[b112]

Having any sort of code on python 2.7, means you don't give a rat's ass about security. It also immediately means your code should be assumed to have back doors, vulnerabilities, because python 2.7 almost certainly does!

This is what happens, when no one is maintaining software.

Security is more important that anything, certainly than having time or not to update your code.

You're 100% in the wrong here, and Google is 100% in the right, and I hate Google more than spammers, more than pretty much any other company there is.

They're not wrong here, and it hurts me to support their stance.

Fix your stuff. Stop blaming others. I doesn't matter why you're in the situation you're in, you're wrong to be there. No matter what.

[katbyte]

Not all code is a website or publicly accessible…

[b112]

Unless it is air gapped, it is accessible.

[katbyte]

at the point that would matter you have more pressing things to worry about then old code.

[b112]

It's not just old code, it's an old compiler too. One with security issues well known, unpatched.

If you think security is an afterthought, you're doing it wrong.

[katbyte]

again: not everything sits on the public internet, and by the time someone gets access to the application there are far more serious concerns then python 2 vs 3

this also really highlights the problem with python's 2 vs 3 split: there is a large body of work that will never be updated and will forever run 2 including actual web/publicly facing code. And saying "just upgrade because security" isn't going get much of that code upgraded.

[b112]

and by the time someone gets acces

This sort of thinking, is why places get hacked. You don't know what the access vector is. Stop making excuses. Secure your shit.

I would be so happy if a law was passed, and such actions were criminal.

[solardev]

Companies suffer security breaches all the time and nothing really seems to happen. Who is it important to?