Kashif Khan
LightNews LightNews
kashifkhan.org
Kashif Khan
@kashifkhan.org
120 followers 430 following 51 posts
I work on the Python Azure SDK at
@microsoft.
Posts Replies Media Videos
Reposted by Kashif Khan
durumcrustulum.com
"We are seeing a 1000x reduction in memory safety vulnerability density compared to Android’s C and C++ code...with Rust changes having a 4x lower rollback rate and spending 25% less time in code review, the safer path is now also the faster one."

security.googleblog.com/2025/11/rust...
Rust in Android: move fast and fix things
Posted by Jeff Vander Stoep, Android Last year, we wrote about why a memory safety strategy that focuses on vulnerability prevention in ...
security.googleblog.com
November 14, 2025 at 1:12 AM
Reposted by Kashif Khan
phoronix-poster.bsky.social
GNOME Mutter Now "Completely Drops The Whole X11 Backend" - https://www.phoronix.com/news/GNOME-Mutter-Drops-X11
GNOME Mutter Now "Completely Drops The Whole X11 Backend"
The merge to GNOME Mutter has finally happened that "completely drops" the X11 back-end to make GNOME strictly focused on Wayland-based environments...
www.phoronix.com
November 5, 2025 at 1:24 PM
Reposted by Kashif Khan
phoenixrd.bsky.social
We made MLS more decentralized! We are excited to share DMLS that brings fork resilience to the MLS protocol, solving a key challenge in distributed systems while maintaining Forward Secrecy.

This work was made possible by @equalitie.bsky.social, who funded it as part of the Breakout program.
Making MLS more decentralized
It’s no secret that we at Phoenix R&D are big fans of the Messaging Layer Security (MLS) protocol, having helped it to come into existence. It’s a versatile group key agreement and messaging protocol ...
blog.phnx.im
October 29, 2025 at 9:36 AM
kashifkhan.org
Looks like @signal.org might be adding support for appimage in their builds based on this commit

github.com/signalapp/Si...

Does this extending support for desktop signal beyond Debian @meredithmeredith.bsky.social ?
Add script for linux build targets · signalapp/Signal-Desktop@e912fad
github.com
October 16, 2025 at 12:33 AM
Reposted by Kashif Khan
savannah.dev
The stable release of Python 3.14 is out now! Go, go, go update! 🙌

discuss.python.org/t/python-3-1...
Cute illustrated logo featuring a pink/peach colored pie displaying ‘3.14’ (pi), surrounded by two snakes in blue and yellow. The design is encircled by text reading ‘r-strings • zsid • free-threading • support • sub-interpreters • REPL highlighting • note colour • colour’ in a circular arrangement. The illustration uses a soft pastel color palette with blue, yellow, and pink tones, and includes decorative sparkle elements.
October 7, 2025 at 2:30 PM
Reposted by Kashif Khan
wolvendamien.bsky.social
If this process of converting organs from one blood type to another can get refined and go wide, relatively soon, that'd be some amazingly good news. The immediate and downstream benefits would be enormous.
October 3, 2025 at 2:39 PM
Reposted by Kashif Khan
yhg1s.bsky.social
Let me post a *non*-subskeet for once... We made a thing!

discuss.python.org/t/pep-810-ex...

#Python #PEP
PEP 810: Explicit lazy imports
👋 Hi everyone, We are very exited to share with you PEP 810: Explicit lazy imports: We’re proposing an opt-in lazy import syntax that defers module loading until first use, aiming for faster startup,...
discuss.python.org
October 3, 2025 at 12:04 PM
kashifkhan.org
Interesting read in to the new signal post quantum protocol ...this is not my area of expertise but chunking with erasure codes plus making consistent sizes are sent across the wire is brilliant

pqshield.com/diving-into-...
Diving into Signal's New Post-Quantum Protocol | PQShield
Signal recently announced the Sparse Post Quantum Ratchet (SPQR). This update brings stronger post-quantum security to millions of Signal users. Combining
pqshield.com
October 3, 2025 at 12:18 AM
Reposted by Kashif Khan
durumcrustulum.com
pqshield.com/diving-into-...
Diving into Signal's New Post-Quantum Protocol | PQShield
Signal recently announced the Sparse Post Quantum Ratchet (SPQR). This update brings stronger post-quantum security to millions of Signal users. Combining
pqshield.com
October 2, 2025 at 4:32 PM
Reposted by Kashif Khan
signal.org
In 2023, Signal was the first mainstream messenger to enable post-quantum cryptography. We’re still ahead of the (elliptical) curve, implementing a new hybrid PQ ratchet ensuring Forward Secrecy & Post-Compromise Security even in a post-quantum world. signal.org/blog/spqr/
Signal Protocol and Post-Quantum Ratchets
We are excited to announce a significant advancement in the security of the Signal Protocol: the introduction of the Sparse Post Quantum Ratchet (SPQR). This new ratchet enhances the Signal Protocol’s...
signal.org
October 2, 2025 at 4:09 PM
Reposted by Kashif Khan
lauriewired.bsky.social
SSDs are pretty reliable in a technical sense.


That is, unless you make a really, really bad mistake in firmware.


HP had a line of ~20 different Enterprise SSD models for datacenter use.


In exactly 3 years, 270 days and 8 hours, every one is irrecoverably bricked.
September 22, 2025 at 6:50 PM
Reposted by Kashif Khan
durumcrustulum.com
iiiinteresting
September 24, 2025 at 8:10 PM
Reposted by Kashif Khan
hugovk.dev
What's New in Python 3.14:

* Support UUID versions 6, 7, & 8 via uuid.uuid6(), uuid.uuid7(), & uuid.uuid8()

* uuid.NIL and uuid.MAX represent Nil and Max UUID formats

* Generate multiple UUIDs at once via python -m uuid --count

docs.python.org/3.14/whatsne...
#Python #Python314 #UUID #RFC9652
What’s new in Python 3.14
Editor, Hugo van Kemenade,. This article explains the new features in Python 3.14, compared to 3.13. For full details, see the changelog. Summary – release highlights: Python 3.14 will be the lates...
docs.python.org
September 11, 2025 at 6:06 PM
Reposted by Kashif Khan
meredithmeredith.bsky.social
Signal Secure Backups are here 🙌
signal.org Signal @signal.org · Sep 8
Until now, if you lost or broke your phone, your Signal message history was *gone,* a real challenge for everyone whose most important conversations happen in Signal. So, with careful design and development, we’re rolling out opt-in secure backups.

signal.org/blog/introducing-secure-backups
Introducing Signal Secure Backups
In the past, if you broke or lost your phone, your Signal message history was gone. This has been a challenge for people whose most important conversations happen on Signal. Think family photos, sweet...
signal.org
September 8, 2025 at 4:19 PM
kashifkhan.org
I was encountering issues with intermittent wifi drops on my Fedora instance. It's a known issue, so it's being worked on. Can impact hardwire as well but I haven't seen it happen, only on wireless for me

discussion.fedoraproject.org/t/talk-kerne...

#fedora #linix
Talk: Kernel 6.16.3 causes intermittent network issues
This is a discussion topic for the following Common Issue: You can discuss the problem and its solutions here, but please note that debugging and technical feedback should primarily go to the issue...
discussion.fedoraproject.org
September 6, 2025 at 2:09 AM
kashifkhan.org
Finally cross platform backups on @signal.org 🎉

community.signalusers.org/t/beta-feedb...
Beta feedback for the upcoming Android 7.56 release
New Version: 7.56.0 (158000) Builds will no longer be published to Firebase App Distribution ▶ Localization changes
community.signalusers.org
September 4, 2025 at 11:59 PM
kashifkhan.org
Found this after some searching around but Nvidia and Wayland are not playing well with each other after waking up from sleep. Turns out you have to manually suspend gnome shell and the script here works quite well. Hopefully it's fixed in the 580 series

forums.developer.nvidia.com/t/trouble-su...
Trouble suspending with 510.39.01, Linux 5.16.0: Freezing of tasks failed after 20.009 seconds
I found a solution. gnome-shell is trying to talk to the NVIDIA driver after it has already gone into suspend, so it can’t respond. Linux tries to freeze the task, but fails because gnome-shell is wa...
forums.developer.nvidia.com
August 17, 2025 at 8:54 PM
kashifkhan.org
@omg.squire.wtf github.com/kashifkhan/d... - just the setup files for now. Needs more testing on the windows and macos side of things
August 9, 2025 at 7:39 PM
Reposted by Kashif Khan
scott.hanselman.com
#FantasticFour is it delight. By being in a separate universe it doesn’t have any baggage, it feels more like a comic book movie than just about anything I’ve seen lately. Absolutely stylized, and even though we’ve clearly reached Peak Pedro, it’s still a breath of fresh air. The Thing is awesome
July 26, 2025 at 4:57 AM
kashifkhan.org
I took @parkplusplus.bsky.social advice and gone on with podman on fedora
July 19, 2025 at 4:23 PM
Reposted by Kashif Khan
meredithmeredith.bsky.social
...he says to Signal's president
June 17, 2025 at 3:15 PM
Reposted by Kashif Khan
corona10.bsky.social
The Python Steering Council is pleased to announce that the Free-Threading project is no longer considered experimental!

discuss.python.org/t/pep-779-cr...
PEP 779: Criteria for supported status for free-threaded Python
Hi Thomas, The Steering Council (SC) approves PEP 779, with the effect of removing the “experimental” tag from the free-threaded build of Python 3.14. Along with this, the SC considers the following...
discuss.python.org
June 15, 2025 at 10:10 PM
kashifkhan.org
To my surprise an issue I had with Ubuntu and it playing sound softly on my machine was solved with the latest update to gnome. I had moved on to fedora, and almost off my chair post upgrade as I had turned the volume all the way up on the speakers 😂

bugs.launchpad.net/ubuntu/+sour...
Bug #1882368 “[OMEN by HP Obelisk Desktop 875-0xxx] Sound is lou...” : Bugs : pulseaudio package : Ubuntu
I'm running Ubuntu 20.04 and have noticed that after logging back on to a machine either after its been asleep/suspended or logged out due to inactivity the sound is much louder at the same volume. I ...
bugs.launchpad.net
June 5, 2025 at 1:59 AM
Reposted by Kashif Khan
hugovk.dev
pip 25.1 has been released and maintainer Richard Si has a great writeup about it, including:

- #PEP735 dependency groups
- Package installation progress bar
- Resumable downloads
- #PEP751 experimental lockfile generation: pip lock

ichard26.github.io/blog/2025/04...

#Python #pip #packaging
What's new in pip 25.1 - Dependency groups!
pip 25.1 introduces support for Dependency Groups (PEP 735), resumable downloads, and an installation progress bar. Dependency resolution has also received a raft of bugfixes and improvements.
ichard26.github.io
April 26, 2025 at 6:02 PM
Reposted by Kashif Khan
snarky.ca
UV 0.6.15 has preliminary pylock.toml support!

That means there is either merged code or a release with pylock.toml support in:

1. Pip
2. Pip-audit
3. PDM
4. uv

github.com/astral-sh/uv...
Release 0.6.15 · astral-sh/uv
Release Notes This release includes preliminary support for the pylock.toml file format, as standardized in PEP 751. pylock.toml is an alternative resolution output format intended to replace requi...
github.com
April 23, 2025 at 12:28 AM