Re: Pure Python Data Mangling or Encrypting

Path	csiph.com!usenet.pasdenom.info!news.redatomik.org!newsfeed.xs4all.nl!newsfeed8.news.xs4all.nl!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path	<python-python-list@m.gmane.org>
X-Original-To	python-list@python.org
Delivered-To	python-list@mail.python.org
X-Spam-Status	OK 0.002
X-Spam-Evidence	'H': 1.00; 'S': 0.00; 'subject:Python': 0.05; 'executed': 0.07; 'extension.': 0.09; 'received:80.91': 0.09; 'received:80.91.229': 0.09; 'received:gmane.org': 0.09; 'received:list': 0.09; "they've": 0.09; 'appropriate': 0.14; 'thu,': 0.15; 'dropping': 0.16; 'received:80.91.229.3': 0.16; 'received:plane.gmane.org': 0.16; 'renaming': 0.16; 'somewhere.': 0.16; 'wrote:': 0.16; '>>>': 0.20; 'windows': 0.20; 'extension': 0.20; 'prevent': 0.20; 'am,': 0.23; '2015': 0.23; "i've": 0.24; 'header:In-Reply-To:1': 0.24; 'sort': 0.25; 'header:User-Agent:1': 0.26; 'header:X-Complaints-To:1': 0.26; 'van': 0.26; 'chris': 0.26; 'least': 0.27; 'disk': 0.27; "doesn't": 0.28; 'expose': 0.29; 'maybe': 0.31; 'code': 0.31; 'run': 0.32; 'anybody': 0.32; 'windows.': 0.33; 'running': 0.34; 'file': 0.34; 'changed': 0.35; 'to:addr:python-list': 0.35; 'problem.': 0.35; 'but': 0.36; 'heard': 0.36; 'subject:: ': 0.37; 'received:org': 0.38; 'does': 0.39; 'to:addr:python.org': 0.39; 'data': 0.40; 'where': 0.40; 'some': 0.40; 'easy': 0.60; 'charset:windows-1252': 0.65; 'subject:Data': 0.66; 'received:12': 0.81; 'crafted': 0.84; 'disrupt': 0.84; 'edwards': 0.91
X-Injected-Via-Gmane	http://gmane.org/
To	python-list@python.org
From	Emile van Sebille <emile@fenx.com>
Subject	Re: Pure Python Data Mangling or Encrypting
Date	Wed, 24 Jun 2015 09:09:29 -0700
References	<mailman.10.1435130890.3674.python-list@python.org> <558a9649$0$1675$c3e8da3$5496439d@news.astraweb.com> <mmed90$nho$1@reader1.panix.com> <mmejnp$i0p$1@ger.gmane.org> <CAPTjJmqe9gX8qFyS-DRpcW+Dpn7FB0Gbb6jZ+pTSOTfXLi8Exw@mail.gmail.com>
Mime-Version	1.0
Content-Type	text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding	7bit
X-Gmane-NNTP-Posting-Host	www.westernstatesglass.com
User-Agent	Mozilla/5.0 (Windows NT 6.2; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.0.1
In-Reply-To	<CAPTjJmqe9gX8qFyS-DRpcW+Dpn7FB0Gbb6jZ+pTSOTfXLi8Exw@mail.gmail.com>
X-BeenThere	python-list@python.org
X-Mailman-Version	2.1.20+
Precedence	list
List-Id	General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe	<https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive	<http://mail.python.org/pipermail/python-list/>
List-Post	<mailto:python-list@python.org>
List-Help	<mailto:python-list-request@python.org?subject=help>
List-Subscribe	<https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups	comp.lang.python
Message-ID	<mailman.20.1435162195.3674.python-list@python.org> (permalink)
Lines	25
NNTP-Posting-Host	2001:888:2000:d::a6
X-Trace	1435162195 news.xs4all.nl 2858 [2001:888:2000:d::a6]:49443
X-Complaints-To	abuse@xs4all.nl
Xref	csiph.com comp.lang.python:93084

Show key headers only | View raw

On 6/24/2015 8:55 AM, Chris Angelico wrote:
> On Thu, Jun 25, 2015 at 1:52 AM, Emile van Sebille <emile@fenx.com> wrote:
>> On 6/24/2015 7:02 AM, Grant Edwards wrote:
>>>
>>> And how does writing unmangled data to disk expose anybody to
>>> anything?  I've never heard of an exploit where writing an evilly
>>> crafted bit-pattern to disk causes a any sort of problem.
>>
>>
>> Unless that code is executed at boot.  Mangling would at least prevent it
>> from executing.
>
> Or it's on Windows. It's pretty easy to trick Windows into running
> some code somewhere. But you can often disrupt that by simply renaming
> the file to have no extension.

ISTR that windows may look into the file to see if it can 'guess' the 
appropriate application, so dropping the extension may not be 
sufficient.  But maybe they've changed that as my windows experience 
doesn't run much past XP.

Emile

Thread

Pure Python Data Mangling or Encrypting Randall Smith <randall@tnr.cc> - 2015-06-23 14:02 -0500
  Re: Pure Python Data Mangling or Encrypting Steven D'Aprano <steve@pearwood.info> - 2015-06-24 21:36 +1000
    Re: Pure Python Data Mangling or Encrypting Grant Edwards <invalid@invalid.invalid> - 2015-06-24 14:02 +0000
      Re: Pure Python Data Mangling or Encrypting Emile van Sebille <emile@fenx.com> - 2015-06-24 08:52 -0700
        Re: Pure Python Data Mangling or Encrypting Grant Edwards <invalid@invalid.invalid> - 2015-06-24 16:16 +0000
          Re: Pure Python Data Mangling or Encrypting Chris Angelico <rosuav@gmail.com> - 2015-06-25 02:23 +1000
            Re: Pure Python Data Mangling or Encrypting Grant Edwards <invalid@invalid.invalid> - 2015-06-24 18:23 +0000
          Re: Pure Python Data Mangling or Encrypting Dennis Lee Bieber <wlfraed@ix.netcom.com> - 2015-06-24 21:24 -0400
      Re: Pure Python Data Mangling or Encrypting Chris Angelico <rosuav@gmail.com> - 2015-06-25 01:55 +1000
      Re: Pure Python Data Mangling or Encrypting Emile van Sebille <emile@fenx.com> - 2015-06-24 09:09 -0700
    Re: Pure Python Data Mangling or Encrypting Randall Smith <randall@tnr.cc> - 2015-06-24 13:20 -0500
      Re: Pure Python Data Mangling or Encrypting Grant Edwards <invalid@invalid.invalid> - 2015-06-24 18:29 +0000
        Re: Pure Python Data Mangling or Encrypting Randall Smith <randall@tnr.cc> - 2015-06-24 14:00 -0500
          Re: Pure Python Data Mangling or Encrypting Grant Edwards <invalid@invalid.invalid> - 2015-06-24 21:24 +0000
            Re: Pure Python Data Mangling or Encrypting Randall Smith <randall@tnr.cc> - 2015-06-24 18:13 -0500
    Re: Pure Python Data Mangling or Encrypting Dennis Lee Bieber <wlfraed@ix.netcom.com> - 2015-06-24 21:33 -0400
    Re: Pure Python Data Mangling or Encrypting Randall Smith <randall@tnr.cc> - 2015-06-25 14:41 -0500

csiph-web