"Slippery Zips and Sticky Tar-Pits" from Python's Security Dev Seth Larson [pdf] | Not Hacker News!