Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!selfless.tophat.at!newsfeed.xs4all.nl!newsfeed6.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=CgxP/bdG0lDIX6HJShNFP6A4BKnbfuYlidlUXKiMrBjXmmIbyz0GLE0vyfzDuV+Sv5 4YIQPPPYmd7LfaNWhYYIpG51VZxpEODi1IXMixwSwb2/ZyngrVPs4J8iQ06++CsRBtxz H6Xbtz2DoJg9sHvyccWPlaish3CQTjw2lerP8=
MIME-Version: 1.0
In-Reply-To: <YD%Ap.8857$oq.5649@newsfe17.iad>
References: <4DD08620.4030507@tysdomain.com> <mailman.1611.1305512463.9059.python-list@python.org> <op.vvlipenoa8ncjz@gnudebst> <5h9ca8-ekq.ln1@svn.schaathun.net> <BANLkTikm9+ordG3xudYTdmrce3vPcHnQ-A@mail.gmail.com> <BANLkTin6Mf3_s9PaMAZgu+DgZ=U+EV+QiA@mail.gmail.com> <BANLkTi=f7Kx=F144dgjaCm6Bwmh3egWAYw@mail.gmail.com> <mailman.1763.1305743230.9059.python-list@python.org> <YD%Ap.8857$oq.5649@newsfe17.iad>
Date: Thu, 19 May 2011 10:50:55 -0700
Subject: Re: obviscating python code for distribution
From: geremy condra <debatem1@gmail.com>
To: harrismh777 <harrismh777@charter.net>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: python-list@python.org
Precedence: list
Newsgroups: comp.lang.python
Message-ID: <mailman.1796.1305827459.9059.python-list@python.org>
Lines: 50
NNTP-Posting-Host: 82.94.164.166
Xref: x330-a1.tempe.blueboxinc.net comp.lang.python:5780

On Wed, May 18, 2011 at 7:54 PM, harrismh777 <harrismh777@charter.net> wrot=
e:
> Littlefield, Tyler wrote:

<snip>

> Four resources that you will what to look into, in no particular order:
>
> Erickson, Jon, "Hacking: The Art of Exploitation," 2nd ed,
> =A0 =A0 =A0 =A0San Francisco: No Starch Press, 2008.

This would be a very good choice. It's a bit light on details, but
makes up for it by being exceptionally well-written and very
accessible.

> Anonymous, "Maximum Linux Security: A Hacker's Guide to Protecting
> =A0 =A0 =A0 =A0Your Linux Server and Workstation," Indianapolis:
> =A0 =A0 =A0 =A0Sams Publishing, 2000.
>
> =A0 =A0 =A0 =A0(check for other editions)
> =A0 =A0 =A0 =A0(this volume is a good read, even for other platforms,
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0but is geared specifically to Linux)

This is a good volume, but very dated. I'd probably pass on it.

> Graves, Kimberly, "CEH Certified Ethical Hacker: Study Guide,"
> =A0 =A0 =A0 =A0Indianapolis: Wiley Publishing, 2010.

Briefly glancing over the TOC, this actually looks surprisingly good.
CEH itself is a joke among black hats, but if this gets down to the
nitty-gritty of actually performing the attacks it covers it sounds
like a buy.

> Seitz, Justin, "Gray Hat Python: Python Programming for Hackers
> =A0 =A0 =A0 =A0and Reverse Engineers," San Francisco: No Starch Press, 20=
09.

I'd skip this one, as it isn't really focused on what you want. The
web application hacker's handbook is probably more along the lines of
what you need, if you're going for a book. There's also an older
volume called 'counter hack' that gives a good overview of some of the
ways that attacks proceed.

Another recommend I'm surprised hasn't popped up already: 'security
power tools' is a good way to get your foot in the door. It has a
practical, no-nonsense approach and is split into self-contained
chapters so you don't waste too much of your time on tools that aren't
relevant to you.

Geremy Condra