The Misfits of PyPy

The Python package index, or PyPy, has announced that it will require every account that manages a project on the platform to have 2FA turned on by the end of the year. They were subpoenaed not too long ago for some IP addresses, and PyPy says bye-bye to as many IP address data as it can. This does unfortunately also come on the heels of having law enforcement subpoena user data on five users earlier this year. One such solution is salting and hashing IP addresses so they can still protect against rate limiting or suspicious activity without actually knowing the IP addresses.