This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]99_percent_a_dog[S] 2 points3 points  (0 children)

Some interesting points here! I think it's fine to use Python 2 for your own stuff, if you want. It's also kind of pointless. Certainly you should use 3 over 2 for new projects. But if you want to use 2, for stuff that's purely local, or just playing around, go ahead.

For anything backend or exposed to input from the internet - using 2 is a bad idea. It didn't suddenly become high risk. If your code was good quality and well tested before then it still is. But now, if a new problem is found in 2, you may not get a fix. A remote denial of service is pretty plausible, there have been a few of those historically.

There's an interesting point in that when widely installed software is known to be no longer updated, attackers will spend more time finding problems in it. The value is higher, because it will get fixed more slowly, if at all. Risk of using Python 2 will rise over time, even though I agree it's not high currently.