PythonHub
2.44K subscribers
2.35K photos
49.2K links
News & links about Python programming.
https://pythonhub.dev/
Download Telegram
Build a Coding Agent from Scratch: The Complete Python Tutorial

The tutorial walks through building a baby version of the Claude Code AI coding agent from scratch in Python, covering creating a reasoning brain, instructions, tools, and memory with a ReAct loop for interactive coding tasks. It also progresses to adding safe code execution, sandboxing, and context management to handle large codebases, enabling the agent to write, test, debug, and itera...

https://www.siddharthbharath.com/build-a-coding-agent-python-tutorial/
👍1
A Python CLI for Verifying Assembly

This post describes Python CLI tool for verifying assembly programs using symbolic execution with Ghidra pcode semantics. It highlights novel features like embedding formal specifications directly into assembly through macros, handling invariants via control flow graph cuts, and providing detailed verification and countermodel feedback to ensure correctness of assembly code.

https://www.philipzucker.com/asm_verify3/
AsyncIO - Complete Guide to Asynchronous Programming with Animations

The video teaches how to write asynchronous code in Python using AsyncIO with async/await syntax. It covers core concepts like coroutines, tasks, and the event loop, shows how to convert synchronous code to async, and demonstrates performance benefits using real-world examples and animations.

https://www.youtube.com/watch?v=oAkLSJNr5zY
We Needed Better Cloud Storage for Python so We Built Obstore

Obstore is a fast, lightweight Python library for working with object storage—backed by Rust and built for clarity, speed, and interoperability. It’s already being used across cloud-native geospatial tools and supports common workflows out of the box.

https://developmentseed.org/blog/2025-08-01-obstore/
👍1
Preventing Domain Resurrection Attacks

PyPI has implemented new security measures to prevent domain resurrection attacks, where expired domains are re-registered by attackers to hijack accounts via password resets. Since June 2025, PyPI has unverified over 1,800 email addresses tied to expiring domains, blocking these addresses from being used for account recovery and enhancing account security.

https://blog.pypi.org/posts/2025-08-18-preventing-domain-resurrections/
Pro-Tip – Sometimes LFU > LRU

This article discusses how AI/web crawlers create excessive sessions that push legitimate user sessions out of cache, degrading user experience on sites like e-commerce platforms. It suggests configuring Redis with an LFU (Least Frequently Used) eviction policy, rather than the common LRU (Least Recently Used), to preferentially keep frequently used sessions (like those of real users) wh...

https://www.revsys.com/tidbits/sometimes-lfu-lru/
Weaponizing image scaling against production AI systems

Attackers can hide malicious prompts in images that become visible only after being downscaled—tricking AI systems like Gemini CLI and Vertex AI Studio into executing hidden instructions. Trail of Bits demonstrates these “image scaling” exploits and introduces Anamorpher, an open-source tool to craft and test such attacks, while also proposing defenses.

https://blog.trailofbits.com/2025/08/21/weaponizing-image-scaling-against-production-ai-systems/