RE: https://fedi.lwn.net/@lwn/117563639434510411

If you're using Alpine Linux "then stop reading and set PasswordAuthentication=no or disable SSH for these systems IMMEDIATELY".

Affects any Linux system that uses musl libc without PAM.

#security #alpine #linux #ssh #openssh

Bowser’s Fury masters the “multiple goals; same geometry” and “expressiveness through jank” themes from my favorite GameCube-era platforming adventure games like Super Mario Sunshine, Sonic Adventure 2: Battle, and Billy Hatcher. If you love these games too, do not miss Bowser’s Fury!

https://sethmlarson.dev/bowsers-fury

#retrogaming #gaming #gamecube

https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576

Please upgrade certifi in all Python applications to the latest version (2026.10.19) following emSign CA certificate security incident:

https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2

#security #python

I’m worried about gaming’s all-digital future. Not only from the ownership and preservation angle, but also regarding the creative freedom of the medium.

What happens when every gaming platform is subject to the same constraints and problems that media streaming services like Netflix and Spotify have?

#gaming #retrogaming #sonic #pikmin #physical

https://sethmlarson.dev/gaming-all-digital-future-and-creative-constraint

GitHub Security Advisories added a new feature: "Confidential Comments"! 🥳

This is both an awesome feature in general (no more having multiple channels for each report 🎉) and is hopefully a sign that more development on this critical feature will be coming soon.

#security #github

Time to upgrade your #Python versions! 🐍🛡️

3.14.8, 3.13.16, 3.12.15, 3.11.17, and 3.10.22 were just published and contain significant security fixes (8 CVEs) including 1 critical and 2 high severity fixes. Thanks to the PSRT and RMs for coordinating.

https://blog.python.org/2026/10/python-31022-31117/

#security

Discuss thread: https://discuss.python.org/t/announcing-the-python-language-summit-2026-blog-posts/109284

I've just published 10+ blog posts detailing the #Python Language Summit 2026. The Language Summit was held this year in Kraków, Poland at #EuroPython 2026, with discussions about the future of the Python programming language, including free-threading, #Rust, garbage collectors, type annotations, and namespacing.

Please enjoy and thank you for your patience:

https://blog.python.org/2026/09/language-summit-2026/

RE: https://social.rust-lang.org/@rust/117288095334006877

The lovely folks from @rust gave me a shoulder-tap in one of our mutual security discussion channels about these ongoing attacks:

https://blog.rust-lang.org/2026/09/17/targeted-attacks/

There's no particular reason the attackers wouldn't do the same to maintainers of Python projects. Please remain vigilant and send anything strange to security@python.org so we can alert others if needed.

#python #security #supplychain #pypi

Finished the last level in “World Flower” in Super Mario 3D World last night (Boss Blitz) and jumped into “Bowser’s Fury” for a quick preview and... woah. This game is so completely different than 3D World in an amazing way.

I should have known that from the start considering Bowsers Fury was published **8 years after Super Mario 3D World** (and 4 years after Super Mario Odyssey...) Now I am really excited for this adventure!

https://sethmlarson.dev/super-mario-per-year

#gaming #nintendoswitch

Incredible interview into AISLE’s security vulnerability processes with OSS projects:

https://youtu.be/-rCCj-BcJKk?is=ms5X839x6XQVgnC9

It’s so clear that AISLE “gets it” when working with OSS projects and that’s a differentiator. Thanks @joshbressers for this!

Did you know that “Pokémon Box: Ruby & Sapphire”, a legendarily expensive GameCube game in the United States (~$2,400 USD), can be purchased in Japan for $50 USD.

What other games are different prices in other regions?

Read more: https://sethmlarson.dev/buying-gamecube-games-from-another-region

#retrogaming #gamecube #gaming

It’s that magical time again… Minnesota State Fair! 🤩

#food #MNastodon

EVE Online is moving to #Python 3, previously using Stackless Python 👾

https://www.eveonline.com/news/view/the-move-to-python-3-begins

A neat security vulnerability in Python caused by str.lower(). Also includes lots of RFCs so I’m having a good time :)

https://sethmlarson.dev/when-str-lower-is-a-security-vulnerability

#security #python #idna

Continuing the physical collection refresh: cover spines for Nintendo Switch cases 🤩

#retrogaming #nintendoswitch #gaming

Let’s Play “htmx 4: the game” 🐴

#htmx 4 was published exclusively for the Game Boy and Game Boy Color platforms. I recorded my play-through including the source code. This game is tough!

https://sethmlarson.dev/htmx-4-the-game

#web #gameboy #gbdev #retrogaming

Another day, another set of ROMs extracted from a GameCube disc. This time it's for the “Master Quest” revision of Legend of Zelda: Ocarina of Time from the Legend of Zelda: Wind Waker bonus disc from Kraków, Poland:

https://sethmlarson.dev/extracting-n64-roms-from-wind-waker-bonus-disk

#retrogaming #gamecube #loz #zelda #oot #gaming

The Python Software Foundation is hiring a Security Developer to join @miketheman and I on triaging vulnerability reports and mitigating malware published to PyPI.

If you've got experience with Python, security, and collaborating with open source projects then we'd love to hear from you:

https://jobs.pyfound.org/apply/ei03ut60y4/Security-Developer?referrer=20260730140256DSN5BCNCWZA5MXAO

#python #security #pypi #supplychain #vulnerability