Tim Peters has died
1383 points
• 1 day ago
• Article
Link
由于涉及 eMudhra 中间证书的安全事件，需要从包括 certifi 在内的通用 CA 捆绑包中移除 emSign 根 CA 证书。用户必须立即升级一系列软件包，并在重建容器镜像时禁用层缓存，以确保获取最新、受信任的系统证书。若不进行这些更新，系统将容易遭受"中间人攻击"，从而可能破坏与 python.org 和 pypi.org 等关键服务之间的安全连接。
受影响并已更新的软件范围很广，包括 pip 、 uv 、 certifi 的各个版本，以及 hatch 、 conda 和 virtualenv 等多种开发工具。我们敦促开发者升级到指定版本或更新版本，以降低相关风险。使用 Docker 的用户也已注意到，3.11 到 3.15 版本的官方 Python 镜像已更新，以修复这一安全漏洞。
除了更新软件包外，Python 维护者也发布了语言本身的新版本。其中包括 Python 3.15.2 、 3.14.10 、 3.13.18 、 3.12.16 和 3.11.18，它们内置会自动拒绝受损中间证书的逻辑，即便系统的 CA 捆绑包尚未完全更新，也能提供至关重要的防御层。仍在使用旧版本 Python（尤其是 3.10 及更早版本）的用户需要注意：这些版本已进入生命周期末期，不再提供这些关键的安全修复。
在技术通报之外，社区也在悼念 Tim Peters 的离世。 Guido van Rossum 透露，Peters 是 Python 历史上极为重要的人物，今年早些时候已去世。他对该语言的影响深远，从早期贡献（如混合算术支持）到长期担任导师与共同设计者的角色，都体现出他不可替代的价值。 Peters 以耐心著称，数学功底严谨，同时也善于用易懂且包容的方式解释复杂的设计挑战。
Peters 还通过他创作的 Zen of Python 留下了持久的遗产，这一作品至今仍在塑造社区的理念；他也开发了 Timsort，这种算法如今已被全球范围内的多种语言采用。同事们不仅记得他的技术天才，也记得他的谦逊和他与社区互动的独特方式——他常常用幽默与热情来化解技术分歧。他对早期 Python 开发文化的影响，以及他在 Python Software Foundation 董事会中的专注服务，为该语言走向广泛普及奠定了基础。
A security incident involving eMudhra intermediate certificates has necessitated the removal of the emSign root CA certificate from common CA bundles, including the certifi package. Users must immediately upgrade a range of software packages and rebuild container images with layer caching disabled to ensure they fetch the latest, trusted system certificates. Failure to perform these updates leaves systems vulnerable to monster-in-the-middle attacks that could compromise secure connections to critical services like python.org and pypi.org.
The list of affected and updated software is extensive, including versions of pip, uv, certifi, and various development tools like hatch, conda, and virtualenv. Developers are urged to upgrade to the specified versions or newer to mitigate these risks. For those using Docker, the official Python images for versions 3.11 through 3.15 have also been updated to address this security flaw.
In addition to updating packages, the Python maintainers have released new versions of the language itself. These releases, including Python 3.15.2, 3.14.10, 3.13.18, 3.12.16, and 3.11.18, contain logic that automatically rejects the compromised intermediate certificates, providing a crucial layer of defense even if a system's CA bundle has not yet been fully updated. Users operating on older versions of Python, specifically 3.10 and earlier, should be aware that these versions are end-of-life and no longer receive these vital security fixes.
Beyond the technical alerts, the community is mourning the loss of Tim Peters, a central figure in Python's history who passed away earlier this year. Guido van Rossum shared the news, highlighting Peters's immense impact on the language, from his early contributions like mixed arithmetic support to his role as a long-term mentor and co-designer. Peters was well known for his patience, his mathematical rigor, and his ability to explain complex design challenges in ways that were accessible and inclusive.
Peters left a lasting legacy through his creation of the Zen of Python, which continues to shape the community's philosophy, and the development of Timsort, an algorithm now used globally in languages beyond Python. Colleagues remember him not just for his technical genius, but for his humility and his unique approach to community interaction, where he famously used humor and warmth to resolve technical disagreements. His influence on the culture of early Python development and his dedicated service on the board of the Python Software Foundation were foundational to the language's rise to prominence.
180 comments • Comments Link
- 《 Python 之禅》作为开发者的基础哲学北极星，提供了强调代码可读性、简洁性和显式性的持久准则。
- Tim Peters 在 Python 早期关键发展中扮演了重要角色，最著名的便是 Timsort 算法；如今它仍是多种语言中的标准实现。
- 除了技术贡献，他在 20 世纪 90 年代的 comp.lang.python 上也是一位多产而和蔼的导师，通过耐心、权威却又带着幽默的解释，帮助新手开发者逐步成长为经验丰富的专业人士。
- 他的沟通方式常把深厚的技术专长与人际连接融合在一起，频繁用机智的幽默"调剂"，再加上他标志性的"<wink>"，把令人畏惧的话题讲得亲切可感。
- 像 SpamBayes 这样的合作，以及他在《 Python Cookbook 》上的工作，凸显了他在与其他关键社区人物共同塑造早期 Python 生态系统方面所起的作用。
- 他普遍被视为资深工程师如何回馈社区的典范：以优雅而非居高临下的态度纠正误解。
- 他对技术细节的生动描述——比如把 hash table slots 分成"citizen""virgin"或"turd"——因其形象化和幽默感，在 Python 社区里早已成为传奇。
- 许多职业开发者把他的教学、文档与代码贡献当作关键工具：它们支撑了他们的职业发展，也让工作能够持续多年乃至数十年。
- 《 Python 之禅》早已超出"指南集合"的起点，往往成为开发办公室里影响日常工程实践的核心文化产物。
- 他之所以赢得广泛尊重，来自他在 numerical methods 等领域扎实的智识积累，以及他指导经验不足者时真诚而包容的方式。
对 Tim Peters 生平与工作的集体反思，揭示出一种深切的失落：人们哀悼的并不只是技术先驱，更是 Python 社区文化的基石。参与者强调，他的影响远远超出代码本身——他的哲学与准则，以及他的指导方式，塑造了几代程序员的职业价值观。讨论也呈现出一致共识：他体现了兼具技术天赋与卓越友善的资深开发者理想。他在该语言上的贡献，以及他在公共论坛中持续耐心、幽默的互动，都留下了持久遗产，继续影响着软件如何被编写，也影响着开发者彼此之间如何相处。 • The "Zen of Python" serves as a foundational philosophical North Star for developers, providing enduring principles that emphasize readability, simplicity, and explicitness in code.
• Tim Peters was instrumental in significant early Python developments, most notably the Timsort algorithm, which remains a standard implementation in multiple languages today.
• Beyond his technical contributions, he was a prolific and kind mentor on comp.lang.python in the 1990s, helping novice developers transition into seasoned professionals through patient, authoritative, and humorous explanations.
• His communication style frequently blended deep technical expertise with human connection, often using wit, comic relief, and his signature "<wink>" to make intimidating topics approachable.
• Collaborations like the SpamBayes project and his work on the Python Cookbook highlight his role in shaping the early Python ecosystem alongside other key community figures.
• He was widely regarded as a model for how senior engineers should support the community, famously correcting misconceptions with grace rather than condescension.
• His colorful technical descriptions, such as the classification of hash table slots as "citizen," "virgin," or "turd," became legendary within the Python community for their vividness and humor.
• Many professional developers credit his teachings, documentation, and code contributions as essential tools that have sustained their careers and enabled their work for decades.
• The "Zen of Python" has transcended its origins as a collection of guidelines, often becoming a core cultural artifact in development offices that shapes daily engineering practices.
• The respect he commanded stemmed from a combination of his intellectual depth in fields like numerical methods and his genuine, inclusive approach to mentoring those less experienced.
The collective reflection on the life and work of Tim Peters reveals a profound sense of loss for a figure who was not only a technical pioneer but also a cornerstone of the Python community's culture. Participants emphasize that his influence extended far beyond his code, as his philosophical guidelines and mentorship defined the professional values for generations of programmers. The discussion highlights a consensus that he embodied the ideal of a senior developer who was both technically brilliant and exceptionally kind. His contributions to the language and his patient, humorous engagement in public forums left a lasting legacy that continues to shape how software is written and how developers treat one another.