Alicja Kario

from my own testing I can confirm what @TimoRoth said, if you use `github` service name (either through autodetection and by specifying it explicitly) you should use the github provided...

I'm also willing to help maintain a branch that supports python 2.7 and pythons < 3.5 (I actually need to support 2.6 for the next 3 years, let alone 2.7,...

I was able to build on work of @andy-maier, and make that branch work on python 2.6 and 3.3 too! The code is [here](https://github.com/tomato42/coveralls-python/tree/add-py26) (but I don't guarantee it will...

you don't have to be root, you need to have permission to write to block devices

that would be rather surprising given the popularity of python-rsa, I think that most people using it don't consider the security of it—they google "Python RSA" and that's the first...

first of all: [RFC 2119 section 1](https://www.rfc-editor.org/rfc/rfc2119#section-1): ``` 1. MUST This word, or the terms "REQUIRED" or "SHALL", mean that the definition is an absolute requirement of the specification. ```...

@bartonjs 1. hashes and digital signatures are very different. Yes, blocking sha-1 as a regular hash would likely be very disruptive, if only looking at impact of disabling MD5 hash...

(regarding GHSA-hggm-jpg3-v476) The RSA signatures are much less of a foot-gun than RSA encryption/decryption, both from handling-of-errors case and from side-channel resistance case. And signing with PKCS#1 v1.5 padding, but...

hmm, I'd say that the #5573 is missing a test case with a static test vector, like a TLS 1.1 signature that encodes the concatenated MD5 and SHA-1 hash...

Projects that are up for review show up with a yellow background in "Projects" page. But are only marked like this 14 days (or whatever set by user) after last...