuss.python.org/t/security-of-wheel-variants/109569 for security)

#Python #PEP #packaging #variants

Python 3.10 reached end of life a couple weeks ago.

If you maintain a library and you're wondering what's in Python 3.11 that you can use, here's a cheat sheet.

Upgrading to Python 3.14 because you like to stay one Python version behind at all times? This cheat sheet's for you too.

It's nowhere near comprehensive. I've tried to make short but useful.

The printable version shows more features and a support timeline More cheat sheets at http://pym.dev/cheat-sheets

#Python #Python315

Alt...

What's New in Python Every supported version, 3.11 to 3.15 Python 3.15 — supported until October 2031 [*row for row in rows] # flatten nested lists lazy import json # load json on first use MISSING = sentinel("MISSING") # nicer than object() frozendict(a=1, b=2) # an immutable dict Python 3.14 — supported until October 2030 path.copy(target) # pathlib.Path, also move date.strptime(text, "%Y-%m-%d") # also time.strptime except ValueError, TypeError: # parentheses optional t"Hello {name}" # template strings Python 3.13 — supported until October 2029 copy.replace(point, x=0) # copy with x changed @warnings.deprecated("Use g()") # warn callers to switch batched(rows, 3, strict=True) # error on a partial batch python -m random 6 # roll a die Python 3.12 — supported until October 2028 f"{", ".join(names)}" # reuse quotes in f-strings type Point = tuple[int, int] # define a type alias batched(names, 2) # loop in groups of 2 path.walk() # os.walk for pathlib.Path Python 3.11 — supported until October 2027 (Safe for libraries today) tomllib.load(file) # read TOML files err.add_note("row 5") # note shown in traceback class Color(enum.StrEnum): # members are strings async with TaskGroup() as tg: # cancel the rest on error The full printable cheat sheet: pym.dev/cheat-sheets © Trey Hunner Python Morsels

I'd like to have the ability to have except blocks on a with statement.

Having to do two nestings to handle an exception is quite annoying.

That is:
with x as y:
Some statements
except:
More statements

Is the same as:
try:
with ...
except:

#Python

Just remembered about pyfakefs and luckily this case isn't calling into C code so that will work.

#Python #PythonTesting

My regular rant that python's unittest TestCase doesn't have a way to automatically create a temp dir and clean it up afterward.

#Python #PythonTesting

Looking for recommendations for really, truly beginner teach yourself #Python resources. Teenager friend is cautiously curious.

I’d like to point them to in-browser tutorials first while we work out what’s safe now for someone with only one computer.

I’ve liked RealPython before - still good?

I can do some sysadminning and over the shoulder, but would rather set them up to investigate independently, the way we learned

On the occasion of the release of Python 3.15.0 final:
Prerelease 10.10.1.alpha1 of 🐙passagemath, the pip-installable modularized portable compatible full-featured fork of #SageMath; a comprehensive #OpenSource #Mathematics system in #Python.
github.com/passagemath/...

RE: https://bsky.app/profile/did:plc:3cftygah4elv4znu3wrxtujv/post/3mxhru7mltk2a

Release passagemath-10.10.1.al...

#Python 3.16 preparations are starting
github.com/passagemath/...
#OpenSource #Mathematics #SageMath

RE: https://bsky.app/profile/did:plc:ivpnu3bkxtpdkug5onmrjdec/post/3mxrsxjqyvc2x

Python 3.16 by mkoeppe · Pull ...

Got bitten by pytest-cov not recording coverage in tests for a pytest plugin. Because the pytest plugin gets imported before coverage recording has a chance to start.

https://github.com/pytest-dev/pytest-cov/issues/747

Switched to using "coverage run -m pytest". Just need to make my own report instead of relying on pytest-cov's.

Which gives me a reason to use @coveragepy markdown report in CI, I guess.

#python #pytest #coverage

Just released version 10.8.13 of 🐙passagemath, the pip-installable modularized portable compatible full-featured fork of #SageMath; a comprehensive #OpenSource #Mathematics system in #Python.
github.com/passagemath/...

Release passagemath-10.8.13 · ...

@hyblon
The joke is painfully apt. *Many* people use LLM-gen-AI to take software from their most hated programming language into their favorite — just 'cause. It's #disturbing.

I've tried this with (well written) #Perl code to #Python, & I definitely got #slop out when the work is human-unattended.

LLM-gen-AI can *help* a human do translations tasks, of course, but the temptation to “never look at code not in my favorite language since I have LLM-gen-AI” is dangerous.

Cc: @bignose

#LLM #AI

Today's #blog post is short but important: "A plea not to use uv-build"

"""
After seeing yet another dozen packages lose keywords on Gentoo because of a single key dependency switching to uv-build, I would like to plea on behalf of Gentoo users: please don’t use uv-build as a build backend. Just to be clear, this is not about uv itself or any other Astral tools; these are good tools with a nice and responsive upstream. The uv-build backend is one thing we have to disagree on. I’m not saying it’s bad; I’m saying that its benefits don’t outweigh the drawbacks.
"""

https://blogs.gentoo.org/mgorny/2026/10/12/a-plea-not-to-use-uv-build/

#Gentoo #Python #uv #PEP517 #packaging

🎤 Upcoming at SeaGL 2026:
📍 04:30 PM on October 23
🗣️ "Functional Programming 101"
👥 Speaker(s): Dyuti De
📍 Room: Room 250
🏷️ Track: Education
📝 Functional programming is often seen as difficult or only relevant to languages like Haskell, but it...

#SeaGL2026 #education #python #java #FLOSS #opensource
🔗 https://pretalx.seagl.org/2026/talk/SG7B3F/

I wrote a small Python script that turns ordinary photos into glitch art with a lomo/VHS look: dripping pixel columns, psychedelic colors, RGB fringes, tracking noise and grain. Every run is random, so no two photos are alike. It made me want to shoot and experiment again! Do you like the result? 👇

#GlitchArt #Lomography #VHSAesthetic #Python #CreativeCoding #Photography

Alt...

guys in Camden Town

Alt...

Carlino's way

Alt...

pride

#Gentoo has a strict #NoAI policy, so our projects are slop-free. Unfortunately, these days you cannot run an up-to-date system without tons of random slop packages, because everyone insists on using that crap.

Gentoo supports a whole bunch of architectures that probably every other distribution dumped so far. Unfortunately, these days the available software list is shrinking, as everyone insists on adding some random meaningless dependencies on #RustLang (like using uv-build, which is the single most harmful meaningless #Python project ever created).

Gentoo has a strong upstream cooperation policy. However, these days I'm afraid to file issues, because just too often they just trigger more slop. I miss the "good" old days where the worst you could expect is some toxic asshole.

The state of #FreeSoftware is truly depressing. There is little joy in distribution work these days. You're overwhelmed with shit, burned out and end up doing a shitty job. And it's bad for your health.

#FLOSS

Final release candidate 10.8.13.rc2 of 🐙passagemath, the pip-installable modularized portable compatible full-featured fork of #SageMath; a comprehensive #OpenSource #Mathematics system in #Python.
github.com/passagemath/...

Release passagemath-10.8.13.rc...

I'm an 👴 so I know C & Perl at an expert level. I'm solid in #Scheme, #Elisp, #Java, and #Python (but slow b/c I must look up details on standard APIs, etc.). I'm learning #Rust, knew #Ruby once upon a time, & dabbled in #Haskell. I also know #Tcl (of all things!).

I'm doing a medium text-processing/sqlite-db-update system. I'm still convinced that if you've gobs of wonky-formatted text flying at you, #Perl is still the right choice.

But I'm open-minded.

#ChangeMyMind #AskFedi #programming

@slott56 I suspected a #Python -ista would say that 1ˢᵗ!😀

While #PCRE is basically anywhere you want it to be, it's not the regular expression *syntax* that's missing, it's the regular expression semantics: In Perl, REs are a 1ˢᵗ-class citizen, & IMO #Perl (& its descendants) are still the only languages where that's true.
Python, IMO, suffers here from the classic OO bias that “everything must be an object” .
Sometimes, object APIs are in your way more than they help. REs are a big eg of that.

Meet SeaGL 2026 keynote speaker Mariatta Wijaya, a Python Core Developer, open source maintainer, and community leader. She helped launch PyCascades and PyLadiesCon and is passionate about automation and inclusive developer communities.

📅 Fri, Oct 23 at 9:40 AM PT
🎤 Building my own infrastructure when free is costing more than you think
🔗 https://pretalx.seagl.org/2026/talk/JTFWJK/

#SeaGL2026 #keynote #python #opensource #community

Release candidate 10.8.13.rc1 of 🐙passagemath, the pip-installable modularized portable compatible full-featured fork of #SageMath; a comprehensive #OpenSource #Mathematics system in #Python.
Updates #FLINT to 3.6.0, e-antic to 2.1.1.
github.com/passagemath/...

Release passagemath-10.8.13.rc...

If I were to judge demand for kinds of software based on #Python package releases last month, I'd say we have a very quickly rising demand for:

• a (redundant) package providing virtual environments (23 releases in a month)
• a package providing test environments (16 releases)
• a package providing lockfile support (15 releases)
• a package providing support for special platform directories (XDG, etc.) (12 releases)

Or maybe it's just #slop. I don't know, they're not admitting to it in their very verbose commit messages.

How #Python Will Test Adding #Rust Into #CPython

https://developers.slashdot.org/story/26/10/04/2034229/how-python-will-test-adding-rust-into-cpython

#cybersecurity

🎤 Upcoming at SeaGL 2026:
📍 09:40 AM on October 23
🗣️ "Building my own infrastructure when free is costing more than you think"
👥 Speaker(s): Mariatta
📍 Room: Room 250
🏷️ Track: Keynote
📝 As a hobby, I started building a personal web app to solve my needs as a Python community organizer ...

#SeaGL2026 #keynote #privacy #python #data #web
🔗 https://pretalx.seagl.org/2026/talk/JTFWJK/

Release candidate 10.8.13.rc0 of 🐙passagemath, a comprehensive #OpenSource #Mathematics system in #Python, the pip-installable modularized portable compatible full-featured fork of #SageMath.
#CAS updates: Maxima 5.50, Mathilda 0.254 (now with a @jupyter.org@bsky.brid.gy kernel)
github.com/passagemath/...

Release passagemath-10.8.13.rc...

Meet KEMchatka: an experimental, serverless P2P terminal chat over Tor hidden services.

No accounts, no port forwarding, zero disk logging.

​Features hybrid post-quantum encryption: X25519 + ML-KEM-1024 (FIPS 203) combined via HKDF-SHA512 to defeat "harvest now, decrypt later" attacks. Simple out-of-band setup.

​When privacy is under threat, build tools that protect it.

https://github.com/bashcore/kemchatka

​ #PostQuantum #Tor #Python #CyberSecurity #Privacy #OpenSource #Cryptography

I built pagevault, a tool that turns any file into a self-contained encrypted HTML page. PDFs, images, whole websites, encrypted into a single .html you can email or host anywhere. Decrypts in the browser via Web Crypto API, no backend needed.

Chunked encryption handles 100+ MB files without choking the browser. Each chunk gets its own script tag, decrypted sequentially, then removed from the DOM for GC.

#encryption #python #webdev #opensource

https://metafunctor.com/post/2026-02-13-pagevault/