Mailman 3 April 2021 - pydotorg-www

Request to add to Editors Group
by john ludhi April 30, 2021

April 30, 2021

Hi I am Python Enthusiastic and developer. Can you please add me to the Editors Group? Cheers John

2 2

TimHuegerich would like to edit the wiki
by Tim Huegerich April 29, 2021

April 29, 2021

Thank you! Tim

3 4

PyCon KR (South Korea)
by Almaz Kunpeissov April 29, 2021

April 29, 2021

Good day! Please add to the list: https://www.python.org/community/workshops/ PyCon KR (South Korea) https://pycon.kr _ Best regards, Almaz Kunpeisov.

3 2

Re: [pydotorg-www] [PSRT] Bug in website
by Victor Stinner April 27, 2021

April 27, 2021

Hi, Can someone please have a look? We receive this email on the Python security list. Thanks, Victor On Sat, Mar 20, 2021 at 1:26 PM shubham more <shubhammore262001(a)gmail.com> wrote: > > Title: > insecure account deletion > > Description: > Hi Team, > > The removal of account is one of the sensitive > > part of a web application that needs to > > protect, therefore removing an account > > should validate the authenticity of the user, > > however i have found that when removing an > > account, the system did not require the user > > to input the account password. > > Steps to reproduce: > 1)go to > > websitehttps://www.python.org/accounts/sig > > nup/ ->sign up > 2)login in > 3)click on edit profile > 4)scroll website last option delete account > 5)click on delete account > result:account delete succesfully > > Impact: > Intruder can easily delete the account > > because the system did not protect it by > > asking the password to validate that the > > person deleting the account is the real user. > _______________________________________________ > PSRT mailing list -- psrt(a)python.org > To unsubscribe send an email to psrt-leave(a)python.org > https://mail.python.org/mailman3/lists/psrt.python.org/ > Member address: vstinner(a)python.org -- Night gathers, and now my watch begins. It shall not end until my death.

2 1

Regarding to Add Python Tutorial in Reference List
by Tutlane Team April 20, 2021

April 20, 2021

Hi Team, We found a good list of python resource URLs to learn python (https://wiki.python.org/moin/BeginnersGuide/NonProgrammers). Actually, we created a free python programming tutorial and covering topics from basic to advanced level. It would be helpful for others if our site were added to the reference list. Please visit the following python tutorial, and if you feel good to add it, please add it to the reference list. https://www.tutlane.com/tutorial/python Our only intention in sending this mail, we are covering every python topic in detail and it would be helpful if it reaches targeted people. Thanks. Regards Tutlane Team

1 0

Python Wiki Edit Access - DavidMuller
by David Muller April 17, 2021

April 17, 2021

Hello, I'd like to request access to update the `Advanced Books` page on the Python wiki <https://wiki.python.org/moin/AdvancedBooks>. I've recently published a book on Python (Intuitive Python: Productive Development for Projects that Last <https://pragprog.com/titles/dmpython/intuitive-python/>) and would look to add an entry to the Python wiki pointing to that book. My Python wiki username is DavidMuller. Thanks! - David

2 1

Price for publishing an article/https://wiki.python.org/moin/
by Dolly Diamond April 15, 2021

April 15, 2021

* Hi,I need a post on your site with a do-follow link.please tell me your price for publishing an articlethanks! * *How Many Do-Follow Link Posts in Article?* *How long A time to remove the link Or Permanent?Is LInk Insertion Possible?*

1 0

pythoneon
by René B. April 13, 2021

April 13, 2021

Hello, is it possible to add the pythoneon package to the PythonInMusic info pages? This package is on PyPI. Thanks Bastian René

2 1

Re: [pydotorg-www] [PSRT] Bug in website
by Victor Stinner April 8, 2021

April 8, 2021

Hi, The security(a)python.org list got this report. Would you mind to review it? Thanks, Victor On Sat, Mar 20, 2021 at 5:24 PM shubham more <shubhammore262001(a)gmail.com> wrote: > > Hii Team, > I found vulnerbablity in website is Account takeover through change email. > in change email without any cureent password conformation it can easily > change /account takeover > > steps to reproduce: > 1)go to website https://www.python.org/accounts/login/ > ex:Email:woyoj53697@heroulo.com > 2)create new account and login > 3)go to account ->click of Edit profile > 4)click on edit profile page email address to new:woyuRaj@12345.com > 5)click on save profile->after email change signout account > 6)login new email address with old password also you can forget password > ->forget password link send new email > 7)then sign account > Result Account takeover through change email. > > > Impact: > attacker easily takeover account > > poc:screenshot > Thank you. > _______________________________________________ > PSRT mailing list -- psrt(a)python.org > To unsubscribe send an email to psrt-leave(a)python.org > https://mail.python.org/mailman3/lists/psrt.python.org/ > Member address: vstinner(a)python.org -- Night gathers, and now my watch begins. It shall not end until my death.

1 0

what is the post price of this site? https://wiki.python.org/moin/
by The King April 1, 2021

April 1, 2021

What is the post price of this site? https://wiki.python.org/moin/ <https://sgnldr.online/click?redirect=https%3A%2F%2Fwiki.python.org%2Fmoin%2…> Tell me price of, Normal Post Casino Post? Existing Post Link?

1 0