From techtonik at gmail.com Tue Apr 6 12:49:10 2010 From: techtonik at gmail.com (anatoly techtonik) Date: Tue, 6 Apr 2010 13:49:10 +0300 Subject: [Pydotorg-www] [Pydotorg-redesign] Join pydotorg lists In-Reply-To: <4B798936.10703@holdenweb.com> References: <1266252366.20588.0.camel@workshop> <4B798936.10703@holdenweb.com> Message-ID: So, who do I need to ask to process the merge? -- anatoly t. On Mon, Feb 15, 2010 at 7:49 PM, Steve Holden wrote: > Michael R. Bernstein wrote: >> On Mon, 2010-02-15 at 16:40 +0200, anatoly techtonik wrote: >>> I'd like to propose joining pydotorg-www and pydotorg-redesign in one >>> pydotorg mailing list to reduce clutter and provide single point of >>> collaboration to improve the web site. Concentrating efforts in one >>> place helps to keep people focused and increased activity attracts new >>> contributors. >> >> +1 > > Yes, why have two mailing lists that nothing happens on when you could > just have one? > > regards > ?Steve > -- > Steve Holden ? ? ? ? ? +1 571 484 6266 ? +1 800 494 3119 > PyCon is coming! Atlanta, Feb 2010 ?http://us.pycon.org/ > Holden Web LLC ? ? ? ? ? ? ? ? http://www.holdenweb.com/ > UPCOMING EVENTS: ? ? ? ?http://holdenweb.eventbrite.com/ > _______________________________________________ > Pydotorg-redesign mailing list > Pydotorg-redesign at python.org > http://mail.python.org/mailman/listinfo/pydotorg-redesign > From techtonik at gmail.com Tue Apr 6 15:10:46 2010 From: techtonik at gmail.com (anatoly techtonik) Date: Tue, 6 Apr 2010 16:10:46 +0300 Subject: [Pydotorg-www] [Pydotorg-redesign] Join pydotorg lists In-Reply-To: <4BBB216A.5040106@holdenweb.com> References: <1266252366.20588.0.camel@workshop> <4B798936.10703@holdenweb.com> <4BBB216A.5040106@holdenweb.com> Message-ID: On Tue, Apr 6, 2010 at 2:56 PM, Steve Holden wrote: > > I suspect that postmaster at python.org would need to be involved in the > mechanics, though I have no idea whether there is any established > procedure for such an operation. Added to CC. > I doubt it's necessary to merge content given the total archive size of > pydotorg-www is less than 50 kB. Wouldn't it just be easier to post a > message on that list telling people to subscribe instead to > pydotor-redesign (whose archives are under 200 kB), and then close > pydotorg-www down? > > You said in your original message: > >> I'd like to propose joining pydotorg-www and pydotorg-redesign in one >> pydotorg mailing list to reduce clutter and provide single point of >> collaboration to improve the web site. Concentrating efforts in one >> place helps to keep people focused and increased activity attracts new >> contributors. > > Looking at the archives of both lists: > > ?http://mail.python.org/pipermail/pydotorg-redesign/ > ?http://mail.python.org/pipermail/pydotorg-www/ > > it seems the lack of interest in both of these newsgroups might make > simply closing one or both down the most practical approach. Or do you > have a specific purpose in mind after a merge? I think shutting them both down is the best approach, but this requires pydotorg list to became public. Is there any reason why pydotorg can't be made public taking into account that security issues can be reported directly (or discussed in private webmaster at python.org) and SVN is public already? > In the past there has been a sort of "let's start a mailing list" > disease that people have used to persuade themselves that something will > happen. ?Sadly experience proves that this isn't often the case, and the > result is yet another moribund mailing list that doesn't result in any > action. That's logical. The activity should be focused, not scattered. > Since there has been no response to your mail from anyone but Michael > and I (unless I have missed messages) I would suggest that both lists > are already pushing up the daisies. > > I am, however, extremely interested in harnessing the energies of anyone > who is keen enough to take any sort of action. To that end I am making > Rich Leland, who has recently undertaken to look at the web site with a > view to modernization of both content management and design, aware of > this thread. He may contact you about this (but I am not committing him > to any specific action). That's nice. I would start with focusing our efforts on making python.org site contributions more open. The top thing in my pydotorg next-things-to-be-done is merging the mailing lists. The proposed plan for it is: 1. open pydotorg to be public 2. open pydotorg-commits to be public - SVN repository is public anyway 3. close public pydotorg-redesign and pydotorg-www 4. publish an announcement to closed lists that all discussions now take place in pydotorg 5. update mailman list description pages 6. move subscribers from old mailing lists to pydotorg 7. update http://www.python.org/dev/pydotorg/, http://www.python.org/dev/pydotorg/website/, http://www.python.org/about/website and the link "Help Maintain Website" Right now I do not have privileges to carry any of these tasks. Who is able to do this? -- anatoly t. From techtonik at gmail.com Fri Apr 16 10:07:09 2010 From: techtonik at gmail.com (anatoly techtonik) Date: Fri, 16 Apr 2010 11:07:09 +0300 Subject: [pydotorg-www] Mercurial mirror Message-ID: Is there a Mercurial mirror of 'pydotorg' inventory? Any plans to create one? Any proposal about possible workflow? -- anatoly t. From benjamin at python.org Fri Apr 16 22:37:19 2010 From: benjamin at python.org (Benjamin Peterson) Date: Fri, 16 Apr 2010 15:37:19 -0500 Subject: [pydotorg-www] Mercurial mirror In-Reply-To: References: Message-ID: 2010/4/16 anatoly techtonik : > Is there a Mercurial mirror of 'pydotorg' inventory? > Any plans to create one? > Any proposal about possible workflow? No, no, and no. -- Regards, Benjamin From techtonik at gmail.com Sat Apr 17 11:12:59 2010 From: techtonik at gmail.com (anatoly techtonik) Date: Sat, 17 Apr 2010 12:12:59 +0300 Subject: [pydotorg-www] [Pydotorg] Mercurial mirror In-Reply-To: <4BC8E9C8.4030001@python.org> References: <4BC8E5FC.3000600@python.org> <4BC8E9C8.4030001@python.org> Message-ID: CCed to pydotorg public list if you don't mind. On Sat, Apr 17, 2010 at 1:50 AM, Georg Brandl wrote: >>> >>>> Is there a Mercurial mirror of 'pydotorg' inventory? >>>> Any plans to create one? >>>> Any proposal about possible workflow? >>>> >>> No, no, and no. >> >> It would be nice to switch to Mercurial though. :-) > > While it certainly doesn't hurt, I don't see the point. ?People will > hardly start their own forks, and branch like crazy, or put that on > bitbucket. (Would we even want them to?) The main idea is to allow people publish patch queues for review if they do not have access to repository. Mercurial patch queues has 1:1 relations to Moderation Queue concept [1] that allows to review and commit edits from people who do not have access to edit content themselves. More than that - Mercurial can provide more than 70% of backend functionality. It already allows importing patches, emailing them, publishing patches in public repositories and sharing then between repositories. Mercurial patch queues concept is awesome, but may be not intuitive (i.e. user friendly) sometimes. Plain commits into separate repositories may do a better job, but stil 30% of backend work is still required. But thanks to Mercurial plugin concepts and Python extensibility the development of other 30% could be a snap. One major advantage of Mercurial over SVN for the community is that commits bear names of authors and committers separately providing attribution that is vital for every healthy collaboration. Speacking about attribution, even though Mercurial has this feature, Python community has much to learn from Subversion - I advise everybody to look at Crediting section in Subversion Community Guide [2]. The fact that contribulyzer.py [3] is written in Python leads me to rather philosophical question why contribulyzer.py was not (or could not be) born in Python community? P.S. Feel free to change thread subject line as needed. [1] http://code.google.com/p/rainforce/wiki/ModerationQueue [2] http://subversion.apache.org/docs/community-guide/conventions.html#crediting [3] http://www.red-bean.com/svnproject/contribulyzer/ -- anatoly t. From martin at v.loewis.de Sat Apr 17 13:12:07 2010 From: martin at v.loewis.de (=?UTF-8?B?Ik1hcnRpbiB2LiBMw7Z3aXMi?=) Date: Sat, 17 Apr 2010 13:12:07 +0200 Subject: [pydotorg-www] [Pydotorg] Mercurial mirror In-Reply-To: References: <4BC8E5FC.3000600@python.org> <4BC8E9C8.4030001@python.org> Message-ID: <4BC99787.7060203@v.loewis.de> > The main idea is to allow people publish patch queues for review if > they do not have access to repository. That can be *easily* done with subversion also. PLEASE wait with such proposals until the actual need occurs: WHO wants to publish patches, and what patches specifically? > More than that - Mercurial can provide more than 70% of backend > functionality. It already allows importing patches, emailing them, > publishing patches in public repositories and sharing then between > repositories. Please drop it. The backend functionality is entirely elsewhere here: it's the web server delivering the pages. You are focused too much on technology, and too little on actual contribution. Please stop making requests for changes until you have ACTUALLY contributed something useful. > The fact that contribulyzer.py [3] is written in Python leads me to > rather philosophical question why contribulyzer.py was not (or could > not be) born in Python community? If you dislike this community too much, maybe you should look for a different one? Regards, Martin From techtonik at gmail.com Sun Apr 18 09:42:23 2010 From: techtonik at gmail.com (anatoly techtonik) Date: Sun, 18 Apr 2010 10:42:23 +0300 Subject: [pydotorg-www] [Pydotorg] Mercurial mirror In-Reply-To: <4BC99787.7060203@v.loewis.de> References: <4BC8E5FC.3000600@python.org> <4BC8E9C8.4030001@python.org> <4BC99787.7060203@v.loewis.de> Message-ID: On Sat, Apr 17, 2010 at 2:12 PM, "Martin v. L?wis" wrote: >> The main idea is to allow people publish patch queues for review if >> they do not have access to repository. > > That can be *easily* done with subversion also. PLEASE wait with such > proposals until the actual need occurs: WHO wants to publish patches, > and what patches specifically? I have no idea how public patch queue management can *easily* be done with Subversion. I am sure everybody out there would appreciate a short proof-of-concept on how do you manage patches for projects for which you do not have commit privileges. This will go straight into community guide if we'll have one. Who knows - maybe after your tutorial people will find the contribution process less cumbersome and we will see a number of great patches popping up. About WHO. I am, and those people who agree that maintenance of various products that constitute Python services, their upgrade and extension would be much better if we maintain those customizations as series of patches to original upstream version. This is a way how Debian, FreeBSD and other projects make packages compatible independently of the upstream. WHAT patches. First of all note that it is patch queue - one patch depends on the other and they may even form directed acyclic graph (DAG). Currently I want to see modifications to our Wiki in clear form to be able to upgrade it and check that nothing is broken. I hope I am not alone. There are issues with spam constantly creeping in in hideous way, pages that can not be deleted, etc. Reread MoinMoin log for all these years to compare which commits are missing is physically impossible. Patch queue can be applied to a newer version of MoinMoin and you can see which patches are integrated upsteam, which fail and need to be refreshed, so the process of upgrade will be much easier. People may also maintain their *public* branches to *collaborate* on new customizations and propose them once these customizations are polished. Even if customization is not complete, everybody can pick up patch queue from the state it was left and continue. >> More than that - Mercurial can provide more than 70% of backend >> functionality. It already allows importing patches, emailing them, >> publishing patches in public repositories and sharing then between >> repositories. > > Please drop it. The backend functionality is entirely elsewhere here: > it's the web server delivering the pages. You are focused too much on > technology, and too little on actual contribution. Please stop making > requests for changes until you have ACTUALLY contributed something useful. "Please wait", "please drop", "please stop", ... What is next? Martin, I really value your efforts in maintaining python.org and contributing to various pieces of software on backend. You are doing a lot of work, but this doesn't mean you do not need help. For me managing all that would require an enormous amount of time and knowledge. I can't see how to follow development process with time constraints I have. I see the solution in patch queues. You have other way, and I ask if you don't mind sharing your way of doing things? You are absolutely right when saying that I focused on technology or tools to be exact. Proper tools save time and make routine and mundane tasks as easy as playing solitaire, so even secretaries are addicted. Right now nobody knows how to properly add new useful dynamic services to python.org in maintainable, scalable and extensible way. I've already said that static python.org website in 21 century is a shame, some people took this too personal, but I won't change my opinion. I won't apologize either, because I don't blame these people who probably love this site too much. What can I ACTUALLY contribute? I should ask you - how can I contribute, and what should I do to actually contribute? To make it a constructive discussion let's record your answers in Wiki FAQ for potential contributors. >> The fact that contribulyzer.py [3] is written in Python leads me to >> rather philosophical question why contribulyzer.py was not (or could >> not be) born in Python community? > > If you dislike this community too much, maybe you should look for a > different one? Oh, the missing "Please leave". =) Philosophical context assumes a neutral position towards the fact leaving people think about true reasons themselves. Some may think that people in Python Community are mostly developers, who are overwhelmed with daily tasks, fixing things, reviewing patches, triaging tracker issues, answering to emails of various OCD junkies like me, and developers just do not have time to care about new or potential contributors. Some may think that all developers, who might care and change things are already in ACKS, so they are already satisfied with their proper attribution and do not feel motivated to change things. Your reaction is to protect the community you're comfortable with, so you think that it is a good feature and we could do this. However, you say that I dislike the community. That's WRONG. I dislike attitude of some people, but to hate the community I need to exercise more in dark side of the Force. That I really dislike is the fact that there is no movement, and I am trying to change this by attracting more people, discussing problems to create an environment to make contributions easier and more fun. But if you'll directly ask me to shut up and go away I'd probably couldn't resist. =) -- anatoly t. From martin at v.loewis.de Sun Apr 18 10:21:46 2010 From: martin at v.loewis.de (=?UTF-8?B?Ik1hcnRpbiB2LiBMw7Z3aXMi?=) Date: Sun, 18 Apr 2010 10:21:46 +0200 Subject: [pydotorg-www] [Pydotorg] Mercurial mirror In-Reply-To: References: <4BC8E5FC.3000600@python.org> <4BC8E9C8.4030001@python.org> <4BC99787.7060203@v.loewis.de> Message-ID: <4BCAC11A.4020305@v.loewis.de> >>> The main idea is to allow people publish patch queues for review if >>> they do not have access to repository. >> That can be *easily* done with subversion also. PLEASE wait with such >> proposals until the actual need occurs: WHO wants to publish patches, >> and what patches specifically? > > I have no idea how public patch queue management can *easily* be done > with Subversion. I am sure everybody out there would appreciate a > short proof-of-concept on how do you manage patches for projects for > which you do not have commit privileges. People don't need patch queues to contribute - mere patches are sufficient. Perform a regular checkout, edit the changes you want to make, use "svn diff" to produce a patch, and mail it to the mailing list (or whatever patch submission system the project uses). This has been working forever. > About WHO. I am, and those people who agree that maintenance of > various products that constitute Python services, their upgrade and > extension would be much better if we maintain those customizations as > series of patches to original upstream version. This is a way how > Debian, FreeBSD and other projects make packages compatible > independently of the upstream. Just post your patches here. > WHAT patches. First of all note that it is patch queue - one patch > depends on the other and they may even form directed acyclic graph > (DAG). Currently I want to see modifications to our Wiki in clear form > to be able to upgrade it and check that nothing is broken. I hope I am > not alone. There are issues with spam constantly creeping in in > hideous way, pages that can not be deleted, etc. Reread MoinMoin log > for all these years to compare which commits are missing is physically > impossible. I don't understand. What logs are you talking about that you have to read? The wiki is edited by end users over the Web, I see no use for Mercurial (or any version control system) here. > Patch queue can be applied to a newer version of MoinMoin and you can > see which patches are integrated upsteam, which fail and need to be > refreshed, so the process of upgrade will be much easier. Or are you talking about the source code of MoinMoin? We are using the Debian packages, and upgrading them (whenever a new Debian release is made) works fine. > "Please wait", "please drop", "please stop", ... What is next? Martin, > I really value your efforts in maintaining python.org and contributing > to various pieces of software on backend. You are doing a lot of work, > but this doesn't mean you do not need help. The problem is that you are not helping *at all*. Instead of producing less work for me (and everybody else), you produce *more work*. Please pick an aspect where you *can* contribute, rather than CONSTANTLY picking things where you cannot contribute, and demanding that these things change. Also, start accepting that things are done differently from what you would expect. Learn how things are done, and truly consider adjusting to that. Propose changes to processes only if you can carry out those changes mostly on your own, without involving five people to do the change for you. > For me managing all that > would require an enormous amount of time and knowledge. I can't see > how to follow development process with time constraints I have. I see > the solution in patch queues. You have other way, and I ask if you > don't mind sharing your way of doing things? Depends on the kind of thing in question. One principle is to always use operating system packages for software installation (where available), rather than installing software for yourself. Some problems then simply go away. > What can I ACTUALLY contribute? I should ask you - how can I > contribute, and what should I do to actually contribute? To make it a > constructive discussion let's record your answers in Wiki FAQ for > potential contributors. It now depends on what system you want to contribute to, and I can only speak for the things I maintain. For PyPI and roundup, pick things from the bug tracker and post patches that solve these problems. I thought you were interested in changing the content of some of the web pages. So start posting patches for these changes. > That I really dislike is the fact that there is no > movement, and I am trying to change this by attracting more people, > discussing problems to create an environment to make contributions > easier and more fun. But if you'll directly ask me to shut up and go > away I'd probably couldn't resist. =) I'm asking you to stop making these demanding posts. Don't tell us what is wrong (in your opinion), but actually contribute to these things. Choose things that you can do yourself, and be creative in finding ways of doing them yourself even without the processes being the way you think they should be. Regards, Martin From manlio_perillo at libero.it Sun Apr 18 10:49:49 2010 From: manlio_perillo at libero.it (Manlio Perillo) Date: Sun, 18 Apr 2010 10:49:49 +0200 Subject: [pydotorg-www] Mercurial mirror In-Reply-To: References: Message-ID: <4BCAC7AD.2080509@libero.it> anatoly techtonik ha scritto: > Is there a Mercurial mirror of 'pydotorg' inventory? > Any plans to create one? > Any proposal about possible workflow? You may just create an unofficial Mercurial mirror. I too, find that a distribuited versioning system is more friendly to user contribution, but changing the primary repository of a project requires a lot of work. Unofficial mirror is what you want. Regards Manlio From georg at python.org Sun Apr 18 11:08:05 2010 From: georg at python.org (Georg Brandl) Date: Sun, 18 Apr 2010 11:08:05 +0200 Subject: [pydotorg-www] [Pydotorg] Mercurial mirror In-Reply-To: <4BCAC11A.4020305@v.loewis.de> References: <4BC8E5FC.3000600@python.org> <4BC8E9C8.4030001@python.org> <4BC99787.7060203@v.loewis.de> <4BCAC11A.4020305@v.loewis.de> Message-ID: <4BCACBF5.6080805@python.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Am 18.04.2010 10:21, schrieb "Martin v. L?wis": >> Patch queue can be applied to a newer version of MoinMoin and you can >> see which patches are integrated upsteam, which fail and need to be >> refreshed, so the process of upgrade will be much easier. > > Or are you talking about the source code of MoinMoin? We are using the > Debian packages, and upgrading them (whenever a new Debian release is > made) works fine. I do think that a patch queue is an easier way to maintain a set of changes to the original code base, as we do at least for Roundup (don't know about MoinMoin). However, I don't do the maintenance, so I won't try to prescribe a workflow to the people doing the actual work. >> "Please wait", "please drop", "please stop", ... What is next? Martin, >> I really value your efforts in maintaining python.org and contributing >> to various pieces of software on backend. You are doing a lot of work, >> but this doesn't mean you do not need help. > > The problem is that you are not helping *at all*. Instead of producing > less work for me (and everybody else), you produce *more work*. > > Please pick an aspect where you *can* contribute, rather than CONSTANTLY > picking things where you cannot contribute, and demanding that these > things change. > > Also, start accepting that things are done differently from what you > would expect. Learn how things are done, and truly consider adjusting to > that. Propose changes to processes only if you can carry out those > changes mostly on your own, without involving five people to do the > change for you. Big +1. This should be framed and put somewhere in the contribution guide. Georg -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) iEYEARECAAYFAkvKy/QACgkQN9GcIYhpnLA/EwCfX10fYgrZSFz4NOpdmwAzLKCM GeAAn2T1Ydk/+HzfqnXexr64QLgYYsFE =nwWL -----END PGP SIGNATURE----- From amk at amk.ca Sun Apr 18 21:49:09 2010 From: amk at amk.ca (A.M. Kuchling) Date: Sun, 18 Apr 2010 15:49:09 -0400 Subject: [pydotorg-www] [Pydotorg] Mercurial mirror In-Reply-To: References: <4BC8E5FC.3000600@python.org> <4BC8E9C8.4030001@python.org> <4BC99787.7060203@v.loewis.de> Message-ID: <20100418194909.GA5317@andrew-kuchlings-macbook.local> > ... I am trying to change this by attracting more people, > discussing problems to create an environment to make contributions > easier and more fun. There's some history in the Python community that makes some of us doubtful of technical fixes to increase contributions. For a long time the documentation was written using LaTeX, and people kept saying that LaTeX was a barrier to contributions. Eventually Georg picked up the task, wrote Sphinx, and did the work to convert to that format. Sphinx has certainly been a success -- it's more maintainable, produces better HTML output, and has been adopted by dozens of other projects (I think 2-3 projects picked up the LaTeX toolchain) -- but I don't think it's led to a notable increase in the number of casual contributors or drive-by patches to the documentation. Therefore, I'm pretty cynical about attracting more contributions by reorganizing the toolchain; Subversion vs. Mercurial seem largely the same in the level of dedication required (high). It seems better to pick up and implement the idea of PHP-style commenting on the docs, or rewrite the home page to be more inviting, or any of a number of other tasks. --amk From amk at amk.ca Sun Apr 18 22:38:33 2010 From: amk at amk.ca (A.M. Kuchling) Date: Sun, 18 Apr 2010 16:38:33 -0400 Subject: [pydotorg-www] Mailing list memberships moved Message-ID: <20100418203833.GA5449@andrew-kuchlings-macbook.local> I've now carried out the move from pydotorg to pydotorg-www. pydotorg now has 21 subscribers, the people listed in my e-mail of April 13th. These addresses have also been subscribed to pydotorg-www; if you don't want to be on the -www mailing list, please let me know, or you can unsubscribe through the web at . pydotorg-www now has 119 subscribers. Followup-to has been set to that list. --amk From aahz at pythoncraft.com Mon Apr 19 03:50:08 2010 From: aahz at pythoncraft.com (Aahz) Date: Sun, 18 Apr 2010 18:50:08 -0700 Subject: [pydotorg-www] [Pydotorg] Mailing list memberships moved In-Reply-To: <20100418203833.GA5449@andrew-kuchlings-macbook.local> References: <20100418203833.GA5449@andrew-kuchlings-macbook.local> Message-ID: <20100419015008.GB26737@panix.com> On Sun, Apr 18, 2010, A.M. Kuchling wrote: > > pydotorg-www now has 119 subscribers. Followup-to has been set to > that list. Thanks for your work! -- Aahz (aahz at pythoncraft.com) <*> http://www.pythoncraft.com/ "It is easier to optimize correct code than to correct optimized code." --Bill Harlan From rich at richleland.com Mon Apr 19 15:28:55 2010 From: rich at richleland.com (Richard Leland) Date: Mon, 19 Apr 2010 09:28:55 -0400 Subject: [pydotorg-www] project plan Message-ID: Hi all - as promised in the pydotorg list I've posted some documentation for the project plan for python.org. The current goal is to generate a proposal for the PSF board for enhancements to the various python.org sites. In these docs I've outlined a plan that includes goals and research needed. It's too early to think about implementation at this point and the technical details would impede forward progress. Throughout the project I'll need a combination of the guidance of the current pydotorg volunteers, feedback from the community, and patience as I familiarize myself with python.org ecosystem. A few guidelines I am personally going to try to adhere to: 1. Draw from the experience, history and hard work of the pydotorg admins/team 2. Don't make anything more difficult to use/update 3. Don't try to do everything all at once, start small, take steps 4. Keep the process as open as possible 5. Don't get caught up in details that keep the project from moving forward 6. Remember that we are all volunteers I'd like to think of this as a fluid project but I need to tie down some dates for getting the various aspects of the research phase done. I'll be outlining that timeline in the docs in the next week or so. In the meantime please take a look at the docs. I'll be updating them as the project moves along. http://richleland.bitbucket.org/pydotorg-pm/ Feel free to contact me at any time. I'm looking forward to helping out. - Rich Richard Leland rich at richleland.com 240-242-7424 -------------- next part -------------- An HTML attachment was scrubbed... URL: From amk at amk.ca Mon Apr 19 16:41:32 2010 From: amk at amk.ca (A.M. Kuchling) Date: Mon, 19 Apr 2010 10:41:32 -0400 Subject: [pydotorg-www] project plan In-Reply-To: References: Message-ID: <20100419144132.GA4164@amk-desktop.matrixgroup.net> On Mon, Apr 19, 2010 at 09:28:55AM -0400, Richard Leland wrote: > In these > docs I've outlined a plan that includes goals and research needed. A suggested additional goal: security, especially of the Python source code and the tarballs on PyPI. https://blogs.apache.org/infra/entry/apache_org_04_09_2010 describes a recent attack on apache.org in detail. The attack seems to have been targeted at ASF specifically, though the motivation is unknown (trojaning code releases or SVN repositories? getting passwords of developer who work for companies of interest). Considering the number of people who complain that when PyPI is down, they can't build things, I think a fair number of build/installation processes download things from PyPI and install them, so we could find PSF servers the target of a similar attack. --amk From martin at v.loewis.de Mon Apr 19 22:51:36 2010 From: martin at v.loewis.de (=?ISO-8859-1?Q?=22Martin_v=2E_L=F6wis=22?=) Date: Mon, 19 Apr 2010 22:51:36 +0200 Subject: [pydotorg-www] project plan In-Reply-To: <20100419144132.GA4164@amk-desktop.matrixgroup.net> References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> Message-ID: <4BCCC258.9080307@v.loewis.de> > https://blogs.apache.org/infra/entry/apache_org_04_09_2010 describes a > recent attack on apache.org in detail. The attack seems to have been > targeted at ASF specifically, though the motivation is unknown > (trojaning code releases or SVN repositories? getting passwords of > developer who work for companies of interest). Considering the number > of people who complain that when PyPI is down, they can't build > things, I think a fair number of build/installation processes download > things from PyPI and install them, so we could find PSF servers the > target of a similar attack. I don't think this should primarily belong to Richard's plan. Instead, if you have a specific idea of how this can be solved, please post it to catalog-sig. About the only approach I can think of is PGP signing by the actual package authors, which is already supported in PyPI (but not in setuptools/distribute, AFAIK). We could strengthen this with our own web of trust within the community of PyPI users, which would take some time to setup. We could also encourage the use of CACert user certificates for code signing in stead/in addition. Regards, Martin From techtonik at gmail.com Mon Apr 19 23:24:38 2010 From: techtonik at gmail.com (anatoly techtonik) Date: Tue, 20 Apr 2010 00:24:38 +0300 Subject: [pydotorg-www] project plan In-Reply-To: <4BCCC258.9080307@v.loewis.de> References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> <4BCCC258.9080307@v.loewis.de> Message-ID: On Mon, Apr 19, 2010 at 11:51 PM, "Martin v. L?wis" wrote: > > About the only approach I can think of is PGP signing by the actual > package authors, which is already supported in PyPI (but not in > setuptools/distribute, AFAIK). We could strengthen this with our own web > of trust within the community of PyPI users, which would take > some time to setup. We could also encourage the use of CACert user > certificates for code signing in stead/in addition. IIRC the biggest hole with PyPI and setuptools for now is that it doesn't allow to execute "setup.py bdist register upload" without saving password in clear form on user system. CCed to catalog-sig. Let's see if it will bounce. -- anatoly t. From mfoord at python.org Mon Apr 19 23:49:12 2010 From: mfoord at python.org (Michael Foord) Date: Mon, 19 Apr 2010 23:49:12 +0200 Subject: [pydotorg-www] project plan In-Reply-To: References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> <4BCCC258.9080307@v.loewis.de> Message-ID: <4BCCCFD8.3090002@python.org> On 19/04/2010 23:24, anatoly techtonik wrote: > On Mon, Apr 19, 2010 at 11:51 PM, "Martin v. L?wis" wrote: > >> About the only approach I can think of is PGP signing by the actual >> package authors, which is already supported in PyPI (but not in >> setuptools/distribute, AFAIK). We could strengthen this with our own web >> of trust within the community of PyPI users, which would take >> some time to setup. We could also encourage the use of CACert user >> certificates for code signing in stead/in addition. >> > IIRC the biggest hole with PyPI and setuptools for now is that it > doesn't allow to execute "setup.py bdist register upload" without > saving password in clear form on user system. > Tarek Ziade wants to integrate the keyring project (using your system keyring) with distutils: http://pypi.python.org/pypi/keyring This project is the result of last year's google summer of code. Not sure what the status of the integration is but I expect it will be part of disutils2. > CCed to catalog-sig. Let's see if it will bounce. > My guess is that you'll need to be subscribed to post to that list... Michael Foord -- http://www.ironpythoninaction.com/ From mfoord at python.org Mon Apr 19 23:51:20 2010 From: mfoord at python.org (Michael Foord) Date: Mon, 19 Apr 2010 23:51:20 +0200 Subject: [pydotorg-www] project plan In-Reply-To: <4BCCCFD8.3090002@python.org> References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> <4BCCC258.9080307@v.loewis.de> <4BCCCFD8.3090002@python.org> Message-ID: <4BCCD058.5050509@python.org> On 19/04/2010 23:49, Michael Foord wrote: > On 19/04/2010 23:24, anatoly techtonik wrote: >> On Mon, Apr 19, 2010 at 11:51 PM, "Martin v. >> L?wis" wrote: >>> About the only approach I can think of is PGP signing by the actual >>> package authors, which is already supported in PyPI (but not in >>> setuptools/distribute, AFAIK). We could strengthen this with our own >>> web >>> of trust within the community of PyPI users, which would take >>> some time to setup. We could also encourage the use of CACert user >>> certificates for code signing in stead/in addition. >> IIRC the biggest hole with PyPI and setuptools for now is that it >> doesn't allow to execute "setup.py bdist register upload" without >> saving password in clear form on user system. > > Tarek Ziade wants to integrate the keyring project (using your system > keyring) with distutils: > > http://pypi.python.org/pypi/keyring > > This project is the result of last year's google summer of code. Not > sure what the status of the integration is but I expect it will be > part of disutils2. > None of this has anything to do with the proposed revamp of python.org of course. :-) All the best, Michael Foord >> CCed to catalog-sig. Let's see if it will bounce. > > My guess is that you'll need to be subscribed to post to that list... > > Michael Foord > -- http://www.ironpythoninaction.com/ From martin at v.loewis.de Mon Apr 19 23:55:35 2010 From: martin at v.loewis.de (=?UTF-8?B?Ik1hcnRpbiB2LiBMw7Z3aXMi?=) Date: Mon, 19 Apr 2010 23:55:35 +0200 Subject: [pydotorg-www] project plan In-Reply-To: <4BCCCFD8.3090002@python.org> References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> <4BCCC258.9080307@v.loewis.de> <4BCCCFD8.3090002@python.org> Message-ID: <4BCCD157.1070604@v.loewis.de> >> IIRC the biggest hole with PyPI and setuptools for now is that it >> doesn't allow to execute "setup.py bdist register upload" without >> saving password in clear form on user system. >> > > Tarek Ziade wants to integrate the keyring project (using your system > keyring) with distutils: > > http://pypi.python.org/pypi/keyring > > This project is the result of last year's google summer of code. Not > sure what the status of the integration is but I expect it will be part > of disutils2. For a number of months now, PyPI supports registration and upload over SSH, allowing any of the ssh-agent implementations to be used. Unfortunately, nobody has tought distribute to use this protocol yet. Regards, Martin From martin at v.loewis.de Mon Apr 19 23:57:29 2010 From: martin at v.loewis.de (=?UTF-8?B?Ik1hcnRpbiB2LiBMw7Z3aXMi?=) Date: Mon, 19 Apr 2010 23:57:29 +0200 Subject: [pydotorg-www] project plan In-Reply-To: <4BCCD058.5050509@python.org> References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> <4BCCC258.9080307@v.loewis.de> <4BCCCFD8.3090002@python.org> <4BCCD058.5050509@python.org> Message-ID: <4BCCD1C9.8030702@v.loewis.de> > None of this has anything to do with the proposed revamp of python.org > of course. :-) In a sense, it does: AMK suggested that security should be part of the requirements for a revamp, with a view on distutils/setuptools, which should only download "trusted" code. So in this respect, the revamp would involve changes to these tools, as well (if this issue is actually resolved as part of the revamp). Regards, Martin From rich at richleland.com Tue Apr 20 00:05:18 2010 From: rich at richleland.com (Richard Leland) Date: Mon, 19 Apr 2010 18:05:18 -0400 Subject: [pydotorg-www] project plan In-Reply-To: <4BCCD1C9.8030702@v.loewis.de> References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> <4BCCC258.9080307@v.loewis.de> <4BCCCFD8.3090002@python.org> <4BCCD058.5050509@python.org> <4BCCD1C9.8030702@v.loewis.de> Message-ID: Good to know about this - seems like if we're going to put the effort into figuring out what the revamp entails we should add this to the list of goals. Could be a good opportunity to look at other parts of python.org(besides PyPI) to see if there are any other security issues we should be thinking about as well. - Rich Richard Leland rich at richleland.com 240-242-7424 On Mon, Apr 19, 2010 at 5:57 PM, "Martin v. L?wis" wrote: > > None of this has anything to do with the proposed revamp of python.org > > of course. :-) > > In a sense, it does: AMK suggested that security should be part of the > requirements for a revamp, with a view on distutils/setuptools, which > should only download "trusted" code. So in this respect, the revamp > would involve changes to these tools, as well (if this issue is actually > resolved as part of the revamp). > > Regards, > Martin > _______________________________________________ > pydotorg-www mailing list > pydotorg-www at python.org > http://mail.python.org/mailman/listinfo/pydotorg-www > -------------- next part -------------- An HTML attachment was scrubbed... URL: From rich at richleland.com Tue Apr 20 00:17:44 2010 From: rich at richleland.com (Richard Leland) Date: Mon, 19 Apr 2010 18:17:44 -0400 Subject: [pydotorg-www] project plan In-Reply-To: <4BCC688D.70507@wingware.com> References: <4BCC688D.70507@wingware.com> Message-ID: Hi Stephan - definitely useful! I couldn't agree more that the presentation is extremely important. The goals in the docs aren't in any specific order. Right now they are all of equal weight. When we get to the implementation stage I think we'll probably have to prioritize and break the project into phases. Keep the feedback coming! - Rich Richard Leland rich at richleland.com 240-242-7424 On Mon, Apr 19, 2010 at 10:28 AM, Stephan Deibel wrote: > Richard Leland wrote: > >> Hi all - as promised in the pydotorg list I've posted some documentation >> for the project plan for python.org . The current goal >> is to generate a proposal for the PSF board for enhancements to the various >> python.org sites. In these docs I've outlined a plan >> that includes goals and research needed. It's too early to think about >> implementation at this point and the technical details would impede forward >> progress. >> >> Throughout the project I'll need a combination of the guidance of the >> current pydotorg volunteers, feedback from the community, and patience as I >> familiarize myself with python.org ecosystem. >> >> >> A few guidelines I am personally going to try to adhere to: >> >> 1. Draw from the experience, history and hard work of the pydotorg >> admins/team >> 2. Don't make anything more difficult to use/update >> 3. Don't try to do everything all at once, start small, take steps >> 4. Keep the process as open as possible >> 5. Don't get caught up in details that keep the project from moving >> forward >> 6. Remember that we are all volunteers >> >> I'd like to think of this as a fluid project but I need to tie down some >> dates for getting the various aspects of the research phase done. I'll be >> outlining that timeline in the docs in the next week or so. >> >> In the meantime please take a look at the docs. I'll be updating them as >> the project moves along. >> http://richleland.bitbucket.org/pydotorg-pm/ >> > > Thanks for working on this! Some comments: > > Perhaps move "Presentation" to first in the list of priorities? The other > stuff is important too > but the hard work of rethinking and reorganizing content, making the site > better at drawing > in new users, and updating the look of the site shouldn't be last on the > list. > > A good example of the problem is http://python.org/community/ where there > are two > huge lists, one as sub-menu and another in the body. > http://python.org/psf/ is another > example. > > It's possible some of the clutter should have its own distinct site (like > psf.python.org > really could stand on its own, with a Donate link from every other > python.org site). When you think about user intent/goal, they are likely > either looking for downloads, > or docs, or info on getting involved ("community") or maybe about the PSF > but > they don't really need all of those at once and they don't need to see all > the random > stuff in these long lists when the most common actions are downloading, > looking > up docs, or perhaps entering the site as a prospective new user (which the > site > currently does not support well). The more detailed random stuff in those > lists could > be moved down a level somehow so it's there but not immediately in the face > of > someone going to a top-level page, or at least have the top of the page > have boxes > with the commonly sought-after actions/content. > > Then there is wiki.python.org, which in spite of (or perhaps because of) > low barrier to > entry for making changes is a mess also and it's confusing having some > content on > python.org and other on wiki.python.org. That shouldn't be forgotten in > trying to > reorganize content. Perhaps wiki.python.org is the place to push all the > random > stuff in the long lists. Or perhaps the goal is to largely replace it, if > the new system > allows an easier way to make edits to the main site(s). In that case, it > might just > contain the more esoteric stuff where the wiki approach makes sense and > wiki mess > isn't a big deal. > > Anyway, I hope this is useful. Good luck with it! > > - Stephan > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From paul at boddie.org.uk Tue Apr 20 00:50:55 2010 From: paul at boddie.org.uk (Paul Boddie) Date: Tue, 20 Apr 2010 00:50:55 +0200 Subject: [pydotorg-www] project plan In-Reply-To: References: <4BCC688D.70507@wingware.com> Message-ID: <201004200050.56428.paul@boddie.org.uk> On Tuesday 20 April 2010 00:17:44 Richard Leland wrote: > Hi Stephan - definitely useful! I couldn't agree more that the presentation > is extremely important. The goals in the docs aren't in any specific order. > Right now they are all of equal weight. When we get to the implementation > stage I think we'll probably have to prioritize and break the project into > phases. > > Keep the feedback coming! Take a look at the following document: http://wiki.python.org/moin/MarketingPython It's a bit verbose, but it covers quite a few reflections I had after the last python.org redesign. Paul From martin at v.loewis.de Tue Apr 20 07:53:05 2010 From: martin at v.loewis.de (=?ISO-8859-1?Q?=22Martin_v=2E_L=F6wis=22?=) Date: Tue, 20 Apr 2010 07:53:05 +0200 Subject: [pydotorg-www] project plan In-Reply-To: References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> <4BCCC258.9080307@v.loewis.de> <4BCCCFD8.3090002@python.org> <4BCCD058.5050509@python.org> <4BCCD1C9.8030702@v.loewis.de> Message-ID: <4BCD4141.7060008@v.loewis.de> Richard Leland wrote: > Good to know about this - seems like if we're going to put the effort > into figuring out what the revamp entails we should add this to the list > of goals. Could be a good opportunity to look at other parts of > python.org (besides PyPI) to see if there are any > other security issues we should be thinking about as well. For Python binaries proper: they are PGP-signed, so in principle, it would be possible for users to verify that they have not been tampered with - although I doubt many people actually run this check. For the MSI file, there is also a Verisign code signature on it, which Windows will check (although people might not worry if it stops being available after a hijack). Regards, Martin From amk at amk.ca Tue Apr 20 15:37:34 2010 From: amk at amk.ca (A.M. Kuchling) Date: Tue, 20 Apr 2010 09:37:34 -0400 Subject: [pydotorg-www] project plan In-Reply-To: <4BCCD1C9.8030702@v.loewis.de> References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> <4BCCC258.9080307@v.loewis.de> <4BCCCFD8.3090002@python.org> <4BCCD058.5050509@python.org> <4BCCD1C9.8030702@v.loewis.de> Message-ID: <20100420133734.GA3624@amk-desktop.matrixgroup.net> On Mon, Apr 19, 2010 at 11:57:29PM +0200, "Martin v. L?wis" wrote: > In a sense, it does: AMK suggested that security should be part of the > requirements for a revamp, with a view on distutils/setuptools, which > should only download "trusted" code. So in this respect, the revamp I'm also concerned about the SVN/Hg repository; if there was a break-in on dinsdale, how would we go about ensuring nothing had been slipped into the source code? GPG-signed tarballs are fairly easily checked, and Hg's use of hashing and distributed copies may make it easy to find changes there. I'd argue to have a separate download site that's very small and static, and lives on the same server as SVN/Hg. New dynamic stuff would be run on a different server, or in a VM, so that a break-in wouldn't risk the primary asset, the code. --amk From barry at python.org Tue Apr 20 16:16:30 2010 From: barry at python.org (Barry Warsaw) Date: Tue, 20 Apr 2010 10:16:30 -0400 Subject: [pydotorg-www] project plan In-Reply-To: <20100420133734.GA3624@amk-desktop.matrixgroup.net> References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> <4BCCC258.9080307@v.loewis.de> <4BCCCFD8.3090002@python.org> <4BCCD058.5050509@python.org> <4BCCD1C9.8030702@v.loewis.de> <20100420133734.GA3624@amk-desktop.matrixgroup.net> Message-ID: <20100420101630.5ead57da@heresy> On Apr 20, 2010, at 09:37 AM, A.M. Kuchling wrote: >I'm also concerned about the SVN/Hg repository; if there was a >break-in on dinsdale, how would we go about ensuring nothing had been >slipped into the source code? GPG-signed tarballs are fairly easily >checked, and Hg's use of hashing and distributed copies may make it >easy to find changes there. I don't know whether Mercurial has the same feature that Bazaar has, where each revision can be signed, locally, on commit. I always enable that for everything I do. I also don't know whether that can be enforced (e.g. ensure on the server that on push, every revision is signed by a known gpg key). That may not prevent corruption after a break-in, but it would make post-attack analysis much easier. -Barry -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 836 bytes Desc: not available URL: From dirkjan at ochtman.nl Tue Apr 20 16:29:03 2010 From: dirkjan at ochtman.nl (Dirkjan Ochtman) Date: Tue, 20 Apr 2010 16:29:03 +0200 Subject: [pydotorg-www] project plan In-Reply-To: <20100420101630.5ead57da@heresy> References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> <4BCCC258.9080307@v.loewis.de> <4BCCCFD8.3090002@python.org> <4BCCD058.5050509@python.org> <4BCCD1C9.8030702@v.loewis.de> <20100420133734.GA3624@amk-desktop.matrixgroup.net> <20100420101630.5ead57da@heresy> Message-ID: On Tue, Apr 20, 2010 at 16:16, Barry Warsaw wrote: > I don't know whether Mercurial has the same feature that Bazaar has, where > each revision can be signed, locally, on commit. ?I always enable that for There is an extension to help sign revisions on each commit, certainly. > everything I do. ?I also don't know whether that can be enforced (e.g. ensure > on the server that on push, every revision is signed by a known gpg key). > That may not prevent corruption after a break-in, but it would make > post-attack analysis much easier. Enforcing something in a hook wouldn't be very hard. Cheers, Dirkjan From martin at v.loewis.de Tue Apr 20 21:57:26 2010 From: martin at v.loewis.de (=?ISO-8859-1?Q?=22Martin_v=2E_L=F6wis=22?=) Date: Tue, 20 Apr 2010 21:57:26 +0200 Subject: [pydotorg-www] project plan In-Reply-To: <20100420133734.GA3624@amk-desktop.matrixgroup.net> References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> <4BCCC258.9080307@v.loewis.de> <4BCCCFD8.3090002@python.org> <4BCCD058.5050509@python.org> <4BCCD1C9.8030702@v.loewis.de> <20100420133734.GA3624@amk-desktop.matrixgroup.net> Message-ID: <4BCE0726.2070006@v.loewis.de> A.M. Kuchling wrote: > On Mon, Apr 19, 2010 at 11:57:29PM +0200, "Martin v. L?wis" wrote: >> In a sense, it does: AMK suggested that security should be part of the >> requirements for a revamp, with a view on distutils/setuptools, which >> should only download "trusted" code. So in this respect, the revamp > > I'm also concerned about the SVN/Hg repository; if there was a > break-in on dinsdale, how would we go about ensuring nothing had been > slipped into the source code? GPG-signed tarballs are fairly easily > checked, and Hg's use of hashing and distributed copies may make it > easy to find changes there. > > I'd argue to have a separate download site that's very small and > static, and lives on the same server as SVN/Hg. New dynamic stuff > would be run on a different server, or in a VM, so that a break-in > wouldn't risk the primary asset, the code. Ah, if that's your concern, and solution (i.e. avoid dynamic web sites on machines having critical code), then I'm with you. That's certainly desirable, and also within scope of this project. Regards, Martin From steve at holdenweb.com Tue Apr 20 22:12:52 2010 From: steve at holdenweb.com (Steve Holden) Date: Tue, 20 Apr 2010 16:12:52 -0400 Subject: [pydotorg-www] project plan In-Reply-To: <4BCE0726.2070006@v.loewis.de> References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> <4BCCC258.9080307@v.loewis.de> <4BCCCFD8.3090002@python.org> <4BCCD058.5050509@python.org> <4BCCD1C9.8030702@v.loewis.de> <20100420133734.GA3624@amk-desktop.matrixgroup.net> <4BCE0726.2070006@v.loewis.de> Message-ID: <4BCE0AC4.7080000@holdenweb.com> Martin v. L?wis wrote: > A.M. Kuchling wrote: >> On Mon, Apr 19, 2010 at 11:57:29PM +0200, "Martin v. L?wis" wrote: >>> In a sense, it does: AMK suggested that security should be part of the >>> requirements for a revamp, with a view on distutils/setuptools, which >>> should only download "trusted" code. So in this respect, the revamp >> I'm also concerned about the SVN/Hg repository; if there was a >> break-in on dinsdale, how would we go about ensuring nothing had been >> slipped into the source code? GPG-signed tarballs are fairly easily >> checked, and Hg's use of hashing and distributed copies may make it >> easy to find changes there. >> >> I'd argue to have a separate download site that's very small and >> static, and lives on the same server as SVN/Hg. New dynamic stuff >> would be run on a different server, or in a VM, so that a break-in >> wouldn't risk the primary asset, the code. > > Ah, if that's your concern, and solution (i.e. avoid dynamic web sites > on machines having critical code), then I'm with you. That's certainly > desirable, and also within scope of this project. I certainly can't see any really good reason why the distributions have to be inside a dynamic web site. And as far as the code goes, the more protection the better. regards Steve -- Steve Holden +1 571 484 6266 +1 800 494 3119 See PyCon Talks from Atlanta 2010 http://pycon.blip.tv/ Holden Web LLC http://www.holdenweb.com/ UPCOMING EVENTS: http://holdenweb.eventbrite.com/ From martin at v.loewis.de Tue Apr 20 22:26:00 2010 From: martin at v.loewis.de (=?ISO-8859-1?Q?=22Martin_v=2E_L=F6wis=22?=) Date: Tue, 20 Apr 2010 22:26:00 +0200 Subject: [pydotorg-www] project plan In-Reply-To: <4BCE0AC4.7080000@holdenweb.com> References: <20100419144132.GA4164@amk-desktop.matrixgroup.net> <4BCCC258.9080307@v.loewis.de> <4BCCCFD8.3090002@python.org> <4BCCD058.5050509@python.org> <4BCCD1C9.8030702@v.loewis.de> <20100420133734.GA3624@amk-desktop.matrixgroup.net> <4BCE0726.2070006@v.loewis.de> <4BCE0AC4.7080000@holdenweb.com> Message-ID: <4BCE0DD8.9080608@v.loewis.de> > I certainly can't see any really good reason why the distributions have > to be inside a dynamic web site. And as far as the code goes, the more > protection the better. It's easier from a management point of view; it's actually the way in which the current site works (although much of the site is static pages, which is a good thing in this respect). Regards, Martin From catherine.devlin at gmail.com Tue Apr 20 20:58:18 2010 From: catherine.devlin at gmail.com (Catherine Devlin) Date: Tue, 20 Apr 2010 14:58:18 -0400 Subject: [pydotorg-www] for "Conferences and Workshops" page Message-ID: http://www.python.org/community/workshops/ Could you add PyOhio (http://pyohio.org/)? Thanks! -- - Catherine http://catherinedevlin.blogspot.com/ *** PyOhio 2010 * July 31 - Aug 1 * Columbus, OH * pyohio.org *** -------------- next part -------------- An HTML attachment was scrubbed... URL: From mfoord at python.org Tue Apr 20 23:30:16 2010 From: mfoord at python.org (Michael Foord) Date: Tue, 20 Apr 2010 23:30:16 +0200 Subject: [pydotorg-www] for "Conferences and Workshops" page In-Reply-To: References: Message-ID: <4BCE1CE8.30000@python.org> On 20/04/2010 20:58, Catherine Devlin wrote: > http://www.python.org/community/workshops/ > > Could you add PyOhio (http://pyohio.org/)? Thanks! Hi Catherine, Done. It should show up shortly. All the best, Michael > > -- > - Catherine > http://catherinedevlin.blogspot.com/ > *** PyOhio 2010 * July 31 - Aug 1 * Columbus, OH * pyohio.org > *** > > > _______________________________________________ > pydotorg-www mailing list > pydotorg-www at python.org > http://mail.python.org/mailman/listinfo/pydotorg-www > -- http://www.ironpythoninaction.com/ -------------- next part -------------- An HTML attachment was scrubbed... URL: From p at state-of-mind.de Tue Apr 20 22:56:10 2010 From: p at state-of-mind.de (Patrick Ben Koetter) Date: Tue, 20 Apr 2010 22:56:10 +0200 Subject: [pydotorg-www] project plan In-Reply-To: <201004200050.56428.paul@boddie.org.uk> References: <4BCC688D.70507@wingware.com> <201004200050.56428.paul@boddie.org.uk> Message-ID: <20100420205609.GD1789@state-of-mind.de> * Paul Boddie : > On Tuesday 20 April 2010 00:17:44 Richard Leland wrote: > > Hi Stephan - definitely useful! I couldn't agree more that the presentation > > is extremely important. The goals in the docs aren't in any specific order. > > Right now they are all of equal weight. When we get to the implementation > > stage I think we'll probably have to prioritize and break the project into > > phases. > > > > Keep the feedback coming! > > Take a look at the following document: > > http://wiki.python.org/moin/MarketingPython > > It's a bit verbose, but it covers quite a few reflections I had after the last > python.org redesign. A good read. I'd like to add my two cent from my experience as information architect: - The website and the website experience are placeholders for the product i.e. Python. If we state that Python is this and that e.g. easier to use, better to read etc. then the Website must be that way too. The website as a placeholder must prove the Python promise. - Don't tell people what Python will do (=work) for them. Tell them what they will get (=result), instead. Though there are many people out there who use Python because of itself, the majority will use it to gain something else. The "something else" should be communicated. If people buy the story, they will start using Python because they want to reach the goal behind Python. Market Python with goals people reached using Python. - Don't try to satisfy any stakeholders interests! Stick to a few, strong stakeholders. Make it a straight story. Implement core features, content etc. Measure and improve. Drop things that don't work. Over time this will create a sound and solid base that allows to bring in other, less important stakeholders. - Compared to email, chat and other communication forms websites are monologues. Write "mobilizing information" so people need not start a dialogue in a monologue media - they only will if they cannot avoid. p at rick -- state of mind Digitale Kommunikation http://www.state-of-mind.de Franziskanerstra?e 15 Telefon +49 89 3090 4664 81669 M?nchen Telefax +49 89 3090 4666 Amtsgericht M?nchen Partnerschaftsregister PR 563 From steve at holdenweb.com Wed Apr 21 04:09:27 2010 From: steve at holdenweb.com (Steve Holden) Date: Tue, 20 Apr 2010 22:09:27 -0400 Subject: [pydotorg-www] project plan In-Reply-To: <20100420205609.GD1789@state-of-mind.de> References: <4BCC688D.70507@wingware.com> <201004200050.56428.paul@boddie.org.uk> <20100420205609.GD1789@state-of-mind.de> Message-ID: <4BCE5E57.7060106@holdenweb.com> Patrick Ben Koetter wrote: > * Paul Boddie : >> On Tuesday 20 April 2010 00:17:44 Richard Leland wrote: >>> Hi Stephan - definitely useful! I couldn't agree more that the presentation >>> is extremely important. The goals in the docs aren't in any specific order. >>> Right now they are all of equal weight. When we get to the implementation >>> stage I think we'll probably have to prioritize and break the project into >>> phases. >>> >>> Keep the feedback coming! >> Take a look at the following document: >> >> http://wiki.python.org/moin/MarketingPython >> >> It's a bit verbose, but it covers quite a few reflections I had after the last >> python.org redesign. > > A good read. I'd like to add my two cent from my experience as information > architect: > > - The website and the website experience are placeholders for the product i.e. > Python. If we state that Python is this and that e.g. easier to use, better > to read etc. then the Website must be that way too. The website as a > placeholder must prove the Python promise. > - Don't tell people what Python will do (=work) for them. Tell them what they > will get (=result), instead. Though there are many people out there who use > Python because of itself, the majority will use it to gain something else. > The "something else" should be communicated. If people buy the story, they > will start using Python because they want to reach the goal behind Python. > Market Python with goals people reached using Python. > - Don't try to satisfy any stakeholders interests! Stick to a few, strong > stakeholders. Make it a straight story. Implement core features, content > etc. Measure and improve. Drop things that don't work. Over time this will > create a sound and solid base that allows to bring in other, less important > stakeholders. > - Compared to email, chat and other communication forms websites are > monologues. Write "mobilizing information" so people need not start a > dialogue in a monologue media - they only will if they cannot avoid. > Personally I think that you make some good points. We should be looking more critically at the whole point of the web site, but it's obvious that there's some disagreement in the Python community about this point of view, Just look at the comments on this blog entry: http://holdenweb.blogspot.com/2009/02/sell-sizzle-not-sausage.html I think a lot of geeks just don't like "marketing", not matter what the purpose. regards Steve -- Steve Holden +1 571 484 6266 +1 800 494 3119 See PyCon Talks from Atlanta 2010 http://pycon.blip.tv/ Holden Web LLC http://www.holdenweb.com/ UPCOMING EVENTS: http://holdenweb.eventbrite.com/ From p at state-of-mind.de Wed Apr 21 06:56:08 2010 From: p at state-of-mind.de (Patrick Ben Koetter) Date: Wed, 21 Apr 2010 06:56:08 +0200 Subject: [pydotorg-www] project plan In-Reply-To: <4BCE5E57.7060106@holdenweb.com> References: <4BCC688D.70507@wingware.com> <201004200050.56428.paul@boddie.org.uk> <20100420205609.GD1789@state-of-mind.de> <4BCE5E57.7060106@holdenweb.com> Message-ID: <20100421045608.GA1647@state-of-mind.de> * Steve Holden : > Patrick Ben Koetter wrote: > > * Paul Boddie : > >> On Tuesday 20 April 2010 00:17:44 Richard Leland wrote: > >>> Hi Stephan - definitely useful! I couldn't agree more that the presentation > >>> is extremely important. The goals in the docs aren't in any specific order. > >>> Right now they are all of equal weight. When we get to the implementation > >>> stage I think we'll probably have to prioritize and break the project into > >>> phases. > >>> > >>> Keep the feedback coming! > >> Take a look at the following document: > >> > >> http://wiki.python.org/moin/MarketingPython > >> > >> It's a bit verbose, but it covers quite a few reflections I had after the last > >> python.org redesign. > > > > A good read. I'd like to add my two cent from my experience as information > > architect: > > > > - The website and the website experience are placeholders for the product i.e. > > Python. If we state that Python is this and that e.g. easier to use, better > > to read etc. then the Website must be that way too. The website as a > > placeholder must prove the Python promise. > > - Don't tell people what Python will do (=work) for them. Tell them what they > > will get (=result), instead. Though there are many people out there who use > > Python because of itself, the majority will use it to gain something else. > > The "something else" should be communicated. If people buy the story, they > > will start using Python because they want to reach the goal behind Python. > > Market Python with goals people reached using Python. > > - Don't try to satisfy any stakeholders interests! Stick to a few, strong > > stakeholders. Make it a straight story. Implement core features, content > > etc. Measure and improve. Drop things that don't work. Over time this will > > create a sound and solid base that allows to bring in other, less important > > stakeholders. > > - Compared to email, chat and other communication forms websites are > > monologues. Write "mobilizing information" so people need not start a > > dialogue in a monologue media - they only will if they cannot avoid. > > > > Personally I think that you make some good points. We should be looking > more critically at the whole point of the web site, but it's obvious > that there's some disagreement in the Python community about this point > of view, Just look at the comments on this blog entry: > > http://holdenweb.blogspot.com/2009/02/sell-sizzle-not-sausage.html > > I think a lot of geeks just don't like "marketing", not matter what the > purpose. So do I! And I agree that "Neutral descriptions are far better than publicity guff." (cite from your blog entry comments) Looking at myself and at my open source colleagues/friends I note a stance that says: "No matter what you tell me, I am the one in charge and I am going to do it my way. I will decide. I am out the moment I note you are trying to manipulate me." I believe that's the typical association when people tell they don't like "marketing". They say "marketing", but think "manipulation". And I agree. I get to see, hear, even eat (!) more blown up vaporware than I get to see companies delivering their promise. That's why I added "show the results" to the list above. They demonstrate the promise was kept. Of course, one still can be very loud and pushy about it, and people will get irritated because its abnormally loud and will start to doubt again. It's a thin line and it takes experience to get it right. On another note: What's wrong about being proud, if you get the tone right? There's a thin line here too. Some rather tend to brawl than tell you something they have managed to acchieve. But hey, who doesn't want to be proud about what he/she does? Who's not enchanted by people that are proud about what they do? Who, if not the Open Source people, are not proud that it worked their way, following their codex of honour? I guess what people dislike are superlatives and absolutism. There are situations where I prefer my Windows 7 machine to my Ubuntu Lucid (especially during Alpha testing...), simply because I have the right tool for the right job. Do something very american. Follow the constitution and make me "an enlightened citizenry". Tell me the pros and cons (and don't forget the cons!). Let me decide. Open Source is a lot about openess and transparency. I guess if we do transparent marketing, we can be trusted. p at rick P.S. And now I will get another cup of tea. Good morning, by the way... ;) -- state of mind Digitale Kommunikation http://www.state-of-mind.de Franziskanerstra?e 15 Telefon +49 89 3090 4664 81669 M?nchen Telefax +49 89 3090 4666 Amtsgericht M?nchen Partnerschaftsregister PR 563 From martin at v.loewis.de Wed Apr 21 08:13:21 2010 From: martin at v.loewis.de (=?ISO-8859-1?Q?=22Martin_v=2E_L=F6wis=22?=) Date: Wed, 21 Apr 2010 08:13:21 +0200 Subject: [pydotorg-www] project plan In-Reply-To: <4BCE5E57.7060106@holdenweb.com> References: <4BCC688D.70507@wingware.com> <201004200050.56428.paul@boddie.org.uk> <20100420205609.GD1789@state-of-mind.de> <4BCE5E57.7060106@holdenweb.com> Message-ID: <4BCE9781.6030605@v.loewis.de> > I think a lot of geeks just don't like "marketing", not matter what the > purpose. I don't think "not like" describes it correctly. Me, personally, I don't care about that aspect of the site. I want python.org to be the place were people download Python releases, report bugs, post information they find useful, collaborate, and learn about events that take place. Whether or not the site also "markets" Python is of little relevance to me. Only if the marketing gets in the way of the other functions I start not liking it. Regards, Martin From sdeibel at wingware.com Wed Apr 21 15:32:20 2010 From: sdeibel at wingware.com (Stephan Deibel) Date: Wed, 21 Apr 2010 09:32:20 -0400 Subject: [pydotorg-www] project plan In-Reply-To: <4BCE9781.6030605@v.loewis.de> References: <4BCC688D.70507@wingware.com> <201004200050.56428.paul@boddie.org.uk> <20100420205609.GD1789@state-of-mind.de> <4BCE5E57.7060106@holdenweb.com> <4BCE9781.6030605@v.loewis.de> Message-ID: <4BCEFE64.5000605@wingware.com> Martin v. L?wis wrote: >> I think a lot of geeks just don't like "marketing", not matter what the >> purpose. >> > > I don't think "not like" describes it correctly. Me, personally, I don't > care about that aspect of the site. I want python.org to be the place > were people download Python releases, report bugs, post information they > find useful, collaborate, and learn about events that take place. > Whether or not the site also "markets" Python is of little relevance to > me. Only if the marketing gets in the way of the other functions I start > not liking it. > The most effective marketing is low-key word of mouth and other kinds of informal helpful referrals. The kind of stuff that people wouldn't even really think of as marketing. This will mostly happen entirely outside of the website. The website should be accessible and helpful to people that receive such word of mouth and want to learn about and start using Python. It should try doing that for a variety of audiences. I don't think a site that tries to "sell" will work well, not even if you target corporate IT types (or whatever you want to call decision makers at larger companies). I'd go so far as to say the current site tries to "sell" too much (in the right column on home page and About area). I helped write and/or collect a lot of that stuff. I'm not sure how useful it really is, or at least quotes and success stories are not as useful as making Download and Getting Started info more obvious. The stuff in About is a bit better in that it's more factual but the presentation is still trying too hard to "sell" and I think that's a problem. Here's an amusing failure to "sell": Look at the "About Ruby's Growth" section on http://www.ruby-lang.org/en/about/ -- what it shows in the graph since 2006 doesn't look like growth to me! Of course someone set this up and forgot about it and the graph just keeps auto-updating. - Stephan From skip at pobox.com Wed Apr 21 17:11:10 2010 From: skip at pobox.com (skip at pobox.com) Date: Wed, 21 Apr 2010 10:11:10 -0500 Subject: [pydotorg-www] project plan In-Reply-To: References: Message-ID: <19407.5518.522049.383999@montanaro.dyndns.org> My feedback on Rich's outline document so far: * (Agility) I don't think the site content is difficult to update. It is in a fairly simple to read/write text format. Except when brain cramps get in my way, updating the site generally involves little more than editing the text and checking in the changed file(s). Switching to some kind of through-the-web editing system would be massive overkill in my opinion. As for the appearance, I lean more toward the simple Google end of the spectrum when it comes to website appearance, and I detest websites which think it's ok to spew out JavaScript or Flash animations which peg my computer's CPU. I do, however, think that whatever appearance you settle on should be used in the wiki as well. They are two sides of the same coin in my mind. * (Involvement) I agree that more involvement by the community would be beneficial. Frequently when the site has lagged behind content-wise I think it's because it contained content which was naturally dynamic. In several instances we have moved content to the wiki so the community can keep that content up-to-date. Regarding the wiki, while more community involvement is worthwhile, wikis can devolve into little more than a "bag of pages". I think some effort to provide overall structure to the wiki would be worthwhile. Deciding if/when to cull data from the wiki would also be helpful. (For example, frequently people create personal home pages on the wiki which contain nothing more than their email address - I guess that's the default with the home page template.) There are certain parts of the site which I think should not be turned over to a broader audience, however. In particular, download/release content, news and job postings should be fairly tightly controlled in my mind. I hope the reasons for tight control of download/release content are obvious. The job board seems to be a well-used part of the site, at least based on the number of posting requests I've seen and notes about taking down postings because positions have been filled. There is a fair amount of give-and-take at times between Martin and the people posting job announcements to help the submitters get their posts into reasonable form and with appropriate content. (At least once a month I would suspect that postings with no apparent Python relevance are sent to the jobs address.) The job board is a good marketing tool for Python the language. I think it would be a shame if the high quality of the content was diluted by lack of oversight. News postings fall into a similar category as a marketing tool. "Wow, look at all the Python events!" There is limited space on the site for news items. There appears to be room for five to seven items "above the fold" given the current layout. While I think it would be nice if more events could be posted, that is limited real estate. OTOH, maybe all news items could be submitted and will go out in the RSS feed, while only the most important are tagged for display on the website. Another area where we could use some help is in squashing/redirecting old content. Fairly frequently email arrives at the webmaster address referring to old pages from previous incarnations of the website which have broken links or are simply badly outdated. In almost all cases I think we should redirect to a page in the current website or wiki. Simply identifying old content would be a significant project. It would be great if the larger community could help identify old pages and a suitable redirect target. The folks who twiddle the bits on the web server config could set up the necessary redirection and take down the old page. * (Localization) I would like to see some way to highlight local user group meetings. I realize that's somewhat at odds with my comments above about news items. It might be worthwhile to also offer storage/ display/indexing space for presentations from local user group talks. * (Extensibility) I'm not sure what you're after here. I think you need to expand, maybe give an example. * (Accessibility) Traditionally, aside from the main Python tutorial (which assumes some programming background) tutorial information for complete novice programmers has been left up to the broader community, then referenced from the main site or the wiki. (Thinking out loud here...) - I wonder if the PSF might consider funding a competent technical writer with essentially no programming experience to learn the language and produce a good tutorial aimed at complete novices. - Allowing the community to annotate the online documentation (though still keeping the actual documentation content "in-house" - sort of midway between a closed site and fully editable wiki) might be an excellent way to improve it. Users could point out errors, add examples, maybe even easily suggest ways to restructure signficant parts for easier use. - Would Google App Engine be a suitable environment for an interactive Python exploratorium? * (Presentation) As I indicated above I prefer a "lighter" look and feel. Sidebars can be handy, but we seem to have taken them to an extreme. With both constant-width left and right sidebars on the front page you lose anywhere from one third to one half of the space available to display actual content. That said, I am all for highlighting activities such as GSoC (maybe displayed as a thin banner across the top of the page?). I think you could move the "... uses Python" box to the bottom of the left-hand sidebar, eliminate the "What they are saying..." altogether, and merge the "Using Python For..." box into the left-hand sidebar as a dynamic hierarchical menu. Skip From rich at richleland.com Wed Apr 21 17:21:53 2010 From: rich at richleland.com (Richard Leland) Date: Wed, 21 Apr 2010 11:21:53 -0400 Subject: [pydotorg-www] project plan In-Reply-To: <19407.5518.522049.383999@montanaro.dyndns.org> References: <19407.5518.522049.383999@montanaro.dyndns.org> Message-ID: Thanks for all the feedback Skip! I'll read through and respond/apply to the plan where appropriate. - Rich Richard Leland rich at richleland.com 240-242-7424 On Wed, Apr 21, 2010 at 11:11 AM, wrote: > > My feedback on Rich's outline document so far: > > * (Agility) I don't think the site content is difficult to update. It > is in a fairly simple to read/write text format. Except when brain > cramps get in my way, updating the site generally involves little more > than editing the text and checking in the changed file(s). Switching > to some kind of through-the-web editing system would be massive > overkill in my opinion. > > As for the appearance, I lean more toward the simple Google end of the > spectrum when it comes to website appearance, and I detest websites > which think it's ok to spew out JavaScript or Flash animations which > peg my computer's CPU. I do, however, think that whatever appearance > you settle on should be used in the wiki as well. They are two sides > of the same coin in my mind. > > * (Involvement) I agree that more involvement by the community would be > beneficial. Frequently when the site has lagged behind content-wise I > think it's because it contained content which was naturally dynamic. > In several instances we have moved content to the wiki so the > community can keep that content up-to-date. > > Regarding the wiki, while more community involvement is worthwhile, > wikis can devolve into little more than a "bag of pages". I think > some effort to provide overall structure to the wiki would be > worthwhile. Deciding if/when to cull data from the wiki would also be > helpful. (For example, frequently people create personal home pages > on the wiki which contain nothing more than their email address - I > guess that's the default with the home page template.) > > There are certain parts of the site which I think should not be turned > over to a broader audience, however. In particular, download/release > content, news and job postings should be fairly tightly controlled in > my mind. I hope the reasons for tight control of download/release > content are obvious. > > The job board seems to be a well-used part of the site, at least based > on the number of posting requests I've seen and notes about taking > down postings because positions have been filled. There is a fair > amount of give-and-take at times between Martin and the people posting > job announcements to help the submitters get their posts into > reasonable form and with appropriate content. (At least once a month > I would suspect that postings with no apparent Python relevance are > sent to the jobs address.) The job board is a good marketing tool for > Python the language. I think it would be a shame if the high quality > of the content was diluted by lack of oversight. > > News postings fall into a similar category as a marketing tool. "Wow, > look at all the Python events!" There is limited space on the site > for news items. There appears to be room for five to seven items > "above the fold" given the current layout. While I think it would be > nice if more events could be posted, that is limited real estate. > OTOH, maybe all news items could be submitted and will go out in the > RSS feed, while only the most important are tagged for display on the > website. > > Another area where we could use some help is in squashing/redirecting > old content. Fairly frequently email arrives at the webmaster address > referring to old pages from previous incarnations of the website which > have broken links or are simply badly outdated. In almost all cases I > think we should redirect to a page in the current website or wiki. > Simply identifying old content would be a significant project. It > would be great if the larger community could help identify old pages > and a suitable redirect target. The folks who twiddle the bits on the > web server config could set up the necessary redirection and take down > the old page. > > * (Localization) I would like to see some way to highlight local user > group meetings. I realize that's somewhat at odds with my comments > above about news items. It might be worthwhile to also offer storage/ > display/indexing space for presentations from local user group talks. > > * (Extensibility) I'm not sure what you're after here. I think you need > to expand, maybe give an example. > > * (Accessibility) Traditionally, aside from the main Python tutorial > (which assumes some programming background) tutorial information for > complete novice programmers has been left up to the broader community, > then referenced from the main site or the wiki. > > (Thinking out loud here...) > > - I wonder if the PSF might consider funding a competent technical > writer with essentially no programming experience to learn the > language and produce a good tutorial aimed at complete novices. > > - Allowing the community to annotate the online documentation (though > still keeping the actual documentation content "in-house" - sort of > midway between a closed site and fully editable wiki) might be an > excellent way to improve it. Users could point out errors, add > examples, maybe even easily suggest ways to restructure signficant > parts for easier use. > > - Would Google App Engine be a suitable environment for an interactive > Python exploratorium? > > * (Presentation) As I indicated above I prefer a "lighter" look and > feel. Sidebars can be handy, but we seem to have taken them to an > extreme. With both constant-width left and right sidebars on the > front page you lose anywhere from one third to one half of the space > available to display actual content. That said, I am all for > highlighting activities such as GSoC (maybe displayed as a thin banner > across the top of the page?). I think you could move the "... uses > Python" box to the bottom of the left-hand sidebar, eliminate the > "What they are saying..." altogether, and merge the "Using Python > For..." box into the left-hand sidebar as a dynamic hierarchical menu. > > Skip > _______________________________________________ > pydotorg-www mailing list > pydotorg-www at python.org > http://mail.python.org/mailman/listinfo/pydotorg-www > -------------- next part -------------- An HTML attachment was scrubbed... URL: From martin at martinthomas.net Wed Apr 21 18:03:36 2010 From: martin at martinthomas.net (Martin Thomas) Date: Wed, 21 Apr 2010 11:03:36 -0500 Subject: [pydotorg-www] project plan In-Reply-To: <19407.5518.522049.383999@montanaro.dyndns.org> References: <19407.5518.522049.383999@montanaro.dyndns.org> Message-ID: On Wed, Apr 21, 2010 at 10:11 AM, wrote: > > My feedback on Rich's outline document so far: > > ... > The job board seems to be a well-used part of the site, at least based > on the number of posting requests I've seen and notes about taking > down postings because positions have been filled. There is a fair > amount of give-and-take at times between Martin and the people posting > job announcements to help the submitters get their posts into > reasonable form and with appropriate content. (At least once a month > I would suspect that postings with no apparent Python relevance are > sent to the jobs address.) The job board is a good marketing tool for > Python the language. I think it would be a shame if the high quality > of the content was diluted by lack of oversight. > The time consuming part of the Job Board is the formatting of posts (wrestling them into RST) more so than the maintenance of the page. The back and forth where we (mostly me) try to get the minimum details required (and sometimes shorten the posting) is a workflow that seems naturally to align with email. I am aware that to some, the volume of mail for the postings (particularly replies and acknowledgements) may seem like spam but it helps track progress on postings (allowing volunteers to stay in sync without any other tools). It also demonstrates that the marketplace is active which I think is a positive point when promoting Python. There is also work done by the mail server team who vet postings before they get onto the list. All that said, I am open to suggestions for change or improvement. Let me know how I can help. Cheers // Martin ... > > Skip > _______________________________________________ > pydotorg-www mailing list > pydotorg-www at python.org > http://mail.python.org/mailman/listinfo/pydotorg-www > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From skip at pobox.com Wed Apr 21 18:12:54 2010 From: skip at pobox.com (skip at pobox.com) Date: Wed, 21 Apr 2010 11:12:54 -0500 Subject: [pydotorg-www] project plan In-Reply-To: References: <19407.5518.522049.383999@montanaro.dyndns.org> Message-ID: <19407.9222.520253.301516@montanaro.dyndns.org> Martin> There is also work done by the mail server team who vet postings Martin> before they get onto the list. Note that I (at least) only vet job postings to the extent that it appears they are actually job postings and not spam. If someone posts a job opening for an system administrator which doesn't mention Python at all I wouldn't know it. Mailman's window onto held mail is generally pretty narrow. It displays subject, sender, most of the headers and often some, but not all, of the message body. Attachments aren't displayed at all. Skip From mfoord at python.org Wed Apr 21 18:14:35 2010 From: mfoord at python.org (Michael Foord) Date: Wed, 21 Apr 2010 18:14:35 +0200 Subject: [pydotorg-www] project plan In-Reply-To: <19407.5518.522049.383999@montanaro.dyndns.org> References: <19407.5518.522049.383999@montanaro.dyndns.org> Message-ID: <4BCF246B.6000304@python.org> On 21/04/2010 17:11, skip at pobox.com wrote: > My feedback on Rich's outline document so far: > > * (Agility) I don't think the site content is difficult to update. It > is in a fairly simple to read/write text format. Except when brain > cramps get in my way, updating the site generally involves little more > than editing the text and checking in the changed file(s). Switching > to some kind of through-the-web editing system would be massive > overkill in my opinion. > Right, so it involves at least use of subversion and understanding of reStructured Text format - plus checkin rights or the ability to create a patch. If you *already* know all this stuff then it is easy. If you don't then it isn't... I think that this particular question is something we are never likely to get consensus on amongst all those involved and the PSF board should make a decision based on their goals for the site. > As for the appearance, I lean more toward the simple Google end of the > spectrum when it comes to website appearance, and I detest websites > which think it's ok to spew out JavaScript or Flash animations which > peg my computer's CPU. I do, however, think that whatever appearance > you settle on should be used in the wiki as well. They are two sides > of the same coin in my mind. > Simple, clean and attractive would be my ideals for the site. I am against Flash but I'm not against enhancing a site with Javascript. It shouldn't be essential to access the basic functionality, but if we do have any more advanced interactive features then I'm not against them being unavailable without Javascript (assuming we can remain compliant with basic accessibility principles - not something I know anything about). On that note - should accessibility requirements be part of the plan? Probably. > [snip..] > > * (Localization) I would like to see some way to highlight local user > group meetings. I realize that's somewhat at odds with my comments > above about news items. It might be worthwhile to also offer storage/ > display/indexing space for presentations from local user group talks. > > It would be very good if we could include ways for user groups to have a "home" on Python.org - publishing meeting details and news. The other side of the coin to localization is internationalization - it would be great to host / support other translations and even have a way for users to create / suggest new translations for parts of the documentation. Quite a big project to do it completely. > * (Extensibility) I'm not sure what you're after here. I think you need > to expand, maybe give an example. > > * (Accessibility) Traditionally, aside from the main Python tutorial > (which assumes some programming background) tutorial information for > complete novice programmers has been left up to the broader community, > then referenced from the main site or the wiki. > > (Thinking out loud here...) > > - I wonder if the PSF might consider funding a competent technical > writer with essentially no programming experience to learn the > language and produce a good tutorial aimed at complete novices. > > Whilst *evaluating* tutorials can be done (and perhaps is best done) by those with little experience I don't think that absolute Python newbies can *create* a very good tutorial. Many small details of Python idioms and best practises only come through experience. On the other hand I would be *very* much in favour of the PSF sponsoring a new Python tutorial. I don't think the existing one is *particularly* good - it is showing its age. > - Allowing the community to annotate the online documentation (though > still keeping the actual documentation content "in-house" - sort of > midway between a closed site and fully editable wiki) might be an > excellent way to improve it. Users could point out errors, add > examples, maybe even easily suggest ways to restructure signficant > parts for easier use. > That would be very useful. The Django book had an online annotation system they used for collecting corrections / suggestions. I think there was (is?) a GSOC project to create something like this for Sphinx. > - Would Google App Engine be a suitable environment for an interactive > Python exploratorium? > I'd rather not have our core services dependent on external providers - but am not *strongly* against it for some of the details. All the best, Michael > * (Presentation) As I indicated above I prefer a "lighter" look and > feel. Sidebars can be handy, but we seem to have taken them to an > extreme. With both constant-width left and right sidebars on the > front page you lose anywhere from one third to one half of the space > available to display actual content. That said, I am all for > highlighting activities such as GSoC (maybe displayed as a thin banner > across the top of the page?). I think you could move the "... uses > Python" box to the bottom of the left-hand sidebar, eliminate the > "What they are saying..." altogether, and merge the "Using Python > For..." box into the left-hand sidebar as a dynamic hierarchical menu. > > Skip > _______________________________________________ > pydotorg-www mailing list > pydotorg-www at python.org > http://mail.python.org/mailman/listinfo/pydotorg-www > -- http://www.ironpythoninaction.com/ From aahz at pythoncraft.com Wed Apr 21 18:20:48 2010 From: aahz at pythoncraft.com (Aahz) Date: Wed, 21 Apr 2010 09:20:48 -0700 Subject: [pydotorg-www] project plan In-Reply-To: <201004200050.56428.paul@boddie.org.uk> References: <4BCC688D.70507@wingware.com> <201004200050.56428.paul@boddie.org.uk> Message-ID: <20100421162048.GB15551@panix.com> On Tue, Apr 20, 2010, Paul Boddie wrote: > > Take a look at the following document: > > http://wiki.python.org/moin/MarketingPython > > It's a bit verbose, but it covers quite a few reflections I had after > the last python.org redesign. Looks good, but parts of it are out-of-date (just something to keep in mind while reading). -- Aahz (aahz at pythoncraft.com) <*> http://www.pythoncraft.com/ "It is easier to optimize correct code than to correct optimized code." --Bill Harlan From aahz at pythoncraft.com Wed Apr 21 18:24:47 2010 From: aahz at pythoncraft.com (Aahz) Date: Wed, 21 Apr 2010 09:24:47 -0700 Subject: [pydotorg-www] project plan In-Reply-To: <4BCE5E57.7060106@holdenweb.com> References: <4BCC688D.70507@wingware.com> <201004200050.56428.paul@boddie.org.uk> <20100420205609.GD1789@state-of-mind.de> <4BCE5E57.7060106@holdenweb.com> Message-ID: <20100421162447.GC15551@panix.com> On Tue, Apr 20, 2010, Steve Holden wrote: > > Personally I think that you make some good points. We should be looking > more critically at the whole point of the web site, but it's obvious > that there's some disagreement in the Python community about this point > of view, Just look at the comments on this blog entry: > > http://holdenweb.blogspot.com/2009/02/sell-sizzle-not-sausage.html > > I think a lot of geeks just don't like "marketing", not matter what the > purpose. There's also the issue that even amongst those of us who believe that marketing is useful (you can hardly claim that I argue against marketing when I put in the effort to get a Python booth last OSCON), there is much disagreement about *who* we market to and *how* we do the marketing. -- Aahz (aahz at pythoncraft.com) <*> http://www.pythoncraft.com/ "It is easier to optimize correct code than to correct optimized code." --Bill Harlan From skip at pobox.com Wed Apr 21 18:25:15 2010 From: skip at pobox.com (skip at pobox.com) Date: Wed, 21 Apr 2010 11:25:15 -0500 Subject: [pydotorg-www] project plan In-Reply-To: <4BCF246B.6000304@python.org> References: <19407.5518.522049.383999@montanaro.dyndns.org> <4BCF246B.6000304@python.org> Message-ID: <19407.9963.788042.950062@montanaro.dyndns.org> >> - I wonder if the PSF might consider funding a competent technical >> writer with essentially no programming experience to learn the >> language and produce a good tutorial aimed at complete novices. Michael> Whilst *evaluating* tutorials can be done (and perhaps is best Michael> done) by those with little experience I don't think that Michael> absolute Python newbies can *create* a very good tutorial. My implicit point was that I think it's difficult for experienced programmers to write documentation which is suitable for non-programmers. I don't know what the resolution will be, but there is certainly tension between the two extremes. >> - Would Google App Engine be a suitable environment for an interactive >> Python exploratorium? >> Michael> I'd rather not have our core services dependent on external Michael> providers - but am not *strongly* against it for some of the Michael> details. I only mentioned GAE because presumably they've solved the problem of someone entering something simple like print 1000 ** 1000 ** 1000 which will likely take awhile to run. GAE probably also has more hardware available so that the above sort of construct (if it hasn't been addressed) is unlikely to be an effective denial-of-service attack. At most the PSF will probably devote a few boxes to such an application. Execute that a few times and things can go to pot pretty quickly. Not to mention security/sandbox issues. S From aahz at pythoncraft.com Wed Apr 21 18:30:33 2010 From: aahz at pythoncraft.com (Aahz) Date: Wed, 21 Apr 2010 09:30:33 -0700 Subject: [pydotorg-www] Hiring a tech writer In-Reply-To: <19407.5518.522049.383999@montanaro.dyndns.org> References: <19407.5518.522049.383999@montanaro.dyndns.org> Message-ID: <20100421163033.GD15551@panix.com> On Wed, Apr 21, 2010, skip at pobox.com wrote: > > - I wonder if the PSF might consider funding a competent technical > writer with essentially no programming experience to learn the > language and produce a good tutorial aimed at complete novices. If you're serious about this, I can recommend my co-author of Python for Dummies. ;-) (That's a smiley, yes, but it's a serious recommendation; not sure if Stef would be interested, though -- once may have been enough. Stef used to work at Apple, so she's familiar with the "this is a mouse" level of writing.) -- Aahz (aahz at pythoncraft.com) <*> http://www.pythoncraft.com/ "It is easier to optimize correct code than to correct optimized code." --Bill Harlan From rich at richleland.com Wed Apr 21 18:31:00 2010 From: rich at richleland.com (Richard Leland) Date: Wed, 21 Apr 2010 12:31:00 -0400 Subject: [pydotorg-www] project plan In-Reply-To: <4BCF246B.6000304@python.org> References: <19407.5518.522049.383999@montanaro.dyndns.org> <4BCF246B.6000304@python.org> Message-ID: > > * (Agility) I don't think the site content is difficult to update. It >> is in a fairly simple to read/write text format. Except when brain >> cramps get in my way, updating the site generally involves little >> more >> than editing the text and checking in the changed file(s). >> Switching >> to some kind of through-the-web editing system would be massive >> overkill in my opinion. >> >> > > Right, so it involves at least use of subversion and understanding of > reStructured Text format - plus checkin rights or the ability to create a > patch. If you *already* know all this stuff then it is easy. If you don't > then it isn't... I think that this particular question is something we are > never likely to get consensus on amongst all those involved and the PSF > board should make a decision based on their goals for the site. I agree with Michael - as someone that is getting familiar with the process it just doesn't seem as agile as it could be. For instance, if there was a decision to add 5 new sections with 30 pages of content, which method would be faster for updating - a through-the-web-based approach or the existing create files, check in, build? I'm not sure one is faster than the other and I'm sure there would be varying opinions on that. Maybe the way to approach this question is thinking about who could be editing the content. Should it always be technical individuals or should someone with writing skills be able to update the site as well? > * (Localization) I would like to see some way to highlight local user > > group meetings. I realize that's somewhat at odds with my comments >> above about news items. It might be worthwhile to also offer >> storage/ >> display/indexing space for presentations from local user group >> talks. >> >> >> > It would be very good if we could include ways for user groups to have a > "home" on Python.org - publishing meeting details and news. > > The other side of the coin to localization is internationalization - it > would be great to host / support other translations and even have a way for > users to create / suggest new translations for parts of the documentation. > Quite a big project to do it completely. > > I had a brief chat with Steve about this - we could look into using something like Transifex to get the community to contribute the i18n content. http://www.transifex.net/ > > * (Extensibility) I'm not sure what you're after here. I think you >> need >> to expand, maybe give an example. >> > Steve mentioned the possibility of adding some APIs for accessing python.orgcontent - perhaps allowing users to create their own apps - PyPI browsing on iPhone, user group meeting widgets, calendars, release notes, etc. This one would have to be more thought through for sure. - Rich -------------- next part -------------- An HTML attachment was scrubbed... URL: From mfoord at python.org Wed Apr 21 18:31:36 2010 From: mfoord at python.org (Michael Foord) Date: Wed, 21 Apr 2010 18:31:36 +0200 Subject: [pydotorg-www] project plan In-Reply-To: <19407.9963.788042.950062@montanaro.dyndns.org> References: <19407.5518.522049.383999@montanaro.dyndns.org> <4BCF246B.6000304@python.org> <19407.9963.788042.950062@montanaro.dyndns.org> Message-ID: <4BCF2868.8060906@python.org> On 21/04/2010 18:25, skip at pobox.com wrote: > >> - I wonder if the PSF might consider funding a competent technical > >> writer with essentially no programming experience to learn the > >> language and produce a good tutorial aimed at complete novices. > > Michael> Whilst *evaluating* tutorials can be done (and perhaps is best > Michael> done) by those with little experience I don't think that > Michael> absolute Python newbies can *create* a very good tutorial. > > My implicit point was that I think it's difficult for experienced > programmers to write documentation which is suitable for non-programmers. I > don't know what the resolution will be, but there is certainly tension > between the two extremes. > Hehe. As a (relatively) experience Python developer and a writer I don't think it is that hard if you have the right mindset and skills. I don't think it is *possible* for a real newbie to write useful documentation though. Having a technical-but-python-novice as a reviewer would be very helpful though. > >> - Would Google App Engine be a suitable environment for an interactive > >> Python exploratorium? > >> > > Michael> I'd rather not have our core services dependent on external > Michael> providers - but am not *strongly* against it for some of the > Michael> details. > > I only mentioned GAE because presumably they've solved the problem of > someone entering something simple like > > print 1000 ** 1000 ** 1000 > Ah - you're talking about an "interactive Python exploratorium", I missed that. Yes, implementing it on top of google app engine would be sensible. If you're not ideologically opposed to Silverlight then I have already implemented something like this called "Try Python" (unfortunately not yet compatible with Silverlight 4 which has just been released - I need a free weekend): http://www.trypython.org/ The advantage of Silverlight is that the code runs on the client not the server. The disadvantage is that it is only installed on 50% of browsers and has poor Linux support (works great on the Mac though). All the best, Michael > which will likely take awhile to run. GAE probably also has more hardware > available so that the above sort of construct (if it hasn't been addressed) > is unlikely to be an effective denial-of-service attack. At most the PSF > will probably devote a few boxes to such an application. Execute that a few > times and things can go to pot pretty quickly. Not to mention > security/sandbox issues. > > S > -- http://www.ironpythoninaction.com/ From mfoord at python.org Wed Apr 21 18:34:28 2010 From: mfoord at python.org (Michael Foord) Date: Wed, 21 Apr 2010 18:34:28 +0200 Subject: [pydotorg-www] project plan In-Reply-To: References: <19407.5518.522049.383999@montanaro.dyndns.org> <4BCF246B.6000304@python.org> Message-ID: <4BCF2914.3030209@python.org> On 21/04/2010 18:31, Richard Leland wrote: > [snip...] > > > * (Extensibility) I'm not sure what you're after here. I > think you need > to expand, maybe give an example. > > > Steve mentioned the possibility of adding some APIs for accessing > python.org content - perhaps allowing users to > create their own apps - PyPI browsing on iPhone, user group meeting > widgets, calendars, release notes, etc. This one would have to be more > thought through for sure. > Having different stylesheets for different devices would be nice - Wordpress has a nice plugin that does this and works well. A minimum requirement would be that the design should work well on a range of browsers *and* devices, however that is done. I'm not *convinced* about the idea of giving python.org an API without some clear usecases - an API to do what? I'm not sure that an API for adding content is *particularly* useful, but if some real usecases can be shown then maybe. :-) If we have support for local user groups and conferences then things like calendars etc sounds good however. All the best, Michael > - Rich -- http://www.ironpythoninaction.com/ -------------- next part -------------- An HTML attachment was scrubbed... URL: From mfoord at python.org Wed Apr 21 18:35:06 2010 From: mfoord at python.org (Michael Foord) Date: Wed, 21 Apr 2010 18:35:06 +0200 Subject: [pydotorg-www] Hiring a tech writer In-Reply-To: <20100421163033.GD15551@panix.com> References: <19407.5518.522049.383999@montanaro.dyndns.org> <20100421163033.GD15551@panix.com> Message-ID: <4BCF293A.5000205@python.org> On 21/04/2010 18:30, Aahz wrote: > On Wed, Apr 21, 2010, skip at pobox.com wrote: > >> - I wonder if the PSF might consider funding a competent technical >> writer with essentially no programming experience to learn the >> language and produce a good tutorial aimed at complete novices. >> > If you're serious about this, I can recommend my co-author of Python for > Dummies. ;-) (That's a smiley, yes, but it's a serious recommendation; > not sure if Stef would be interested, though -- once may have been > enough. Stef used to work at Apple, so she's familiar with the "this is > a mouse" level of writing.) > Writing a good Python tutorial is something I've wanted to do for a long time too... :-) All the best, Michael -- http://www.ironpythoninaction.com/ From mfoord at python.org Wed Apr 21 18:38:59 2010 From: mfoord at python.org (Michael Foord) Date: Wed, 21 Apr 2010 18:38:59 +0200 Subject: [pydotorg-www] project plan In-Reply-To: <4BCEFE64.5000605@wingware.com> References: <4BCC688D.70507@wingware.com> <201004200050.56428.paul@boddie.org.uk> <20100420205609.GD1789@state-of-mind.de> <4BCE5E57.7060106@holdenweb.com> <4BCE9781.6030605@v.loewis.de> <4BCEFE64.5000605@wingware.com> Message-ID: <4BCF2A23.4080803@python.org> On 21/04/2010 15:32, Stephan Deibel wrote: > Martin v. L?wis wrote: >>> I think a lot of geeks just don't like "marketing", not matter what the >>> purpose. >> >> I don't think "not like" describes it correctly. Me, personally, I don't >> care about that aspect of the site. I want python.org to be the place >> were people download Python releases, report bugs, post information they >> find useful, collaborate, and learn about events that take place. >> Whether or not the site also "markets" Python is of little relevance to >> me. Only if the marketing gets in the way of the other functions I start >> not liking it. > > The most effective marketing is low-key word of mouth and other kinds of > informal helpful referrals. The kind of stuff that people wouldn't > even really > think of as marketing. This will mostly happen entirely outside of the > website. > > The website should be accessible and helpful to people that receive such > word of mouth and want to learn about and start using Python. It should > try doing that for a variety of audiences. This is the main point. I think the website should be attractive to all and useful for a range of different purposes. In previous threads we identified various different users with different needs: * Complete novices wanting information / tutorials * Developers investigating Python (why should I use it - what is it good for?) * Pointy haired bosses wanting information or reasons to feel safe using Python * The Python community and developers needing documentation / downloads etc * The core development team And so on... Even if we don't believe in "marketing" if there are potential python developers / contributors who are *put off* (or simply don't find what they need) from the website then I'm sure we can all agree that this is a bad thing. All the best, Michael > > I don't think a site that tries to "sell" will work well, not even if you > target corporate IT types (or whatever you want to call decision > makers at > larger companies). > > I'd go so far as to say the current site tries to "sell" too much (in the > right column on home page and About area). I helped write and/or collect > a lot of that stuff. I'm not sure how useful it really is, or at > least quotes and > success stories are not as useful as making Download and Getting Started > info more obvious. The stuff in About is a bit better in that it's > more factual > but the presentation is still trying too hard to "sell" and I think > that's a problem. > > Here's an amusing failure to "sell": Look at the "About Ruby's Growth" > section on http://www.ruby-lang.org/en/about/ -- what it shows in the > graph > since 2006 doesn't look like growth to me! Of course someone set this > up and > forgot about it and the graph just keeps auto-updating. > > - Stephan > > > > _______________________________________________ > pydotorg-www mailing list > pydotorg-www at python.org > http://mail.python.org/mailman/listinfo/pydotorg-www -- http://www.ironpythoninaction.com/ From skip at pobox.com Wed Apr 21 19:18:39 2010 From: skip at pobox.com (skip at pobox.com) Date: Wed, 21 Apr 2010 12:18:39 -0500 Subject: [pydotorg-www] project plan In-Reply-To: References: <19407.5518.522049.383999@montanaro.dyndns.org> <4BCF246B.6000304@python.org> Message-ID: <19407.13167.380324.734773@montanaro.dyndns.org> skip> * (Agility) I don't think the site content is difficult to update. >> Right, so it involves at least use of subversion and understanding of >> reStructured Text format - plus checkin rights or the ability to >> create a patch. All of which I (personally) can do within the confines of an (X)?Emacs session with no need to recall svn or patch syntax. OTOH, if your text editing tool of choice is Notepad I can understand why this would be a barrier to entry. Personally, if you gave me a through-the-web way of editing the site content the first thing I would do would be to figure out how to get the content into Emacs. I think you need to survey the potential contributors to see what they use today for text editing and editing web content before throwing out the current system. I suspect most of the people who would contribute to the site on more than a casual basis will already have some working knowledge of version control systems and lightweight markup like ReST. Whatever you come up with also has to fit into the release toolchain, as I believe a significant amount of site content (and arguably the most important content on the site) is generated at release time. Rich> I agree with Michael - as someone that is getting familiar with Rich> the process it just doesn't seem as agile as it could be. Sorry, I don't know what "agile" means in this context. Rich> For instance, if there was a decision to add 5 new sections with Rich> 30 pages of content, which method would be faster for updating - a Rich> through-the-web-based approach or the existing create files, check Rich> in, build? You're asking me to choose between: * edit locally using familiar tools, build the site locally using "make", review, edit, checkin * one-by-one creation of upwards of 30 pages (where does the nascent content go for review before deployment?) I know what I'd choose. The bulk of those 30 pages will still be plain text and to the greatest extent possible you have to allow people to edit that content using their weapon(s) of choice. If they perceive the process as too cumbersome they will not contribute. I understand that I may be making your argument for you, however, on the one hand you have a certain amount of content now, and a certain set of people who do maintain and update that content. Is it worth it to make it more difficult for existing contributors to keep things running so you can attract some other (unspecified) people as contributors who are or might be put off because the current tools are perceived as too hard to learn/master? I think it becomes a bird-in-the- hand vs two-in-the-bush situation. I will admit my only recent through-the-web editing experience is the Moin text editor (which content quickly goes straight into Emacs) and general