Path: csiph.com!usenet.pasdenom.info!gegeweb.org!de-l.enfer-du-nord.net!feeder2.enfer-du-nord.net!feeds.phibee-telecom.net!newsfeed.xs4all.nl!newsfeed3.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
MIME-Version: 1.0
In-Reply-To: <2aef9194-ef36-45db-8c77-9510d3f14ebe@googlegroups.com>
References: <20a49aac-3867-481f-96d4-c95a050781ed@googlegroups.com> <51AD70E8.70506@gmail.com> <mailman.2626.1370332265.3114.python-list@python.org> <6c0ed9da-0f29-4b6b-a804-771763454dd4@googlegroups.com> <mailman.2630.1370341322.3114.python-list@python.org> <mailman.2631.1370343886.3114.python-list@python.org> <4ed43a69-0dfe-4078-a836-db5201811761@googlegroups.com> <mailman.2634.1370345254.3114.python-list@python.org> <2e1dbdc2-6bca-4c4e-93b0-4c0cddb72bc1@googlegroups.com> <03d8964e-7cea-4072-b1f1-19d83e494191@googlegroups.com> <mailman.2637.1370346181.3114.python-list@python.org> <a93d5fee-e49d-4b6b-a663-059784ae0a74@googlegroups.com> <mailman.2640.1370347946.3114.python-list@python.org> <b0d71538-8af8-471b-854c-0a7c23a90840@googlegroups.com> <mailman.2645.1370351460.3114.python-list@python.org> <4b65cdfe-b6c2-4d97-8623-77b10711bf78@googlegroups.com> <mailman.2651.1370356391.3114.python-list@python.org> <2ecc95c4-6114-49a6-ad47-df7bae4adfde@googlegroups.com> <kokupf$24d$1@ger.gmane.org> <CAMw+j7J=ibDTi9c9dxjx_=zuoecFxLawP2KmGjbhBztEC1nWZA@mail.gmail.com> <CAPTjJmrZH1qC=X+LNenXyReNjQT4FmVTKqL24H0D0An0XK9kAg@mail.gmail.com> <mailman.2656.1370359764.3114.python-list@python.org> <592c84d8-2e86-4480-b784-c3ccadc8360d@googlegroups.com> <mailman.2666.1370365761.3114.python-list@python.org> <06fd6c2e-0979-4d61-b75a-6d9df7c1b624@googlegroups.com> <mailman.2688.1370383955.3114.python-list@python.org> <70390d65-5313-46bf-8110-b25f5fc9f76f@googlegroups.com> <mailman.2706.1370419798.3114.python-list@python.org> <8d52505a-7252-419b-8b4f-61e5ee56a78a@googlegroups.com> <mailman.2707.1370421723.3114.python-list@python.org> <2aef9194-ef36-45db-8c77-9510d3f14ebe@googlegroups.com>
Date: Wed, 5 Jun 2013 19:05:36 +1000
Subject: Re: Apache and suexec issue that wont let me run my python script
From: Chris Angelico <rosuav@gmail.com>
To: python-list@python.org
Content-Type: text/plain; charset=ISO-8859-7
Content-Transfer-Encoding: quoted-printable
Precedence: list
Newsgroups: comp.lang.python
Message-ID: <mailman.2709.1370423139.3114.python-list@python.org>
Lines: 45
NNTP-Posting-Host: 2001:888:2000:d::a6
Xref: csiph.com comp.lang.python:47040

On Wed, Jun 5, 2013 at 6:53 PM, =CD=E9=EA=FC=EB=E1=EF=F2 =CA=EF=FD=F1=E1=F2=
 <nikos.gr33k@gmail.com> wrote:
> So, iam to blame this for trusting you?

Your clients trust you to not compromise their security. You
compromised their security by giving the root password to a stranger.

> YOU COULD HAVE ACTUALLY TRIED TO SEE WHATS WRONG WITH 'FILES.PY' INSTEAD =
OF CREATING TEXT FIELS AND COPIED THEM ALL OVER THE CLIENTS HOME DIRECTORY =
FOLDERS AND MAIL THEM TOO.
>
> IF YOU DIDNT WANTED TO DO THAT THEN YOU COULD AHVE SAID TO ME, NIKOS I DO=
NT FEEL LIKE LOGGING TO YOUR SYSTEM BECAUSE I DONT REALLY WANTED TO HELP YO=
U OUT.

When did I ever give the impression that I wanted to help? When did I
ever actually ask you for that power? No, you kept trying to thrust it
on us as part of your demands for assistance.

> I ALSO HAVE GIVEN ROOT ACCESS TO ANOTHER MEMBER OF THIS LIST AND HE IN FA=
CT TRIED TO HELP ME INSTEAD OF DOING WHAT YOU DID. AND FROM 2 OTHER PEOPLE =
AS SOME OTHER FORUMS TOO.

So... your root account has fairly public access. Did you notify your
clients that half a dozen random people have full access to their
server? Can you prove to them that their private data is, indeed,
private?

> I WONT TALK TO YOU AGAIN. YOU MADE A FALSE PROMISE OF HELPING ME AND THEN=
 SCREWED ME.

What promise? I never promised to help. Go read my posts... I would
have said "reread" except that you never read them in the first place.

Just be aware, I didn't actually hurt you in any way. I changed your
root password to protect it, but you still have access. The only harm
that could come from this is that your clients are now aware of the
risks they are taking by remaining with you. I'm stripping away the
veil and exposing the truth. Nothing more.

And now, we're very much off-topic for python-list, but I think it's a
good thing for other potential server-maintainers to be aware of.
Trust is a very precious thing.

ChrisA