[Python-Dev] What attempts at security should/can Python implement?

Skip Montanaro skip@pobox.com
Mon, 6 Jan 2003 13:50:23 -0600


Now that Guido has rendered impotent any attempts Python did make at
security, does it make sense to try and figure out what (if anything) can be
done by the C runtime?  Somebody asked about tainting in the past week in a
response to a year-old feature request on SF.  Does that fall into this
category?  I've been working my way (slowly) through Kent Beck's
"Test-Driven Development by Example" and was thinking that adding tainting
to Python strings might be an interesting application of those ideas (for
someone wanting to learn by doing), but if tainting won't be of any use I'll
find something else.

Skip