Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!selfless.tophat.at!newsfeed.xs4all.nl!newsfeed6.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path: <rosuav@gmail.com>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.021
X-Spam-Evidence: '*H*': 0.96; '*S*': 0.00; 'pm,': 0.10; '>>>': 0.12; 'am,': 0.14; 'received:209.85.214.174': 0.14; 'received:mail- iw0-f174.google.com': 0.14; 'wrote:': 0.14; 'subject:python': 0.14; 'angelico': 0.16; 'buttons': 0.16; "computer's": 0.16; 'filesystem': 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'subject:distribution': 0.16; 'header:In-Reply- To:1': 0.21; 'subject:code': 0.23; 'fri,': 0.23; 'statement': 0.26; 'user.': 0.26; 'message-id:@mail.gmail.com': 0.28; 'received:209.85.214': 0.28; '(you': 0.29; 'least': 0.30; 'can,': 0.30; 'someone': 0.33; 'does': 0.33; 'to:addr:python-list': 0.33; 'actually': 0.33; 'install': 0.34; 'chris': 0.34; 'however,': 0.34; 'received:google.com': 0.37; 'something': 0.37; 'received:209.85': 0.37; '20,': 0.37; 'think': 0.38; 'back.': 0.38; 'subject:: ': 0.38; 'received:209': 0.39; 'to:addr:python.org': 0.39; 'more': 0.60; 'view': 0.66; 'safe': 0.69; 'stand': 0.71; '10:56': 0.84; '12:30': 0.84; 'apt-get': 0.84
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=/rfZhXLRzWuH9tDTMrM2yPRPj/BZUsNfyT9bj1Nv3+4=; b=fHbaLuYjXBu0IRH5Ei0Hs7gt+CbxY2VlYeMIqDjnRgFC7H9WCp/HxOZ2tSjoqTotxn mKdzEBLRDeGLNPenMPJPN6CMhc/+siF/9bSWZEdAYEcddjQXkoHtRG3QRgR2+d/zHRU0 xn5qMfdhqPqa3xwDXnp7nUm2wGbF1sn/6ug+4=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=hPGj5302+rkR+VgBT5u+a/43SJzofepeysSppBp1KytxAotT4sHirgBHRQS41WVqDr EDYm73yO6NMF0mhCOJvzB+8Kexp/0DVvj4irLDCp39MIePBEQYbaHLR7osgXnN9GrVsq 8YwUfc1rVnuoYEagL/JU7a5fTbq1Uev/D7L5E=
MIME-Version: 1.0
In-Reply-To: <BANLkTim3=DQjd6NC720CnT6hg8mWEgWpAA@mail.gmail.com>
References: <4DD08620.4030507@tysdomain.com> <mailman.1611.1305512463.9059.python-list@python.org> <op.vvlipenoa8ncjz@gnudebst> <5h9ca8-ekq.ln1@svn.schaathun.net> <mailman.1757.1305737674.9059.python-list@python.org> <rgcda8-tor.ln1@svn.schaathun.net> <mailman.1769.1305745672.9059.python-list@python.org> <1skda8-3as.ln1@svn.schaathun.net> <mailman.1773.1305754489.9059.python-list@python.org> <4vlea8-55t.ln1@svn.schaathun.net> <mailman.1795.1305825830.9059.python-list@python.org> <0q3ga8-s2v.ln1@svn.schaathun.net> <BANLkTi=vEsbwes4qzCYbrq7Kpk8nsyqVDQ@mail.gmail.com> <BANLkTimJu7TJi_Rjt9QkV4kqAxN5FR8HBA@mail.gmail.com> <BANLkTim3=DQjd6NC720CnT6hg8mWEgWpAA@mail.gmail.com>
Date: Fri, 20 May 2011 12:35:17 +1000
Subject: Re: obviscating python code for distribution
From: Chris Angelico <rosuav@gmail.com>
To: python-list@python.org
Content-Type: text/plain; charset=ISO-8859-1
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <http://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <http://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.1812.1305858920.9059.python-list@python.org>
Lines: 19
NNTP-Posting-Host: 82.94.164.166
X-Trace: 1305858920 news.xs4all.nl 49047 [::ffff:82.94.164.166]:37752
X-Complaints-To: abuse@xs4all.nl
Xref: x330-a1.tempe.blueboxinc.net comp.lang.python:5804

On Fri, May 20, 2011 at 12:30 PM, geremy condra <debatem1@gmail.com> wrote:
>> On Fri, May 20, 2011 at 10:56 AM, geremy condra <debatem1@gmail.com> wrote:
>>> Yup. Nothing is safe from idiots.
>
> I actually think I need to take this statement back. The more I think
> about it, the less convinced I am that it's correct- I can at least
> conceive of violable systems which cannot be misconfigured. So, sorry
> about that.

If it is, then you're not deploying it, you're just pushing buttons
and acting like a user. I still stand by the view that the one with
the root password is the one responsible for the computer's security;
and if you have the root filesystem password, there's no way that
something can be made unmisconfigurable. (You CAN, however, make
something that's out-of-the-box secure, so someone just does a 'sudo
apt-get install yoursystem' and it's specced up nicely. This is a Good
Thing.)

Chris Angelico