Hynek Schlawack

how i read your posts

looks like some PHP RCE (CVE-2026-109618 / CVE-2026-109619 / PHP-UP-2026) deets started to drop. as a LAMP shared webhoster we're obviously Very Excited™ jackalsyn.com/posts/php-up...

Here's build-and-inspect-python-package 3.0.2 brought to you by certifi and the number 4: github.com/hynek/build-...

As I walked thru a pitch-black park watching people walking their dogs with torches and passing kids going to school illuminated only by their smart phones, I once again realized how much wintertime abolitionists can go pound sand. #oneMoreWeek

It's possible to deliver quality code with genAI just like it's possible to be on a diet in a candy shop.

ohhhhh www.team17.com/news/alien-b...

a good day to advertise kapeli.com/dash ;) #hugOps (I noticed because my monthly update builds failed due to intersphinx 😬)

Traveling keeps reminding me of how much work it is to: a) deal with impromptu to-do items (usually via email) b) keep everything charged Somehow we’re serfs to email and chargers, and nobody is setting shit on fire.

I was not joking folks www.negroniweek.com

Happy Negroni week to everyone who celebrates!

*takes a glance at my GitHub inbox* I’m gonna block so many accounts once I’m back.

sure love living in the future mail.python.org/archives/lis...

One meal in, Albania is solidly in my Top 5 cuisines. 🤤

tru fact

Only one year in, I have finally found the final shape for the example project of my uv x Docker video. Of course, it means another script rewrite, so there couldn't be a more appropriate thing to do than going to see The Odyssey.

til `set -e` is “exit immediately” and `set -x` is “print commands before executing” For years I thought it’s vice versa and since I use them usually together there was never a reason to find out 😳

Happy/nervous to announce argon2-cffi-bindings, the low-level C binding wheels used by argon2-cffi. It's a big release w/ wheels for new platforms, but the biggest item is the liberation from setuptools w/ great help by Nathan Goldbaum & @henryiii.bsky.social! 🥳 #Python github.com/hynek/argon2...

To me, the biggest fall from grace re software quality is clearly Fantastical. I don't even want to put it on vibe coding because there were times of flakiness before, but oh boy is it barely usable nowadays. Guess it's time to get used to BusyCal.

“cancel”, "canceled, and “canceling” – but “cancellation”. thanks ben franklin.

i'll vote for anyone for the packaging council who does something against cookie-licking on pypi like pypi.org/project/diri...

when I said that “even AGI can't solve exponential complexity curves”, I meant something like this: blog.florianherrengt.com/ai-removing-...

First feedback to the script of my next video is coming in – be hype: > I feel like I'm reading the third act of the king in yellow

github is cooked let’s go shopping

it's so baffling that Apple still hasn’t shipped a native version of Bartender, while constantly breaking all existing tools that provide that functionality

Pyrefly 1.2.0 with expanded support for attrs is out! 🥳 github.com/facebook/pyr...

the BVG ticket apps (all 3 of them 🫠) are completely cooked, aren’t they? Can’t see my Deutschlandticket for August and couldn’t even buy another ticket. Getting generic network errors everywhere.

Looks like I'm attending PyBeach because apparently I didn’t have enough SoCal in 2026!? Looking forward to a cozy conference with friends abound! 2026.pybeach.org

i don't like how it reflects on me as a human that the majority of open PRs on my projects are still open because i'm stopping myself from leaving FOAD review and yet somehow we've ended up in an adversarial relationship with "contributors”