Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.python > #82325

Re: Python script isn't producing text in data file

Show all headers | View raw

On Thu, Dec 11, 2014 at 1:41 PM, Steven D'Aprano <steve@pearwood.info> wrote:
> On Thu, 11 Dec 2014 12:44:51 +1100, Chris Angelico wrote:
>
>> Agreed. There are ways around some of those problems (eg using wget to
>> fetch something, and then looking at it in a text editor - it's hard to
>> get pwned through a text editor... though I won't say impossible), but
>> there are other issues too, and all in all, it's just best to include
>> the text in-line.
>
> I believe that there was a recently discovered exploit on Linux where
> viewing a file with "less" could run arbitrary code.

Which is why I refused to say "impossible" :) Although you gain the
additional benefit of an unpredictable attack vector; one person might
use 'less', another might open it in SciTE, a third might just cat the
file and scroll through it some other way. It's hard to aim at a
target that exists in so many pieces, and probably isn't worth the
effort of attacking.

ChrisA

Back to comp.lang.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Python script isn't producing text in data file Docfxit <docfxit@gmail.com> - 2014-12-10 15:04 -0800
  Re: Python script isn't producing text in data file Docfxit <docfxit@gmail.com> - 2014-12-10 15:07 -0800
  Re: Python script isn't producing text in data file Chris Angelico <rosuav@gmail.com> - 2014-12-11 10:11 +1100
    Re: Python script isn't producing text in data file sohcahtoa82@gmail.com - 2014-12-10 17:32 -0800
      Re: Python script isn't producing text in data file Chris Angelico <rosuav@gmail.com> - 2014-12-11 12:44 +1100
        Re: Python script isn't producing text in data file Steven D'Aprano <steve@pearwood.info> - 2014-12-11 02:41 +0000
          Re: Python script isn't producing text in data file Chris Angelico <rosuav@gmail.com> - 2014-12-11 13:50 +1100
        Re: Python script isn't producing text in data file Docfxit <docfxit@gmail.com> - 2014-12-10 19:30 -0800
          Re: Python script isn't producing text in data file Chris Angelico <rosuav@gmail.com> - 2014-12-11 14:40 +1100
          Re: Python script isn't producing text in data file Ben Finney <ben+python@benfinney.id.au> - 2014-12-11 14:52 +1100
            Re: Python script isn't producing text in data file Docfxit <docfxit@gmail.com> - 2014-12-10 20:23 -0800
              Re: Python script isn't producing text in data file Chris Angelico <rosuav@gmail.com> - 2014-12-11 15:35 +1100
              Re: Python script isn't producing text in data file Ben Finney <ben+python@benfinney.id.au> - 2014-12-11 15:38 +1100
                Re: Python script isn't producing text in data file Grant Edwards <invalid@invalid.invalid> - 2014-12-11 05:22 +0000
              Re: Python script isn't producing text in data file Steven D'Aprano <steve@pearwood.info> - 2014-12-11 05:18 +0000
                Re: Python script isn't producing text in data file Tim Golden <mail@timgolden.me.uk> - 2014-12-11 06:07 +0000
              Re: Python script isn't producing text in data file alister <alister.nospam.ware@ntlworld.com> - 2014-12-11 09:16 +0000
              Re: Python script isn't producing text in data file Peter Otten <__peter__@web.de> - 2014-12-11 10:30 +0100
                Re: Python script isn't producing text in data file Docfxit <docfxit@gmail.com> - 2014-12-11 13:27 -0800
          Re: Python script isn't producing text in data file Grant Edwards <invalid@invalid.invalid> - 2014-12-11 05:19 +0000
            Re: Python script isn't producing text in data file alister <alister.nospam.ware@ntlworld.com> - 2014-12-11 09:06 +0000
  Re: Python script isn't producing text in data file Steven D'Aprano <steve@pearwood.info> - 2014-12-11 02:47 +0000
    Re: Python script isn't producing text in data file Docfxit <docfxit@gmail.com> - 2014-12-10 19:47 -0800

csiph-web