Transcript #293: And if I pull this open source Jenga block...
Return to episode page view on github00:00 Hello and welcome to Python Bytes, where we deliver Python news and headlines directly to your earbuds.
00:04 This is episode 293, recorded July 11th, 2022.
00:10 And I am Brian Okken.
00:12 Hey, I'm Michael Kennedy.
00:13 And I'm Ashley Anderson.
00:14 Well, welcome, Ashley.
00:16 Before we jump in, tell us a little bit about who you are.
00:19 Yeah, I'm a software developer.
00:21 I work for a relatively small but sometimes growing startup out here.
00:26 We make a portable MRI machine.
00:28 So I'm one of these software developers that came from an academic background.
00:32 I studied biomedical engineering and medical physics.
00:34 And then this is kind of my first full-time software gig.
00:38 But I think in research, like everyone's doing software these days.
00:41 So a lot of people are kind of making that jump.
00:43 And this was a perfect opportunity for it.
00:45 A portable MRI.
00:46 That's got to be fascinating.
00:47 Cool.
00:48 Very cool.
00:49 How do you find the transition from this more researchy side over to this maybe more formal dev role?
00:54 Yeah, it's like just such a better fit for me.
00:58 I think.
00:58 Like in my research labs and stuff, I was often like way more interested in helping build tools and stuff to help accelerate other people's work.
01:07 Rather than, you know, diving into the research myself, I often found that to be very frustrating.
01:11 And maybe I wasn't the best at it or something like that.
01:14 So this has just been a much better fit for me.
01:16 Yeah.
01:16 Cool.
01:17 Well, let's jump into your first topic.
01:19 What do you got for us?
01:20 Sure.
01:21 Yeah.
01:21 The first thing I wanted to talk about was, I think this is kind of the big news since Friday.
01:27 The PSF and the PyPI announced that they're giving away 4,000 of these two-factor hardware keys.
01:34 That's maybe kind of gotten washed out in this, but it's kind of a cool effort.
01:38 I saw this from Dustin Ingram's Twitter.
01:40 And I know he's been involved in a lot of the, or been interested in kind of outlining a lot of the security concerns about supply chain vulnerabilities and stuff in the past.
01:51 I thought this was a really interesting idea for helping with supply chain vulnerabilities, or at least kind of taking a step in that direction.
01:57 And I think it's just the PyPI, you know, sort of first step in this direction.
02:02 They announced some other stuff in the past about maybe having private packages or organizations on there and namespace packages and stuff.
02:09 But this was a pretty cool thing to do.
02:12 It looks like they're going to roll out two-factor as a requirement, probably eventually for everybody.
02:17 The way they're starting it now is kind of for some of the most popular packages.
02:21 And for people who have those popular packages, I'm not one of them.
02:26 They're offering codes to get some of these hardware keys to help that.
02:30 Interesting.
02:31 Yeah.
02:32 There's been a bit of a backlash to this, actually, which on two levels.
02:36 Some people just expressing a little bit of frustration and others more so.
02:41 See item two coming up.
02:43 One thing I think is interesting about this, this whole side of things is like the original thing that you brought up, Ashley, is people, I think, are focusing on their hardware keys.
02:54 And while that's a cool idea, I think the bigger story is just 2FA.
02:58 Forget hardware keys.
03:00 Like hardware keys are one way to do 2FA.
03:02 Right.
03:03 But if you look at the actual giveaway, I think it's limited to certain locations.
03:07 Right.
03:08 Like I can't remember what all the locations were.
03:10 I feel like it's kind of North America, Europe and Australia or something in that general realm.
03:16 And you could entirely have a popular, what is now known as a critical Python package and not live in those locations.
03:23 Right.
03:23 Yeah, for sure.
03:24 I mean, I suspect a lot of them, a lot of the maintainers of those packages are not in some of those locations.
03:29 I think those are probably dictated by like export rules on certain cryptography.
03:33 But I hadn't thought about that.
03:35 I thought it was just a shipping thing, but you're probably right about that, actually.
03:38 Yeah.
03:38 Oh, yeah.
03:40 So there's a little bit of a pushback and like, hey, I'm doing this for free.
03:45 Why are you making me do this extra work setting up these keys?
03:48 And that's kind of why I said I feel like it's kind of the headline has missed the point here because to say, oh, I've got to get this hardware key and set it up is not technically true.
03:58 You just have to use 2FA of some form.
04:00 Right.
04:01 It could be with like the standard 2FA you have with your phone or maybe even SMS would work.
04:06 Although SMS is a sketchy but better than nothing form of 2FA.
04:10 Like if I'm going to go and get a bank account.
04:12 Some people suggest.
04:13 If I'm going to.
04:13 Some people.
04:14 Yeah, go ahead.
04:14 Sorry.
04:14 Some people say that SMS really is like a pretty insecure version of 2FA.
04:19 So I think having.
04:21 They do.
04:21 Some type of keys.
04:22 And they say like.
04:23 Yeah.
04:23 Yeah.
04:24 It would be better.
04:25 But like at the same time, if you don't have any 2FA, there's still another step.
04:29 They've got to hack your SMS somehow to get through the SMS stuff, which is better than just like they just guess your password.
04:36 Or do they get it from a password breach?
04:37 So it's even for all the criticisms of SMS as a 2FA, it's still not a negative.
04:43 It's just not nearly as good as the other option.
04:46 I'm just chuckling because I just got an email last week about from.
04:51 Was it on the 8th of July?
04:53 Saying, hey, you're a critical.
04:57 You're a maintainer of a critical project.
04:59 And they want me to set up 2FA.
05:02 And I just haven't read it yet.
05:04 So I like.
05:05 This is news to me.
05:07 And it's what it's a pie test plugin I've got that supposedly is a critical project.
05:12 Go figure.
05:12 Oh, that's awesome.
05:13 The definition.
05:14 People are wondering.
05:15 I saw Will McGugan asking on Twitter, like, does anybody know what this means?
05:19 Where did I got this to?
05:20 The definition from what I understand is you are in the top 1% of downloads for a moving
05:27 six month window.
05:28 So in the last six months, your project is in the top 1% of most used, most downloaded.
05:33 Wow.
05:33 So congratulations.
05:34 That's awesome.
05:35 That's awesome, Brian.
05:35 Cool.
05:40 I guess I'll read the email more closely now.
05:42 Yeah, perhaps.
05:43 Get this set up.
05:43 Ashley, do you know what happens if you just are like Brian?
05:47 Like, I don't.
05:47 Spam.
05:48 Doesn't matter to me.
05:49 Just ignore it.
05:50 That's a good question.
05:51 I guess eventually they'll probably not let you upload if you don't enable it.
05:55 Like, next time you go to log in or upload a package, it'll just say, hey, you have to
06:00 turn on 2FA.
06:00 Because like you said, you don't have to have the key.
06:02 You just have to have 2FA on.
06:04 So I clicked on the manage and it says, I've got a little big banner up.
06:09 I'll just pop to it right now.
06:11 Oh, where's it on here?
06:14 We'll go ahead and show this.
06:15 I get, this project is included in the two-factor mandate for critical projects.
06:20 In the future, you will be unable to perform this action without enabling two-factor.
06:26 So I think you're right.
06:28 I think it's just going to kick me out of being able to do anything with the project.
06:33 if I don't enable this.
06:35 Yeah.
06:35 Interesting.
06:36 Interesting.
06:37 This is cool, Brian.
06:38 One, I think Teddy's right out there.
06:40 Like, congrats.
06:41 Brian's on fire.
06:42 High test check, by the way.
06:44 People listening is the plugin.
06:46 But it's cool to see it live, to see what's happening.
06:48 So this apparently is what maintainers get.
06:50 And I'm with you, Ashna.
06:52 I think what's going to happen is you just, you won't be able to upload with Twine anymore.
06:56 You won't be able to log in.
06:57 You won't be able to make changes.
06:59 It'll just force you down a 2FA path.
07:01 Yeah, I read that you still can upload because, like, people want to do, I know there were some people initially concerned about, like, how do I do automatic uploads from my CI system or whatever?
07:09 And you can do it if you get a token.
07:10 But you have to, like, you know, generate one of those tokens with your 2FA-enabled account to do that.
07:15 Right.
07:16 That happens with all the 2FA accounts, right?
07:18 You can no longer use your GitHub password for, like, on the CLI.
07:22 Like, once you set up GitHub 2FA, then all of a sudden you've got to go create an app, give it a name, and get, like, an API token for it and stuff like that, right?
07:30 Mm-hmm.
07:31 I think that's okay.
07:31 Yeah.
07:32 So, Brian, let's ask you, like, how do you feel about that?
07:35 Does this seem like a big burden to you?
07:36 Are you okay with this?
07:37 Or?
07:37 You know, I was, I'm okay with it because I think it's securing the supply chain.
07:43 I mean, I've already enabled the two-factor authentication on GitHub, and I've got, you know, a bunch of banking stuff that I have on, you know, multi-factor authentication and stuff.
07:54 So, I'm waiting for 12-factor authentication, but that might be a bit extreme.
08:01 All right.
08:02 Now, you put your small pinky toe onto the key reader over there, and then you hold down this key with your other finger, and then you put your face up.
08:09 Yeah.
08:11 An optic scan, a blood scan, you got to, you know, deposit a urine scan, and all sorts of stuff you got to do.
08:18 Good night.
08:19 No.
08:19 I'm drawing the line there.
08:21 I'm not doing it.
08:22 So, no, but I'm fine with it.
08:26 I don't know the details yet, though.
08:29 If I got to get a hardware key, though, I'm going to be a little upset.
08:32 I think, I don't know.
08:33 Well, there might be one for free, but yeah, even getting one for free, I feel like I'd be like, if I'm not a hardware key guy, I don't know.
08:40 Yeah.
08:40 Well, what if I lose it?
08:42 So.
08:43 Yes.
08:43 First of all, let me preface this statement with, please don't email me.
08:47 It's, it's, if we disagree on this, it's fine.
08:51 Just don't email me.
08:53 We can just agree to disagree.
08:54 But I am personally not a fan of 2FA hardware keys because what if you lose it?
08:59 It's really bad.
09:01 If you, I now, all of a sudden, if I'm, what if I'm traveling and like the website is down and I've got to log into the, the ISP, the cloud system to make a change.
09:11 Did I, what if I forgot to bring the key or what if I do bring it?
09:14 Then I lose it.
09:14 Like just the, the act of having a physical key that has to always be with you.
09:19 Like, do you take it with you when you go swimming?
09:20 I mean, I mean, that's a little extreme, but like, if you're going to go to the beach and you might need it, what are you going to do?
09:26 And then if I only have my phone, I can't plug the key into the phone.
09:28 I don't know.
09:29 It just, it seems like I certainly know why you would have it at like, if I worked at a bank and I needed to get on the VPN and I needed to have that permanently stuck in my computer.
09:38 Fine.
09:38 But as a broad based solution, I feel like things like Authy, Google, Google authenticator, the Microsoft, whatever it's called, all those things.
09:47 I think they still provide a pretty strong level of security while being able to travel with you and being able to synchronize across devices that you might not always have them with you.
09:55 So yeah.
09:56 When people say it's always such a hassle to get these keys, like you could just set up Authy.
10:00 You know what I mean?
10:01 Yeah.
10:02 Yeah.
10:03 I use Authy too.
10:04 I'm also, I'm a little freaked out by the hardware keys.
10:06 I did find it interesting in the giveaway.
10:08 Actually, I think they give you a coupon to get two so that like you could get two in case you lose one.
10:14 But that to me just is exactly why I don't want one.
10:17 Exactly.
10:19 Well, okay.
10:20 So I've got one plugged into my computer and I put what one into the closet.
10:24 If the house burns down, what am I going to do?
10:27 I mean, I'll probably, I'll grab my phone and run maybe if I can get to it, but I'm not going to go rooting around for a hardware key.
10:32 I'm just going to get out.
10:33 You know what I mean?
10:34 There's, there's just all these like sort of weird edge cases that to me, I'm just like, I don't really want to hand on one of these hardware keys.
10:41 Yeah.
10:41 Brian's going to have to go to the bank and his safe deposit box just to upload a new pie test check.
10:46 Yeah, exactly.
10:48 All right.
10:48 I turned both keys to the right on three, two, one.
10:51 Chink.
10:51 Okay.
10:51 V1, two, 1.2 is out.
10:54 Yeah.
10:54 Okay.
10:54 But I would just point out the article here from Armin.
10:59 Yeah.
10:59 Yeah.
10:59 Please do.
11:00 Which was super interesting, I think.
11:02 And it was, this kind of gets into, it'll probably lead us into the next topic here of why there was a little bit of controversy around this.
11:08 And I think it wasn't so much that people are resistant to two factor.
11:12 It's more this designation of packages as critical.
11:15 And I don't know if that's just because like critical is a bit of a loaded term or it ended up feeling a little bit like a popularity contest.
11:22 But yeah, I think it's pretty clear to me that PyPI wants to, you know, which is an open source project itself, right, wants to eventually probably roll this out to everybody and maybe doesn't have the capacity for that right now or something.
11:32 Yeah, I totally agree.
11:34 And Armin Peik is quite interesting.
11:36 And he comes down a little bit, you know, on the middle.
11:39 Like I see the value, but also I see why people are a little bit frustrated with this.
11:43 He does talk about this thing that the Rust community has, you know, hat tip towards topic four as well, called CargoVet, which is the idea of vetted packages and unvetted packages.
11:56 So if you, when you pip install something, you could say something like, do I only want to allow like the higher vetted packages?
12:05 PyPI doesn't have this at the moment, but other package indexes do.
12:08 To me, again, coming back to the hardware thing, I feel like people saw this and they thought, I've got to go to this hardware key.
12:13 Like this seems like, I can't believe you're forcing this on me.
12:16 If you're a software developer in 2022 and you don't have any form of 2FA setup, that's, I feel like those are the people who got really frustrated.
12:24 But at the same time, like, what are you doing on the internet in 2022 without at least a few things on 2FA?
12:31 My Authy account has something like 46 different 2FAs in there.
12:36 My 1Password has like a thousand accounts.
12:39 I don't know.
12:39 It doesn't seem like a huge burden to hold up your phone, scan a QR code and carry on.
12:45 But if you're not in the 2FA space, and especially if you perceive that to mean I got to get into the hardware 2FA space, I can see why people would see this as frustrating.
12:54 And with that, maybe it's time to just move to the next topic, number two, which is IPI move to require 2FA for critical projects, which is this here.
13:02 But what's really interesting is there's sort of talking about the challenges.
13:07 And one of the things that happened is there's this project called Atomic Writes, which was designated as critical.
13:14 Atomics Writes, what it actually does is pretty straightforward.
13:19 Let's use a context manager to write to files atomically.
13:25 So you can write to the file, write to the file.
13:26 If there's some kind of crash or mistake or bug or something, it won't actually change the file.
13:34 So normally you would just do like while true, start writing.
13:38 And if something crashes, like you'll have a half written file.
13:41 So this is kind of cool.
13:42 It says what you're going to do is use a context manager, open a file.
13:46 We're going to write to a temp file.
13:47 And then when you exit the context manager successfully, we're going to apply all those changes by doing an overwrite move type of operation at the OS level.
13:56 I don't know how truly atomic it is, but it sure is better than writing line by line.
14:00 And certainly it has the data safety aspect, which is pretty cool.
14:04 Anyway, apparently people use this as in 127,839 packages.
14:09 Maybe that number was higher not long ago.
14:12 Packages, projects on GitHub use this.
14:16 I guess not packages, but projects, many of which were packages themselves.
14:19 So this guy, Markus Unterwalitze said, you know what?
14:28 This is really frustrating to me.
14:30 I don't want to set up 2FA.
14:31 So I'm just going to unpublish this, take it down.
14:35 And so don't know exactly what the chain of events was.
14:39 I think something happened to the GitHub repository getting deleted, which then triggered, maybe also somehow triggered a delete of all of the historical IPI packages.
14:50 Whatever the steps were, it erased all the historical IPI packages.
14:56 So imagine your project has a dependency on atomic writes and your requirements.txt or pyproject.toml or whatever says equal, equal.
15:05 What version are we on?
15:06 We'll get some releases here.
15:07 There's no releases anymore, so I can't tell you.
15:10 But if you had like some concrete number there, it would say, pip would say, can't find that.
15:15 Sorry.
15:15 And so all sorts of started breaking.
15:18 Continuous deployment, continuous integration, a bunch of PyPI, pytest packages, tests and automation and stuff.
15:26 Brian, maybe you saw some people going, what's going on with this thing?
15:29 I didn't really notice it.
15:32 Well, you'd only notice if you depended upon this, had set up automation, right?
15:36 Like basically check out your code, install the dependencies, run pytest.
15:40 But people are like, these tests used to pass.
15:42 Why are they no longer passing?
15:43 And it's because pip couldn't install this project that Marcus got a little frustrated with and deleted out of PyPI.
15:50 So that's interesting, right?
15:52 Like, should he have done that?
15:53 I don't know.
15:54 Here's his sort of comment saying, here's what you got.
15:57 And it says, PyPI just told me to enable 2FA to keep uploading this package because I thought it was annoying and entitled to guarantee the software compliance for a handful of companies.
16:07 Basically, his take was, you're making me secure the supply chain so that large banks and other companies that care about it will feel better.
16:15 And you're making me do extra work.
16:17 Again, that I think the confusion about hardware, moving to hardware 2FA versus just scanning a QR code with your phone.
16:25 Anyway, you're making me do extra work.
16:27 And so I deleted the packages.
16:28 Apparently, I deleted all the old versions.
16:31 Sorry.
16:32 Those have been restored by directly working with, I believe, Dustin Ingram from PyPI.
16:38 So if you go down here somewhere, it says, no, sorry, Donald Stuff is the one who.
16:43 But yeah, it shows you, I guess, unintended consequences.
16:46 Hey, we're going to make atomic rights a little safer.
16:49 Maintainer of atomic rights doesn't like that.
16:51 Deletes it, makes everything break.
16:53 Ashley, what's your take on this?
16:54 You've been tracking it.
16:55 Yeah.
16:56 I mean, I find it really interesting.
16:58 Like, it gets to the whole, you know, what is the sustainability of this giant open source ecosystem that we have?
17:04 I know, I think in the show notes, you refer to this as Python's left pad incident or something like that, which is sort of a throwback to a very similar thing that happened in NPM recently.
17:15 And I think there was another one recently, like the start of the Ukraine war, basically, where someone, I think, pulled their package and put in something that was like protest wear or something like that.
17:28 It tried to delete all the data off the hard drives if it detected you were in certain countries or something, which is a pretty, pretty rough hammer to use.
17:37 Yeah, pretty extreme measure.
17:38 Right.
17:39 What if you were working to collect data about trying to help Ukraine, but you happen to be in this other country?
17:47 I mean, it's just, yeah, it's just overstepping, I think, a little bit on intended consequences.
17:52 Yeah.
17:52 But this is like, I mean, we're working in industry and having to pin our packages and stuff.
17:56 This is something that, you know, we kind of already protect for by mirroring.
18:00 You know, I think most people with, I'm going to use critical, not in the way that's being used here.
18:04 But like when you have a project and you're using all these dependencies, it's kind of also on you to know that like, well, the supply chain, I mean, PyPI doesn't have a permanent retention policy.
18:14 Maybe it should, but that is going to lead to, you know, potentially much even even bigger hosting costs and everything for what's already a really expensive project.
18:22 We run into the same thing with like packages from Ubuntu and stuff like that as well.
18:26 Not that they get pulled in this way, but they'll bump versions on us that, you know, and especially in a regulated industry, we can't just update dependencies whenever they come out.
18:35 So, you know, it wouldn't surprise me to see IPI become immutable once it goes up there.
18:40 Like you can't change it.
18:41 Yeah.
18:41 Or more so.
18:42 Right.
18:43 Yeah.
18:43 Yeah.
18:43 I would expect it to be more of a request thing.
18:45 You put it in a request and say, hey, I want to, this is mine.
18:48 I want to take it down.
18:49 And some review happens or something because people depend on it.
18:54 And I, I get, I get, I kind of get both sides of it.
18:57 I get that it's my thing.
18:59 I should have complete control over it.
19:00 But I also don't have, I don't have complete control over GitHub.
19:04 I don't have complete control over PyPI or the PSF.
19:09 And I use those services.
19:10 They can like the, the PSF, for instance, I got it.
19:14 They like purge all of your accounts, like once a year or something like that.
19:18 And you have to re, you have to re log in or recreate your account.
19:21 And, and, you know, get projects and services change their policies every once in a while.
19:28 And, and this is a change in policy that for some projects we're going to require 2FA.
19:33 They can do that.
19:34 And if I want to continue to use it, I have to.
19:37 Now, if I don't want to continue to use it, that that's a, I get, I guess that's where
19:42 we're getting the question in is what ramifications are there?
19:46 Can somebody take their, take their stuff off of PyPI or not?
19:50 Don't know.
19:51 Yeah.
19:52 So.
19:52 Yep.
19:52 I think that if you read a lot of the conversations here, maybe we'll just close up this whole
19:57 section on that.
19:58 It comes down to two different beliefs.
20:00 One, I should, it's my code.
20:02 I wrote it.
20:03 I can do whatever I want.
20:04 I own it.
20:04 If I don't like it, I can just delete it.
20:06 If I want to stop, I can stop.
20:08 The other one says, once you put it out there on GitHub and you've put it out to the world
20:12 as here's a library that you can use and depend upon, and you publish it to the index with a
20:18 clear intention of sharing it, you have a minuscule responsibility not to keep working on it, but
20:24 to not destroy it for other people who are building on what you previously did.
20:27 Yeah.
20:28 I think there's a difference there too, between like writing and publishing the code and publishing
20:32 a package or distributing a package that's intended to be, you know, conveniently downloaded
20:36 in CI and stuff like that, where you're kind of making a little bit more of a promise there.
20:40 But also, I mean, going back to Marcus's post here, it sounds like he, his intention wasn't
20:45 to break, you know, people's existing workflows and stuff like that.
20:48 It was really, he just didn't want to be the maintainer of a critical package.
20:53 Exactly.
20:53 He's like, I deleted it.
20:55 That fixed it.
20:55 Yeah.
20:56 And then became, I think this, you know, the sort of poster of this controversy.
21:01 So yeah.
21:01 Yeah.
21:02 Yeah.
21:02 Yeah.
21:03 If you read Marcus's Twitter, you can go back and sort of, you kind of get a sense that he's
21:07 the kind of person that would not want to take that kind of stuff being put upon him or
21:12 whatever.
21:12 Let's wrap it up with Teddy's comment out in the audience.
21:14 Feels, feels like a small step to enable 2FA.
21:17 I wonder why it creates so much debate.
21:18 Feels a bit political, especially today where 2FA is required almost everywhere.
21:22 Yeah.
21:22 I'm, I agree.
21:24 I think, again, I think people saw the, here's your hard work key.
21:27 Like, I don't want a hard work key.
21:28 There's so much work.
21:29 Let's, let's move on, Brian.
21:31 That was a, that was a good one, but let's fast.
21:33 Let's get out of there.
21:34 Yeah.
21:34 Fast, a harsh transition.
21:36 Yeah.
21:36 Let's just talk about fast, FastAPI, you know?
21:39 Anyway, don't transition from that.
21:42 So that's good.
21:43 FastAPI filter came up.
21:46 It was suggested by Arthur Root, Arthur Rio, who is also the creator of it.
21:51 And it looks pretty cool.
21:52 So it's, he, he said in a tweet, I love using, I loved using Django filter with Django rest
21:59 framework.
22:00 And I wanted an equivalent for FastAPI.
22:03 So what this is, is this is a package you add to a project that uses FastAPI.
22:07 And with it, you get like, when you're going through the, the cool debug user interface stuff,
22:14 you can filter stuff.
22:16 So you can, you know, it'll look at your, your schema and then you can, you know, filter different
22:24 items and only, only see part of it.
22:26 And it's just pretty neat.
22:28 He also, it also has things like the filters support operators, like greater than greater
22:35 than equal, less than not in and things like that.
22:39 So it's kind of a fun way to just filter when you're looking at your data to filter it.
22:43 And in his read me, he mentions that he's got a video and you kind of need a big screen
22:49 for this, but, but he does have a video to, to, to show it in action, which is kind of cool.
22:56 He shows filtering some of the data and then seeing the different data output.
23:00 Anyway, just, just kind of a neat, nice debugging tool.
23:04 If you're using FastAPI.
23:05 That's really awesome.
23:06 Actually, do you do anything with FastAPI?
23:08 Unfortunately, no, this just makes me more jealous.
23:12 I think of the people who get to use FastAPI, because it's got all these cool, I mean, you
23:16 know, as a developer, I've played around with it, but like, it's got all these cool sort
23:21 of debug admin interfaces.
23:22 And then you see even more stuff like this kind of built on top of that.
23:25 It's really awesome.
23:26 Yeah, absolutely.
23:27 Yeah.
23:28 And, I'm, I'm planning on learning more about FastAPI on Michael's upcoming course.
23:34 So, yeah.
23:36 Are you going to be able to make it, Brian?
23:38 I'm going to make sure I make it.
23:40 Yeah.
23:40 Awesome.
23:41 I'm looking forward to that.
23:42 So, yeah, that's the, the live in-person FastAPI course.
23:45 I'm doing it out a month from now.
23:47 So it should be fun.
23:49 Before we move on, I do want to talk about our sponsor for this week, Microsoft for startups
23:55 founders hub.
23:56 They're doing super cool stuff as someone who has started his own small business.
24:01 It is a lot of work.
24:03 There's a lot of uncertainty and knowing how to get help and having support of people who
24:08 have experience is really, really valuable.
24:10 Starting business is hard.
24:12 They say that by some estimates, 90% of all the startups will go out of business in the
24:17 first year, which is tough, but that's how it is.
24:19 With that in mind, Microsoft for startups set out to understand what startups need to be successful
24:23 and create a digital platform to help overcome those challenges.
24:27 And that's where they got their founders hub.
24:29 So Microsoft for startups founders hubs provides all founders at any stage with free resources
24:35 to help them solve startup challenges.
24:37 You get technology benefits, access to expert guidance and skilled resources, mentorship,
24:44 networking connections, and so much more.
24:46 So, and unlike a lot of other similar programs in the industry, it doesn't require startups to be
24:52 investor backed or third party validated to participate.
24:55 Founders hub is just open to everyone.
24:57 So what do you get?
24:58 You get, you can speed up your development with free access to GitHub and Microsoft cloud
25:02 resources that have a bunch of credits that unlock over time.
25:06 So you can grow without worrying about paying for stuff.
25:08 They also help startups innovate.
25:10 They're partnering with companies like open AI, AI research and deployment company to get extra
25:16 benefits through their partners as well.
25:17 it's so with the founders hub, it's not really about who, you know, you have this access
25:22 to this mentorship network.
25:24 So you get access to a pool of hundreds of mentors across a range of disciplines, areas
25:29 like idea validation, fundraising, management, and coaching sales and marketing, and specific
25:34 technical stress points.
25:36 I think that might be the most valuable, honestly, is, Hey, I need to talk to this person or somebody.
25:40 Is this a good idea?
25:41 Is this how I should be doing?
25:42 And so on.
25:42 So you can book a one-on-one meeting with mentors, any of whom are founders themselves.
25:46 Make your idea a reality today with critical support that you'll get from Microsoft for startups
25:52 founders hub during the program, visit pythonbytes.fm/founders hub to click the link in your
25:57 show notes and yeah.
25:59 Thanks Microsoft for supporting the show.
26:01 Nice.
26:01 Indeed.
26:02 So what do you got for us next, Michael?
26:05 Ashley's next.
26:06 I'm letting him go next.
26:07 Oh, right.
26:08 Okay.
26:08 Yeah.
26:09 We'll scroll down to mine then.
26:09 yeah.
26:11 So I guess I think kind of the reason I'm here, I emailed you guys after there was some
26:15 discussion on the podcast a few weeks ago about, you know, Hey, we're seeing a lot
26:19 more stuff built in rust.
26:21 And you, you had some good points about like why we're seeing that.
26:24 but I thought super relevant to this, podcast is, this project.
26:29 And in fact, this whole organization, py03 on GitHub, has a number of projects in here
26:35 that are, you know, super relevant to Python developers, obviously.
26:39 So the main one I think is py03, which is, is rust bindings.
26:43 and basically what I emailed you guys was that my hypothesis is the tooling around building
26:47 extensions for Python in rust or calling Python from rust, is getting so good and so easy
26:54 that like, for me, I find this preferable to writing C extensions, for example.
26:58 Now, not even necessarily because of rust, although rust is a really great language I've
27:04 been getting into over the last year.
27:05 but just like that, that tooling aspect of it, is really great.
27:09 Great.
27:09 So that the experience is, is pretty awesome based on, you know, these separate projects.
27:13 So there's py03, which is the, the bindings.
27:16 and this allows you to basically use, these type of things that it's almost like a
27:21 function decorator.
27:22 These are called, procedural macros.
27:24 They're kind of tricky to write, but they're really easy to use.
27:27 So you just put this on there, and then use this one to create a module, add your function
27:31 to the module.
27:32 And then if you build this file, you can import it in Python, and run this function.
27:36 So, the combination of, you know, the ease of writing this, and then there's another project
27:41 in here, called maturing.
27:43 Before you move on real quick, maybe, for, for people listening, if you go back just
27:48 real quick to that, that section you had there.
27:50 Yeah.
27:50 So the idea is what you do is you, you write some rust code and then you put, you call it
27:56 a decorator or an attribute or what do you call that hash?
27:59 It's called a macro.
28:00 Yeah.
28:01 A procedural macro, but you can just call it a macro.
28:03 Yeah.
28:03 Yeah.
28:04 So you put the macro onto functions.
28:06 There's one function that defines the module.
28:09 And then in there, you just say, here are basically all the things I'm exporting from rust over to
28:14 Python.
28:14 And those are just the ones you've wrapped with the macro, right?
28:17 Mm-hmm.
28:17 Yep.
28:18 Yeah.
28:18 Assuming that writing rust for you is straightforward, this is a really simple addition.
28:23 Yeah.
28:24 And I think, you know, once, once you have this kind of, you know, there's a little bit of
28:27 boilerplate in here, but these macros reduce the boilerplate so much that once you're in
28:31 the function, in fact, I think this is like a really cool way to get started with rust because
28:35 some of the really steep learning curve in rust is when you're building larger projects and
28:40 you have to deal with, you know, strict typing and lifetimes and all these scary things that,
28:45 you know, rust can do.
28:45 But like you're, you're limited to just a function scope because that's what you're calling from,
28:49 from Python.
28:50 I think it's a kind of a cool way to get started and just get familiar with the syntax.
28:54 Interesting.
28:54 Yeah.
28:55 Yeah.
28:55 And yeah, I think part of the reason these tools are so great is like the whole rust community
29:00 puts a lot of value on tooling.
29:02 It's like a relatively young language.
29:05 So from the start, I think it had this sort of, you know, attitude of, of building good
29:10 ergonomics for developers, having good, you know, a single command line tool kind of that
29:13 can do all these different things.
29:15 And so this group that, that maintains PIO3 has also created this tool called Maturin,
29:19 which feels to me a lot like Flit with, you know, like the super lightweight wheel builder.
29:25 And so you see here, you just run Maturin develop with this, this project structure in here.
29:30 It also has like a Maturin init, I think, which will create a new project for you.
29:34 And then you see here, this develop will actually, you know, give you some output, whatever,
29:38 because it builds a wheel and then installs it in your virtual environment.
29:42 So then you can see here, you just call into that code and then this is, you know, calling
29:46 rust code for you already.
29:47 Oh, cool.
29:48 That's really nice.
29:49 So have you built things that you've released or are backed by rust?
29:53 Not released, but like I've, I've done, you know, some hobbyist things and then also some
29:59 stuff for, for work as well.
30:03 Some small pieces of mostly like, you know, I work in, in, I came from a scientific background
30:08 and I now work for this, you know, like I said, a portable MRI startup.
30:11 So our whole thing is like Python from, from top to bottom, which is really cool.
30:15 But for those performance critical numerical computing things, we use a ton of NumPy and
30:19 TensorFlow.
30:19 But then also, you know, some C extensions.
30:24 And I've been just kind of playing around with converting those to rust.
30:26 And this rust NumPy is another one of their projects here that makes it really easy to,
30:31 you know, write a function that'll take a NumPy array basically and do some calculations on it.
30:36 Oh, fantastic.
30:37 Rust NumPy.
30:38 So is it like an interoperability layer between rust and NumPy?
30:42 Yeah.
30:43 It pretty much just lets you like take NumPy arrays from Python into your rust functions that
30:49 you're creating with PyO3.
30:50 And then also, you know, create NumPy arrays and return them from those functions.
30:56 And it depends heavily on ND array, which is a pure rust project here for, for, for n dimensional
31:02 arrays and computation.
31:03 So which probably more analogous to what actually NumPy itself is, but in the rust ecosystem.
31:08 Okay.
31:09 Very cool.
31:09 That's pretty cool.
31:10 So why rust over C?
31:13 I mean, I think it's, I was mentioning to you before, like, you know, the rust community
31:18 is, is really excited about rust.
31:21 Like everyone who tries it likes it.
31:22 I think it's, you know, topping the charts and, and all these, you know, most loved programming
31:26 language surveys and stuff like that from Stack Overflow and everything.
31:30 It guarantees, you know, it provides some more stronger guarantees around memory safety,
31:36 and while still maintaining high performance.
31:38 So that comes at a cost of a little bit of like complexity and learning curve.
31:42 it also happens to, with those memory safety things like come with what they call
31:47 fearless concurrency, where the typing system can prevent you from creating race conditions
31:52 and actually warn you about them or, you know, fail to compile at compile time.
31:57 and so I find like the trade-offs between, memory safety and performance and ease
32:03 of use to be really interesting between rust and Python.
32:06 They, they make completely different choices, but like both sort of with similar things in
32:11 mind, like Python sacrifices some performance for ease of development, but still wants to
32:15 be memory safe, right?
32:16 Like if you're getting a seg fault in Python, you're, you're calling into something and doing
32:20 something wrong, or it's hard to do that with pure Python code.
32:23 Right.
32:23 And same is true of rust.
32:24 It's like if you're not writing what they call unsafe code, where you have to kind of
32:28 wrap it in a block that's actually called unsafe, you shouldn't end up with those
32:32 type of problems.
32:33 so it's, it's kind of cool to see those two things.
32:36 And then when you really do need performance, you can drop into this sort of, you know,
32:39 lower level language.
32:40 Maybe it's a little bit steeper learning curve, but you'll get the performance and you don't
32:43 have to sacrifice that memory safety to get it.
32:45 Yeah.
32:46 Fantastic.
32:46 Brian, you do more C stuff than I do these days.
32:49 What do you think?
32:50 there's, there's some bottleneck stuff that things that I use Python for that
32:55 we do have, like, large amounts of data passing back and forth.
32:59 And, and I don't, I mean, normally Python isn't the bottleneck, but sometimes it is.
33:04 And, there are cases where I'm, I was just Googling some stuff right now, trying to
33:09 figure out if I can apply rust to some of these things.
33:13 Cause I actually, I think that's a, what, what, Ashley pointed out is, is fascinating
33:18 is this might be a really great way to learn rust is to try to solve one of your bottleneck
33:24 problems in Python with, with, with rust.
33:27 And, I mean, I'm comfortable with C as well, but there's, even though I've been doing,
33:34 using it for decades that I'd rather, if I can use something else, I would like to try.
33:39 Something a little more modern.
33:40 I totally agree.
33:41 And yeah, you're right that, oh, I need to implement these three functions in rust and
33:47 then plug them into Python.
33:48 That's different than I need to completely learn rust so I can just do this whole project in
33:52 rust.
33:52 Yeah.
33:53 Yeah.
33:53 It's a narrow scope, kind of a cool way to, to try to learn something.
33:57 So yeah.
33:58 And these, these projects have like a ton of great examples.
34:01 A few of them have, user guides and stuff like that.
34:04 So plenty of material there to get you started.
34:06 Nice.
34:07 Cool.
34:07 Cool.
34:08 Yeah.
34:08 Very, very good one.
34:09 Thanks, Ashley.
34:09 All right.
34:10 Have you ever heard that regular expressions are easy?
34:12 Yeah.
34:13 Yeah.
34:14 Not me, but Brian, let me, let me type something.
34:17 I'm going to type this.
34:18 I'm going to say, okay, I want a, a, a dot plus.
34:21 And then I want, I'm going to write the word fun.
34:24 I'm going to write, is it backslash D plus?
34:28 I don't even know if that's a proper regular expression, but what does it, what does it do?
34:32 So I want to introduce you to this site called auto regex.
34:36 And this comes to us from Jason, Jason Washburn.
34:39 Thank you, Jason, for sending this over.
34:40 And the idea is I can put a regex in here and hit go.
34:44 Wait.
34:45 Oh, hold on.
34:46 Let me just do this one.
34:47 Do a simple one for a second.
34:49 What am I missing here?
34:51 I think you have that.
34:52 It's backwards.
34:53 You're going English.
34:54 It's backwards.
34:54 Yeah.
34:55 Yeah.
34:55 Yeah.
34:55 Yeah.
34:55 So why was it doing that?
34:56 That was, yeah.
34:57 So first of all, yeah.
34:59 Okay.
34:59 So let's start with that direction.
35:00 That's the default direction it pulls up.
35:01 So what I can do is say, I want a regex that, starts with fun, then any number,
35:07 write that.
35:08 Okay.
35:09 And so then it says, oh, you know what?
35:12 What you want is carrot fun dot star regex.
35:17 Mm-hmm.
35:18 Mm.
35:18 Is that right?
35:19 It's not quite right.
35:20 Well, this, this is starts, starts with.
35:24 But dot star, I think is any character, right?
35:26 Yeah.
35:27 Oh, then how about, yeah, it's not perfect.
35:30 Then the same numbers.
35:31 There you go.
35:32 Oh, there you go.
35:33 Yeah.
35:33 You gotta, it's not perfect.
35:35 You gotta understand the English, but I wrote an English sentence to it and it came up with
35:39 a regular expression.
35:40 It says, disclaimer, all outputs are generated by open AI's GDP three.
35:44 Sometimes it makes sense.
35:46 Sometimes it doesn't.
35:47 But you could also do the reverse.
35:48 Yeah.
35:49 Let's do the reverse.
35:50 All right.
35:50 I'm going to make, I'll try to go back to my other one.
35:52 So I'll say carrot, then dot plus, and then fun, then backslash.
35:57 Let's try that.
35:59 And do it in reverse.
36:00 So I'm going to run it again.
36:02 And you wait for a second.
36:03 It says, the regular expression means the string must start with any character.
36:07 Then there must be one or more characters before the substring fun.
36:10 And then there may be any number of digits after the substring fun.
36:14 What do you think about that?
36:15 It's not quite right.
36:15 I think it only matches one number.
36:17 Yeah, maybe it only matches one.
36:18 Yeah, yeah.
36:19 But still.
36:19 The trick for me, too, is that regular expressions are different depending on your platform.
36:24 That's what always tricks me up.
36:25 I'm like, which ones?
36:26 Exactly.
36:26 So this is a really cool tool to almost understand regular expressions.
36:31 Yeah.
36:32 So here's how I would perceive this.
36:34 I would say, I wouldn't use this and just go writing all my regular expressions.
36:38 But if I'm like, I really don't know how to get a regular expression to do that.
36:43 Yeah.
36:43 You could go write the English sentence and it might come up with either the right answer
36:47 or something close enough that it's like, you know, okay, I see where it's going now.
36:52 It's not quite matching, but let me.
36:53 I would call this more of a guide or like a signpost along the way, not the tool to build it.
37:01 I could see it being super useful with like, I think there's a site, regexer or something
37:05 like that, where you can basically write a bunch of test cases and then your regex and
37:11 have it run against them all in your browser and see it right there.
37:14 And that's like, when I have to write regular expressions, that's how I do it.
37:18 Like write a bunch of tests in here and get it to work.
37:20 I maybe should be writing the tests in my own code and actually putting them in as tests,
37:24 but I do it in this.
37:26 But yeah, if you kind of integrate those two tools together, I could see this being
37:29 useful.
37:29 Okay.
37:30 Yeah, for sure.
37:31 We take the example one over here and we could put it into this there and see what it says.
37:36 So the regex is create a group that is a word.
37:39 And then you got a piece, at least some white space there.
37:41 What do we get if we run that?
37:42 The regular expression matches any word that begins with an uppercase letter.
37:46 That's pretty cool.
37:47 It does.
37:48 Yeah.
37:48 Anyway, fun.
37:49 People can check it out.
37:50 More regex fun.
37:52 Thanks Jason for sending that in.
37:54 And then Ashley, you also pointed out that Simon Wilson wrote an article on this.
37:58 I don't know anything about this.
37:59 I just saw this in the notes.
38:00 Yeah, he was actually, so it's sort of related because it's GPT-3 and code.
38:04 And I mean, even this first one has some regular expression stuff in it, but I guess there's
38:08 a mode with GPT-3.
38:10 I haven't really played with this, but you can like paste in code and then start asking it
38:14 questions about it, like in a sort of conversational manner.
38:17 And his blog post, I thought was really cool.
38:19 One thing I did see pointed out was similar to what we were just talking about is apparently
38:23 the AI model, like the chatbot can be very scarily confident in its answers.
38:29 And sometimes it's very confidently wrong.
38:31 Like, so you have to not be lulled into the false sense of security there.
38:35 Yeah, for sure.
38:36 Cool.
38:37 You definitely do have to take it with a grain of salt.
38:39 All right, Brian, close this out here.
38:42 Okay, so Philippe sent us this next topic, and he's working for Python Anywhere.
38:51 So anyway, he's one of the insiders.
38:53 Anaconda acquires Python Anywhere to expand the Python team collaboration in the cloud.
39:00 So not expand the team, expand Python team collaboration.
39:04 So this is an interesting, we're linking to an article from Anaconda press release just saying,
39:12 yeah, we bought Python Anywhere or, you know, acquired him.
39:17 So it's interesting.
39:18 I think I'm going to jump to another thing before I guess give my feedback.
39:24 One of the things here, it says from the announcement, the acquisition comes on the heels of Anaconda's
39:30 release of PyScript, an open source framework for running Python applications with HTML.
39:35 We've covered that.
39:36 The Python Anywhere acquisition and the development of PyScript are central to Anaconda's focus on
39:43 democratizing Python and data science.
39:45 So I'm going to be optimistic and not pessimistic on this.
39:50 I think hopefully it's a good thing.
39:52 And then on the Python Anywhere site blog, there's a FAQ about the acquisition.
39:59 And it kind of goes through, like, from the customer standpoint, you know, will this affect
40:04 my account?
40:05 Will the billing change?
40:07 Basically, they're going to keep everything the same, at least for now.
40:10 And but hopefully it will expand its services and stuff and make things better.
40:15 My personal take on it.
40:17 So is that I'm hoping Python Anywhere is a cool idea, but I haven't seen much from them lately.
40:23 So I'm hoping this will breathe some life into Python Anywhere.
40:27 Yeah, I'm not saying it's dead, but I just it'd be cool to see it grow.
40:31 So fun fact.
40:32 Talk Python itself started out on Python Anywhere for a month or so because I'm like, I want to
40:38 get this up.
40:38 And it's kind of complicated to figure out all the Linux and its next stuff.
40:42 And it seems real easy to just fire it up over here.
40:44 And it worked great for a while.
40:46 But eventually moved off as like, you know, started doing 15 terabytes of traffic a month.
40:52 Yeah.
40:52 Yeah.
40:53 So anyway, I'd love to see that coming along.
40:55 That seems great.
40:56 Let me share also one more other thing.
40:58 So on the screen, I have python.org and it shows you a code sample.
41:02 Has anyone clicked this little thing up here on the right?
41:05 This little shell looking thing?
41:07 Yeah, I have before, but I don't remember what it does.
41:10 What?
41:10 Oh, nice.
41:12 So it opens up a Python REPL.
41:15 That Python REPL is running on Python Anywhere.
41:17 Yeah, and one of the cool things about Python Anywhere is this ability, this ability to just
41:21 like run it from any device.
41:23 So you can run this from a tablet or a Chromebook or something without installing anything.
41:29 And that's neat.
41:31 I'd like to see that expand.
41:33 Cool idea.
41:34 Yeah, it sure is.
41:34 And I can see how this pairs with PyScript.
41:36 So this is in my browser.
41:38 I can just run Python and get a view into a REPL.
41:41 But with PyScript, I maybe just move the execution to the front end as well.
41:45 So they're kind of related in that regard.
41:47 Yeah, there's actually a few things I'd really love to see Python Anywhere change with this
41:53 is the currently Python Anywhere doesn't support Python 310.
41:58 Hopefully we can get that updated.
42:01 And it doesn't it or you can run whiskey apps, but you cannot run ASCII right now.
42:07 So no FastAPI on there.
42:09 So that's hopefully that will be fixed.
42:12 But and then also the free plan doesn't allow you to do Jupyter Notebooks.
42:18 And with I'm guessing with Anaconda in there, that might be.
42:21 It probably will.
42:22 I would suspect it would.
42:24 All right.
42:24 How about extras?
42:25 Got just a couple minutes left for those.
42:27 I've got nothing.
42:28 Ashley?
42:29 Nothing?
42:30 I had a couple in here.
42:31 Not a whole lot to say about them, but that's, I guess, why they're extras.
42:35 Pep691.
42:36 There's a new JSON based simple API for PyPI.
42:40 So more PyPI news there.
42:42 This is like for tools like PIP, I guess, that are sort of, you know, indexing packages
42:47 and stuff like that or going on a search for packages.
42:49 Like, we'll now be able to parse JSON instead of, I guess, up until now they've been parsing
42:53 HTML, which was a surprise to me.
42:55 You can go to somewhere.
42:56 Yeah.
42:57 You go somewhere on pypi.org slash something, something simple.
43:01 And you just get a wall of links and you get like 350,000 links, which is not an ideal
43:06 way to like, it doesn't seem like the best.
43:08 Yeah.
43:09 It's cool because I guess it can be like, it can serve those as static files, right?
43:13 So that's why like, instead of having, you know, dynamic web app that you have to worry
43:17 about loading all this stuff, it's just like an Nginx server pointed at a huge directory.
43:20 But this allows those same servers, I guess, to serve JSON instead of HTML.
43:25 It's neat.
43:25 Yeah, great.
43:26 And then rich codecs is a tool for like automatically creating these terminal screenshots from stuff
43:35 in your documentation.
43:36 Mostly I thought we can't have a Python bytes episode without something related to rich,
43:40 right?
43:41 So.
43:41 That's right.
43:42 That's right.
43:42 Check this out.
43:43 If you've got, if you're using rich or, and want to, you know, make some screenshots that
43:48 stay up to date with your code.
43:49 Yeah.
43:50 Some color coded code blocks in your, your markdown.
43:54 Yeah, for sure.
43:54 Very nice.
43:55 Yeah.
43:55 All right.
43:56 All right.
43:56 I just have a quick one for an extra here.
43:59 There's an article on DevJobs Scanner, the top eight most in demand programming languages.
44:05 So we've got JavaScript, TypeScript, that's number one, but Python number two.
44:09 I bring this up because I was doing a live stream on Talk Python and somebody came along
44:13 and said, hey, should I still be learning Python?
44:15 I heard that it's really hard to get a job and there's not a lot of interest in that.
44:19 So yeah.
44:20 Well, anyway, I'm not sure what else you choose.
44:22 And again, this JavaScript stuff, it's like, it's like being a CSS, full stack CSS developer.
44:28 You might have to have JavaScript skills to do Python stuff or to do ASP.NET or to do
44:36 whatever else, right?
44:37 Like there's a, JavaScript is unique in the sense that a lot of times it's paired with other
44:41 things, whereas those other things are often more standalone.
44:44 You know what I mean?
44:45 So maybe the fact that JavaScript is up there because like every other language below it also
44:50 needs JavaScript plus, I'm not exactly sure what the metric is here.
44:54 If this is like how you, how you pull that out.
44:56 But anyway, take it with a bit of grain of salt, but I think this is pretty good.
45:00 All right.
45:00 Are you all ready for a joke?
45:02 Because Brian, you have started something.
45:03 I have.
45:04 Okay.
45:05 You have.
45:05 So remember we had the, I don't remember what the exact topic was, but we talked about,
45:11 we talked about this, this, oh, this was, what is the junior dev see themselves
45:16 in five years and what is the senior dev?
45:19 So this woman, Neda, she has just an amazing set of jokes.
45:25 And so you're going to be hearing more than one of these, but let's, let's, let's look at
45:29 this one.
45:30 They're so good.
45:31 They're so good.
45:31 I'm obviously linking to the show notes.
45:33 So here's an example of people.
45:36 I think what the story is here is these two women, they live in this apartment complex and
45:42 they, they're in an elevator with some of their neighbors.
45:45 And there's this, this older woman says, so what do you girls do for a living?
45:49 One of the women says, ah, I'm an architect.
45:52 Oh, and Neda, she's a programmer.
45:54 And you just see the crap emoji.
45:56 Like, oh no.
45:57 Later on, Neda receives the knock at the door.
46:00 And this old woman is like, there's a problem with my phone.
46:03 And then there's like another, another guy with a beard that shows up with just showing
46:07 the laptop to her.
46:08 And then there's like a whole line of people with like printers and all kinds of stuff.
46:13 Just basically, oh, you're our tech support now.
46:16 I, I, I so have lived this.
46:17 Yeah.
46:18 Yeah.
46:19 I have to actually, oh, go ahead.
46:21 Sorry.
46:21 Yeah.
46:22 No, Ashley.
46:22 Do you get this?
46:24 not so much anymore, I guess.
46:26 But I, this was definitely like my experience in the dorms.
46:30 I remember.
46:31 well, I mean, like now you could say I work on an MRI machines and nobody will ask you
46:35 that.
46:35 They don't want you to fix it.
46:37 They don't have one.
46:37 So no, they'll, they'll start, start telling you their medical problems and stuff like that.
46:41 Yeah.
46:42 So my first job out of college was with HP.
46:44 I was working with satellite test systems.
46:48 but, everybody just heard HP and wanted me to figure out how to configure their computer
46:54 or their printer.
46:55 can you get my printer on my network?
46:57 Brian.
46:58 And it's really gotten slow lately.
46:59 I get a lot of pop-ups.
47:00 Like, no, I don't, I don't know how to fix that.
47:04 On purpose.
47:07 I don't know how to fix that.
47:08 Awesome.
47:10 Well, that's all I got, Brian.
47:12 Okay.
47:13 Well, thanks.
47:14 Thanks for the joke.
47:14 I love that one.
47:15 we could have more of these.
47:17 Yeah.
47:17 And, thanks Ashley for joining us.
47:20 And, and I really appreciate you talking about, the, the rust, rust Python stuff.
47:26 That's, that's, we've been curious about that.
47:28 Oh, yeah.
47:29 Really happy to be here.
47:30 Thanks for having me on.
47:31 All right.
47:31 Well, bye everybody.