Re: Safety and security

[Dan Sugalski]

At 11:35 PM +0200 3/25/04, Jarkko Hietaniemi wrote:
Rafael Garcia-Suarez wrote:

 prevent
     eval 'while(1){}'
 or
     eval '$x = "take this!" x 1_000_000'
Or hog both (for a small while):

    eval 'while([EMAIL PROTECTED],0){}'
Which, if the interpreter's running with quotas, will be caught when 
it either exceeds the allowable memory limits or CPU limits.

Yay, quotas! :)

 > or my personal favourite, the always funny
     eval 'CORE::dump()'
 unless you set up a very restrictive set of allowed ops
 (in each case, you abuse system resources: CPU, memory or ability to
 send a signal. I don't know how to put restrictions on all of these
 in the general case...)


--
                                        Dan
--------------------------------------"it's like this"-------------------
Dan Sugalski                          even samurai
[EMAIL PROTECTED]                         have teddy bears and even
                                      teddy bears get drunk