Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!aioe.org!feeder.news-service.com!newsfeed.xs4all.nl!newsfeed6.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.007 X-Spam-Evidence: '*H*': 0.99; '*S*': 0.00; 'wed,': 0.03; 'python.': 0.04; 'subject:test': 0.05; 'subject:Python': 0.06; 'python': 0.08; 'dev': 0.09; 'pm,': 0.10; 'wrote:': 0.14; 'angelico': 0.16; 'benjamin': 0.16; 'filesystem': 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'nail': 0.16; 'subject:embedded': 0.16; 'header:In-Reply-To:1': 0.21; "haven't": 0.22; 'received:209.85.210.174': 0.23; 'received:mail- iy0-f174.google.com': 0.23; 'environment.': 0.26; 'meeting': 0.26; "i'm": 0.27; 'message-id:@mail.gmail.com': 0.28; 'anyone': 0.32; 'yet': 0.32; 'to:addr:python-list': 0.33; 'chris': 0.34; 'decide': 0.34; 'couple': 0.35; 'using': 0.35; 'probably': 0.36; 'received:google.com': 0.37; 'change': 0.37; 'received:209.85': 0.37; 'put': 0.37; 'subject:: ': 0.38; 'received:209': 0.39; 'goes': 0.39; 'to:addr:python.org': 0.39; 'final': 0.60; 'your': 0.60; 'back': 0.63; 'day': 0.67; 'access,': 0.68; 'online': 0.71; 'gain': 0.79; 'meanwhile,': 0.84; 'pyjamas': 0.84; 'subject:Security': 0.97 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=LZWRN9uPOv+oMYvyVPHA8FtI6fbgt0i/oX250zF3ypA=; b=ZeT4GURpbkHs6xt201gptovITYY+HvWtR2viL/5BrIDVwyTaai/YJLLdmwtcfRdmdr wf5FzDgkx2ftWG+MrZm6XeyvhXLCp34DzETUYmr4SDxGlEgSVyOLn4L9qpLScyff1LEV jmWzNfiI66S4oR+lgyN2hes/aOpbpcyZjMkyI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=GyPLyO2o3iMFs6xtVeGIcIpdVG7vKdDwnNshXZi1CIWOgVvUdzFHYsIC5qvO1c+afV 7KHuEqYp0W3A9Z5Hq8CrmNnlTdmKAsEN2fUmTdF1KiffagB+GZwSNc+1r4JvAe1TOE/3 1JtHu1KGdCdyN9sPoV7Wd9CnwGeDQpFyz0YK0= MIME-Version: 1.0 In-Reply-To: References: <7xhb7i7hes.fsf@ruckus.brouhaha.com> <7xei2my4fd.fsf@ruckus.brouhaha.com> Date: Wed, 22 Jun 2011 13:26:45 +1000 Subject: Re: Security test of embedded Python From: Chris Angelico To: python-list@python.org Content-Type: text/plain; charset=ISO-8859-1 X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 18 NNTP-Posting-Host: 82.94.164.166 X-Trace: 1308713213 news.xs4all.nl 49175 [::ffff:82.94.164.166]:41389 X-Complaints-To: abuse@xs4all.nl Xref: x330-a1.tempe.blueboxinc.net comp.lang.python:8173 On Wed, Jun 22, 2011 at 1:09 PM, Benjamin Kaplan wrote: > Use Pyjamas with that and now you have your sandboxed Python :) > Not a day goes past without a reminder that I haven't yet explored Pyjamas! :) Monty's back online now in a restricted environment. I'm going to a meeting in a couple of hours where we will decide where to go from here; between now and then, if anyone can gain filesystem or OS access, that will probably put the final nail in the coffin of us using Python. Meanwhile, I'm looking into V8 and whether we can do everything we need to that way, and how much dev time it's going to take me to change languages... Chris Angelico