Mike Fiedler

Mike Fiedler

@miketheman.com

Code Gardener. Wrangler of the Unusual. Roller Derby referee. AWS Hero. PyPI Maintainer. Shakshuka lover. he/him https://miketheman.dev

3.2K followers260 following659 posts

Mike Fiedler
@miketheman.com

Meeting people in different parts of the world through open source is a pretty cool experience. Do other volunteer or semi-pro communities offer a similar, low-bar method like that?

Mike Fiedler reposted

Python Package Index
@pypi.org

#PyPI has moved account registration defenses from reactive to proactive. A new email reputation check identifies disposable addresses at signup, so protection no longer depends on staff and volunteers manually updating blocklists. Another step toward a safer ecosystem 🔐 #Python

blog.pypi.orgChecking email reputation, and allowing Outlook again - The Python Package Index BlogPyPI now checks the reputation of new email addresses during registration, and accepts outlook.com and hotmail.com addresses again.
Mike Fiedler
@miketheman.com

I’m excited to speak at @fastly.com #Xcelerate NYC on October 14, joining Artur Bergman, Founder and CTO of #Fastly, on Building a Foundation for the AI Era. We’ll discuss how AI-generated traffic is forcing a rethink of caching, security, and performance at scale.

Mike Fiedler reposted

Seth Larson
@sethmlarson.dev

I've just published 10 blog posts detailing the #Python Language Summit 2026. The Language Summit was held in Kraków, Poland and included discussions about free-threading, #Rust, garbage collectors, and type annotations. Please enjoy and thank you for your patience: blog.python.org/2026/09/lang...

Mike Fiedler reposted

Python Software Foundation
@python.org

🐍 Check out @sethmlarson.dev's talk at @europython.eu 2026: "Learning from the not-so-secret Python security 'cabal'". This talk is a deep dive into how CPython handles coordinated vulnerability disclosure, how the #Python security team is organized, & what it takes to run a disclosure program.

youtube.comLearning from the not-so-secret Python security "cabal" - Seth Michael Larson[EuroPython 2026 - S1 on 2026-07-16]🎤 *Learning from the not-so-secret Python security "cabal" by Seth Michael Larson* 🔗 https://ep2026.europython.eu/sess...
Mike Fiedler
@miketheman.com

I was this close to starting to try and write my own macOS clock widget to display UTC under my regular clock, since I often forget the math to calculate UTC from whatever time zone I'm in (and whatever daylight savings offset there might be!).

View full thread
Mike Fiedler
@miketheman.com

It was a solid reminder that taking a few minutes to frame the problem at hand, and then explore the marketplace for what has already been done, sample a few to see if they are good enough before building something from scratch.

Mike Fiedler
@miketheman.com

I was this close to starting to try and write my own macOS clock widget to display UTC under my regular clock, since I often forget the math to calculate UTC from whatever time zone I'm in (and whatever daylight savings offset there might be!).

Mike Fiedler
@miketheman.com

After I identified my need, I took a few minutes to search for existing solutions. I found a couple paid apps on the app store, and one open source one that was build in Objective-C that seemed popular, but I didn't like the look of it.

Mike Fiedler
@miketheman.com

I then started to fire up a terminal session to start building one, but then paused to look at the built-in widgets for something appropriate, and found a solution that was good enough, preventing me from actually building something bespoke, and then requiring my own attention to maintain it.

Mike Fiedler
@miketheman.com

Wednesday night I'll be speaking at the NYC Open Source Security User Group meetup. If your release pipeline still has stored API tokens in it, come find out how to delete them for good. Free registration: luma.com/5mwalp6p?tk=... #Python #OpenSourceSecurity #SupplyChainSecurity #NYCTech #PyPI

luma.comTrusted Publishing — Eliminating Credentials from Your Release Workflow · Luma6:00-6:30 Network - Pizza provided 6:30-7:30 Talk and Q&A 7:30-8:00 Network In February 2024, about 10% of PyPI uploads used Trusted Publishers. By October…
Mike Fiedler
@miketheman.com

Already registered? See you soon! Bring a colleague, have them sign up first - building access requires photo ID. Wed Aug 26, 6-8 PM, pizza at 6, talk at 6:30 Amazon office, 12 W 39th St, NYC

Mike Fiedler reposted

Seth Larson
@sethmlarson.dev

A neat security vulnerability in Python caused by str.lower(). Also includes lots of RFCs so I’m having a good time :) sethmlarson.dev/when-str-low... #security #python #idna

sethmlarson.devWhen str.lower() is a security vulnerability in PythonSome internet standards only support ASCII characters, but the world uses much more than the Latin alphabet. Thus, a mapping from Unicode to ASCII for use in domain names is required. NamePrep was...
Mike Fiedler
@miketheman.com

Wow, @pypi.org crossed 2 EXABYTES bandwidth served in 2026. For comparison, **all traffic served in 2025** was only 1.95 Exabytes. Thanks to @fastly.com, over 99.999% of that is absorbed by their powerful global caching layer, chugging along to serve #OpenSource #Python users worldwide

Mike Fiedler reposted

OpenSSF
@openssf.org

Mila Zhou recently sat down with Yesenia Yser on the What's in the SOSS podcast to share her path from accounting to her role as a Senior Open Source & Security Program Manager at Amazon Web Services (AWS). openssf.org/podcast/2026...

Mike Fiedler reposted

Python Software Foundation
@python.org

You can be a part of guiding the future direction of the PSF 🩵🐍💛 Nominate yourself or someone else for the PSF Board for the 2026 election! Nominations open Tuesday, July 28th, 2:00 pm UTC and close Tuesday, August 11th, 2:00 pm UTC. #python

pyfound.blogspot.comGet Ready: PSF Board Nominations Opening Soon!Who runs for the PSF Board? People who care about the Python community, who want to see it flourish and grow, and also have a few hours a month to attend regular meetings, serve on committees, participate in conversations, and promote the Python community. We're looking for candidates with a diverse range of skills and backgrounds, including leadership experience, fundraising knowledge, non-profit familiarity, and event organizing. Technical expertise, a record of collaboration, and experience speaking or teaching in the Python community are also all qualities we hope to see in Board members.Want to learn more about being on the PSF Board? Check out the following resources to learn more about the PSF, as well as what being a part of the PSF Board entails:
Mike Fiedler
@miketheman.com

If you use the `setup-uv` #GitHub #Action in your workflows, consider upgrading to version 9.0.0 soon. This version changes the default behavior to store the downloaded #Python wheels from #PyPI in GHA Cache, shedding load from PyPI, especially relevant for frequent CI/CD runs.

Mike Fiedler
@miketheman.com

The maintainers considered this a breaking change, hence the version bump, probably because it flips existing expectations. If you expected that the Action was caching downloads before, now it actually does, so it's a logical fix in that regard. Read more: github.com/astral-sh/se...

github.comRelease v9.0.0 🌈 Change `prune-cache` default to `false` · astral-sh/setup-uvChanges This release disables the default cache cache pruning to ease the load on the PyPi infrastructure. Since users might experience more GitHub Actions cache usage which might result in higher ...
Mike Fiedler
@miketheman.com

I'm about to head home after a truly amazing experience at my first #EuroPython. I was honored to be able to share some stories, but more importantly I met a bunch of awesome people. Kudos to the @europython.eu organization and all the folks who make magic happen!

Mike Fiedler
@miketheman.com

This volunteer-driven event has been running for 25 years, and the overwhelming joy of bringing folks together from all over with a common thread is something you don't experience often (insert Free-threading joke here.) I hope to return in the future! #OpenSource #Python #Community

Mike Fiedler reposted

Seth Larson
@sethmlarson.dev

I'm speaking today at #EuroPython about learning from the #Python #Security Response Team and how to become a "Security Contributor" to an Open Source project. The talk is in Room S1 at 16:00 right before the evening keynote: ep2026.europython.eu/session/lear...

ep2026.europython.euLearning from the not-so-secret Python security "cabal"It’s dangerous to go alone! 🐍🛡️ Learn sustainable open source security practices for projects of all sizes from the Python Security Response Team.

Mike Fiedler reposted

Simon Willison
@simonwillison.net

New TIL: Using uvx in GitHub Actions in a cache-friendly way I finally found a recipe that I like for running `uvx tool-name` in GitHub Actions without downloading a fresh copy of the package every time til.simonwillison.net/github-actio...

til.simonwillison.netUsing uvx in GitHub Actions in a cache-friendly wayI often find myself wanting to run a quick Python tool inside of GitHub Actions using uvx name-of-tool - but I don't want that to result in a network request to PyPI every time the workflow runs. I wa...
Mike Fiedler
@miketheman.com

Some days I wonder if the supply chain attackers are hoping I'll giggle before swinging the banhammer The creativity of some of these folks is wasted on scamming

Mike Fiedler
@miketheman.com

Sunday morning, coffee's on, laptop open. Nobody asked me to fix this. It might still be broken Monday, sure. but it's broken **better**! #OpenSource: the sometimes unglamorous work, done in public, one commit at a time.

Mike Fiedler
@miketheman.com

Very excited to share stories, insights, recommendations at my first @europython.eu I'll also be attending the Packaging and Language Summits, as well as any other opportunities to increase awareness of #Python and #PyPI #OpenSource #SupplyChain #Security initiatives. #EP2026 #TooManyHashtags

EuroPython 2026, Kraków@europython.eu

Join Mike Fiedler (@miketheman.com) at EuroPython for "Anatomy of a Phishing Campaign" talk: ep2026.europython.eu/NXNHSB

Mike Fiedler reposted

Python Software Foundation
@python.org

Great coverage from @lwndotnet.bsky.social of the PSF PyPI Safety & Security Engineer @miketheman.com's talk on Trusted Publishing at Open Source Summit. 36% of PyPI uploads now use Trusted Publishing. Is yours one of them? lwn.net/Articles/107... #Python #PyPI #OSSumit #Security

lwn.netEliminating long-lived credentials with trusted publishingTrusted publishing is an authentication mechanism that relies on short-lived credentials to red [...]