Lightnews — Scholar-powered news

Mike Fiedler @miketheman.com · 2d

But, but, free! I demand more for my $0!!

Mike Fiedler @miketheman.com · 2d

Clear, and to the point. Great way to think about your career, from @danielleheberling.xyz

danielleheberling.xyz/blog/time-to...

Should I Stay or Should I Go? | Danielle's Blog

A framework for deciding when it's time to leave your current company, based on evaluating what you're building, who you're working with, and the technology you use.

danielleheberling.xyz

1 4

Reposted by Mike Fiedler

Hugo van Kemenade @hugovk.dev · 3d

Just released! 🚀

Please install and enjoy Python 3.14! 🥧

discuss.python.org/t/python-3-1...

#Python #Python314 #release

Two snakes enjoying a pie with 3.14 on the top and π crimping.

25 48

Mike Fiedler @miketheman.com · 3d

I just backed Container on @kickstarter.com www.kickstarter.com/projects/boa...

Container, GRUNTZ, and Triangulation

Out of print for far too long—the legendary Container returns! + Discover GRUNTZ's sharp duels and Triangulation's witty word-guessing.

www.kickstarter.com

Mike Fiedler @miketheman.com · 3d

What is this hindsight you speak of? We were all taught Hakuna Matata, never look back!

1

Mike Fiedler @miketheman.com · 5d

The final two games for @gothamderby.bsky.social home season happened last night in Brooklyn. They were both really good games, and the championship game was a close, hard-fought nail-biter with some truly awesome displays of athleticism.

Support your local #rollerderby league!

4

Mike Fiedler @miketheman.com · 6d

Root for NY Liberty 🗽 until they do!

1 2

Mike Fiedler @miketheman.com · 11d

Sadly not this year, hopefully next!

1

Mike Fiedler @miketheman.com · 12d

Not gonna lie, kinda wanna know what it tastes like

1

Mike Fiedler @miketheman.com · 14d

Add 🦎 and 🖖 for added complexity!

4

Mike Fiedler @miketheman.com · 14d

Attackers continue to find creative ways to expose credentials, often the first step in a larger scale supply chain attack.

Python Package Index @pypi.org · 14d

A campaign targeted GitHub Actions to steal PyPI tokens—PyPI wasn’t compromised and no PyPI packages were published by the attackers. Stay safe: review your tokens, rotate any exposed ones, and use short-lived, scoped GitHub Actions tokens. Details:

Token Exfiltration Campaign via GitHub Actions Workflows - The Python Package Index Blog

Incident report of a recent attack campaign targeting GitHub Actions workflows to exfiltrate PyPI tokens, our response, and steps to protect your projects.

blog.pypi.org

1 4

Reposted by Mike Fiedler

Python Software Foundation @python.org · 17d

The PSF joined the @openssf.org & others in signing “Open Infrastructure is Not Free.” Funding gaps in the open source industry mean critical infrastructure lacks support. Corporations benefiting from it must invest to sustain it.

Read more ➡️

11 13

Mike Fiedler @miketheman.com · 17d

You may also wish to advertise the status on PyPI: blog.pypi.org/posts/2025-0...

PyPI Now Supports Project Archival - The Python Package Index Blog

Projects on PyPI can now be marked as archived.

blog.pypi.org

Mike Fiedler @miketheman.com · 17d

Cool to see @abc7ny.bsky.social do a short piece on password security, promoting second factor authentication. Progress!!

2