[Python-Dev] Reviving restricted mode?
Isaac Morland
ijmorlan at uwaterloo.ca
Wed Aug 13 15:11:15 CEST 2014
On Mon, 11 Aug 2014, Skip Montanaro wrote:
> On Mon, Aug 11, 2014 at 12:42 PM, matsjoyce <matsjoyce at gmail.com> wrote:
>> There maybe some holes in my approach, but I can't find them.
>
> There's the rub. Given time, I suspect someone will discover a hole or two.
Schneier's Law:
Any person can invent a security system so clever that she or he can't
think of how to break it.
While I would not claim a Python sandbox is utterly impossible, I'm
suspicious that the whole "consenting adults" approach in Python is
incompatible with a sandbox. The whole idea of a sandbox is to absolutely
prevent people from doing things even if they really want to and know what
they are doing.
Isaac Morland CSCF Web Guru
DC 2554C, x36650 WWW Software Specialist
More information about the Python-Dev
mailing list