Dr John A Stevenson
mastodon 4.7.3Software developer + postdoc geologist tooting GIS, open source science software, volcanoes & Iceland. Into climbing, mountain-biking, exploring. Husband, dad. He/Him.
Adding `--uploaded-prior-to=P4D` to your `pip install` commands is a trivially easy way to reduce your exposure to malware in compromised PyPI packages.
The updated flag tells `pip` to only install packages of at least the given age, e.g. 4 days. Malicious packages are often detected and removed from PyPI in less time than this.
https://ichard26.github.io/blog/2026/04/whats-new-in-pip-26.1/#dependency-cooldowns
I've been setting up an #OpenWrt router as a WiFi access point (via powerline LAN).
https://openwrt.org/docs/guide-user/network/wifi/wifiextenders/bridgedap
It needed 3 changes beyond the tutorial to make it stable:
+ Disable the firewall on the AP (tutorial said this wasn't necessary)
+ Use WPA2 encryption only (my laptop kept dropping with mixed mode)
+ Choose 5GHz channel outside 100-144 range (which is affected by radar detection checks in UK)
The #WiFi speed at the far side of the house has doubled. Hooray for reusing my old router!
I just noticed that the backround of fixed stars on the tracker at http://artemistracker.mapki.com/ isn't made up - it's a true representation.
Here's spaceship Orion in front of constellation Orion.
@simon@fedi.simonwillison.net Nice list. http.server is handy to get files off Windows machines.
I like python -m pdb -c continue my-script.py to let me drop into a debugger if my script crashes.
pip wasn't on the list, but subprocess.run([sys.executable, '-m', 'pip', 'install', 'geopandas']) is how I install extra dependencies into the bundled Python environment of the QGIS mapping software.