View this email in your browser

Python Weekly

Welcome to issue 582 of Python Weekly. Happy New Year! I hope everyone had a nice holiday break.

News

Compromised PyTorch-nightly dependency chain between December 25th and December 30th, 2022.
PyTorch-nightly Linux packages installed via pip during that time installed a dependency, torchtriton, which was compromised on the Python Package Index (PyPI) code repository and ran a malicious binary. This is what is known as a supply chain attack and directly affects dependencies for packages that are hosted on public package indices.

Python 2 removed from Debian

urllib3 raised $26,000 and shipped v2.0 in 2022

Articles, Tutorials and Talks

Polars: The Next Big Python Data Science Library... written in Rust?

This video explains everything you need to get started coding with polars. Polars is a multi-threaded DataFrame library, meaning that it allows using all the cores of a computer at the same time to achieve its full processing potential. It's been shown to have huge performance gains over pandas.

Perf engineering with Python 3.12
3.12 brings perf profiling! In this article we take a look at how the new perf profiling support helps reduce our dummy Python script from 36 seconds to 0.8 seconds. We’ll introduce the Linux tool perf and also FlameGraph.pl, look at some disassembly and go bug hunting.

Concurrent Programming in Python
Concurrent programming refers to a type of programming focused on executing independent tasks at the same time. Unlike traditional programming where instructions or tasks are executed one after the other, concurrent programming allows multiple tasks to make progress at the same time. It facilitates other types of programming, such as parallel programming where tasks are executed simultaneously on separate CPUs. In this tutorial, you will discover concurrent programming in Python.

Turning Google smart speakers into wiretaps for $100k
The author was recently awarded a total of $107,500 by Google for responsibly disclosing security issues in the Google Home smart speaker that allowed an attacker within wireless proximity to install a “backdoor” account on the device, enabling them to send commands to it remotely over the Internet, access its microphone feed, and make arbitrary HTTP requests within the victim’s LAN (which could potentially expose the Wi-Fi password or provide the attacker direct access to the victim’s other devices). This post goes in to the details of these security issues.

Lazy Evaluation Using Recursive Python Generators
We all are familiar with Python's generators and all their benefits. But, what if I told you that we can make them even better by combining them with recursion? So, let's see how we can use them to implement "lazy recursion" and supercharge what we already do with generators in Python!

JupySQL: Better SQL in Jupyter
We forked ipython-sql and are actively developing it to bring a modern SQL experience to Jupyter! We’ve already built some great features, such as SQL query composition and plotting for large-scale datasets!

Structured Logging with Structlog
An introduction to structured logging and its advantages using the structlog package for Python.

Monte Carlo Simulations
Check out this guide for using a Monte Carlo simulation to identify the size and confidence percentage of your sampled success metric.

Calculating the odds of Pai Gow Poker
A post about calculating the odds of the casino game, Pai Gow Poker by running millions of simulations.

Classifying Python virtual environment workflows

Deploying Django apps with Github Actions and Django Up

Why I'm still using Python

Interesting Projects, Tools and Libraries

nanoGPT
The simplest, fastest repository for training/finetuning medium-sized GPTs.

starfyre
A Python Framework for writing Reactive Front-End Applications.

quokka
Open source SQL engine in Python.

Cerberus
A Python tool to unstrip Rust binaries on Linux.

PaLM-rlhf-pytorch
Implementation of RLHF (Reinforcement Learning with Human Feedback) on top of the PaLM architecture. Basically ChatGPT but with PaLM

python-sortedcontainers
An Apache2 licensed sorted collections library, written in pure-Python, and fast as C-extensions.

django-cbv-inspect
A tool to help inspect Django class-based views.

ManimML
ManimML is a project focused on providing animations and visualizations of common machine learning concepts with the Manim Community Library.

cramming
Cramming the training of a (BERT-type) language model into limited compute.

New Releases

Plone 6
The Python CMS Plone has a new version 6.0 after 3.5 years of work. It offers modern user experience built on a rock solid foundation.

Django bugfix release: 4.1.5

PyPy v7.3.11 release

Upcoming Events and Webinars

Virtual: PyMNtos Python Presentation Night #110
There will be following talks

Intro to Python in Google Cloud Functions
Intro to OpenTelemetry with Python and Flask

PyData Bristol Meetup January 2023
There will be following talks

Applying Unsupervised Learning in Plasma Physics
Using Numba Effectively Today
NBFire Jupyter notebooks

Virtual: Cleveland Python Meetup January 2023

PyData London Meetup January 2023

Our Other Newsletters

Programmer Weekly - A free weekly newsletter for programmers.

Founder Weekly - A free weekly newsletter for entrepreneurs featuring best curated content, must read articles, how to guides, tips and tricks, resources, events and more.

Python Weekly

Brooklyn

Brooklyn, NY 11209

Add us to your address book

Want to change how you receive these emails?
You can update your preferences or unsubscribe from this list.

Python Weekly - Python Weekly - Issue 582

Python Weekly

Older messages

Python Weekly - Issue 581

Python Weekly - Issue 580

Python Weekly - Issue 579

Python Weekly - Issue 578

Python Weekly - Issue 577

You Might Also Like

iOS Dev Weekly - Issue 688

Why Nvidia's CEO loves NotebookLM

Digest #151: Uber’s Migration, Terraform Tips, AMI Creation, and Helm Chart Scanning

SWLW #626: AI makes Tech Debt more expensive, The problem with most L&D strategies, and more.

Warning: Over 2,000 Palo Alto Networks Devices Hacked in Ongoing Attack Campaign

⚙️ Businesses increase AI spend to $13.8 billion

Post from Syncfusion Blogs on 11/22/2024

ASP.NET Core News - 11/22/2024

Recording: 'Data Storytelling: What Organizations Need to Know Going Into 2025'

💻 Issue 437 - Introducing local Azure Service Bus Emulator