Simon Willison’s Weblog

Google wants your Hotmail, Yahoo and AOL contacts. And they’re using the password anti-pattern to get them! Despite both Yahoo! and Hotmail (and Google themselves; not sure about AOL) offering a safe, OAuth-style API for retrieving contacts without asking for a password. This HAS to be a communications failure somewhere within Google. Big internet companies stand to lose the most from widespread abuse of the anti-pattern, because they’re the ones most likely to be targetted by phishers. Shameful.

# 10:39 am / aol, ffs, google, hotmail, oauth, passwordantipattern, phishing, security, shameful, yahoo

django-batchadmin (via) Seriously classy reusable Django app that adds batch editing (multiple delete by default, with hooks to add your own custom batch actions) to the Django admin changelist screen, using best practice techniques of sub-classing ModelAdmin and hence requiring no patches to Django core itself.

# 10:46 am / brian-beck, django, djangoadmin, djangobatchadmin, modeladmin, python

Kevin Teague explains the Python packaging ecosystem. The distinction between setuptools, PyPI, distutils, eggs, easy_install, pkg_resources and zc.buildout used to make my head spin. Kevin Teague’s outstanding explanation made it all make sense.

# 2:06 pm / buildout, distutils, django, easyinstall, eggs, kevinteague, pypi, python, setuptools

Gearshift. Whoa, a full migrations library written in JavaScript for Gears (which uses SQLite for its data store).

# 2:51 pm / gears, gearshift, google-gears, javascript, migrations, sqlite

dConstruct 2008 notes. I missed this year’s d.Construct due to DjangoCon, but from Alastair Campbell’s notes it looks like it was the best one yet.

# 3:23 pm / alastair-campbell, conferences, dconstruct

Documents Reveal Django Pony, Caught In Tail Of Lies. whytheluckystiff. Enough said.

# 3:33 pm / django, djangopony, lies, python, whytheluckystiff