Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.xs4all.nl!newsfeed4.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.082 X-Spam-Evidence: '*H*': 0.84; '*S*': 0.00; 'charset:iso-8859-7': 0.04; 'subject:into': 0.09; 'changes': 0.15; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'sat,': 0.16; 'wrote:': 0.18; 'saying': 0.22; 'of.': 0.24; 'script.': 0.24; 'script': 0.25; 'header:In-Reply-To:1': 0.27; 'message-id:@mail.gmail.com': 0.30; 'default,': 0.31; 'subject:Database': 0.31; 'could': 0.34; 'but': 0.35; 'received:google.com': 0.35; 'really': 0.36; 'impression': 0.36; 'words,': 0.36; 'being': 0.38; 'nov': 0.38; 'whatever': 0.38; 'to:addr:python-list': 0.38; 'pm,': 0.38; 'to:addr:python.org': 0.39; 'new': 0.61; "you're": 0.61; 'happen': 0.63; 'night,': 0.68; 'secure': 0.71; 'insecure': 0.84; '2013': 0.98 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; bh=K997/etwU5ZOCzK8zzG46RDRZhuBGkKR5KYFGmDbw4A=; b=GrtjS48x3bi1nb37Ox6WpvqSsi/oWKZUhxuyc73Mb4psoBjgK/86plQniXfxXBWQQk r2kpU6d29qKQr9lGFNYpE9EAnOkBPgtKj+EvJWgNVtEveXi1wAFpNd5oUsb77wYn4lpR aLVaudIQZoX+h/EAgLArp99661XxEhvadsv4T48BXNSj8LesrZbhwWjrcXd4VwuePpxk jPA+5itm3B6dJLiTKPxUhu2GHiP6ArugUAEWS9yceNdrn3Ny31Ospbrs+0RUryGuMEMv mcT4vjzgKzeY7IkoLo48d54PCr0+XC5u6buPkHlnOU3ZO38CaEKl3kHuRolQnpTIsIQ3 WkDQ== MIME-Version: 1.0 X-Received: by 10.68.247.106 with SMTP id yd10mr19329512pbc.25.1383979073629; Fri, 08 Nov 2013 22:37:53 -0800 (PST) In-Reply-To: References: <527a5f79$1@news.synserver.de> Date: Sat, 9 Nov 2013 17:37:53 +1100 Subject: Re: To whoever hacked into my Database From: Chris Angelico To: python-list@python.org Content-Type: text/plain; charset=ISO-8859-7 Content-Transfer-Encoding: quoted-printable X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 16 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1383979076 news.xs4all.nl 16003 [2001:888:2000:d::a6]:59914 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:58901 On Sat, Nov 9, 2013 at 5:32 PM, =CD=DF=EA=EF=F2 =C1=EB=E5=EE=FC=F0=EF=F5=EB= =EF=F2 wrote: > I'am not saying out of arrogance but i was really under the impression i = had > secure my script. > > And i had until i made some new changes last night, which i think i have > corrected now as we speak. In other words, you closed off whatever you could see as being a problem, and then boasted that the script was secure... until someone proved to you that it wasn't. Your script is insecure by default, and you're band-aid patching everything you happen to be made aware of. What makes you think that it's now secure? ChrisA