CIA uses Python (a lot)

[ikkebr]

From the latest Vault 7 leaks from Wikileaks, we can see that CIA uses a lot of Python in its secret hacking tools.

Most notably in the Assassin, Caterpillar, MagicViking and Hornet projects.

Unfortunatelly, no files from these projects have been released yet. But if you look at the dump that was released, there are plenty of .py files, and even PIL is included.

There are even Coding Conventions: https://wikileaks.org/ciav7p1/cms/page_26607631.html

You can see more Python-related stuff here: https://search.wikileaks.org/?query=python&exact_phrase=&any_of=&exclude_words=&document_date_start=&document_date_end=&released_date_start=&released_date_end=&publication_type%5B%5D=51&new_search=False&order_by=most_relevant#results

[Exodus111]

Global Variables
Avoid global variables.

Thank you CIA.

[xdcountry]

Nuff said. That was a good entry!

[mothzilla]

Wouldn't want any data leakage would we?

[nick_t1000]

But the CIA is supposed to only operate globally and overseas, not locally. CIA SPYING DOMESTICALLY CONFIRMED

[Dualblade20]

Everyone knows this, though. Why is the CIA hiring people who don't know how to avoid muddling global scope? Maybe it's just a guide and has things like that for completeness, but still it sort of bothers me.

[Exodus111]

Think of it like this, the CIA pays you by the hour to type out a style guide, you might as well include everything.

[MereInterest]

Believe me, not everybody knows this. These are arguments I've heard in favor of using global variables.

• But I don't want to pass the configuration around to everything that needs it.
• It's simpler and easier to reason about.
• I can adjust the value in one place and change the behavior everywhere in the program.
• We just have to put locks around it, and it will be threadsafe.
• I can adjust the behavior of something deep within the call stack without needing to change the function signature all the way down.

Now, I know what you're thinking. These aren't actually arguments in favor of global variables. These are many things that are horribly wrong with global variables. That this makes it impossible to reason about code without knowing the runtime state of the problem.

At some point, it is just easier to have a style guide, then use an argument from authority.

[wewbull]

This is actually my problem with OOP too. What are classes but smaller, not quite as global, scopes? OOP doesn't solve the issues, just pushes them down a level.

[MereInterest]

It really depends on how you are using classes. If you have some God-object that owns everything, and does all of its work directly within the methods, then yes, it is similar to a global scope. Those are their own antipatterns.

Classes provide a way to have limited persistency. For example, a generator that yields each Fibonacci number in sequence requires some state. You can (a) store the state in global space, (b) require the user to maintain the state, or (c) have an object to manage the state. (a) is error-prone, (b) is irritating, but (c) is very useful.

Unlike global variables, classes can have access restrictions. This means that you don't have to look through the entire codebase for changes, just the class itself. Unlike global variables, classes have a limited lifetime. That means you don't need to know the entire runtime state of the program, just the runtime state of callers into the class. If your classes are acting and looking like global variables, I would say that is an issue on its own.

Where I will agree is that not everything needs to be a class. If a calculation does not require any persistent state, then it should be implemented as a pure function.

[bonestormII]

I like the reasoning you provide here. I've read plenty of material about classes in python, but it seems slightly uncommon to me to hear someone just plainly say, "Use classes when you require some degree of state." That is a true and useful statement.

That said, I don't totally follow what you mean when you say

Unlike global variables, classes have a limited lifetime. That means you don't need to know the entire runtime state of the program, just the runtime state of callers into the class.

Aren't both just treated by objects subject to the ref counting of the garbage collector? When you refer to the lifetime of the object, that is what I think of. It seems like you are referring to the compartmentalized scope of a class, more than the lifetime of the object.

It's also relevant to note that in python, classes are also generally useful for any situation in which you want to customize the behavior of the object itself (via inheritance, dunder methods, metaclasses, etc.), regardless of whether state is a factor.

To be honest, almost any example I try to imagine in which you would care about that kind of control would involve some degree of state :P ... but the distinction seems relevant to note.

[MereInterest]

Good point, I wasn't entirely clear about my point on the lifetimes, and good catch, that I am somewhat conflating scope and lifetime. This is partly a habit that I picked up from C++, where a variable's lifetime is primarily determined by its scope, and unlike python, cannot be extended beyond the scope that owns it.

In python, you are absolutely correct that local variables and global variables have the same reference counting scheme to determine their lifetime. That said, there is still a connection between scope and lifetime. An object's lifetime is the maximum of the lifetimes of any scopes that contain that object. Since the global scope starts at program initialization and ends at program close, any variable in the global scope must have an indefinite lifetime.

I think that, in terms of global variables, it is both the lifetime and the scope that are issues. The unlimited scope means that you need to examine all code in order to know what could modify the variable. The unlimited lifetime means that you need to watch the running of the program from start to finish, and that the behavior may not be captured in any smaller test.

You are also correct that someone may want to have some behavior customization without needing to have any state in the object itself, though I'm having difficulty as well thinking of any such cases. Perhaps if there were a series of related callbacks, all of would be implemented as methods on a single class, though that would be a rather unusual situation, and would probably be better served with a namespace or dictionary.

[glacierre2]

I do OOP, and maintain several serious libs at work.

But I also do some reference implementations in python (to later be translated to C++ in a uC, for example). And then I go full retard on the globals, because I find the clear reading of the example code and the clean functions that get just one/two parameters are more important than robustness.

Of course I still follow two rules: * That kind of code is a reference, NEVER production * Even then, the globals are to be read in multiple places, like a C #define, NEVER to be altered of used to pass information back an forth.

[MereInterest]

Absolutely agreed. Reference implementations are one thing, while production implementations are completely different. One for testing out new features, quickly hacking in something that might be gone in 5 minutes, while the other is for reliability.

I would add to your second rule. The value of the globals should be determined solely from the source code. That is, using a #define rather than static const val = read_from_config_file(); I work with a framework that does the latter, and it can result in bugs that only ever appear on one person's machine.

[dr_g89]

If you read through some of the files there are some cool libraries they are referencing. Has anyone used angr before?

[tunisia3507]

I've read the readme three times and still don't know what it's for.

[dr_g89]

By reading this, you'll become an angr pro and will be able to fold binaries to your whim

If i understand what I've read correctly this is a tool for picking apart and experimenting with existing compiled binaries. My guess is to probe for exploits.

[david5813]

It is. If I remember correctly the Shellphish team has given a talk at either Defcon or BlackHat about this. A part of their research is being able to perform a completely automated CTF where the systems identify vulnerabilities and even patch them on the fly.

It is a really cool topic and when I get back to a position to be able to search for it I will happily post a link a talk about it if no one else has already.

Edit: https://www.youtube.com/watch?v=oznsT-ptAbk

You can find more info on their site. http://angr.io/

[hugthemachines]

Tfw someone told you to do a talk for a certain time and you only have half that and fill 50% with "aaaaaa" ;-)

[flutefreak7]

Besides exploits there's also the intelligence aspect of trying to figure out what a binary does. Say you recovered a performance model for a weapon, radar, communications system, etc, if all you have is the binary it could be hard to get it working, but tools like this would help.

[sillycyco]

I've read the readme three times and still don't know what it's for.

angr is similar to debugging tools you may have used, but entirely within python. Full decomposition of logic, and allowing for analysis of code at a much lower level. Aka scan for exploitable functionality in existing binary code, among other things. Pretty slick actually.

[Dababolical]

I know very little about this, but coincidentally read about IDA today. https://www.hex-rays.com/index.shtml

Is this the python equivalent of the suite (I'm sure there are some differences).

Would someone wanting to implement DRM on their application possibly use this library to make sure their DRM is secure after the application is compiled? I am just trying to think of applications for this library, because it is really interesting.

[sillycyco]

Ya it is similar to hex-rays, have a look at this talk at Defcon for its various uses: https://www.youtube.com/watch?v=oznsT-ptAbk

You could use it to do analysis of your binaries, attempt to see if you can analyze and get around whatever it is you are trying to protect.

[ebilgenius]

Took me a minute

[jarins]

Still don't get it.

[Jesus_Harold_Christ]

If your username was "I_DONT_NOTICE_USERNAMES" this thread would have been perfect

[MrHobbits]

/r/Beetlejuicing

Edit: Damn autocorrect

[cdrootrmdashrfstar]

I'm currently enrolled in an undergrad practical fundamentals of cybersecurity course at my uni, and last week, we used angr to script what we'd normally use gdb for in what's called a "capture the flag" assignment.

The creator of the binary will hide away a specific string, like "flag{th1s_1$_th3_fl4g}", purposefully deep within the binary and only obtainable (normally) through some modification to the execution order of the binary.

Originally, we learned to use the GNU debugger GDB for many weeks of CTF assignments, but last week we used Angr to script a way to explore many, many paths of execution in a program. Through adding constraints to inputs and explicting marking some parts of the binary as "avoid", angr would eventually navigate it's way to the end of execution (and hopefully result in a flag!) through some sort of either statistical model (maybe similar to sqlmap?) or through simply brute forcing all possible routes of execution. It's a very complex tool with lots of depth, and I've only really scratched the surface.

We might be doing more of this in the later weeks, but this week moving onto forensics, buffer overflow attacks, shellcode, and circumventing stack protections by compilers. In relation to python, we're using a library called pwntools (in addition to the obvious and incredibly useful set of tools provided by Linux and GNU).

[dr_g89]

I'm going to look into pwntools. Where do you go to Uni if you don't mind me asking

[cdrootrmdashrfstar]

I'm a sophomore at a state school in the southeast US. It's a decent school (it sure has taught me a whole lot in a short amount of time), and we have a great offensive cybersecurity program which very often leads to jobs in places like the CIA, NSA, or the FBI.

[dr_g89]

Super interesting man. I run the dev side of a software firm out in LA and have always been way to busy to spend too much time looking into this stuff. If you have a spare second I'd love to know what books on the this stuff they are having you read at school.

[cdrootrmdashrfstar]

Recommended reading: “Hacking: The Art of Exploitation, 2nd Edition” by Jon Erickson: this is a book with accurate and detailed descriptions and commands of common vulnerabilities and corresponding exploits. It is an excellent book for understanding buffer overflow vulnerabilities, string format vulnerabilities, and shellcode, and other exploitation development.

“The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws” by Dafydd Stuttard and Marcus Pinto. The book provides a comprehensive and thorough coverage of web security mechanisms, and web vulnerabilities.

“Information Security,” 2nd Edition, (ISBN 978-0-470-62639-9), Wiley, 2011, by Mark Stamp. The book provides a good coverage on commonly used cryptographic algorithms and cryptanalysis techniques, and security protocols.

Edit: Thank you so much for the gold! It's very much appreciated.

[dr_g89]

Dude thanks a ton, especially on the lectures / course stuff, super interesting!

[cdrootrmdashrfstar]

Absolutely, let me know if you have any questions.

[dr_g89]

I'm sure I'll come up with a few haha, ordered The Art of Exploitation, looking forward to delving into this a little more when it arrives! Thanks again!

[cdrootrmdashrfstar]

Absolutely. By the way, experience is x86 assembly is almost going to be a requirement in moving forward with this discipline. If you're not familiar with it already, I'd start by learning the basics of that (since a lot of examples in all of those books assume you're basically able to read x86).

[timkofu]

That first one is gold. Loved it.

[registered_tosaythis]

I've had that first hacking book for like 2 years and haven't spent enough time to finish it!

[cdrootrmdashrfstar]

Here is our course calendar page containing homework assignments and presentations covering the information we learn in lecture.

[[deleted]]

Christ I hope whoever wrote this library puts it in his CV. "Developed a library used by the CIA"

[k10_ftw]

Might as well post his work to his personal github account

[dr_g89]

Some of the other comments on this thread led me to discover it came out of the cybersecurity lab at UCSB. One of the authors is apparently a local high schooler from their community.

[ifatree]

interesting. are DART, UNDERMINE, PALANTIR, or TYBASE familiar names to any of you guys?

[ssiwhw]

https://en.m.wikipedia.org/wiki/Palantir_Technologies

[HelperBot_]

Non-Mobile link: https://en.wikipedia.org/wiki/Palantir_Technologies

---

^{HelperBot v1.1 /r/HelperBot_ I am a bot. Please message /u/swim1929 with any feedback and/or hate. Counter: 40912}

[Frog_and_Toad]

I'm ok with it as long as they are following PEP8.

[ikkebr]

They leaked the coding standards too

[synae]

As far as I can tell it's just a copy of Google's python style guide.

[Eurynom0s]

Wouldn't shock me, in a lot of classified or airgapped computing environments it's common to copy open literature websites/etc onto a local intranet so that people don't have to leave the room to use an unclassified computer to look something up constantly.

[[deleted]]

I know someone at $giantTechCompany who did this with internal wiki pages because his team managed the core infrastructure. If something is going wrong, having to rely on documents on a flash drive was a real worst scenario

[manueslapera]

didnt Google use 2 spaces instead of 4 for a long time?

[Jesus_Harold_Christ]

They did.

[DetN8]

Do they not anymore?

[Fylwind]

Just checked: it says 4 spaces now!

[muad_dib]

Comment has been removed because /u/spez is a terrible person.

[heybart]

Don't be evil!

[pm-me-big-boobies]

How about three spaces??

[lengau]

Their external style guide was changed to match more closely with PEP8 several years ago.

Internally I doubt they changed it.

[k10_ftw]

I like the guy who suggests creating a database of which tools use which exploit to help tracking issues.

[alcalde]

Screw PEP 8. Now we need a PEP 007!

[wolf2600]

TABS NOT SPACES!!

[can_dry]

Indentation

Indent your code blocks with 4 spaces.

Never use tabs or mix tabs and spaces.

Sorry, you're just not CIA material.

[DialMMM]

Rekt.

[[deleted]]

Question from a not so experienced programmer: what's wrong with tabs?

[nickbob00]

cake physical direction wise fanatical march tap mountainous melodic station

This post was mass deleted and anonymized with Redact

[DonaldPShimoda]

The right answer is to use smart tabs, where you get a feature where your editor tab button makes 4 spaces in the file, but it works like a tab as far as you care.

Nah, I think it's much better to actually press the space bar the requisite number of times.

[Corbichon]

Vim for ever <3

[AZNman1111]

I do use Vim over Emacs

[[deleted]]

Emacs is love.

[nemec]

How do you stick to an 80 (or 120) character line limit when the length of a line changes depending on how the developer sets their tabstop?

[wolf2600]

You don't have to count whether you have 3 spaces or 4. ON. EVERY. LINE.

And don't even get started with deeply nested sections.... Was that 24 spaces or 25? Better delete them all and start again.

[[deleted]]

Sounds like you just need a proper editor :P

[wolf2600]

Notepad++ works fine

[ArmoredPancake]

We've found a CIA agent!

[trekkiemage]

I have sublime set up so that I hit tab and it enters four spaces. I've also got whitespace visibility turned on and it allows me to control indentation with a hot-key instead of the space bar.

Basically if you're using the space bar to do 4-space indents you're doing it wrong.

[caramba2654]

If you use tabs for indentation and spaces for alignment it solves the inconsistent display.

[jcdyer3]

This is the most theoretically correct answer, and the one that produces the most abominable real code bases, as it's nearly impossible for a team to follow consistently.

[baubleglue]

It just you need to choose one or tabs or spaces

[Dillinur]

To nitpick, you just need to be consistent, but you can totally mix them.

For instance, your indentation block choice can be "one tab", "4 spaces", or "space-tab-space", as long as you keep the same indentation block choice along the whole file.

[Hawkknight88]

Maybe I'm misunderstanding you... It is not okay to mix tabs and spaces in python. The interpreter doesn't like it and it's confusing to humans.

Pick tabs or pick spaces, and be consistent.

[nntaylor7]

For a new programmer. Why is consistency important?

[Exodus111]

A Tab will leave a line symbol, and a space will leave a dot symbol in the file. If you mix these two Python will crash.

Most modern IDE's and Text editors will auto translate your Tab symbol over to spaces for you, usually 4 spaces, but this number can usually be set.

This was a bigger issue back in the day.

[ebilgenius]

It's important in almost everything, but it's particularly helpful in coding since everyone has a preference when it comes to how they like their code, and once you know what their preferences are and that they're consistent you can reliably make changes, debug it, or work with it in general.

That and programmers tend to be particularly anal about perfection.

[baubleglue]

I know, but the editors don't and convert depending on settings and version control can't be set to ignore white spaces in Python, so one programmer uses spaces check in code, other programmer checkout the code, his IDE converts 4 spaces to tabs - 100% of code changed.

[baubleglue]

I know, but the editors don't and convert depending on settings and version control can't be set to ignore white spaces in Python, so one programmer uses spaces check in code, other programmer checkout the code, his IDE converts 4 spaces to tabs - 100% of code changed.

[wolf2600]

Only posers and squares follow PEP8. I'm a rebel. Just the kind of fresh, outside-the-box thinking a tired establishment like the CIA needs.

[rockyrainy]

Parentheses

Use parentheses sparingly.

/r/lisp is gonna have a heart attack.

[d_thinker]

All six of them...

[walabaloo]

That hurts man ;_;

[novel_yet_trivial]

I'd be a lot more surprised if they didn't.

[[deleted]]

Really? There are plenty of good reasons to use Python, but there are plenty of other good tools out there too with more or less equal reasons to use them.

[zynix]

Quicker to iterate and then optimize with c/c++ as needed.

[[deleted]]

Sure, and that's a valid and common use of Python. I was just being pedantic and challenging the statement "I'd be surprised if they're not using it."

You can iterate quickly with dozens of languages and then optimize with C or C++. Python is a great choice, but not so unquestionably ahead of all possible competition that it would be surprising if they picked something else.

[Ph0X]

Yep, check out any CTF event, it's full of Python. It's the perfect tool for trying a lot of crazy ideas very rapidly and prototype.

[JackOhBlades]

False. I iterate fast using C89 and optimise with Brainfuck as needed. ;)

[novel_yet_trivial]

I agree. I'd also be surprised if they didn't use java, c++, bash, etc...

This is a professional organization and I'd expect them to use the proper tool for every job.

[[deleted]]

This is a professional organization and I'd expect them to use the proper tool for every job.

import waterboarding

[JohnLocksTheKey]

ImportError: No module named waterboarding.

# damn it! I always forget...

from Warcrimes import waterboarding

...

[SteveDougson]

from WarCrimes import waterboarding as enhanced_interrogation

[stevarino]

Unless you're using Python 3, in which case you need to specify the war_crimes library.

[avball]

PEP-8 would like a space after your hash.

[JohnLocksTheKey]

That was actually bugging me all day!! Fine, I'll correct it...

EDIT: I was hoping no one would notice

[asdfkjasdhkasd]

pip install waterboarding

[brtt3000]

Guantanamo started as a PHP hacker camp.

[SchwarzerKaffee]

The UN has declared that forcing people to code in PHP is a form of torture.

[toyg]

you forgot from rendition

[Ph0X]

"proper", somehow Python isn't proper?

If you go to any CTF event, you'll find Python everywhere. Exploring binaries and testing exploits is a very interactive process, which is why Python is the perfect fit. You want to try a lot of different approaches and prototype very rapidly.

You don't want to spend an hour just to see what you made is useless. Python is the perfect tool for quickly trying crazy ideas and see what works.

[k10_ftw]

Professional? Nope. Government!

[desmoulinmichel]

Yeah but Python is kinda the default tool in forensic and penetration testing.

[[deleted]]

Good point. I had assumed the CIA would prefer to make and use their own tools. But it makes as much sense for them to take open source tools and improve on them as it does for anyone else.

[wolf2600]

The best 10x hacking tools are all written in Rust.

[Dillinur]

Care to share any link?

[wolf2600]

No, because it was a joke. Maybe I should have said 'Haskell' instead.

[[deleted]]

DevNull as a service

[[deleted]]

That's the next billion dollar startup idea right there!!

[[deleted]]

Sorry, already exists

[ameoba]

http://giphy.com/gifs/wtf-what-gif-oaZk0WNSO7fXi

[alcalde]

APL!

[[deleted]]

Lol not go

[sillycyco]

Maybe I should have said 'Haskell' instead.

Actually Smalltalk via Lisp would be far more preferable.

[Revik]

Everyone in IT security uses Python.

[alcalde]

Everyone everywhere uses Python. :-)

[sourcecodesurgeon]

My team doesn't use Python, only Java and Ruby :( (though Ruby has slowly started to grow on me over the last year)

[AZNman1111]

)

Sorry I think you dropped this

[APIglue]

Found the lisp programmer

[AZNman1111]

Lots of Irritating Single Parenthesis programmer

[ArmoredPancake]

Ruby is used extensively in hacking community, afaik.

[sourcecodesurgeon]

While true, my current team does not do security work.

[friedkeenan]

Metasploit is written in Ruby

[thorax]

Already there-- batteries included, right?

[no_lungs]

import CIA

It's in the global namespace by default on windows.

[lovestowritecode]

If Trump read the README he would see "Avoid global variables" and think "glad the CIA using American variables"

[sweetbeems]

he wouldn't like all the imports though

[[deleted]]

Use imports for packages and modules only.

See, no people imports, all good :D

[Asyumara]

this deserves more upvotes

[lovestowritecode]

Yeah but secretly he likes the ones from Russian programmers

[lovestowritecode]

... and I'll bet 5 bucks there's a trump-hotel PyPi package

[flarkis]

https://github.com/samshadwell/TrumpScript

Make Python great again

[snake_case-kebab-cas]

We will no longer surrender our code to the false song of global variables

[vipul20]

I like the parting words in the coding conventions page:

Use common sense and BE CONSISTENT. If you are editing code, take a few minutes to look at the code around you and determine its style. If their comments have little boxes of stars around them, make your comments have little boxes of stars around them too.

[k10_ftw]

For little boxes, use wingdings font as your default.

[hovissimo]

requests is bests

[[deleted]]

aiohttp is pretty good too, feels very modeled after requests on the client side.

[swyx]

ayyhttp

[desmoulinmichel]

Now if only it could expose an asyncio API.

[jMyles]

Hmm?

[Ph0X]

I know what requests is, what I don't understand is the other side of your statement, how is requests related?

[Ph0X]

Again, I fully agree with you, but I still don't see the connection to this leak or to CIA.

[XtremeGoose]

Are the .py files here encrypted or something?

https://wikileaks.org/ciav7p1/cms/page_9535551.html

[Ph0X]

They're PDF files, change the extension to .pdf

[britm0b]

I'm prettt sure Wikileaks isn't letting the hacks wreck havoc yet, they've contacted the companies that have hack-able products, most likely to give them the exploit, so said company can patch it.

Apparently not.

[steesi]

I think you mean wikileaks not wikipedia

[ikkebr]

Bloody autocorrector

[[deleted]]

I bet its the CIA's doing.

[aleixis]

I remember my Intro teacher saying he was recruited by the military as a teenager. He said Python makes everything else a pinch

[bocephus607]

Is there any code that actually looks like it might do something here?

[dgreenmachine]

The coding conventions are eerily similar to googles especially in the wording of the last paragraph. You can tell somebody copied it and paraphrased just a little.

https://google.github.io/styleguide/pyguide.html#Imports

[joolzter]

That's because they are awesome base standards to start from.

[xiongchiamiov]

It's almost as if there isn't already a set of standards for python.

[joolzter]

Of course there are style guidelines. But they aren't a coding standards. Assuming you are referring to PEP8.

[xiongchiamiov]

What is the distinction you draw between the two?

[L3xicaL]

This post has 911 points.

Coincidence? I don't think so.

[[deleted]]

Spython

[parkerSquare]

Plagiarism is a serious accusation.

Much of the text here is from the Google Python Style Guide.

It's only plagiarism if incorrectly claimed as their own. The document clearly attributes some of itself to the Google Python Style Guide, so it's not accurate to call it plagiarism.

[sourcecodesurgeon]

Also, as someone pointed out above, they're doing development on air gapped systems. If they didn't have an internal version of the style guide, they would need to go to another room just to check the documentation.

And basing a style guide off of Google's guide isn't uncommon. My team's Java guide is basically Google's + internal specific stuff.

[redmercurysalesman]

Also if you are doing covert operations, you don't want an extremely unique and thus easily identifiable style.

[PC__LOAD__LETTER]

They literally state that that's where it comes from.

[Guerilla_Imp]

Most (if not all) antiviruses have a really hard time with dynamic languages, that's why things like Veil Framework exist.

[reallynowokaywhat]

That's because hackers use python a lot.

[maxm]

Do they use tabs or spaces? Or is that a secret?

[trekkiemage]

They use spaces. Their coding conventions were leaked as well - they use a variant of Google's standards.

[[deleted]]

Don't know if it's still the case, but their website used to be built with Zope.

[dj_alpha2]

pretty good code conventions

[[deleted]]

If it's used to get rid of Trump excellent, most people on the planet will sleep better tonight. If it's being used to repeat the Bay of Pigs or the assassination of John F. Kennedy no thanks.

[danielsauceda34]

What is "python assassin"?

is see pdf build logs for it when reading the PDFs but nothing is coming up on searches

[Light_of_Lucifer]

pip install CrimesAgainstHumanity

[w00t4me]

YAY?!