Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!xlned.com!feeder7.xlned.com!newsfeed.xs4all.nl!newsfeed3.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path: <antoon.pardon@rece.vub.ac.be>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: UNSURE 0.499
X-Spam-Level: ****
X-Spam-Evidence: '*H*': 0.25; '*S*': 0.25; 'broken': 0.04; 'plug': 0.09; 'subject:into': 0.09; 'ha!': 0.16; 'variable': 0.18; '>>>': 0.22; 'example': 0.22; 'header:User-Agent:1': 0.23; 'header:In- Reply-To:1': 0.27; 'fixed': 0.29; 'wonder': 0.29; "i'm": 0.30; 'you?': 0.31; 'subject:Database': 0.31; "can't": 0.35; 'good.': 0.35; "didn't": 0.36; 'wrong': 0.37; 'to:addr:python-list': 0.38; 'fact': 0.38; 'to:addr:python.org': 0.39; 'enough': 0.39; 'how': 0.40; 'break': 0.61; 'week,': 0.64; 'teach': 0.65; 'within': 0.65; 'latest': 0.67; 'secure': 0.71; '8bit%:92': 0.71; '8bit%:100': 0.72; 'safe': 0.72; 'day': 0.76; 'yourself': 0.78; 'leak': 0.84; 'pardon': 0.84; 'received:195.238': 0.84; 'received:195.238.6': 0.84; 'received:belgacom.be': 0.84; 'received:isp.belgacom.be': 0.84; 'predictions': 0.91; 'yourself,': 0.95
X-Belgacom-Dynamic: yes
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: ApMBAKClf1Jbs+f0/2dsb2JhbAANTIcGuSKCeYE9gxkBAQEDASMPAUsLCQIaAgUhAgIPAkYTCAKHdwuPHppodoh3iRSBKY5FFoJVgUUDmA+VMQ
Date: Sun, 10 Nov 2013 16:28:46 +0100
From: Antoon Pardon <antoon.pardon@rece.vub.ac.be>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130922 Icedove/17.0.9
MIME-Version: 1.0
To: python-list@python.org
Subject: Re: To whoever hacked into my Database
References: <527a5f79$1@news.synserver.de> <l5kimo$imp$1@dont-email.me> <mailman.2276.1383978054.18130.python-list@python.org> <l5kkuj$qih$1@dont-email.me> <527E557F.3010305@rece.vub.ac.be> <mailman.2311.1384035618.18130.python-list@python.org> <l5nnch$2pq$1@dont-email.me> <mailman.2333.1384092226.18130.python-list@python.org> <l5o74v$nfv$1@dont-email.me>
In-Reply-To: <l5o74v$nfv$1@dont-email.me>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Mailman-Approved-At: Sun, 10 Nov 2013 17:03:53 +0100
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.2339.1384099434.18130.python-list@python.org>
Lines: 33
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1384099434 news.xs4all.nl 15893 [2001:888:2000:d::a6]:58082
X-Complaints-To: abuse@xs4all.nl
Xref: csiph.com comp.lang.python:59014

Op 10-11-13 16:01, Νίκος Αλεξόπουλος schreef:
> Στις 10/11/2013 3:49 μμ, ο/η Antoon Pardon έγραψε:
>> Op 10-11-13 11:32, Νίκος Αλεξόπουλος schreef:
>>> Ha, ha ha!
>>> I'm safe now!!
>>>
>>> No breaks in this time!
>>
>> You just can't help yourself, can you? I predict your database will
>> be broken in, within a week, after which you will plug one leak
>> and after an other day boast again about how secure your system is,
>> because you hadn't had a break in after your latest "fix".
>>
> 
> It won't break again. 'page' variable cannot be manipulated by
> arbitrary url strings no more.

So you fixed one specific leak and you think that is enough to
declare yourself safe?!

> This time is fixed for good.

The fact that you said this before and were wrong didn't teach
you anything?

> Your predictions are wrong.

And you wonder why people think you are arrogant. You are a perfect
example of the arrogance of the ignorant.

-- 
Antoon Pardon.