Mailman 3 February 2013 - pydotorg-www

Poll about -h,--help options
by anatoly techtonik April 14, 2013

April 14, 2013

Hi, Is it interesting to know if people expect -h to work as a --help equivalent by default? As it directly affects best practices of using Python in command line, can we run such poll on python.org? I thought that this stuff is obvious, but it appears that it is not, so I'd like to see this usability study - it will be interesting for the Python community to know itself better. -- anatoly t.

6 5

Fwd: JavaScript problem
by Michael Foord March 10, 2013

March 10, 2013

We have at least one user who is using the LibreJS extension that blocks javascript not known to be "free" (in the ideological sense). Parts of python.org break when you do this. I promised I would forward this feedback to the web team. It looks like the google calendars break (no surprise) and also the sphinx search for the python documentation (really a sphinx issue instead of a python.org web team issue). Michael Foord Begin forwarded message: > From: LRN <lrn1986(a)gmail.com> > Subject: Re: JavaScript problem > Date: 28 February 2013 16:15:11 GMT > To: Michael Foord <michael(a)python.org> > Cc: webmaster(a)python.org > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 28.02.2013 20:02, Michael Foord wrote: >> We use google calendars for the release schedule and other >> calendars, which is *probably* the Javascript you're talking about > Yes, it could be. > >> - although your report is not sufficient to actually diagnose any >> particular problem. > Yes, LibreJS is not very informative about its decisions about > JavaScript code it sees. Probably because the algorithm behind these > decisions is not trivial. I think there is some info on this in > LibreJS readme file, but that is the extent of my knowledge > >> What do you mean by "broken"? > These features do not work. The calendar-related feature on python.org > says that JavaScript is disabled, while search feature doesn't show > up, without any explanations from docs.python.org > >> As far as I can tell the features you describe (calendars and >> search) all work fine. > Apparently, they rely non-free JS code, which is blocked by LibreJS, > which is why they do not work. > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.11 (MingW32) > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iQEcBAEBAgAGBQJRL4KOAAoJEOs4Jb6SI2Cw5WsH/0gJ9jD0BI4FcvmjjHey9/8f > 7Bj3j2EiYEyQHSdKKOOP76z5GE3W1WLE5GOQnwBn8Y2AzLu1JgjnOMSU3lO6H1ji > e3S6Myu3j6ETc9hJ0Gc3GcXd4VKDiewlzNc4pqfgG4EdhKjqO8kBo4uMwuvW0MCh > 1t4u38yjEqEbOL7OI1ND4376T1a7SO3ZTelgCgpYdnMmmGt3Kxabssj5+XiMAL1x > tFyitR+sHz9bsDfb3MjQZqgyanK7tyUoPEovx8wWL9JiWOdnlzSIKeC0+BOpdiG9 > HhIxKJPGzk/jJKPJnxZBBSZ7GlP0SKv7IF8xsyW49dB0b986fLBn24ItXTza9jg= > =61Fx > -----END PGP SIGNATURE----- -- http://www.voidspace.org.uk/ May you do good and not evil May you find forgiveness for yourself and forgive others May you share freely, never taking more than you give. -- the sqlite blessing http://www.sqlite.org/different.html

4 3

FWD: Re: JavaScript problem
by Aahz Feb. 28, 2013

Feb. 28, 2013

----- Forwarded message from LRN <lrn1986(a)gmail.com> ----- > Date: Thu, 28 Feb 2013 23:21:37 +0400 > From: LRN <lrn1986(a)gmail.com> > To: Michael Foord <michael(a)python.org> > CC: webmaster(a)python.org > Subject: Re: JavaScript problem > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 28.02.2013 20:54, Michael Foord wrote: >> Ah, so if you block javascript the functionality provided by that >> javscript breaks. I don't know that using open source javascript on >> the website has ever been a particular priority but I will pass >> your feedback onto the web team. > > To make your report a bit fuller, here's what LibreJS tells me (i just > found this little icon in the corner, where it pops up the list of > blocked JS functions): > > > List of blocked JavaScript in http://www.python.org/ > > > http://www.python.org/js/iotbs2-key-directors-load.js > > http://www.python.org/js/iotbs2-directors.js > > http://www.python.org/js/iotbs2-core.js > > List of accepted JavaScript in http://www.python.org/ > > LibreJS did not allow the execution of any script on this page: ' > There may be no script on this page (check source, C-u) > The inline and on-page JavaScript code may not be free and/or > may not have proper license information and external scripts (if > present) may have been removed by default. > External scripts may not be free and/or may not have proper > licensing and are not part of the whitelist of free JavaScript libraries. > > > > > > Thank you for your time. > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.11 (MingW32) > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iQEcBAEBAgAGBQJRL65BAAoJEOs4Jb6SI2CwMiUH+wR6jhOwt2CtGe5DdPxiIuGw > VLz22fsqxZv4WzwjovB1D2Ixhsw68u5poRsONA92iUVCpf7HpVaacfewGs3jQC7o > f+g+W0clvQTahUqJGZ1gC2nL3kC6KAlb1ISso3hqkzPf97hu9IR7KEXs3B9pWYGi > L+DYC7AuwinG6l09SANCnaW+TBDV676TZoavUnxlxgoah35fSjttzSrJsN/CT7yo > 8csNDCfe6DfvxElfDjoak3Gjvh0iTaoL/mgPNJSLe62PMcajC9qn3E8i9B5HvnIo > TCLyR8Mg0VOGU0kTGwY5WzYU500LYICBvMaEttTrWqm+a9RC0sWLkgulWwktM4Q= > =4oPm > -----END PGP SIGNATURE----- ----- End forwarded message ----- -- Aahz (aahz(a)pythoncraft.com) <*> http://www.pythoncraft.com/ "Times are bad. Children no longer obey their parents, and everyone is writing a book." --Cicero

1 0

Re: [pydotorg-www] Seems there is a malicious site linked on a wiki page
by Rashaad Essop Feb. 26, 2013

Feb. 26, 2013

Hi, On http://wiki.python.org/moin/WebFrameworks under the section "Other Full-Stack Frameworks" there is a link named "Gae Framework" and it appears to link to www[dot]gaeframework[dot]com. I happened to click it, but I have various tools to pick up such things, one of them is Web of Trust. This is the WOT page for where it ends up: http://www.mywot.com/en/scorecard/domains.googlesyndication.com?utm_source=… I just felt I needed to report that and hope I've helped at least. Regards, -- design intervention ™ *regards*, [rashaad.essop] <services consultant coder/developer/> more: coo, general project direction supervisor - ಠ_ಠ co-director, subm3rg3d media websites+hosting <http://808080.co.za> | graphic <http://goog_595668328>design<http://redmacx.co.za> | github <http://skudatech.github.com/> | python programming<http://po8a8o-py-mild.appspot.com/> | business intelligence <http://contactually.com/invite/skuda> | blogs+original content <http://#> | experimental tech | tuts<http://turbotechtuts.blogspot.com/>| media <http://#> and more to come...

2 1

Fwd: Images used on Python.org website, and Facebook
by Michael Foord Feb. 26, 2013

Feb. 26, 2013

Begin forwarded message: > From: mike white <mikejbw(a)gmail.com> > Subject: Images used on Python.org website, and Facebook > Date: 20 February 2013 20:55:13 GMT > To: webmaster(a)python.org > > Hi, I placed a link to python.org on a Facebook page expecting the thumbnail to show the usual double-python. However, it instead shows part of the 'non English resources' image instead. > > Could someone perhaps tweak the website code so your familiar logo is shown when linked from Facebook - I think you use the FB Linter tool to check. > > Regards, > Mike Whittaker > -- http://www.voidspace.org.uk/ May you do good and not evil May you find forgiveness for yourself and forgive others May you share freely, never taking more than you give. -- the sqlite blessing http://www.sqlite.org/different.html

6 10

FWD: wiki down again
by Aahz Feb. 26, 2013

Feb. 26, 2013

Also got another complaint and reproduced ----- Forwarded message from Silvano Bertossa <silvano.bertossa(a)gmail.com> ----- > Date: Tue, 26 Feb 2013 01:38:18 +0100 > From: Silvano Bertossa <silvano.bertossa(a)gmail.com> > To: webmaster(a)python.org > Subject: server error on beginners guide > > http://www.python.org/doc/ > From this page I click > http://wiki.python.org/moin/BeginnersGuide > and I get > >> Internal Server Error >> ? >> Apache Server at wiki.python.org Port 80 > > Silvano ----- End forwarded message ----- -- Aahz (aahz(a)pythoncraft.com) <*> http://www.pythoncraft.com/ "Times are bad. Children no longer obey their parents, and everyone is writing a book." --Cicero

3 2

FWD: Fwd: PyPI security notice
by Aahz Feb. 25, 2013

Feb. 25, 2013

----- Forwarded message from Vid <vid(a)svaksha.com> ----- > Date: Sun, 24 Feb 2013 08:37:24 +0530 > From: Vid <vid(a)svaksha.com> > To: webmaster(a)python.org > Subject: Fwd: PyPI security notice > > Hi, could someone on the team please help with the wiki p/w recovery? > Thanks, Vid > > > ---------- Forwarded message ---------- > From: Richard Jones <richard(a)python.org> > Date: Sat, Feb 23, 2013 at 2:08 AM > Subject: Re: PyPI security notice > To: Vid <vid(a)svaksha.com> > > > Please try webmaster(a)python.org > > On 22 February 2013 22:24, Vid <vid(a)svaksha.com> wrote: > > Hi, so who am I supposed to contact to get this rectified? Thanks, Vid > > > > On Fri, Feb 22, 2013 at 10:12 AM, Richard Jones <richard(a)python.org> wrote: > >> Sorry, I'm unable to help with wiki issues. > >> > >> > >> Richard > >> > >> On 16 February 2013 14:29, Vid <vid(a)svaksha.com> wrote: > >>> On Fri, Feb 15, 2013 at 8:13 AM, <richard(a)python.org> wrote: > >>>> > >>>> TL;DR: please log into PyPI and change your password. > >>>> > >>>> Dear PyPI user svaksha, > >>>> > >>> > >>> Hello Richard, > >>> > >>> I have tried the procedure to reset my passw (recovery details below) > >>> > >>> Login Name: svaksha > >>> > >>> Password recovery token: 1360913446-90fd1b15230f900c1cdce6e6d518e59f086f1469 > >>> > >>> Password reset URL: > >>> http://wiki.python.org/moin/FrontPage?action=recoverpass&name=svaksha&token… > >>> > >>> I am still unable to reset the passw as it says the token is not > >>> correct. Please help me recover my account 'svaksha', and I am not > >>> sure which email ID I used - I have two: <svaksha(a)gmail.com> and > >>> <vid(a)svaksha.com> > >>> > >>> Thanks and Regards, > >>> vid ? http://svaksha.com ? > >>> > > > > > > > > -- > > Regards, > > vid ? http://svaksha.com ? > > > > > -- > Regards, > vid ? http://svaksha.com ? ----- End forwarded message ----- -- Aahz (aahz(a)pythoncraft.com) <*> http://www.pythoncraft.com/ "Times are bad. Children no longer obey their parents, and everyone is writing a book." --Cicero

2 1

Re: [pydotorg-www] PyPI security notice
by Ian Mackey Feb. 20, 2013

Feb. 20, 2013

I went through the procedure more than once and have received nothing on my e-mail account. How long might I have to wait --- Ian Mackey Network Services Manager University Computing Service - University of Cambridge New Museums Site Pembroke Street Cambridge CB2 3QH Tel:[+44/0]1223 768963 e-mail: iwm21(a)cam.ac.uk On 15 Feb 2013, at 01:23, richard(a)python.org wrote: > > TL;DR: please log into PyPI and change your password. > > Dear PyPI user iwm21, > > Recently we have been auditing and improving security of the Python Package > Index (PyPI) and other python.org hosts. > > You may be aware that the wiki.python.org host was compromised. Since we must > assume that all passwords stored in that system are also compromised, and we > also assume that some users share passwords between python.org systems, I will > be performing a password reset of all PyPI accounts in one week's time, at > 2013-02-22 00:00 UTC. > > If you log in before that deadline and change your password then you'll be > fine, otherwise you'll need to use the password recovery form after the reset > has occurred. > > Additionally, I ask you to begin to access PyPI using HTTPS through the web. > We're in the process of installing a new SSL certificate so the current Big Red > Certificate Warning should go away very soon. > > We are in the process of updating the Python packaging toolset to use HTTPS. > > These steps are but a couple of those we're intending to take to better secure > PyPI. If you are interested in these matters I encourage you to participate in > the discussion on the catalog SIG: > > http://mail.python.org/mailman/listinfo/catalog-sig > > Finally, I apologise for any inconvenience these changes have caused. > > > Richard Jones <richard(a)python.org> > PyPI Maintainer

5 5

Rtlengfmetfn4fythef3ze
by Marc Murua Feb. 19, 2013

Feb. 19, 2013

1 0

Hey it's Jonel
by Jonelipad Feb. 18, 2013

Feb. 18, 2013

Sent from my iPhone

1 0