<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 16.11.13 01:35, Guido van Rossum
wrote:<br>
</div>
<blockquote
cite="mid:CAP7+vJKuXw7DRGD_0MU8j1M888Dvh1z1oJvqad8G-GMY09YNyA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div class="gmail_extra">
<div class="gmail_quote">On Fri, Nov 15, 2013 at 4:31 PM, Nick
Coghlan <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:ncoghlan@gmail.com" target="_blank">ncoghlan@gmail.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">"Use an
OS level sandbox" *is* better from a security point of
view. It's just not portable :P<br>
</blockquote>
</div>
<br>
</div>
<div class="gmail_extra">Honestly, I don't believe in portable
security. :-)<br>
<br>
</div>
<div class="gmail_extra">BTW, in case it wasn't clear, I think
it was a courageous step by Victor to declare defeat. Negative
results are also results, and they need to be published.
Thanks Victor!<br clear="all">
</div>
</div>
</blockquote>
<br>
Sure it was, and it was great to follow Victor's project!<br>
I was about to use it in production, until I saw it's flaws, a while
back.<br>
<br>
Nevertheless, the issue has never been treated as much as to be able
to<br>
say "this way you implement that security in Python", whatever
"that" should be.<br>
So I think it is worth discussing, and may it just be to identify
the levels<br>
of security involved, to help people to even identify their
individual needs.<br>
<br>
My question is, actually:<br>
Do we need to address this topic, or is it already crystal clear
that something<br>
like PyPy's approach is necessary and sufficient to solve the
common, undefined<br>
problem of "run some script on whatnot, with the following security
constraint"?<br>
<br>
IOW: Do we really need a full abstraction, embedded in a virtual OS,
or<br>
is there already a compromise that suits 98 percent of the common
needs?<br>
<br>
I think as a starter, categorizing the expectations of some measure
of 'secure python'<br>
would make sense. And I'm asking the people with better knowledge of
these matters<br>
than I have. (and not asking those who don't... ;-) )<br>
<br>
cheers -- Chris<br>
<br>
<pre class="moz-signature" cols="72">--
Christian Tismer :^) <a class="moz-txt-link-rfc2396E" href="mailto:tismer@stackless.com"><mailto:tismer@stackless.com></a>
Software Consulting : Have a break! Take a ride on Python's
Karl-Liebknecht-Str. 121 : *Starship* <a class="moz-txt-link-freetext" href="http://starship.python.net/">http://starship.python.net/</a>
14482 Potsdam : PGP key -> <a class="moz-txt-link-freetext" href="http://pgp.uni-mainz.de">http://pgp.uni-mainz.de</a>
phone +49 173 24 18 776 fax +49 (30) 700143-0023
PGP 0x57F3BF04 9064 F4E1 D754 C2FF 1619 305B C09C 5A3B 57F3 BF04
whom do you want to sponsor today? <a class="moz-txt-link-freetext" href="http://www.stackless.com/">http://www.stackless.com/</a></pre>
</body>
</html>