Not all code is a website or publicly accessible…

b112 · on June 16, 2023

Unless it is air gapped, it is accessible.

katbyte · on June 16, 2023

at the point that would matter you have more pressing things to worry about then old code.

b112 · on June 17, 2023

It's not just old code, it's an old compiler too. One with security issues well known, unpatched.

If you think security is an afterthought, you're doing it wrong.

katbyte · on June 17, 2023

again: not everything sits on the public internet, and by the time someone gets access to the application there are far more serious concerns then python 2 vs 3

this also really highlights the problem with python's 2 vs 3 split: there is a large body of work that will never be updated and will forever run 2 including actual web/publicly facing code. And saying "just upgrade because security" isn't going get much of that code upgraded.

b112 · on June 19, 2023

and by the time someone gets acces

This sort of thinking, is why places get hacked. You don't know what the access vector is. Stop making excuses. Secure your shit.

I would be so happy if a law was passed, and such actions were criminal.