Path: csiph.com!news.swapon.de!fu-berlin.de!uni-berlin.de!not-for-mail
From: Chris Angelico <rosuav@gmail.com>
Newsgroups: comp.lang.python
Subject: Re: [beginner] What's wrong?
Date: Mon, 4 Apr 2016 03:35:57 +1000
Lines: 15
Message-ID: <mailman.403.1459704960.28225.python-list@python.org>
References: <ndmq58$lba$1@dont-email.me> <ndmrer$t8j$1@dont-email.me> <99234e90-fcd4-4a05-b97f-b47228dde20c@googlegroups.com> <ndmuc4$k4l$1@ger.gmane.org> <CAGgTfkPmCqQ4cC1o1Ov5W4GaZYJLXhREfDq+NdWL9r1Ef50QDA@mail.gmail.com> <1459571270.714249.566352882.6ADCD0CC@webmail.messagingengine.com> <CAPTjJmqtp=uhTE7FE=3mN7xZr40RCPNgxx3Zm5eLZ-7iWugDMQ@mail.gmail.com> <CAGgTfkOhrDKBCDmL5ksU6k9-dduwjCXSV_N3r2jruJwfA4A4XA@mail.gmail.com> <mailman.365.1459608928.28225.python-list@python.org> <87bn5sqcac.fsf@elektro.pacujo.net> <56ffedf1$0$1611$c3e8da3$5496439d@news.astraweb.com> <87h9fkq7tl.fsf@elektro.pacujo.net> <3524319.g0I1c1cpMS@PointedEars.de> <afdd8a6f-06d7-47a7-95fe-b69a48b746f7@googlegroups.com> <2796705.edb3E9ArW3@PointedEars.de> <d7013402-5d60-4e28-9ed7-92634f43fd1d@googlegroups.com> <ndrcl9$9va$1@dont-email.me> <33b043f4-b68e-4346-8e47-029815ab1204@googlegroups.com> <ndrg0v$9va$3@dont-email.me> <257887ea-df88-4229-b045-57d50b7e60b1@googlegroups.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
X-Trace: news.uni-berlin.de AQpxE2danefTzGA98xeHMgeZLWTjFkY+YPhLSc7gHMFA==
Return-Path: <rosuav@gmail.com>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.009
X-Spam-Evidence: '*H*': 0.98; '*S*': 0.00; 'subject:: [': 0.03; 'url:pipermail': 0.05; 'cc:addr:python-list': 0.09; 'identifier': 0.09; 'non-ascii': 0.09; '2016': 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'received:io': 0.16; 'received:psf.io': 0.16; 'subject:beginner': 0.16; 'wrote:': 0.16; 'subject:] ': 0.19; 'cc:2**0': 0.20; 'cc:addr:python.org': 0.20; 'am,': 0.23; 'demonstrate': 0.23; 'import': 0.24; 'header:In- Reply-To:1': 0.24; 'mon,': 0.24; 'message-id:@mail.gmail.com': 0.27; 'sequence': 0.27; 'there.': 0.30; 'language.': 0.32; 'url:python': 0.33; 'file': 0.34; 'received:google.com': 0.35; 'could': 0.35; 'unicode': 0.35; 'something': 0.35; 'should': 0.36; 'url:org': 0.36; 'created': 0.36; 'received:209.85': 0.36; 'subject:?': 0.36; 'received:209.85.213': 0.37; 'received:209': 0.38; 'names': 0.38; "didn't": 0.39; 'enough': 0.39; 'url:mail': 0.40; 'called': 0.40; 'personally': 0.61; 'more': 0.63; 'dont': 0.64; 'chrisa': 0.84; 'proving': 0.84; 'to:none': 0.91
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:cc; bh=FeTCzCbAdKM6nGxfxlL7kHVGnHDXcjq9GruTWEl4iGs=; b=tlZ4iyuozJZUQ7fR2tnm2QNx72rL/dKSHDf4F3G9I3Tg6fu2q9Gp+G27kNjKZfep8f K1ntdOSqvjikhO+BXDcbL6uQnRAIQAfLgxIq7OwMZ/RLhpm2+Zru2oM9fj2rUXS6yIgT T5BdSXHkmhy/2tR8pHBVqrDkzBgHvhuWQIJPpwqEws7qkU6RQeJKo4afJ6IB225nhDey 43zSybTUBLLfEJ0ffuC4wVoThPgb9udqDeSpjv4/v41qaBnYIUTQwW76uCx66+57KyzA NNMzlXip3lLGumXABf31cY9PsppnYdxWeRVD/vol0Wyif/rPNvH23xHhGeLOrWPGFl78 O7BA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:cc; bh=FeTCzCbAdKM6nGxfxlL7kHVGnHDXcjq9GruTWEl4iGs=; b=h/oJzu4Ev/XKioBqAbibD77HNUxT9L8JWgHRp8r5ESAdQD+M1JaedtviugR103Uiw0 htdLTPjcNsrH2dWGpBXs5W/QtEreJh6Wncqr9DFewZevmpaaC+rNA2VQ1OHVgSL1wXRb UtTUpR8rZNT5bn6rGOyiXwrVF2UjwXugQOsz3o+1iSVg7oG/087EKcKAzh/3b0s7iD4x W+V+4K5Xk0Vl9RZd8eAQL2VOrzlkFDuH0y9ltGckOcM6dUCFDxXDZwkYI/bRqgh467NH k8JtPCKTK/D2nT1vjANy4VSxSKP3ttBmqSAbU7UVfolb+AtCD1m2NUu8lDnTi0lzg59q KNMA==
X-Gm-Message-State: AD7BkJLp/FlHPneGcPR2P2JXmwkf+B22UyRfn1HalOpqGlzJHRFPZfFougxtC3LiGht5OKO3wkX0iBzpSlbHTA==
X-Received: by 10.107.63.139 with SMTP id m133mr3114621ioa.157.1459704957351; Sun, 03 Apr 2016 10:35:57 -0700 (PDT)
In-Reply-To: <257887ea-df88-4229-b045-57d50b7e60b1@googlegroups.com>
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.21
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Xref: csiph.com comp.lang.python:106382

On Mon, Apr 4, 2016 at 3:18 AM, Rustom Mody <rustompmody@gmail.com> wrote:
> While I personally dont know enough about security to be able to demonstrate a
> full sequence of events, here's a little fun I had with Chris:
>
> https://mail.python.org/pipermail/python-list/2014-May/672413.html
>
> Do you not think this could be tailored into something more sinister and
> dangerous?

I honestly don't know what you're proving there. You didn't import a
file called "1.py"; you just created a file with a non-ASCII name and
used a non-ASCII identifier to import it. In other words, you did
exactly what Unicode should allow: names in any language.

ChrisA