Viewing profile — ssanderson11235

Noone force-pushed to main in the actual repo. The attacker force-pushed to main in their own fork, but the actual repo had a CI job configured that ran code from the fork in respo…

The fundamental mistake here seems to have been not fully understanding the threat model of the pull_request_target action trigger. pull_request_target jobs run in response to vari…

I found it in the YouTube playlist from the event: https://www.youtube.com/playlist?list=PL055Epbe6d5aP6Ru42r7h... .

> Why multiple hubs? A few reasons for this, most of which are related to points you mentioned: 1. Having multiple hubs makes it much easier to do zero-downtime deploys. 2. Having …

The sharing machinery isn't open source, mostly because it's pretty tightly coupled to our community forums, which is a custom rails application. I know that the jupyterhub team wa…

I gave an earlier version of this talk at JupyterCon 2017 https://www.youtube.com/watch?v=TtsbspKHJGo , which captured my full screen output. The pgcontents demo starts around 19:3…

Speaker here. If you want to follow along with the slides from the talk, you can find them at https://speakerdeck.com/ssanderson/hosting-notebooks-for-100... . Also, happy to answe…

There have been a couple attempts to add dashboarding to Jupyter: https://github.com/jupyter/dashboards was/is a dashboard system built by a team at IBM. I think the project stalle…

Zipline dev here. Zipline happily works on minutely data (in fact, we recently dropped support for daily mode entirely on Quantopian, which is built on top of Zipline). All the tut…

I'm not sure I always agree with this. David Beazley's 2015 PyCon talk on concurrency ( https://www.youtube.com/watch?v=MCs5OvhV9S4 ) was one of my favorite talks of the conference…

A common practice while working on a Haskell code base is to fill in not-yet-completed functions with `undefined`, which is a divergent expression. This lets you do things like wri…

If you're interested in this sort of thing, you might also check out https://github.com/llllllllll/codetransformer , which is a general-purpose library for doing these sorts of she…

Heh, thanks. It's amazing how well-suited Python's for-loop is for emulating this behavior: `break` just does exactly what you want, and you can throw in an else-block where you'd …

This is really cool. The AST transformation stuff here is neat, but relatively well-trodden ground. The more impressive new science here is the lazy_function decorator, which is im…