Michael Hrivnak wrote:
Besides, it seems that all you've accomplished is verifying that the client can execute python code and you've made it a bit less convenient to attack.
And that only if the attacker isn't a Python programmer. If he is, he's probably writing his attack program in Python anyway. :-) Although if you were devious, and you detected that such an attack was in progress, you could lull him into a sense of security and then send him some Python code to pwn his machine... -- Greg -- http://mail.python.org/mailman/listinfo/python-list
