This should have been obvious to me for a longer time, but until earlier today I did not really realize the severity of the issues caused by str.format on untrusted user input. It came up as a way to bypass the Jinja2 Sandbox in a way that would permit r...

With the upcoming release of our time series database as an open source database we’d like to reveal a bit more about the process. SiriDB migrated from Python to native C.

You have to create a space just for yourself, where the creativity starts and everything else stops. (more…)

snaek - Support for building Python to Rust Bridges... (more…)

A majority of my career has been spent on building web services in Python. Specifically, internal ones that have minimal or no UIs, and speak REST (or at least are rest-ish). With each new service, I found myself re-implementing work to make user-friendly...