Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!aioe.org!feeder.news-service.com!news2.euro.net!newsgate.cistron.nl!newsgate.news.xs4all.nl!194.109.133.84.MISMATCH!newsfeed.xs4all.nl!newsfeed5.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path: <rosuav@gmail.com>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.025
X-Spam-Evidence: '*H*': 0.95; '*S*': 0.00; 'term,': 0.07; 'python': 0.08; 'linux': 0.11; 'am,': 0.14; 'wrote:': 0.14; 'subject:python': 0.14; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'send,': 0.16; 'subject:distribution': 0.16; 'issue.': 0.19; 'header:In-Reply-To:1': 0.21; 'thu,': 0.22; 'received:209.85.210.174': 0.23; 'received:mail- iy0-f174.google.com': 0.23; 'subject:code': 0.23; 'code': 0.24; 'message-id:@mail.gmail.com': 0.28; 'server': 0.29; 'fairly': 0.30; 'yes.': 0.30; 'it.': 0.31; 'to:addr:python-list': 0.33; 'typical': 0.35; 'data,': 0.36; 'running': 0.37; 'too.': 0.37; 'received:google.com': 0.37; 'received:209.85': 0.37; 'but': 0.38; 'subject:: ': 0.38; 'should': 0.39; 'client': 0.39; 'received:209': 0.39; 'to:addr:python.org': 0.39; 'worth': 0.60; 'your': 0.60; 'you.': 0.62; 'internet': 0.64; 'home': 0.69; 'connection,': 0.73; 'writing.': 0.91
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=XngRGHMiFA2kPDA5khntw1SZb8u/w8nX5NYJFU3pyYs=; b=m5X8lGCquyy+zPzZNmN4p/mIsVYdJbf6/6IaLvvIR64AuXLKlNPB5he6HrBlhJ1+8x C16UkdVI/cB50uOEJ7qSzDCfDHftsWFca3/CI/Ou8me/jXCYxllHYGIdK8YdnL8xuqD9 BBj8FBWiMsHawbeuMzrCzAAGhwmf+/0/2TWss=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=eEqb4kMM45U6QGAg9kqlTH17GmJsfXDNvbBiuP+cC2qdIngfT2W17Ing8KX1tFNBu3 A3kAw2Gn+HX3uyHnoTiJlojY4VzfV5uQHNKieaO19Sh0L64TLv78YhC207JhdoMOBkhC LiswtTZbN2aejtDM60WkNcAG9ZVBXjX2cxd+M=
MIME-Version: 1.0
In-Reply-To: <BANLkTimqofhRGoNxKr6MjS6+6JYB-he=Vw@mail.gmail.com>
References: <4DD08620.4030507@tysdomain.com> <mailman.1611.1305512463.9059.python-list@python.org> <op.vvlipenoa8ncjz@gnudebst> <5h9ca8-ekq.ln1@svn.schaathun.net> <BANLkTikm9+ordG3xudYTdmrce3vPcHnQ-A@mail.gmail.com> <BANLkTin6Mf3_s9PaMAZgu+DgZ=U+EV+QiA@mail.gmail.com> <BANLkTimqofhRGoNxKr6MjS6+6JYB-he=Vw@mail.gmail.com>
Date: Thu, 19 May 2011 04:37:30 +1000
Subject: Re: obviscating python code for distribution
From: Chris Angelico <rosuav@gmail.com>
To: python-list@python.org
Content-Type: text/plain; charset=ISO-8859-1
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <http://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <http://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.1766.1305743853.9059.python-list@python.org>
Lines: 16
NNTP-Posting-Host: 82.94.164.166
X-Trace: 1305743853 news.xs4all.nl 49042 [::ffff:82.94.164.166]:51385
X-Complaints-To: abuse@xs4all.nl
Xref: x330-a1.tempe.blueboxinc.net comp.lang.python:5724

On Thu, May 19, 2011 at 4:31 AM, Dotan Cohen <dotancohen@gmail.com> wrote:
> The python code should not be concerned with DDoS, that is what
> iptables is for. Remember, never do in code what Linux will do for
> you.

In general, yes. Denial of service is a fairly broad term, though, and
if there's a computationally-expensive request that a client can send,
then it may be worth rate-limiting it. Or if there's a request that
causes your server to send out inordinate amounts of data, and you're
running it on a typical home internet connection, then that's a DOS
vector too. So it's not only an iptables issue.

But yes. The "system" is the entire system, not just the Python code
you're writing.

ChrisA