Re: Meebo - Seeking Django Developer (Contract & Telecommute is OK)

2010-07-20 Thread Jacob Kaplan-Moss
On Tue, Jul 20, 2010 at 10:50 AM, Kiko Griffin wrote: > Please take a moment to review the job description below and share > with your network. Please don't post job ads to this list. This is your second warning -- you've posted job ads here before, and before been told to direct them to django-

Re: Meebo - Seeking Django Developer (Contract & Telecommute is OK)

2010-07-20 Thread Brendan Smith
wrong list see: django-us...@googlegroups On Tue, Jul 20, 2010 at 1:50 PM, Kiko Griffin wrote: > Hello All, > > Please take a moment to review the job description below and share > with your network. We are seeking a contract Django Developer to join > our UX team and work directly on develop

Meebo - Seeking Django Developer (Contract & Telecommute is OK)

2010-07-20 Thread Kiko Griffin
Hello All, Please take a moment to review the job description below and share with your network. We are seeking a contract Django Developer to join our UX team and work directly on developing the core site pages. If interested, please reply to this email with your resume or LinkedIn profile. I

filtering aggregation without filtering objects

2010-07-20 Thread Valentin Golev
Hello, There is a common situation for almost all of my projects. Maybe it's my mistake somewhere, maybe Django really lacks of some ability. Let's suppose a simple structure: model User; model Message ( from=User, unread=bool ) I want to get a list of all Users with counts of all messages from

Re: Security - contrib.auth hashing

2010-07-20 Thread Craig Younkins
On Tue, Jul 20, 2010 at 12:09 PM, Jacob Kaplan-Moss wrote: > On Tue, Jul 20, 2010 at 8:41 AM, Craig Younkins > wrote: > > I'm very glad you don't have MD5 as the default. SHA-1 (currently > employed) > > is acceptable for now, but at this point there are theoretical attacks > that > > can find co

Create/update/delete generic views dynamic redirect

2010-07-20 Thread Alberto Donato
Hi all, since I needed to be able to redirect to a named URL based on the target object in CRUD views, I wrote a simple patch to allow a callable as post_save_redirect/post_delete_redirect (http:// code.djangoproject.com/ticket/13953). I think this is very useful to be able to use named URLs, o

Re: Security - contrib.auth hashing

2010-07-20 Thread Jacob Kaplan-Moss
Hey Craig -- Thanks for the notes - this is good stuff! On Tue, Jul 20, 2010 at 8:41 AM, Craig Younkins wrote: > I'm very glad you don't have MD5 as the default. SHA-1 (currently employed) > is acceptable for now, but at this point there are theoretical attacks that > can find collisions in time

Security - contrib.auth hashing

2010-07-20 Thread Craig Younkins
Please note this email does not include or indicate a specific, immediately viable flaw. I'm doing a brief analysis of the contrib.auth system: http://www.pythonsecurity.org/wiki/django/#authentication . I have a couple of notes that I'd like to share with you. - I'm very glad you don't have M

Re: Django Security

2010-07-20 Thread David
> > The suggestion that documentation of this issue be improved in the > docs is certainly a good idea -- even a special section on "stuff you > should know about security", with references to projects like OWASP > would be a worthwhile addition. > +1 on this. Would be great to see more documentat

Re: Next Django London User Group event

2010-07-20 Thread Meirion
I'm going :) On Jun 18, 1:26 pm, gareth rushgrove wrote: > What? > DJUGL is the not really monthly meetup of the Django User Group in > London. Expect a gathering of Django users and developers, some > interesting short talks and hopefully a few slices of pizza. > > Speakers? > An introduction to

Re: Django Security

2010-07-20 Thread Russell Keith-Magee
On Tue, Jul 20, 2010 at 5:16 PM, Gregor Müllegger wrote: > 2010/7/19 Craig Younkins : >> Hello there! My name is Craig Younkins. I'm an intern at OWASP, the >> Open Web Application Security Project, and this summer I'm focusing on >> web security in Python. My mission is to help developers make mo

Re: Django Security

2010-07-20 Thread Gregor Müllegger
2010/7/19 Craig Younkins : > Hello there! My name is Craig Younkins. I'm an intern at OWASP, the > Open Web Application Security Project, and this summer I'm focusing on > web security in Python. My mission is to help developers make more > secure applications. > > [snip] > > Second, I'd like to he