Re: OT Annoying Habits (Was: when format strings attack)

2007-01-24 Thread Steve Holden
Carroll, Barry wrote: > Greetings: > > Personally, I don't think top-posting is the most annoying newsgroup > habit. I think it's making a big fuss about minor inconveniences. > > One of the nicest things about being human is the amazing flexibility of > our brains. For example, if a block of

Re: OT Annoying Habits (Was: when format strings attack)

2007-01-20 Thread John Machin
[EMAIL PROTECTED] wrote: [snip] > The information contained in this message and any attachment may be > proprietary, confidential, and privileged or subject to the work > product doctrine and thus protected from disclosure. If the reader > of this message is not the intended recipient, or an emp

Re: OT Annoying Habits (Was: when format strings attack)

2007-01-20 Thread Roel Schroeven
Carroll, Barry schreef: > Secondly, can someone point me to the Standard Usenet Convention that > mandates against top-posting. This is not sarcasm; I would really like > to see it. You see, I recently returned to Usenet after a LONG absence. > When I was last a regular Usenet citizen the Interne

Re: OT Annoying Habits (Was: when format strings attack)

2007-01-20 Thread Roel Schroeven
Paul Rubin schreef: > No. Top posting has always been an aberrance. It first appeared in > Usenet when Usenet (a word whose etymology comes from "Unix" and > "network") started attracting Microsoft Windows users, who were in the > habit of using Windows products that top-posted. That happened fa

Re: when format strings attack

2007-01-20 Thread [EMAIL PROTECTED]
I will give the formatting a try. I noticed another formatting thing I wasn't looking for. It is possible to have a \n at the end of a word or at least that is how it is shown and fixed through python 2.5. I had an error where 36\n isn't a number. easy to fix though. Jeremy Sanders wrote: > S

Re: OT Annoying Habits (Was: when format strings attack)

2007-01-20 Thread rzed
Dane Jensen <[EMAIL PROTECTED]> wrote in news:[EMAIL PROTECTED]: > On Friday 19 January 2007 22:51, Hendrik van Rooyen wrote: >> "Steven D'Aprano" <[EMAIL PROTECTED]> wrote: >> > Or perhaps I should say: >> > >> > .snoitnevnoc >> > hsilgnE tpada )ylbissop revenehw( dluohs ew os dna ,naitraM >> >

Re: OT Annoying Habits (Was: when format strings attack)

2007-01-20 Thread Neil Cerutti
On 2007-01-20, Nick Maclaren <[EMAIL PROTECTED]> wrote: > > In article <[EMAIL PROTECTED]>, > "Carroll, Barry" <[EMAIL PROTECTED]> writes: >|> >|> My thanks to Aahz and the others who responded. I also did some >|> Googling on my own. I found out that top-posting is the norm in the >|> e-mail wo

RE: OT Annoying Habits (Was: when format strings attack)

2007-01-20 Thread Nick Maclaren
In article <[EMAIL PROTECTED]>, "Carroll, Barry" <[EMAIL PROTECTED]> writes: |> |> My thanks to Aahz and the others who responded. I also did some |> Googling on my own. I found out that top-posting is the norm in the |> e-mail world. Bottom- and inline-posting are the norm in the newsgroup |>

Re: OT Annoying Habits (Was: when format strings attack)

2007-01-20 Thread Dane Jensen
On Friday 19 January 2007 22:51, Hendrik van Rooyen wrote: > "Steven D'Aprano" <[EMAIL PROTECTED]> wrote: > > Or perhaps I should say: > > > > .snoitnevnoc > > hsilgnE tpada )ylbissop revenehw( dluohs ew os dna ,naitraM ton > > ,puorgswen egaugnal hsilgnE na no er'ew ,segaugnal hcus era ereht fi ne

RE: OT Annoying Habits (Was: when format strings attack)

2007-01-20 Thread Michael . Coll-Barth
::CLAP CLAP:: thank you! I have been in the newsgroups for over 12 years and I never cared about the top/bottom post silliness. All I care about is that the message is clearly written. Everything else is doggerel. > -Original Message- > From: Carroll, Barry > > Personally, I don't

Re: OT Annoying Habits (Was: when format strings attack)

2007-01-19 Thread Hendrik van Rooyen
"Steven D'Aprano" <[EMAIL PROTECTED]> wrote: > Or perhaps I should say: > > .snoitnevnoc > hsilgnE tpada )ylbissop revenehw( dluohs ew os dna ,naitraM ton ,puorgswen > egaugnal hsilgnE na no er'ew ,segaugnal hcus era ereht fi neve tuB First I thought it was Welsh or Cornish or something. Then i

Re: OT Annoying Habits (Was: when format strings attack)

2007-01-19 Thread Paul Rubin
"Carroll, Barry" <[EMAIL PROTECTED]> writes: > When I was last a regular Usenet citizen the Internet was new, GUI > interfaces were experimental and the World Wide Web didn't exist yet. > Newsreader software was text-based. Top-posting was the common > practice, because it was the most convenient.

Re: OT Annoying Habits (Was: when format strings attack)

2007-01-19 Thread gonzlobo
I should write a python script to read this. :) >.snoitnevnoc >hsilgnE tpada )ylbissop revenehw( dluohs ew os dna ,naitraM ton ,puorgswen >egaugnal hsilgnE na no er'ew ,segaugnal hcus era ereht fi neve tuB -- http://mail.python.org/mailman/listinfo/python-list

Re: OT Annoying Habits (Was: when format strings attack)

2007-01-19 Thread Steven D'Aprano
On Fri, 19 Jan 2007 12:20:26 -0800, Carroll, Barry wrote: > It took me about 3 seconds to realize that Mr. D'Aprano' Q&A session was > laid out bottom-to-top instead of top-to-bottom. After that, it made > perfect sense. Three seconds, compared to about thirty milliseconds if it were written in

RE: OT Annoying Habits (Was: when format strings attack)

2007-01-19 Thread Carroll, Barry
> -Original Message- > From: Aahz [mailto:[EMAIL PROTECTED] > Sent: Friday, January 19, 2007 3:29 PM > To: python-list@python.org > Subject: Re: OT Annoying Habits (Was: when format strings attack) > > In article <[EMAIL PROTECTED]>, > Carroll, B

RE: OT Annoying Habits (Was: when format strings attack)

2007-01-19 Thread Gabriel Genellina
At Friday 19/1/2007 18:43, Carroll, Barry wrote: Secondly, can someone point me to the Standard Usenet Convention that mandates against top-posting. This is not sarcasm; I would really like to see it. There are some guidelines, like RFC 1855 (not a real standard, or enforced in any way): ht

Re: OT Annoying Habits (Was: when format strings attack)

2007-01-19 Thread Aahz
In article <[EMAIL PROTECTED]>, Carroll, Barry <[EMAIL PROTECTED]> wrote: > >Secondly, can someone point me to the Standard Usenet Convention that >mandates against top-posting. This is not sarcasm; I would really like >to see it. You see, I recently returned to Usenet after a LONG absence. >When

Re: OT Annoying Habits (Was: when format strings attack)

2007-01-19 Thread Jerry Hill
On 1/19/07, Carroll, Barry <[EMAIL PROTECTED]> wrote: > Secondly, can someone point me to the Standard Usenet Convention that > mandates against top-posting. This is not sarcasm; I would really like > to see it. For what (very little) it's worth, see RFC 1855. -- Jerry -- http://mail.python.or

RE: OT Annoying Habits (Was: when format strings attack)

2007-01-19 Thread Nick Maclaren
In article <[EMAIL PROTECTED]>, "Carroll, Barry" <[EMAIL PROTECTED]> writes: |> |> Secondly, can someone point me to the Standard Usenet Convention that |> mandates against top-posting. This is not sarcasm; I would really like |> to see it. You see, I recently returned to Usenet after a LONG ab

RE: OT Annoying Habits (Was: when format strings attack)

2007-01-19 Thread Carroll, Barry
: Friday, January 19, 2007 1:12 PM > To: python-list@python.org > Subject: Re: OT Annoying Habits (Was: when format strings attack) > > In article <[EMAIL PROTECTED]>, > Carroll, Barry <[EMAIL PROTECTED]> wrote: > > > >Personally, I don't think top-posting i

Re: OT Annoying Habits (Was: when format strings attack)

2007-01-19 Thread Aahz
In article <[EMAIL PROTECTED]>, Carroll, Barry <[EMAIL PROTECTED]> wrote: > >Personally, I don't think top-posting is the most annoying newsgroup >habit. I think it's making a big fuss about minor inconveniences. =20 Thing is, nobody will ignore your posts for following standard Usenet convention

OT Annoying Habits (Was: when format strings attack)

2007-01-19 Thread Carroll, Barry
s must always be envisioning cathedrals. -Quarry worker's creed > -Original Message- > From: Steven D'Aprano [mailto:[EMAIL PROTECTED] > Sent: Friday, January 19, 2007 11:30 AM > To: python-list@python.org > Subject: Re: when format strings attack > > On Fri, 19 Jan

Re: when format strings attack

2007-01-19 Thread Jeremy Sanders
Steven D'Aprano wrote: > os.system('dir -l %s' % 'text.txt') > > > Now, there is a security risk: you might set command1 yourself, and > allow the user to set args. If command1 is an external application > with a security hole, and the user provides arguments that trigger that > bug, then natur

Re: when format strings attack

2007-01-19 Thread Steven D'Aprano
On Fri, 19 Jan 2007 10:43:53 -0800, John Zenger wrote: > Perhaps it is not as severe a security risk, but pure Python programs > can run into similar problems if they don't check user input for % > codes. Please don't top-post. A: Because it messes up the order that we read things. Q: Why? A: To

Re: when format strings attack

2007-01-19 Thread Gabriel Genellina
At Friday 19/1/2007 15:43, John Zenger wrote: Perhaps it is not as severe a security risk, but pure Python programs can run into similar problems if they don't check user input for % codes. Example: >>> k = raw_input("Try to trick me: ") Try to trick me: How about %s this? >>> j = "User %s jus

Re: when format strings attack

2007-01-19 Thread Steven D'Aprano
and it doesn't > work What do you mean, doesn't work? It works fine for me, precisely as expected. What does it do for you? Crash Windows? Crash Python? Raise an exception? Return an unexpected result? > but I do see examples with % that is borrowed from the c language. The &quo

Re: when format strings attack

2007-01-19 Thread John Zenger
Perhaps it is not as severe a security risk, but pure Python programs can run into similar problems if they don't check user input for % codes. Example: >>> k = raw_input("Try to trick me: ") Try to trick me: How about %s this? >>> j = "User %s just entered: " + k >>> print j % "John" Traceback (

Re: when format strings attack

2007-01-19 Thread Gabriel Genellina
"Nick Maclaren" <[EMAIL PROTECTED]> escribió en el mensaje news:[EMAIL PROTECTED] > In article <[EMAIL PROTECTED]>, > "Gabriel Genellina" <[EMAIL PROTECTED]> writes: > |> > |> Pure Python programs are not affected, but a review of the C > implementation > |> should be made to see if any (variant of

Re: when format strings attack

2007-01-19 Thread Nick Maclaren
In article <[EMAIL PROTECTED]>, "Gabriel Genellina" <[EMAIL PROTECTED]> writes: |> <[EMAIL PROTECTED]> escribió en el mensaje |> news:[EMAIL PROTECTED] |> |> > http://www.ddj.com/184405774;jsessionid=BDDEMUGJOPXUMQSNDLQCKHSCJUNN2JVN |> > |> > I saw a warning from homeland security about this. I

Re: when format strings attack

2007-01-19 Thread Gabriel Genellina
<[EMAIL PROTECTED]> escribió en el mensaje news:[EMAIL PROTECTED] > http://www.ddj.com/184405774;jsessionid=BDDEMUGJOPXUMQSNDLQCKHSCJUNN2JVN > > I saw a warning from homeland security about this. I only comment on > the because I am trying to use os.system('command1 arg') and it doesn't > work b

when format strings attack

2007-01-19 Thread [EMAIL PROTECTED]
http://www.ddj.com/184405774;jsessionid=BDDEMUGJOPXUMQSNDLQCKHSCJUNN2JVN I saw a warning from homeland security about this. I only comment on the because I am trying to use os.system('command1 arg') and it doesn't work but I do see examples with % that is borrowed from the c language. Seems like