Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!selfless.tophat.at!newsfeed.xs4all.nl!newsfeed5.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path: <rosuav@gmail.com>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.005
X-Spam-Evidence: '*H*': 0.99; '*S*': 0.00; 'subject:Python': 0.06; ':-)': 0.06; 'forcing': 0.07; 'python': 0.08; 'am,': 0.14; 'received:209.85.214.174': 0.14; 'received:mail- iw0-f174.google.com': 0.14; 'wrote:': 0.14; 'defined': 0.14; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'subject:server.': 0.16; 'header:In-Reply-To:1': 0.21; 'gregory': 0.23; 'code': 0.24; 'there.': 0.25; 'message-id:@mail.gmail.com': 0.28; 'received:209.85.214': 0.28; 'subject:web': 0.29; 'anyway.': 0.29; "he's": 0.29; 'elsewhere': 0.30; 'ewing': 0.30; 'sun,': 0.30; 'to:addr:python-list': 0.33; "isn't": 0.33; 'thinking': 0.34; 'probably': 0.36; 'program,': 0.37; 'received:google.com': 0.37; 'received:209.85': 0.37; 'pretty': 0.37; 'subject:: ': 0.38; 'received:209': 0.39; 'to:addr:python.org': 0.39; 'him': 0.61; '10:38': 0.84; 'subject:Verify': 0.84
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=BOqkHQAlVNbVS61J1CPaGPRuocp23KeQzgKCDap+kDg=; b=wpCA50QUeM9Z0L3MO0N2UAR2put5vrGsthCggj349INJNHVCdRwoKAdLtkzBQtvWxm qq9UubFTJX3PTF0fPfu4OsZYJ2Acz47eihKIy5ExMmy1cVa4Ee04OpNMkRyGMnstT5v2 ufazHSmnNGTs6xIhPqHLFHB0uW+IZiijqTt8s=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=sI09Fcpb81Sc+Mhomzv0ZnlebT9bJuL5SRJN4aqX3gh8zH0HH04xzumq2WTMTq5SJi FUFJo9Gu79pPeBmrdELlYsyVMwmFIczrf8yme0ePPUIVjDn1Pd1UuPk6XGXV7MYqHlBA ev84LgLc5SoSqprcbhqvFGj08DhTPRtjEBnPo=
MIME-Version: 1.0
In-Reply-To: <964unqFhfjU1@mid.individual.net>
References: <d8c7dc52-0c54-4b29-a7b6-bcd833686611@q12g2000prb.googlegroups.com> <BANLkTim5phU5X0CXhCNsY75OjqDCLvkXtg@mail.gmail.com> <mailman.129.1308429616.1164.python-list@python.org> <964unqFhfjU1@mid.individual.net>
Date: Sun, 19 Jun 2011 10:54:31 +1000
Subject: Re: Strategy to Verify Python Program is POST'ing to a web server.
From: Chris Angelico <rosuav@gmail.com>
To: python-list@python.org
Content-Type: text/plain; charset=ISO-8859-1
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <http://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <http://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.137.1308444874.1164.python-list@python.org>
Lines: 12
NNTP-Posting-Host: 82.94.164.166
X-Trace: 1308444874 news.xs4all.nl 49038 [::ffff:82.94.164.166]:58220
X-Complaints-To: abuse@xs4all.nl
Xref: x330-a1.tempe.blueboxinc.net comp.lang.python:7935

On Sun, Jun 19, 2011 at 10:38 AM, Gregory Ewing
<greg.ewing@canterbury.ac.nz> wrote:
> And that only if the attacker isn't a Python programmer.
> If he is, he's probably writing his attack program in
> Python anyway. :-)
>

I was thinking you'd have it call on various functions defined
elsewhere in the program, forcing him to pretty much have the whole
original code in there. :)

ChrisA