Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread martin
Zitat von "Stephen J. Turnbull" : mar...@v.loewis.de writes: > Instead, the primary reason for not choosing cryptography is ease-of-use. > > For that reason, I still think that using an established algorithm would > be the better choice. I don't understand this. An established algorithm

Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread martin
Zitat von Daniel Holth : Well, let's try again. I know Ed25519 is not on anyone's list, but I would like to show at minimum that it is interesting. I have no doubt about that, and I believe that this ("it is interesting") might be your primary motivation for using it, i.e. "coolness", which i

Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread Daniel Holth
Well, let's try again. I know Ed25519 is not on anyone's list, but I would like to show at minimum that it is interesting. %timeit wheel.tool.unpack('lxml-3.0.1-cp27-none-linux_x86_64.whl') 10 loops, best of 3: 123 ms per loop .unpack() verifies the signature and extracts the file. Installation i

Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread Daniel Holth
You could just include a different algorithm. He meant that the speed of ed25519 is not an advantage in this use case. Did I mention that its c implementation has defense against timing attacks? On Oct 22, 2012 8:24 PM, "Stephen J. Turnbull" wrote: > mar...@v.loewis.de writes: > > > Instead, the

Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread Stephen J. Turnbull
mar...@v.loewis.de writes: > Instead, the primary reason for not choosing cryptography is ease-of-use. > > For that reason, I still think that using an established algorithm would > be the better choice. I don't understand this. An established algorithm might be cryptographically safer, but

Re: [Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread Greg Ewing
Stephen J. Turnbull wrote: For most users, it doesn't matter whether an environment variable is set incorrectly without their knowledge, or if the kernel is buggy, or if the disk is corrupt. And from Python's point of view, the world as a whole no longer makes. So it shuts down abnormally. Tha

[Python-Dev] Fwd: Python 3.3 can't sort memoryviews as they're unorderable

2012-10-22 Thread Mark Lawrence
Original Message Subject: Python 3.3 can't sort memoryviews as they're unorderable Date: Sun, 21 Oct 2012 12:24:32 +0100 From: Mark Lawrence To: python-l...@python.org Newsgroups: gmane.comp.python.general http://docs.python.org/dev/whatsnew/3.3.html states "memoryview compari

Re: [Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread Stephen J. Turnbull
anatoly techtonik writes: > I am not a C coder and don't have any core Unix programming > background. If Python is unable to start because it can not find its > libraries, I prefer an explanative error message with standard system > error code. Even if it is Fatal Python error - this case is s

Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread Daniel Holth
On Mon, Oct 22, 2012 at 6:20 PM, wrote: > > Zitat von Daniel Holth : > > >> Why are you using Ed25519 and JWS instead of PGP, S/MIME, or ECDSA? >> Wheel's signing scheme is designed to protect against cryptography >> that is not used. Wheel tries to encourage signing by making it very >>

Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread martin
Zitat von Daniel Holth : Why are you using Ed25519 and JWS instead of PGP, S/MIME, or ECDSA? Wheel's signing scheme is designed to protect against cryptography that is not used. Wheel tries to encourage signing by making it very fast and easy. Signature verification is encouraged

Re: [Python-Dev] PEP 427: data directory

2012-10-22 Thread Daniel Holth
On Mon, Oct 22, 2012 at 4:26 PM, Daniel Holth wrote: > On Mon, Oct 22, 2012 at 4:20 PM, Antoine Pitrou wrote: >> >> Hello, >> >> The FAQ has this weird statement: >> >> “This specification does not have an opinion on how you should organize >> your code. The .data directory is just a place for an

Re: [Python-Dev] PEP 427: data directory

2012-10-22 Thread Antoine Pitrou
On Mon, 22 Oct 2012 16:26:57 -0400 Daniel Holth wrote: > On Mon, Oct 22, 2012 at 4:20 PM, Antoine Pitrou wrote: > > > > Hello, > > > > The FAQ has this weird statement: > > > > “This specification does not have an opinion on how you should organize > > your code. The .data directory is just a pla

Re: [Python-Dev] PEP 427: pure / plat distinction

2012-10-22 Thread Antoine Pitrou
Le lundi 22 octobre 2012 à 16:25 -0400, Daniel Holth a écrit : > On Mon, Oct 22, 2012 at 4:13 PM, Antoine Pitrou wrote: > > On Mon, 22 Oct 2012 15:39:07 -0400 > > Daniel Holth wrote: > >> On Mon, Oct 22, 2012 at 3:27 PM, Antoine Pitrou > >> wrote: > >> > > >> > Hello, > >> > > >> > How does the

Re: [Python-Dev] PEP 427: data directory

2012-10-22 Thread Daniel Holth
On Mon, Oct 22, 2012 at 4:20 PM, Antoine Pitrou wrote: > > Hello, > > The FAQ has this weird statement: > > “This specification does not have an opinion on how you should organize > your code. The .data directory is just a place for any files that are > not normally installed inside site-packages

Re: [Python-Dev] PEP 427: pure / plat distinction

2012-10-22 Thread Daniel Holth
On Mon, Oct 22, 2012 at 4:13 PM, Antoine Pitrou wrote: > On Mon, 22 Oct 2012 15:39:07 -0400 > Daniel Holth wrote: >> On Mon, Oct 22, 2012 at 3:27 PM, Antoine Pitrou wrote: >> > >> > Hello, >> > >> > How does the pure / plat distinction as outlined in PEP 427 cope with >> > Debian's system of sep

[Python-Dev] PEP 427: data directory

2012-10-22 Thread Antoine Pitrou
Hello, The FAQ has this weird statement: “This specification does not have an opinion on how you should organize your code. The .data directory is just a place for any files that are not normally installed inside site-packages or on the PYTHONPATH.” But, say, if I want to install some init scri

Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread Daniel Holth
On Mon, Oct 22, 2012 at 4:12 PM, Antoine Pitrou wrote: > On Mon, 22 Oct 2012 15:49:34 -0400 > Daniel Holth wrote: >> On Mon, Oct 22, 2012 at 3:37 PM, Antoine Pitrou wrote: >> > On Mon, 22 Oct 2012 15:20:01 -0400 >> > Daniel Holth wrote: >> >> >> >> The decoded contents are like the JSON documen

Re: [Python-Dev] PEP 427: pure / plat distinction

2012-10-22 Thread Antoine Pitrou
On Mon, 22 Oct 2012 15:39:07 -0400 Daniel Holth wrote: > On Mon, Oct 22, 2012 at 3:27 PM, Antoine Pitrou wrote: > > > > Hello, > > > > How does the pure / plat distinction as outlined in PEP 427 cope with > > Debian's system of separating installed files into pyshared (for *.py > > and *.egg-info

Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread Antoine Pitrou
On Mon, 22 Oct 2012 15:49:34 -0400 Daniel Holth wrote: > On Mon, Oct 22, 2012 at 3:37 PM, Antoine Pitrou wrote: > > On Mon, 22 Oct 2012 15:20:01 -0400 > > Daniel Holth wrote: > >> > >> The decoded contents are like the JSON documents at > >> http://www.python.org/dev/peps/pep-0427/#json-web-sign

Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread Daniel Holth
On Mon, Oct 22, 2012 at 3:37 PM, Antoine Pitrou wrote: > On Mon, 22 Oct 2012 15:20:01 -0400 > Daniel Holth wrote: >> >> The decoded contents are like the JSON documents at >> http://www.python.org/dev/peps/pep-0427/#json-web-signatures-extensions >> >> Signing is implemented at: >> https://bitbuc

Re: [Python-Dev] PEP 427: pure / plat distinction

2012-10-22 Thread Daniel Holth
On Mon, Oct 22, 2012 at 3:27 PM, Antoine Pitrou wrote: > > Hello, > > How does the pure / plat distinction as outlined in PEP 427 cope with > Debian's system of separating installed files into pyshared (for *.py > and *.egg-info files) and pythonX.Y/dist-packages (for *.pyc and *.so > files)? > >

Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread Antoine Pitrou
On Mon, 22 Oct 2012 15:20:01 -0400 Daniel Holth wrote: > > The decoded contents are like the JSON documents at > http://www.python.org/dev/peps/pep-0427/#json-web-signatures-extensions > > Signing is implemented at: > https://bitbucket.org/dholth/wheel/src/tip/wheel/signatures/__init__.py?at=def

Re: [Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread anatoly techtonik
On Mon, Oct 22, 2012 at 7:37 PM, Christian Heimes wrote: > Am 22.10.2012 18:26, schrieb anatoly techtonik: >> I don't know what is abort() on Linux, but I believe coredumps is not >> something you want to get while setting some environment variable. On >> Windows it outputs a standard crash dialog

[Python-Dev] PEP 427: pure / plat distinction

2012-10-22 Thread Antoine Pitrou
Hello, How does the pure / plat distinction as outlined in PEP 427 cope with Debian's system of separating installed files into pyshared (for *.py and *.egg-info files) and pythonX.Y/dist-packages (for *.pyc and *.so files)? Thanks, Antoine. ___ Pyt

Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread Daniel Holth
On Mon, Oct 22, 2012 at 3:07 PM, Antoine Pitrou wrote: > On Mon, 22 Oct 2012 12:51:19 -0400 > Daniel Holth wrote: >> On Thu, Oct 18, 2012 at 3:37 PM, Daniel Holth wrote: >> > On Thu, Oct 18, 2012 at 2:21 PM, wrote: >> >> I'm -1 on the usage of ed25519 in PEP 427. While the PEP proposes to use

Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread Antoine Pitrou
On Mon, 22 Oct 2012 12:51:19 -0400 Daniel Holth wrote: > On Thu, Oct 18, 2012 at 3:37 PM, Daniel Holth wrote: > > On Thu, Oct 18, 2012 at 2:21 PM, wrote: > >> I'm -1 on the usage of ed25519 in PEP 427. While the PEP proposes to use > >> JSON > >> Web signatures, this algorithm is not supported

Re: [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-10-22 Thread Daniel Holth
http://hg.python.org/peps/rev/50e8ea1a17a0 Based on the other "required" field's absence in the wild, only "Metadata-Version", "Name", "Version", and "Summary" are required. Hopefully a clearer explanation of 0, 1, or many occurrences of each field. ___

Re: [Python-Dev] PEP 427 comment: code signing

2012-10-22 Thread Daniel Holth
On Thu, Oct 18, 2012 at 3:37 PM, Daniel Holth wrote: > On Thu, Oct 18, 2012 at 2:21 PM, wrote: >> I'm -1 on the usage of ed25519 in PEP 427. While the PEP proposes to use >> JSON >> Web signatures, this algorithm is not supported by the current JWS draft >> [1]. >> >> Instead, I suggest to use t

Re: [Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread Christian Heimes
Am 22.10.2012 18:26, schrieb anatoly techtonik: > I don't know what is abort() on Linux, but I believe coredumps is not > something you want to get while setting some environment variable. On > Windows it outputs a standard crash dialog box, which immediately > raises questions about Python stabili

Re: [Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread anatoly techtonik
On Mon, Oct 22, 2012 at 4:40 PM, Victor Stinner wrote: >> >>> set PYTHONHOME=C:\ >>> python > > The issue #8766 is about PYTHONPATH environment variable, not > PYTHONHOME. Test on Linux with Python 3.4: > > $ PYTHONHOME=/x ./python > Fatal Python error: Py_Initialize: Unable to get the locale enco

Re: [Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread Christian Heimes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Am 22.10.2012 16:43, schrieb Barry Warsaw: > On Oct 22, 2012, at 04:30 PM, Christian Heimes wrote: > >> I think it's a bug in lsb_release, too. It should use the -E >> option in its shebang: > > Indeed, thanks! I'd forgotten about -E. > > (bug up

Re: [Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread Barry Warsaw
On Oct 22, 2012, at 04:30 PM, Christian Heimes wrote: >I think it's a bug in lsb_release, too. It should use the -E option in >its shebang: Indeed, thanks! I'd forgotten about -E. (bug updated btw) -Barry signature.asc Description: PGP signature __

Re: [Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread Christian Heimes
Am 22.10.2012 16:18, schrieb Barry Warsaw: > This is caused by the VMware player installer playing games with $PYTHONHOME > to try to point it at its own *Python 2* runtime, and trying to call > lsb_release (a Python 3 script on Ubuntu 12.10) while $PYTHONHOME is pointing > at the wrong runtime. >

Re: [Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread Barry Warsaw
On Oct 22, 2012, at 03:40 PM, Victor Stinner wrote: >The issue #8766 is about PYTHONPATH environment variable, not >PYTHONHOME. Test on Linux with Python 3.4: > >$ PYTHONHOME=/x ./python >Fatal Python error: Py_Initialize: Unable to get the locale encoding >ImportError: No module named 'encodings'

Re: [Python-Dev] cpython: Build the _sha3 module with VS 2008.

2012-10-22 Thread Martin v. Löwis
Am 21.10.12 21:52, schrieb Christian Heimes: Ultimately it's your decision. You are the expert and build master for Windows releases. I've no hard feelings if you prefer to include the code in the main dll. Just say so and I will change the module ASAP. It doesn't really matter much either way

Re: [Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread Oleg Broytman
On Mon, Oct 22, 2012 at 04:31:34PM +0300, anatoly techtonik wrote: > Could anybody reopen http://bugs.python.org/issue8766 ? I can't. Even if you add a comment? > BTW, what is the role of PYTHONPATH on Windows? The same as on Unix -- it's inserted into (but not replaced) sys.path. And no

Re: [Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread Victor Stinner
2012/10/22 anatoly techtonik : > Could anybody reopen http://bugs.python.org/issue8766 ? I can't. > Reproducible 100% with Python 3.2 and 3.3 (3.1 didn't test). > >> set PYTHONHOME=C:\ >> python The issue #8766 is about PYTHONPATH environment variable, not PYTHONHOME. Test on Linux with Python 3.4

Re: [Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread R. David Murray
You are more likely to get action on bugs by posting to the bug tracker. That said, since 8766 was fixed, your issue is most likely a new one. Please open a new bug report. --David On Mon, 22 Oct 2012 16:31:34 +0300, anatoly techtonik wrote: > Could anybody reopen http://bugs.python.org/issue8

Re: [Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread Christian Heimes
Am 22.10.2012 15:31, schrieb anatoly techtonik: > Could anybody reopen http://bugs.python.org/issue8766 ? I can't. > Reproducible 100% with Python 3.2 and 3.3 (3.1 didn't test). > >> set PYTHONHOME=C:\ >> python The segfault isn't caused by faulty code but by a call to abort() in Py_FatalError().

[Python-Dev] Segmentaion fault with wrongly set PYTHONPATH on Windows

2012-10-22 Thread anatoly techtonik
Could anybody reopen http://bugs.python.org/issue8766 ? I can't. Reproducible 100% with Python 3.2 and 3.3 (3.1 didn't test). > set PYTHONHOME=C:\ > python BTW, what is the role of PYTHONPATH on Windows? Is it a path for %INSTALLDIR%\Lib\site-packages? -- anatoly t. __

Re: [Python-Dev] return type of __complex__

2012-10-22 Thread Devin Jeanpierre
On Mon, Oct 22, 2012 at 7:34 AM, Larry Hastings wrote: -1 ** 0.5 > -1.0 Be careful about order of operations! >>> (-1)**.5 (6.123233995736766e-17+1j) -- Devin ___ Python-Dev mailing list Python-Dev@python.org http://mail.python.org/mailma

Re: [Python-Dev] return type of __complex__

2012-10-22 Thread Larry Hastings
On 10/21/2012 09:35 PM, Steven D'Aprano wrote: so as far as I can tell, the only way you could accidentally get a complex number without expecting one is by exponentiation, either by ** or the builtin pow. This includes square roots. Exponentiation isn't as common as the basic four arithmetic ope

[Python-Dev] Web accessible core code search and other devguide questions

2012-10-22 Thread anatoly techtonik
Hi again, http://docs.python.org/devguide/faq.html?highlight=search What can I use to browse, search and troubleshoot core Python sources online? Why the question "Where do I find Python core code?" is not the first in the dev. guide? =) There is clearly a lot of stuff on http://hg.python.org/ t