[Python-Dev] plugging the hash attack