From ivan.ogassavara at gmail.com Mon Sep 1 15:14:46 2014 From: ivan.ogassavara at gmail.com (Ivan Ogassawara) Date: Mon, 1 Sep 2014 10:14:46 -0300 Subject: [Baypiggies] Baypiggies Digest, Vol 107, Issue 1 In-Reply-To: References: Message-ID: Great! Thanks! 2014-09-01 7:00 GMT-03:00 : > Send Baypiggies mailing list submissions to > baypiggies at python.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://mail.python.org/mailman/listinfo/baypiggies > or, via email, send a message with subject or body 'help' to > baypiggies-request at python.org > > You can reach the person managing the list at > baypiggies-owner at python.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Baypiggies digest..." > > > Today's Topics: > > 1. Pandas/Data Analysis Video, Slides, and iPython Notebook > (Glen Jarvis) > 2. Re: Pandas/Data Analysis Video, Slides, and iPython Notebook > (Glen Jarvis) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 31 Aug 2014 09:27:54 -0700 > From: Glen Jarvis > To: Baypiggies > Subject: [Baypiggies] Pandas/Data Analysis Video, Slides, and iPython > Notebook > Message-ID: > ddWB32o+K1PE-u0AOA7FGWzQoMFO9vnjButHjzwNQ at mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > If you missed our talk on Pandas / Data Analysis, you can watch at your > leisure: > > Here is the video of the talk: > > https://www.youtube.com/watch?v=3Chgzna2nMg > > > When the speakers switch laptops, there is a time that you can't see the > current screen (but you can still hear the audio of the speaker). You will > want to go through the iPython notebook while listening to the audio in the > video (that's what was on the screen): > > https://www.wakari.io/sharing/bundle/hayd/baypiggies > > https://www.wakari.io/sharing/bundle/hayd/vbench > > https://www.wakari.io/sharing/bundle/hayd/pandorable > > > If you wish to share copies of the slides, those are shared here: > > https://www.youtube.com/watch?v=3Chgzna2nMg > > Cheers, > > > Glen > -- > > "You grab mindshare by being there." > > -- Alex Martelli > > Bay Area Python Interest Group Talk > > 24-Oct, 2013 > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: < > http://mail.python.org/pipermail/baypiggies/attachments/20140831/97b307d4/attachment-0001.html > > > > ------------------------------ > > Message: 2 > Date: Sun, 31 Aug 2014 09:45:17 -0700 > From: Glen Jarvis > To: Baypiggies > Subject: Re: [Baypiggies] Pandas/Data Analysis Video, Slides, and > iPython Notebook > Message-ID: > < > CA+UBrj75BBpMO2816EPD3dHxwwdaR7cUdJSpWTEYmC1VUq-FEQ at mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Oops.. > > Sorry, I didn't see Tony's email that already did this. > > G > > > On Sun, Aug 31, 2014 at 9:27 AM, Glen Jarvis wrote: > > > If you missed our talk on Pandas / Data Analysis, you can watch at your > > leisure: > > > > Here is the video of the talk: > > > > https://www.youtube.com/watch?v=3Chgzna2nMg > > > > > > When the speakers switch laptops, there is a time that you can't see the > > current screen (but you can still hear the audio of the speaker). You > will > > want to go through the iPython notebook while listening to the audio in > the > > video (that's what was on the screen): > > > > https://www.wakari.io/sharing/bundle/hayd/baypiggies > > > > https://www.wakari.io/sharing/bundle/hayd/vbench > > > > https://www.wakari.io/sharing/bundle/hayd/pandorable > > > > > > If you wish to share copies of the slides, those are shared here: > > > > https://www.youtube.com/watch?v=3Chgzna2nMg > > > > Cheers, > > > > > > Glen > > -- > > > > "You grab mindshare by being there." > > > > -- Alex Martelli > > > > Bay Area Python Interest Group Talk > > > > 24-Oct, 2013 > > > > > > -- > > "You grab mindshare by being there." > > -- Alex Martelli > > Bay Area Python Interest Group Talk > > 24-Oct, 2013 > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: < > http://mail.python.org/pipermail/baypiggies/attachments/20140831/017e83e4/attachment-0001.html > > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > Baypiggies mailing list > Baypiggies at python.org > To change your subscription options or unsubscribe: > https://mail.python.org/mailman/listinfo/baypiggies > > ------------------------------ > > End of Baypiggies Digest, Vol 107, Issue 1 > ****************************************** > -------------- next part -------------- An HTML attachment was scrubbed... URL: From wescpy at gmail.com Thu Sep 25 00:47:22 2014 From: wescpy at gmail.com (wesley chun) Date: Wed, 24 Sep 2014 15:47:22 -0700 Subject: [Baypiggies] who owns the new Meetup group? Message-ID: just curious as I saw this fly by today. palo alto? cheers, -- wesley - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - "A computer never does what you want... only what you tell it." +wesley chun : wescpy at gmail : @wescpy Python training & consulting : http://CyberwebConsulting.com "Core Python" books : http://CorePython.com Python blog: http://wescpy.blogspot.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From glen at glenjarvis.com Thu Sep 25 01:30:17 2014 From: glen at glenjarvis.com (Glen Jarvis) Date: Wed, 24 Sep 2014 16:30:17 -0700 Subject: [Baypiggies] who owns the new Meetup group? In-Reply-To: References: Message-ID: > just curious as I saw this fly by today. palo alto? Wesley, The answer is "BayPIGgies does." Basically, I have been donating space and traffic from the Silicon Valley Meetup group. It seems hugely successful. So, I opened this meetup account (group share credentials). And my company, Glen Jarvis, LLC, donated six months of MeetUp fees for BayPIGgies. We still have two advertised MeetUps on Silicon Valley MeetUp (Sep and Oct). But, starting Nov and Dec these will be advertised in the BayPIGgies meetup. I'll also cross promote and email from Silicon Valley Python Meetup so all of the current members can find the BayPIGgies meetings. I like our community and it's the least I can do. (And, it's less confusing to have their own marching MeetUp name). If you want the MeetUp credentials to log in, I'll happily share them with you, Wes. Cheers, Glen > cheers, > -- wesley > - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - > "A computer never does what you want... only what you tell it." > +wesley chun : wescpy at gmail : @wescpy > Python training & consulting : http://CyberwebConsulting.com > "Core Python" books : http://CorePython.com > Python blog: http://wescpy.blogspot.com > _______________________________________________ > Baypiggies mailing list > Baypiggies at python.org > To change your subscription options or unsubscribe: > https://mail.python.org/mailman/listinfo/baypiggies -------------- next part -------------- An HTML attachment was scrubbed... URL: From glen at glenjarvis.com Thu Sep 25 02:08:04 2014 From: glen at glenjarvis.com (Glen Jarvis) Date: Wed, 24 Sep 2014 17:08:04 -0700 Subject: [Baypiggies] who owns the new Meetup group? In-Reply-To: References: Message-ID: P.S. Here's the first MeetUp in November. Sign-up now :) http://www.meetup.com/BayPIGgies/events/209329272/ G On Wed, Sep 24, 2014 at 4:30 PM, Glen Jarvis wrote: > > just curious as I saw this fly by today. > palo alto? > > > Wesley, > The answer is "BayPIGgies does." Basically, I have been donating space > and traffic from the Silicon Valley Meetup group. It seems hugely > successful. > > So, I opened this meetup account (group share credentials). And my > company, Glen Jarvis, LLC, donated six months of MeetUp fees for BayPIGgies. > > We still have two advertised MeetUps on Silicon Valley MeetUp (Sep and > Oct). But, starting Nov and Dec these will be advertised in the BayPIGgies > meetup. I'll also cross promote and email from Silicon Valley Python Meetup > so all of the current members can find the BayPIGgies meetings. > > I like our community and it's the least I can do. (And, it's less > confusing to have their own marching MeetUp name). > > > If you want the MeetUp credentials to log in, I'll happily share them with > you, Wes. > > > Cheers, > > > Glen > > > > > cheers, > -- wesley > - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - > "A computer never does what you want... only what you tell it." > +wesley chun : wescpy at gmail : > @wescpy > Python training & consulting : http://CyberwebConsulting.com > "Core Python" books : http://CorePython.com > Python blog: http://wescpy.blogspot.com > > _______________________________________________ > Baypiggies mailing list > Baypiggies at python.org > To change your subscription options or unsubscribe: > https://mail.python.org/mailman/listinfo/baypiggies > > -- "You grab mindshare by being there." -- Alex Martelli Bay Area Python Interest Group Talk 24-Oct, 2013 -------------- next part -------------- An HTML attachment was scrubbed... URL: From glen at glenjarvis.com Thu Sep 25 02:24:47 2014 From: glen at glenjarvis.com (Glen Jarvis) Date: Wed, 24 Sep 2014 17:24:47 -0700 Subject: [Baypiggies] ALERT Real Bash vulnerability In-Reply-To: References: Message-ID: BSD isn't immune... OSX either... (even after all OSX security patches applied)... Try on your OSX laptops... If you're a brew user, good workaround: "brew update && brew install bash" G On Wed, Sep 24, 2014 at 5:22 PM, Glen Jarvis wrote: > Believe it or not.. > > "What the....." > > I've patched servers all afternoon... > > > Bash (the program that is the command line where you type 'python') is > actually vulnerable to injection attacks. If you're running a webserver, > for example, you could be in trouble (environment variables through > webserver headers can execute commands directly on machine). > > > To test: > > prompt> env x='() { :;}; echo vulnerable' bash -c "echo this is a test" > > > This is bad: > > vulnerable > this is a test > > > > This is good: > > bash: warning: x: ignoring function definition attempt > > bash: error importing function definition for `x' > > this is a test > > > > > Details: > > #86144 CVE-2014-6271: remote code execution through bash > > > omg: > https://news.ycombinator.com/item?id=8361574 > wtf: > http://seclists.org/oss-sec/2014/q3/649 > a good explanation: > http://seclists.org/oss-sec/2014/q3/650 > *mgrosso **[1:26 PM]*fyi. > > > > -- > > "You grab mindshare by being there." > > -- Alex Martelli > > Bay Area Python Interest Group Talk > > 24-Oct, 2013 > -- "You grab mindshare by being there." -- Alex Martelli Bay Area Python Interest Group Talk 24-Oct, 2013 -------------- next part -------------- An HTML attachment was scrubbed... URL: From glen at glenjarvis.com Thu Sep 25 02:22:03 2014 From: glen at glenjarvis.com (Glen Jarvis) Date: Wed, 24 Sep 2014 17:22:03 -0700 Subject: [Baypiggies] ALERT Real Bash vulnerability Message-ID: Believe it or not.. "What the....." I've patched servers all afternoon... Bash (the program that is the command line where you type 'python') is actually vulnerable to injection attacks. If you're running a webserver, for example, you could be in trouble (environment variables through webserver headers can execute commands directly on machine). To test: prompt> env x='() { :;}; echo vulnerable' bash -c "echo this is a test" This is bad: vulnerable this is a test This is good: bash: warning: x: ignoring function definition attempt bash: error importing function definition for `x' this is a test Details: #86144 CVE-2014-6271: remote code execution through bash omg: https://news.ycombinator.com/item?id=8361574 wtf: http://seclists.org/oss-sec/2014/q3/649 a good explanation: http://seclists.org/oss-sec/2014/q3/650 *mgrosso **[1:26 PM]*fyi. -- "You grab mindshare by being there." -- Alex Martelli Bay Area Python Interest Group Talk 24-Oct, 2013 -------------- next part -------------- An HTML attachment was scrubbed... URL: