[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [pygame] pygame web plugin

To: pygame-users@xxxxxxxx
Subject: Re: [pygame] pygame web plugin
From: Noah Kantrowitz <noah@xxxxxxxxxxxxxx>
Date: Wed, 10 Sep 2008 23:11:59 -0700
Delivered-to: archiver@xxxxxxxx
Delivered-to: pygame-users-outgoing@xxxxxxxx
Delivered-to: pygame-users@xxxxxxxx
Delivery-date: Thu, 11 Sep 2008 02:12:29 -0400
In-reply-to: <f495db580809102310l5635701fnabbd951d45f33f20@xxxxxxxxxxxxxx>
References: <20080909215528.37FF57BD45@xxxxxxxxxxxxxxxxxxxxxxx> <097201c912d7$7adafb90$7090f2b0$@net> <e1a84d570809092031y7dfc481djc6282d51a7dfecef@xxxxxxxxxxxxxx> <200809101023.29805.zathras@xxxxxxxxxxxxx> <48C84B3C.80806@xxxxxxxxxxxxxxxx> <f495db580809102310l5635701fnabbd951d45f33f20@xxxxxxxxxxxxxx>
Reply-to: pygame-users@xxxxxxxx
Sender: owner-pygame-users@xxxxxxxx


On Sep 10, 2008, at 11:10 PM, Knapp wrote:

On Thu, Sep 11, 2008 at 12:33 AM, Greg Ewing
<greg.ewing@xxxxxxxxxxxxxxxx> wrote:

On Wednesday 10 September 2008 04:31:10 James Mills wrote:

step 4. "Audit code to be sure it isn't evil".


That's nice in theory, but can you honestly say that you
meticulously examine every line of every piece of code that
you download before running it?

Greg


Has anyone here ever looked over code to make sure it was safe without
being on the team that wrote it or working at this as your job?
Also, if you did, what would you look for? I mean it would be really
easy to leave a little one over or one under bug or fail to check the
input in a way that would let you hack a piece of code and REALLY hard
to find it.

This is why sandboxing and minimum-privilege-execution is such a bigdeal when talking about running code on the internet. This is also whyanyone that thinks a CPython web VM is a good idea has no idea whatthey are getting in to.


--Noah

References:
- Re: [pygame] pygame web plugin
  - From: yanom @linuxmail.org
- RE: [pygame] pygame web plugin
  - From: Noah Kantrowitz
- Re: [pygame] pygame web plugin
  - From: James Mills
- Re: [pygame] pygame web plugin
  - From: Michael
- Re: [pygame] pygame web plugin
  - From: Greg Ewing
- Re: [pygame] pygame web plugin
  - From: Knapp

Prev by Author: RE: [pygame] pygame web plugin
Next by Author: [pygame] problem - playing a movie in pygame
Previous by thread: Re: [pygame] pygame web plugin
Next by thread: RE: [pygame] pygame web plugin
Index(es):
- Author
- Thread