Re: Challenge: Please break this! [Python Security]

2009-02-23 Thread Luis Zarrabeitia
On Monday 23 February 2009 03:50:57 pm tav wrote: > Hey all, > > As an attempt to convince Python-Dev of the merits of a > functions-based approach to security in Python, I've come up with a > simple challenge. > While I'm almost excited that you are tackling the problem of python's security, I f

Re: Challenge: Please break this! [Python Security]

2009-02-23 Thread Tim Wintle
On Mon, 2009-02-23 at 13:20 -0800, Paul McNett wrote: > tav wrote: > > I'm keen to know your experiences even if you don't manage to write to > > the filesystem -- and especially if you do! > > Does it count when it breaks some standard libs that aren't even trying to > write to > the filesystem

Re: Challenge: Please break this! [Python Security]

2009-02-23 Thread Paul McNett
tav wrote: I'm keen to know your experiences even if you don't manage to write to the filesystem -- and especially if you do! Does it count when it breaks some standard libs that aren't even trying to write to the filesystem? mac:ss pmcnett$ python sbs_studio.py pkm Traceback (most recent ca

Re: Challenge: Please break this! [Python Security]

2009-02-23 Thread Tim Wintle
On Mon, 2009-02-23 at 20:50 +, tav wrote: > I'm keen to know your experiences even if you don't manage to write to > the filesystem -- and especially if you do! > er sorry, but: from safelite import FileReader reload(__builtins__) f = open("/home/tim/nano.save","w") f.write("oops") f.close()

Re: Challenge: Please break this! [Python Security]

2009-02-23 Thread tav
Please use this attached updated safelite.py Victor Stinner got the dinner by using the reload builtin =) Good luck! -- love, tav plex:espians/tav | t...@espians.com | +44 (0) 7809 569 369 http://tav.espians.com | http://twitter.com/tav | skype:tavespian """ Please try and break this. On a fr

Challenge: Please break this! [Python Security]

2009-02-23 Thread tav
Hey all, As an attempt to convince Python-Dev of the merits of a functions-based approach to security in Python, I've come up with a simple challenge. If enough smart hackers look at this and it holds up, Guido promises to accept a patch which would enable this on both App Engine and future Pytho