Seth Larson

I’m worried about gaming’s all-digital future. Not only from the ownership and preservation angle, but also creative freedom of the medium. What if every gaming platform is subject to the same constraints that media streaming services have? #gaming #sonic #pikmin sethmlarson.dev/gaming-all-d...

Music added

Since 2004, this community has helped make Firefox and the open internet possible. Our “Come Back to Firefox” campaign reunites a few early internet icons to remind people what made the internet special, and why it’s worth protecting.

🐍🚀 Out now: security releases of #Python 3.11–3.15 🔒 They block the compromised #eMudhra intermediate CA keys in the ssl module as a last resort. Normal pip use, including upgrading pip itself, is now safe from attacks using those keys, even before pip is updated discuss.python.org/t/python-3-1...

I was a guest on the @realpython.com podcast to talk about #security and #Python 🐍🛡️ Thanks @digiglean.bsky.social for having me on the show! realpython.com/podcasts/rpp... (recorded before cybersecurity awareness month hit its full stride this week…)

We just gave $1,000,000 to Open Source maintainers at @sentry.io, up from $750K last year! 🎉️ And this month the @opensourcepledge.com turns 2. Its 37 member companies have now paid $8,421,535 to the people who build the software we all rely on. Read on to find out where the money went.

In response to the eMudhra / emSign certificate security incident we've published guidance for Python users to update CA certificates: discuss.python.org/t/informatio... #security #Python #pki

The macOS built-in curl, git, pip, python3, perl, ruby, and openssl all read /etc/ssl/cert.pem, which still has the emSign root, but they don't check revocation like Apple's Secure Transport libraries. This is, uh, a problem. git and pip especially. I added a short-term workaround to this page.

What I want in my GitHub Security Advisories: rjai.me/posts/2026-1... It's been a while I write in my blog or post here, but here's something I've been thinking about for some time. cc @sethmlarson.dev, since we talked about this in NYC some months ago!

Update everything that verifies certificates against public roots.

If you’re using rustls, upgrade to rustls-webpki 0.103.16 and/or webpki-roots or webpki-root-certs 1.0.10.

I'll be at BSides Twin Cities (@bsidestc.org) this Friday, if you'll also be there let me know! Signal: sethmlarson.99 bsidestc.org #bsides #security #conference

The secure certificate used by older versions of Playdate OS is about to expire. To connect to our servers after that, update your Playdate OS today: Settings → System → Software Update You'll want to be on version 3.0.5 or higher. Can't update today? Contact our support and we'll help.

#PyPI has moved account registration defenses from reactive to proactive. A new email reputation check identifies disposable addresses at signup, so protection no longer depends on staff and volunteers manually updating blocklists. Another step toward a safer ecosystem 🔐 #Python

The hardest part of discovering a new blog about gaming is trying to pace myself… 🏃‍♂️💨 I’m on March 26th and keep seeing new posts land in my RSS… 😬 onemorerun.blog by @graysonmorley.com

16.5B requests/day. 13.5 PB served/day. The registry never sleeps. 😴🚫 None of it is possible without @fastly.com, who’s donated bandwidth for a decade–thank you! PyPI is run by @thepsf.bsky.social, and infrastructure isn’t free. If your team relies on #PyPI, consider sponsoring: pypi.org/sponsors

No joke. I think this is the most important video I have ever seen about mobile games. This guy breaks down how this game psychologically profiles you, and makes the game harder or easier in order to show you ads

Everyone say a hearty "Hello World" to the beginnings of Python 3.16! Python 3.16 comes paired with a film festival! You can read more about this release's pairing in the "And now for something completely different" section of the blog 🐀 🧀 blog.python.org/2026/10/pyth...

I've kicked off the wind-down work on Jazzband and have sent out emails to most project leads and people involved. In case there is a Jazzband project you care about, please check out the dedicated project board and engage: github.com/orgs/jazzban... #python #django #django-commons #pypa

Spent a large chunk of my day fixing two security vulnerabilities in truststore. Most of the uses I'm aware of aren't affected (such as pip, for example), but these are good patches to apply. github.com/sethmlarson/... github.com/sethmlarson/... Excuse me while I rest now... 🛌💤 #python #security

prefer analogue CDs, the sound is much warmer

Hey, guess what? I’m keynoting BSides Twin Cities on October 23! My talk is called “We Keep Us Safe” and connects local community defense and protecting our neighbors to cybersecurity and fighting for the users. Local community conferences like this are so important. Come show up and support!

GitHub Security Advisories added a new feature: "Confidential Comments"! 🥳 This is both an awesome feature in general (no more having multiple channels for each report 🎉) and is hopefully a sign that more development on this critical feature will be coming soon. #security #github

In July 2026 Python core developers and special guests sat down at the #Python Language Summit at #EuroPython 2026, to discuss the future of the Python programming language including free-threading, #Rust, garbage collection, and namespaces. Find a summary on the PSF blog ⬇️

Time to upgrade your #Python versions! 🐍🛡️ 3.14.8, 3.13.16, 3.12.15, 3.11.17, and 3.10.22 were just published and contain significant security fixes (8 CVEs) including 1 critical and 2 high severity fixes. Thanks to the PSRT and RMs for coordinating. blog.python.org/2026/10/pyth... #security

Jumped on a well-priced pristine copy of “Billy Hatcher and the Giant Egg” (JP) because it’s a favorite of mine AND look at that artwork?! ❤️💙💛🤍 #retrogaming #gamecube #billyhatcher

The PSF Board is proud to share the final version of the PSF’s five-year strategic plan. Thanks to all who improved the plan by participating in the process, and we look forward to all we’ll accomplish together in the next five years. Read more on our blog:

Abusing ID3 chapters to turn videos into glanceable podcasts: alexwlchan.net/2026/glancec... If you create hundreds of second-long chapters which have a video frame as cover art, you can get a video into an audio-only podcast player.

Releasing now! Satellaview Super Mario Bros. 2 (BS Super Mario USA) MSU1 ROM containing all 4 episodes with full english dub on project.satellaview.org! #Satellaview #SNES Have fun!

🎙️ Check out the "Security and Ethics in the Age of Generative AI" panel from @europython.eu 2026! The PSF's @miketheman.com and @sethmlarson.dev join other folks from the #Python community to dig into how generative AI is reshaping cybersecurity, from ecosystem-level risks to the ethics of AI.

Here is a sneak peak, my version 0.6 design which I have changed a lot around and I'm really happy with the new power switch design - it works perfectly with the Lego mechanism

Somehow I'm updating the LAN Party Calculator for Mario Kart 8 Deluxe, new 8-player local multiplayer available now for Switch 2! sethmlarson.dev/lan-party-ca... #gaming #nintendo #nintendoswitch #mariokart

8 PLAYERS SPLIT SCREEN? what

Did you know that “Pokémon Box: Ruby & Sapphire”, a legendarily expensive GameCube game in the United States (~$2,400 USD), can be purchased in Japan for $50 USD. What other games are different prices in other regions? Read more: sethmlarson.dev/buying-gamec... #retrogaming #gamecube #gaming

Issue 66 of Return, a German retro gaming magazine, has an article on the e-Reader. They also added a side article about the Series One games. I never thought I'd be in a game magazine 😲

Introducing vulnbrocards.com https://blog.yossarian.net/2026/08/31/Introducing-vulnbrocards-com #oss #security

Wireless support is going swimmingly.

I realize the weather was insanely good but blowing away the record by over 10 percentage points makes me wonder about a post-Metro Surge need for joy.

Come work with us! We're seeking someone process- and detail-oriented who's in their early/mid-career to join us as the second person on the fundraising side. Please apply if that sounds like you, and if that sounds like someone you know, please share!

“Big Walk” a cooperative game by House House (of Untitled Goose Game fame) is really, really lovely. I organized a group of folks, some who knew each other and some less so and we all had a lovely time 💜 Highly recommend this game if it seems interesting to your friend group. bigwalk.game #gaming

#PyPI runs on ~zero AWS cost thanks to @fastly.com caching 99% of traffic + @awscloud.bsky.social credits covering the rest. Huge thanks to both! But 2026 broke an 8-year streak: AWS spend is up 69% YoY as agents & CI runs surge. Jacob Coffee on what's changing: pyfound.blogspot.com/2026/08/how-...

A neat security vulnerability in Python caused by str.lower(). Also includes lots of RFCs so I’m having a good time :) sethmlarson.dev/when-str-low... #security #python #idna

Wrote a blog post about what gaps exist which prevent having reproducible builds for Python. snarky.ca/whats-missin... This came to me while writing my nomination statement for the PPC.