[Python-Dev] [OT] Paper armor [was Python Remote Code Execution in socket.recvfrom_into()]

Ethan Furman ethan at stoneleaf.us
Tue Feb 25 21:17:51 CET 2014


On 02/25/2014 12:13 PM, Terry Reedy wrote:
> On 2/25/2014 8:32 AM, Chris Angelico wrote:
>> On Wed, Feb 26, 2014 at 12:21 AM, Donald Stufft wrote:
>>>
>>> Instead of pre-generating one set of values that can be be used to DoS things
>>> you have to pre-generate 256 sets of values and try them until you get the
>>> right one. It’s like putting on armor made of paper and saying it’s harder to
>>> stab you now.
>>
>> Paper armor? You mean the stuff they tested here?
>> http://www.imdb.com/title/tt1980597/
>
> OT, but I just watched that Mythbusters episode and they confirmed that on a weight basis, paper armor from multiple
> folded sheets was comparable to steel. They have also shown that phonebooks stop ordinary bullets.

Those must be big-city phone books.  About the only thing my phone book would stop is a bb. :/

--
~Ethan~


More information about the Python-Dev mailing list