Veit Schiele

On my way to a workshop in #Cologne, which is about designing a dashboard for decision-makers. #DataViz #Dashboard #Design

On macOS, Mole can clear out your .venv and venv dirs, in case you have old certifi. github.com/tw93/mole#pu... $ brew install mole $ mo purge ... Estimated space freed: 13.33GB | Items: 399 It also cleans out things like .tox .ruff_cache node_modules #Python #Mole #venv #certifi #eMudhra #macOS

Please upgrade certifi in all Python applications to the latest version (2026.10.19) following emSign CA certificate security incident: github.com/certifi/pyth... #security #python #vulnerability

🧵1/2 Just in time for the release of #Python 3.15, we've updated our workshop tutorials with • lacy imports: python-basics-tutorial.readthedocs.io/en/latest/mo... • frozendict: python-basics-tutorial.readthedocs.io/en/latest/ty... …

In this week’s workshop, we applied TDD to legacy software. We also wrote down what lessons we can take away for other projects: python-basics-tutorial.readthedocs.io/en/latest/te... #TDD #Legacy #Software #DX

Time to upgrade your #Python versions! 🐍🛡️ 3.14.8, 3.13.16, 3.12.15, 3.11.17, and 3.10.22 were just published and contain significant security fixes (8 CVEs) including 1 critical and 2 high severity fixes. Thanks to the PSRT and RMs for coordinating. blog.python.org/2026/10/pyth... #security

Git 2.56 introduced a number of exciting features that improve the way we work with merges: 'git add --resolved' and 'git merge-base'. www.python4data.science/en/latest/pr... www.python4data.science/en/latest/pr... #Git #DeveloperExperience #DX

NVIDIA OpenShell runs each agent in its own sandbox, with the policy being enforced and logged via process and network controls: docs.nvidia.com/openshell/ab... #NVIDIA #OpenShell #AgenticCoding #ITSecurity

Researchers at @ethz.ch and @anthropic.com have published an impressive study demonstrating just how fragile online anonymity has become. They show that large language models can be used for de-anonymisation on a large scale: openreview.net/forum?id=cRo... #Anonymity #LLM

@bsi.bund.de has developed a number of basic measures to combat prompt injections in document-based LLM workflows: github.com/BSI-Bund/bas... #LLM #PromptInjection #ITSecurity

Having first taken a closer look at CSVW for table dialects and schemas, we have now examined data resource and data package formats in detail, so that we can publish and cite data more effectively: www.python4data.science/en/latest/pr... #Python #DataScience

1024-bit RSA signatures can be forged almost in real time: github.com/ucsd-hacc/NS... #RSA #SNFS #Cryptography #ITSec

CSVW is a metadata standard for CSV files. If it becomes widely adopted, it will make processing CSV files so much better: www.python4data.science/en/latest/da... #Python #DataScience

We have significantly revised the section on data validation and cleansing and expanded it to include data quality criteria and processes: www.python4data.science/en/latest/cl... #Python #DataScience

The lovely folks from @rust-lang.org pinged me in a mutual security discussion channels about these ongoing attacks: There's no reason attackers wouldn't do the same to maintainers of Python projects. Report weirdness to security@python.org so we can alert others if needed. #python #security

JupyterHub 6.0 is here. 🎉 Highlights include Python 3.10, Prometheus metrics, stricter named-server rules, more granular API access, and internal HTTP updates. Back up your database before upgrading. Read more: blog.jupyter.org/jupyterhub-6... #JupyterHub #ProjectJupyter

I’m on my way to Berlin to meet some Pythonistas and old friends: luma.com/p2ifi8cg #Python #Django #Berlin

We have updated the section on text comparison – featuring difflib, TheFuzz and textacy: www.python4data.science/en/latest/cl... #Python

Our next event is in two weeks: Alpin Insight AI will be presenting its accessible, open-source web front-end, Insight UI: luma.com/p2ifi8cg #Python #Berlin #Django #UI #a11y

Lo and behold, Nvidia is buying Hugging Face. In the end, the AI market will boil down to NVIDIA hosting a range of open-weight models. www.theinformation.com/articles/nvi... #Nvidia #HuggingFace #AI

Alongside CUDA 13.3, Nvidia is releasing CUDA Python 1.0 as a direct CUDA interface for Python: developer.nvidia.com/blog/cuda-py... This is likely to obsolete libraries such as PyTorch, CuPy and RAPIDS. #Nvidia #CUDA #Python

Are you using LLMs to write #FreeSoftware? Find out whether your software is copyrightable, when you can license it, and what risks it may pose to maintainers. Our new Legal Corner explains what you need to consider: fsfe.org/news/2026/ne... #Copyright #OpenSource #LLM #AI #VibeCoding

At first, it can sometimes be difficult to imagine a practical use for decorators. We will therefore now present a range of different examples: python-basics-tutorial.readthedocs.io/en/latest/fu... #Python #Decorators

Consistent irresponsibility: in May 2024, OpenAI disbanded its Superalignment team and subsequently its AGI Readiness team as well. Now it is the turn of the Preparedness team. Other senior staff from the security and ethics departments have also left the company. #OpenAI #ITSecurity #Ethics

Back home after a brilliant FrOSCon. I spent most of my time at the hallway talks, so I’m watching the talks from the @media.ccc.de now: media.ccc.de/c/froscon2026/ #FrOSCon

I’m still completely blown away by yesterday’s BBQ for all the Berlin Python user groups – I met so many new people and had some great conversations. Many thanks also to our host, @c-base.org, for their ongoing support: www.meetup.com/python-users... #Python #Berlin

Final preparations for tomorrow’s BBQ for all Python user groups in Berlin @c-base.org: www.meetup.com/python-users... #Python #Berlin

Narwhals provides a lightweight and extensible compatibility layer between various DataFrame libraries: www.python4data.science/en/latest/pe... #Python #pandas #DataFrame

Now I’m on the way to my old home town, Berlin. I’m looking forward to meeting up with all my friends, whom I haven’t seen for far too long.

The BBQ for all the Python user groups in Berlin is in a week’s time. I’m already looking forward to meeting lots of Pythonistas: www.meetup.com/python-users... #Python #Berlin

We have expanded the section on mocks for testing and added spies: python-basics-tutorial.readthedocs.io/en/latest/te... #Python #Testing

• How can you make your code more secure? • How can you ensure separation of concerns? • How can you continuously verify the security of your dependencies? • How do you create SBOMs? www.python4data.science/en/latest/pr... #Python #SupplyChain #Vulnerability #SBOM

🧵 1/2 Attacks on the software supply chain are increasing rapidly. We have therefore updated our guide on how to make your projects more secure, adding answers to the following questions:

On my way to Cologne for the next workshop on test-driven development with Python. #TDD #Python #Testing

The maintainers considered this a breaking change, hence the version bump, probably because it flips existing expectations. If you expected that the Action was caching downloads before, now it actually does, so it's a logical fix in that regard. Read more: github.com/astral-sh/se...

The Python Package Index now rejects new files published to releases older than 14 days. This mitigation prevents long-stable releases from being poisoned in case publishing tokens or workflows of PyPI projects are compromised. blog.pypi.org/posts/2026-0... #python #security #supplychain #pypi

Software Bill of Materials (SBOMs) are commonly used to check software and its dependencies for vulnerabilities using CVE and OSV. We have described how to create these for Python packages here: python4data.science/en/latest/pr... #Python #SBOM #Vulnerability

Specification-Driven Development (SDD) was developed to improve the predictability and maintainability of agentic software development. In particular, we are continuing to give OpenSpec a chance: agentic-software-engineering.readthedocs.io/en/latest/pr... #CodingAgent #SDD #DX

The #AI platform #HuggingFace appears to have been attacked by autonomous, AI-driven offensive tooling – and was also detected and analysed by AI tools. They advises users to revoke access credentials and tokens, and to check for any recent activity on their accounts: huggingface.co/blog/securit...

Now that the FrOSCon programme has been published, I’m planning to attend on 15 and 16 August: programm.froscon.org/froscon2026/... #FrOSCon

We are switching from pre-commit to prek. Whilst prek is also faster, the decisive factors were the security-related features: pinned SHA revisions and cooldown: www.python4data.science/en/latest/pr... #Python #DX #DevOps #DevSecOps #Security

When is data truly considered anonymous? The European Data Protection Board has published new guidelines on this topic: www.edpb.europa.eu/public-consu... #EU #DataProtection #Anonymisation #Privacy

We have added the `errors` argument to the instructions for reading and writing files, so that files with encoding issues can be read more effectively. And, fortunately, UTF-8 becomes the default in Python 3.15: python-basics-tutorial.readthedocs.io/en/latest/sa... #Python

We have released a new version. As well as the usual software updates, it includes agent-based code generation and securing the software supply chain: www.python4data.science/en/26.1.0/ #Python #DataScience #AgenticCoding #Claude #SoftwareEngineering #SoftwareSupplyChain #SupplyChain