Path: csiph.com!usenet.pasdenom.info!aioe.org!news.stack.nl!newsfeed.xs4all.nl!newsfeed6.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path: <jeanpierreda@gmail.com>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.066
X-Spam-Evidence: '*H*': 0.87; '*S*': 0.00; 'skip:l 60': 0.09; 'cc:addr :python-list': 0.15; 'driscoll': 0.16; 'eval': 0.16; 'subject:programming': 0.16; 'passed': 0.20; 'wrote:': 0.21; 'header:In-Reply-To:1': 0.22; 'import': 0.24; 'message- id:@mail.gmail.com': 0.27; 'cc:addr:python.org': 0.27; 'least': 0.27; 'pm,': 0.28; '27,': 0.29; 'yes.': 0.29; 'code:': 0.31; 'received:209.85': 0.32; 'received:google.com': 0.32; 'cc:2**2': 0.33; 'in.': 0.33; 'in:': 0.33; 'url:python': 0.34; 'received:209': 0.35; 'sure': 0.36; 'url:org': 0.36; 'running': 0.36; 'being': 0.39; 'mar': 0.61; 'is.': 0.67; 'url:5': 0.67; '2012': 0.69; 'url:release': 0.84
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=8QAUhYu0aXzXSH8AUmJ4djJ/1EkgGH04LAFvZH/4QL0=; b=kMDKnKXg5pvzbDyTbhg2OawAgEjT369mWeKFOOp2Myi4H5xy8ZDY6QGDCK/VsoVuhw Y2piPLSofUblf7CBXi0kkhNAGqUCYE1wpmIhvlPchsezhaGG8DMxIEjUcHCmkJMu8omI i1ARthkZAp3sd6RVfeTN4RwE0/D/8PtlVqO63XqnibGKaDfPWQWT+pZydqbDlNQ1tUyM zyB9D6cz2mbcEcjqJKdcpyPHJiiMqsIbshA3urVqJFSBOsFudc2KZKMVyqKaJWPDXDBo v9nA2gLUDxrX5usM2VoQDGLjW2M2jjlveeMNKIvpJxAI2xHCJp42wghrzi4N2oesrMMM uCTQ==
MIME-Version: 1.0
In-Reply-To: <4F72385E.8020804@cs.wisc.edu>
References: <CAKhY55OL1qvq+kqbyKT8gEuFOK4BkgYGZkkyUVb84_H9VVEQhA@mail.gmail.com> <5B80DD153D7D744689F57F4FB69AF4740928C365@SCACMX008.exchad.jpmchase.net> <CAKhY55O9zE_jxF5PvzOF0DGifRT2gZLbRHiuQ_a1vA-aGGDb9g@mail.gmail.com> <5B80DD153D7D744689F57F4FB69AF4740928E137@SCACMX008.exchad.jpmchase.net> <4F72385E.8020804@cs.wisc.edu>
From: Devin Jeanpierre <jeanpierreda@gmail.com>
Date: Tue, 27 Mar 2012 20:26:21 -0400
Subject: Re: RE: Advise of programming one of my first programs
To: Evan Driscoll <driscoll@cs.wisc.edu>
Content-Type: text/plain; charset=UTF-8
Cc: "python-list@python.org" <python-list@python.org>
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <http://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <http://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.1057.1332894426.3037.python-list@python.org>
Lines: 15
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1332894426 news.xs4all.nl 6852 [2001:888:2000:d::a6]:59250
X-Complaints-To: abuse@xs4all.nl
Xref: csiph.com comp.lang.python:22259

On Tue, Mar 27, 2012 at 5:59 PM, Evan Driscoll <driscoll@cs.wisc.edu> wrote:
>> The use of eval is dangerous if you are not *completely* sure what is
>> being passed in. Try using pickle instead:
>> http://docs.python.org/release/2.5.2/lib/pickle-example.html
>
>
> Um, at least by my understanding, the use of Pickle is also dangerous if you
> are not completely sure what is being passed in:

Oh goodness yes. pickle is exactly as unsafe as eval is. Try running this code:

from pickle import loads
loads("c__builtin__\neval\n(c__builtin__\nraw_input\n(S'py>'\ntRtR.")

-- Devin