Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.python > #71868

Re: cx_freeze and temporary files - security related question

Path csiph.com!usenet.pasdenom.info!aioe.org!news.stack.nl!newsfeed.xs4all.nl!newsfeed4.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path <python-python-list@m.gmane.org>
X-Original-To python-list@python.org
Delivered-To python-list@mail.python.org
X-Spam-Status OK 0.002
X-Spam-Evidence '*H*': 1.00; '*S*': 0.00; 'parameters': 0.04; 'plug': 0.09; 'read-only': 0.09; 'received:80.91': 0.09; 'received:80.91.229': 0.09; 'received:gmane.org': 0.09; 'received:list': 0.09; 'storage.': 0.09; 'subject:files': 0.09; 'subject:related': 0.09; 'tmp': 0.09; 'runs': 0.10; 'subject:question': 0.10; 'python': 0.11; 'jan': 0.12; 'windows': 0.15; 'pypi.': 0.16; 'received:80.91.229.3': 0.16; 'received:plane.gmane.org': 0.16; 'reedy': 0.16; 'subject:security': 0.16; 'so.': 0.16; 'wrote:': 0.18; 'later': 0.20; 'starts': 0.20; 'cloud': 0.22; 'header:User-Agent:1': 0.23; 'question': 0.24; 'compiled': 0.26; 'this:': 0.26; 'header:X -Complaints-To:1': 0.27; 'header:In-Reply-To:1': 0.27; 'host': 0.29; 'leave': 0.29; 'that.': 0.31; '(maybe': 0.31; 'about.': 0.31; 'trace': 0.31; "user's": 0.31; 'run': 0.32; 'but': 0.35; 'really': 0.36; 'data,': 0.36; 'should': 0.36; 'application': 0.37; 'being': 0.38; 'remote': 0.38; 'to:addr:python-list': 0.38; 'files': 0.38; 'pm,': 0.38; 'that,': 0.38; 'anything': 0.39; 'does': 0.39; 'received:71': 0.39; 'sure': 0.39; 'to:addr:python.org': 0.39; 'system.': 0.39; 'received:org': 0.40; 'tell': 0.60; 'information': 0.63; 'name': 0.63; 'temporary': 0.65; 'believe': 0.68; 'flash': 0.69; '3.4': 0.84; 'drive.': 0.84; 'nagy': 0.84; 'plugin.': 0.84; 'received:fios.verizon.net': 0.84; 'device.': 0.93
X-Injected-Via-Gmane http://gmane.org/
To python-list@python.org
From Terry Reedy <tjreedy@udel.edu>
Subject Re: cx_freeze and temporary files - security related question
Date Wed, 21 May 2014 13:29:19 -0400
References <537CD792.5050608@shopzeus.com>
Mime-Version 1.0
Content-Type text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding quoted-printable
X-Gmane-NNTP-Posting-Host pool-71-175-90-87.phlapa.fios.verizon.net
User-Agent Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0
In-Reply-To <537CD792.5050608@shopzeus.com>
X-BeenThere python-list@python.org
X-Mailman-Version 2.1.15
Precedence list
List-Id General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive <http://mail.python.org/pipermail/python-list/>
List-Post <mailto:python-list@python.org>
List-Help <mailto:python-list-request@python.org?subject=help>
List-Subscribe <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups comp.lang.python
Message-ID <mailman.10203.1400693387.18130.python-list@python.org> (permalink)
Lines 35
NNTP-Posting-Host 2001:888:2000:d::a6
X-Trace 1400693387 news.xs4all.nl 2952 [2001:888:2000:d::a6]:33772
X-Complaints-To abuse@xs4all.nl
Xref csiph.com comp.lang.python:71868

Show key headers only | View raw


On 5/21/2014 12:42 PM, Nagy László Zsolt wrote:
> I need to create an application for Windows 7 that runs from a flash
> drive. This program would be used to create remote backups of the
> pendrive. The pendrive contains sensitive data, so when I plug in the
> pendrive and run the program to make a backup, it should not leave any
> trace of operation on the windows system. The information is so
> sensitive that I was forbidden to use cloud storage. I was also
> forbidden to make backups to a local drive, or leave any trace on the
> host windows system.
>
> The question is this: if I create this program with Python 3.4 and
> cx_Freeze, then what should I expect.

I know that Python can be compiled so that it runs without being 
installed, as from a usb plugin. I forget the name on pypi. I know 
nothing whether cx_Freeze works for that.

 > When the user starts the
> cx_freeze-d program from the flash drive, will it create temporary files
> on the system drive? Will it leave log files or store any permanent or
> temporary data on the system drive (maybe in the user's tmp folder) that
> can later be used to tell what drive was mounted, with what parameters
> the program was started etc.

I am really sure that *python* does not do anything like that, but do 
not bet your job on my say so. I believe it can run from a read-only 
directory or device. I don't know what *windows* might do that I do not 
know about.

-- 
Terry Jan Reedy

Back to comp.lang.python | Previous | Next | Find similar | Unroll thread


Thread

Re: cx_freeze and temporary files - security related question Terry Reedy <tjreedy@udel.edu> - 2014-05-21 13:29 -0400

csiph-web