Re: Who should security issues be reported to?

From: Richie Hindle (richie_at_entrian.com)
Date: 01/28/05 

To: python-list@python.org
Date: Fri, 28 Jan 2005 12:26:13 +0000

[Duncan]
> I'm intrigued how you managed to come up with something you
> consider to be a security issue with Python since Python offers no
> security. Perhaps, without revealing the actual issue in question, you
> could give an example of some other situation which, if it came up in
> Python you would consider to be a security issue?

I can't speak for the OP, but one hypothetical example might be a buffer
overrun vulnerability in the socket module. 

-- 
Richie Hindle
richie@entrian.com

Relevant Pages

  • Re: New to Python: Features
    ... Is that a limitation of the language (the security holes I mean)? ... >done with Python. ... >You can, of course, design by contract. ...
    (comp.lang.python)
  • Re: New to Python: Features
    ... > Now your encouraging me not to use Python? ... group development (security, consistent naming scheme, ... give about a 5% speed boost, so the answer to your original ... object which interacts with string interpolation. ...
    (comp.lang.python)
  • Re: Need a compelling argument to use Django instead of Rails
    ... Ruby can also lock access to attributes. ... What about learning Python instead of repeating arguments from clueless ... This is not "security", this is data-hiding. ... this is language-inforced access restriction. ...
    (comp.lang.python)
  • [NT] Serious Privacy Leak in Python for Windows
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... There is a privacy leak problem in many Python implementations for Windows ... the following Python code on a Web page will run ...
    (Securiteam)
  • Re: Who should security issues be reported to?
    ... >> Python offers no security. ... SF doesn't seem to know about any such bug any more. ... just that you wanted better documentation. ...
    (comp.lang.python)