Add PyCon US 2026

pycon-us-2026/category.json

@@ -0,0 +1,3 @@
+{
+  "title": "PyCon US 2026"
+}

pycon-us-2026/videos/2026-python-steering-council-panel.json

@@ -0,0 +1,27 @@
+{
+  "description": "The Python Steering Council is a 5-person elected committee that assumes a mandate to maintain the quality and stability of the Python language and CPython interpreter, improve the contributor experience, formalize and maintain a relationship between the Python core team and the PSF, establish decision making processes for Python Enhancement Proposals, seek consensus among contributors and the Python core team, and resolve decisions and disputes in decision making among the language.\n\nPresented by: Barry Warsaw, Donghee Na, Pablo Galindo Salgado, Savannah Ostrowski, Thomas Wouters",
+  "duration": 1882,
+  "language": "eng",
+  "recorded": "2026-05-17",
+  "related_urls": [
+    {
+      "label": "Conference Website",
+      "url": "https://us.pycon.org/2026/"
+    }
+  ],
+  "speakers": [
+    "Barry Warsaw",
+    "Donghee Na",
+    "Pablo Galindo Salgado",
+    "Savannah Ostrowski",
+    "Thomas Wouters"
+  ],
+  "thumbnail_url": "https://i.ytimg.com/vi/arE9g0uMDq4/hqdefault.jpg",
+  "title": "2026 Python Steering Council Panel",
+  "videos": [
+    {
+      "type": "youtube",
+      "url": "https://www.youtube.com/watch?v=arE9g0uMDq4"
+    }
+  ]
+}

pycon-us-2026/videos/a-bridge-over-not-troubled-waters-collecting-marine-data-from-your-couch.json

@@ -0,0 +1,27 @@
+{
+  "description": "Do you ever have a weird feeling that something around you is off? I certainly do, and one recurring thought I have is that the vintage boat I'm helping restore has sunk. I decided to use the tools available to me to put my mind at ease: software, a soldering iron, and stubbornness. My crewmate and I have built a way to get live data from our boat while on the couch at home at 3 am :) Data is a great way to reduce anxiety, and in this case has also generated a rising tide of interest in marine tech infrastructure. In this talk, we will give you a tour the cool Python and OSS tools we have discovered for collecting telemetry on boats, a specialized marine data collection platform (Signal K), and an MQTT bridge to bring it all into our smart home dashboards on Home Assistant.",
+  "duration": 1830,
+  "language": "eng",
+  "recorded": "2026-05-17",
+  "related_urls": [
+    {
+      "label": "Conference Website",
+      "url": "https://us.pycon.org/2026/"
+    },
+    {
+      "label": "Presentation Webpage",
+      "url": "https://us.pycon.org/2026/schedule/presentation/125/"
+    }
+  ],
+  "speakers": [
+    "Sarah Kaiser"
+  ],
+  "thumbnail_url": "https://i.ytimg.com/vi/5QQKRTlau4Y/hqdefault.jpg",
+  "title": "A bridge over (not) troubled waters: Collecting marine data from your couch",
+  "videos": [
+    {
+      "type": "youtube",
+      "url": "https://www.youtube.com/watch?v=5QQKRTlau4Y"
+    }
+  ]
+}

pycon-us-2026/videos/ai-assisted-contributions-and-maintainer-load.json

@@ -0,0 +1,27 @@
+{
+  "description": "AI tools are increasingly used by contributors to read code, explore codebases, and generate changes. Across many open source projects, this is already affecting how issues are opened and pull requests are submitted. While AI can help people get started, it also creates new challenges for maintainers.\n\nThis talk is grounded in real discussions and concrete examples from the open source community. Maintainers in projects such as GNOME, OCaml, Python, and Django have reported similar patterns: large or unnecessary AI-generated changes, missing design discussion, references to non-existent APIs, and contributions that are technically correct but hard to review and maintain. In many cases, the workload shifts from contributors to already time-constrained maintainers.\n\nThe focus of this talk is not whether AI should be allowed or banned. The shared concern emerging from these communities is about responsibility. Problems arise when AI replaces understanding, testing, and human accountability, breaking the social processes that open source relies on.\n\nThe talk also looks at how projects are trying to respond. Some are adding documentation, review rules, or disclosure requirements, while others are starting broader discussions around governance, sustainability, and legal risk. These efforts show that the problem goes beyond individual pull requests.\n\nRather than offering simple answers, this talk aims to share the real questions the community is actively asking, and to help contributors and maintainers think more clearly about the future role of AI in Python open source.",
+  "duration": 1864,
+  "language": "eng",
+  "recorded": "2026-05-15",
+  "related_urls": [
+    {
+      "label": "Conference Website",
+      "url": "https://us.pycon.org/2026/"
+    },
+    {
+      "label": "Presentation Webpage",
+      "url": "https://us.pycon.org/2026/schedule/presentation/105/"
+    }
+  ],
+  "speakers": [
+    "Paolo Melchiorre"
+  ],
+  "thumbnail_url": "https://i.ytimg.com/vi/EKayPgbD6J0/hqdefault.jpg",
+  "title": "AI-Assisted Contributions and Maintainer Load",
+  "videos": [
+    {
+      "type": "youtube",
+      "url": "https://www.youtube.com/watch?v=EKayPgbD6J0"
+    }
+  ]
+}

pycon-us-2026/videos/anatomy-of-a-phishing-campaign.json

@@ -0,0 +1,27 @@
+{
+  "description": "In July 2025, PyPI users received emails directing them to pypj.org\u2014a near-perfect clone transparently proxying requests to pypi.org. Within hours, attackers compromised four accounts and uploaded malicious releases of the popular num2words package.\n\nThis talk dissects the complete attack chain: how attackers harvested email addresses from public package metadata, built a transparent proxy that relayed TOTP codes in real-time, and why traditional 2FA failed while WebAuthn-based authentication stopped the attack cold.\n\nThe session covers the incident response timeline, challenges getting malicious infrastructure taken down (including initial rejection of abuse reports), and defensive measures deployed afterward\u2014including new email verification for TOTP logins from unrecognized devices.\n\nAttendees will learn exactly how modern phishing attacks work against package repositories, the critical difference between \"phishable\" and \"phishing-resistant\" 2FA, and practical steps to protect accounts and packages from the next campaign. The talk also examines the September 2025 follow-up campaign targeting pypi-mirror.org and patterns across these ongoing attacks.",
+  "duration": 1845,
+  "language": "eng",
+  "recorded": "2026-05-16",
+  "related_urls": [
+    {
+      "label": "Conference Website",
+      "url": "https://us.pycon.org/2026/"
+    },
+    {
+      "label": "Presentation Webpage",
+      "url": "https://us.pycon.org/2026/schedule/presentation/74/"
+    }
+  ],
+  "speakers": [
+    "Mike Fiedler"
+  ],
+  "thumbnail_url": "https://i.ytimg.com/vi/uXW1qeUS6Yw/hqdefault.jpg",
+  "title": "Anatomy of a Phishing Campaign",
+  "videos": [
+    {
+      "type": "youtube",
+      "url": "https://www.youtube.com/watch?v=uXW1qeUS6Yw"
+    }
+  ]
+}

pycon-us-2026/videos/asegurando-y-protegiendo-aplicaciones-python-con-open-keycloak.json

@@ -0,0 +1,26 @@
+{
+  "description": "#### Contexto\nActualmente se est\u00e1n desarrollando un sin fin de aplicaciones web basadas en Python con frameworks y librer\u00edas como Django y Flask, o gestores de contenido y herramientas para aplicaciones interactivas como Wagtail y Streamlit, incluso backends con FastAPI. \u00bfPero c\u00f3mo podemos proteger, con mecanismos de autorizaci\u00f3n y autenticaci\u00f3n (hasta MFA), estas aplicaciones y sistemas desarrollados con Python?\n\n#### Propuesta\nLa popularidad del gestor de accesos e identidades Open Keycloak aumenta m\u00e1s y m\u00e1s en la comunidad, incluso Red Hat lo adopt\u00f3 para la plataforma de infraestructura que ofrece comercialmente. Se trata de una soluci\u00f3n muy potente que permite asegurar cualquier tipo de aplicaci\u00f3n, incluso aplicaciones Python. \u00bfPor qu\u00e9 no blindar y robustecer nuestras aplicaciones desarrolladas en Python con un Single Sign-On como Open Keycloak? Conozcamos c\u00f3mo asegurar de mejor forma nuestras aplicaciones Python con esta gran herramienta, un proyecto soportado y mantenido por la CNCF.\n\n#### \u00bfQu\u00e9 aprender\u00e1s?\nEn esta charla abordaremos qu\u00e9 es Open Keycloak, c\u00f3mo funciona, y algunos de los enfoques m\u00e1s pr\u00e1cticos para integrarlo con aplicaciones desarrolladas en nuestro lenguaje favorito: Python. Incluye demo en AWS.\n\n#### \u00bfPara qui\u00e9n es?\nCualquier persona que est\u00e9 desarrollando e implementado aplicaciones Python y tenga inter\u00e9s en entender c\u00f3mo funcionan las soluciones de Single Sign-On que proveen autenticaci\u00f3n y autorizaci\u00f3n a aplicaciones que utilizan protocolos como OpenID Connect, OAuth 2.0, y SAML.",
+  "duration": 989,
+  "language": "spa",
+  "recorded": "2026-05-15",
+  "related_urls": [
+    {
+      "label": "Conference Website",
+      "url": "https://us.pycon.org/2026/"
+    }
+  ],
+  "speakers": [
+    "Samuel Palacios"
+  ],
+  "tags": [
+    "charla"
+  ],
+  "thumbnail_url": "https://i.ytimg.com/vi/BYzqLBkqDaw/hqdefault.jpg",
+  "title": "Asegurando y Protegiendo Aplicaciones Python con Open Keycloak",
+  "videos": [
+    {
+      "type": "youtube",
+      "url": "https://www.youtube.com/watch?v=BYzqLBkqDaw"
+    }
+  ]
+}

pycon-us-2026/videos/asleep-at-the-wheel-getting-your-sboms-to-pay-attention-to-python-builds.json

@@ -0,0 +1,28 @@
+{
+  "description": "Full talk title: \"Asleep at the Wheel: Getting your SBOMs to pay attention to Python Builds\"\n\nBetween competing standards, tools, and compliance-checkboxes, developers are effectively told to \u201cgenerate an SBOM\u201d and move on. Security teams are told to trust this SBOM implicitly. When that SBOM is incomplete or inaccurate, the result is noise that creates a real security risk. Vulnerabilities can go undetected, where teams cannot confidently determine their exposure, and the compliance reviews/tools have to work with incomplete evidence of what actually happened.\n\nIn the Python ecosystem, this problem is common. SBOMs rely solely on scanning environments and trusting declared dependencies. This model breaks often and silently, Python wheels for example include more dependencies than the metadata reveals - bundled libraries, vendored code, and build-time artifacts are often undetected. These missing components cause security teams to miss vulnerable components entirely and approve builds that violate organizational policy.\n\nThis talk introduces SBOMit, an OpenSSF project which closes SBOM blind spots by generating SBOMs from build evidence rather than metadata alone. SBOMit consumes in-toto attestations and breaks the reliance on idealised assumptions and addresses the gaps of traditional SBOM tools. SBOMit asks the important question: \u201cWhat did the build actually do?\u201d. What commands it ran, files it accessed, and network calls it made. This approach lets us use CI attestations and provenance as a further source of truth.\n\nIn this talk, we examine the gaps in today\u2019s SBOM generation approaches and how they affect Python ecosystem. We walk through SBOMit\u2019s architecture and how it provides a workflow to plug into your SBOM generation process. Finally, we\u2019ll demonstrate how evidence-based SBOMs can be turned into enforceable CI policies for example preventing unexpected network access during builds or detecting unexplained files in final artifacts. SBOMit transforms your SBOM from a background actor to an active member of your supply-chain security toolkit.",
+  "duration": 1932,
+  "language": "eng",
+  "recorded": "2026-05-16",
+  "related_urls": [
+    {
+      "label": "Conference Website",
+      "url": "https://us.pycon.org/2026/"
+    },
+    {
+      "label": "Presentation Webpage",
+      "url": "https://us.pycon.org/2026/schedule/presentation/116/"
+    }
+  ],
+  "speakers": [
+    "Sanchit Sahay",
+    "Abhishek Reddypalle"
+  ],
+  "thumbnail_url": "https://i.ytimg.com/vi/VYY3HnRtV6U/hqdefault.jpg",
+  "title": "Asleep at the Wheel: Getting your SBOMs to pay attention to Python Builds",
+  "videos": [
+    {
+      "type": "youtube",
+      "url": "https://www.youtube.com/watch?v=VYY3HnRtV6U"
+    }
+  ]
+}

pycon-us-2026/videos/beyond-rate-limiting-adaptive-security-for-python-web-applications.json

@@ -0,0 +1,27 @@
+{
+  "description": "Modern web abuse rarely looks like a traditional attack. Bots scrape content slowly, spam blends in with real users, and malicious clients often behave just well enough to avoid static rules. Many Python web applications rely on rate limiting, IP blocking, or simple pattern matching, which can miss these kinds of threats or create unnecessary false positives.\n\nThis talk explores a behavior-based approach to securing Python web applications using lightweight AI techniques that run directly inside application middleware. Rather than focusing on heavy models or external security services, the session looks at how Python developers can use signals they already have, request timing, headers, paths, and error patterns, to detect abuse more reliably.\n\nThe ideas in this talk are drawn from building and testing adaptive security middleware across multiple Python web frameworks, including Django, Flask, and FastAPI. Attendees will learn what signals are useful, where AI helps, where it doesn\u2019t, and how to design security systems that fail safely and respect user privacy.",
+  "duration": 1036,
+  "language": "eng",
+  "recorded": "2026-05-16",
+  "related_urls": [
+    {
+      "label": "Conference Website",
+      "url": "https://us.pycon.org/2026/"
+    },
+    {
+      "label": "Presentation Webpage",
+      "url": "https://us.pycon.org/2026/schedule/presentation/61/"
+    }
+  ],
+  "speakers": [
+    "Aayush Gauba"
+  ],
+  "thumbnail_url": "https://i.ytimg.com/vi/J3A-LReijws/hqdefault.jpg",
+  "title": "Beyond Rate Limiting Adaptive Security for Python Web Applications",
+  "videos": [
+    {
+      "type": "youtube",
+      "url": "https://www.youtube.com/watch?v=J3A-LReijws"
+    }
+  ]
+}

pycon-us-2026/videos/beyond-the-hype-a-pragmatic-look-at-how-developers-actually-use-ai-tools.json

@@ -0,0 +1,32 @@
+{
+  "description": "Panel Members: Carol Willing, Catherine Nelson, Jelle Zijlstra, Jodie Burchell, La\u00eds Carvalho, Maike Scherer\n\nAI tooling is evolving faster than most teams can evaluate it, leaving developers caught between real productivity gains, constant change, and growing fatigue. Five practitioners \u2014 spanning open-source, data science, developer relations, and production engineering \u2014 share what actually works, what they've abandoned, and how they decide what's worth learning next. Attendees will leave with workflow patterns worth stealing, a sharper sense of which tools deserve their attention, and honest advice for developers at any career stage.",
+  "duration": 1924,
+  "language": "eng",
+  "recorded": "2026-05-15",
+  "related_urls": [
+    {
+      "label": "Conference Website",
+      "url": "https://us.pycon.org/2026/"
+    },
+    {
+      "label": "Presentation Webpage",
+      "url": "https://us.pycon.org/2026/schedule/presentation/172/"
+    }
+  ],
+  "speakers": [
+    "Carol Willing",
+    "Catherine Nelson",
+    "Jelle Zijlstra",
+    "Jodie Burchell",
+    "La\u00eds Carvalho",
+    "Maike Scherer"
+  ],
+  "thumbnail_url": "https://i.ytimg.com/vi/9VW_5SaeILs/hqdefault.jpg",
+  "title": "Beyond the Hype: A Pragmatic Look at How Developers Actually Use AI Tools",
+  "videos": [
+    {
+      "type": "youtube",
+      "url": "https://www.youtube.com/watch?v=9VW_5SaeILs"
+    }
+  ]
+}

pycon-us-2026/videos/beyond-the-p-value-a-data-scientists-guide-to-tier-1-feature-launches.json

@@ -0,0 +1,27 @@
+{
+  "description": "In a perfect world, every feature launch is a clean A/B test with a clear winner. In the world of high-growth platforms like Meta, Coinbase, and Loom, launches are messy. Users influence one another through network effects, selection bias skews your metrics, and a simple t-test often hides more than it reveals.\n\nThis talk walks through the anatomy of a \"Launch Post-Mortem\" using a Jupyter Notebook. We will move beyond basic statistical significance to explore how to handle the complexities of real-world growth data.\n\nAttendees will learn how to use Python libraries like CausalML and PyMatch to account for user behavior bias and network interference, ensuring that \"winning\" features actually drive long-term value.",
+  "duration": 1440,
+  "language": "eng",
+  "recorded": "2026-05-15",
+  "related_urls": [
+    {
+      "label": "Conference Website",
+      "url": "https://us.pycon.org/2026/"
+    },
+    {
+      "label": "Presentation Webpage",
+      "url": "https://us.pycon.org/2026/schedule/presentation/69/"
+    }
+  ],
+  "speakers": [
+    "Jyoti Yadav"
+  ],
+  "thumbnail_url": "https://i.ytimg.com/vi/bZNX6Cuj-1A/hqdefault.jpg",
+  "title": "Beyond the P-Value: A Data Scientist\u2019s Guide to Tier-1 Feature Launches",
+  "videos": [
+    {
+      "type": "youtube",
+      "url": "https://www.youtube.com/watch?v=bZNX6Cuj-1A"
+    }
+  ]
+}

pycon-us-2026/videos/brains-and-explosions-a-simple-vdb-writer-for-python.json

@@ -0,0 +1,27 @@
+{
+  "description": "VDB is a volumetric data format. Commonly used in films and video-games, it is also great for rendering scientific data. However, the current open source standard is poorly documented, requires a docker container to run, and contains a ton of code that is unneeded outside of niche graphics applications. As a result, many scientific visualization artists must rely on closed-source commercial software: leading to citation and reproducibility issues. To solve these problems, I built Neurovolume: a low-dependency, Python library for writing VDBs. This talk spans Zig/Python interoperability, satellite data, big spinning magnets, dead salmon, and Blender plugins.",
+  "duration": 1710,
+  "language": "eng",
+  "recorded": "2026-05-17",
+  "related_urls": [
+    {
+      "label": "Conference Website",
+      "url": "https://us.pycon.org/2026/"
+    },
+    {
+      "label": "Presentation Webpage",
+      "url": "https://us.pycon.org/2026/schedule/presentation/55/"
+    }
+  ],
+  "speakers": [
+    "Joachim Pfefferkorn"
+  ],
+  "thumbnail_url": "https://i.ytimg.com/vi/a8Fy4kk2xFY/hqdefault.jpg",
+  "title": "Brains and Explosions: A Simple VDB Writer for Python",
+  "videos": [
+    {
+      "type": "youtube",
+      "url": "https://www.youtube.com/watch?v=a8Fy4kk2xFY"
+    }
+  ]
+}

pycon-us-2026/videos/breaking-the-speed-limit-fast-statistical-models-with-python-3-14-numba-and-jax.json

@@ -0,0 +1,28 @@
+{
+  "description": "Full talk title: \"Breaking the Speed Limit: Fast Statistical Models with Python 3.14, Numba, and JAX\"\n\nData scientists and domain experts often face a dilemma: we understand the models, and we use Python, but we aren't C++ or Rust engineers. We need code that is quick to write, easy to work with, and still fast enough to run on large, real\u2011world datasets. How do we choose the right tool without getting lost in low\u2011level details?\n\nWith the new free\u2011threaded build and experimental JIT in Python 3.14, combined with tools like Numba and JAX, we finally have a realistic way to push back against the \"Python is slow\" stereotype. In this talk, we'll use two concrete workloads to illustrate this modern stack: complex iterative loops (k\u2011means) and massive data parallelism (permutation test). The focus is on computational patterns rather than statistical theory.\n\nWe'll compare plain NumPy, Python 3.14 (with free-threaded or JIT configurations), Numba, and JAX across varying data scales, highlighting the trade-offs in runtime, memory, debuggability, and developer experience. Along the way, we'll also demonstrate how AI coding tools can serve as a copilot, helping to translate clear mathematical code into high-performance kernels without requiring deep compiler expertise.",
+  "duration": 1787,
+  "language": "eng",
+  "recorded": "2026-05-15",
+  "related_urls": [
+    {
+      "label": "Conference Website",
+      "url": "https://us.pycon.org/2026/"
+    },
+    {
+      "label": "Presentation Webpage",
+      "url": "https://us.pycon.org/2026/schedule/presentation/128/"
+    }
+  ],
+  "speakers": [
+    "Wenxin Jiang",
+    "Jian Yin"
+  ],
+  "thumbnail_url": "https://i.ytimg.com/vi/ZywVdsNkMwc/hqdefault.jpg",
+  "title": "Breaking the Speed Limit: Fast Statistical Models with Python 3.14, Numba, and JAX",
+  "videos": [
+    {
+      "type": "youtube",
+      "url": "https://www.youtube.com/watch?v=ZywVdsNkMwc"
+    }
+  ]
+}