Running insecure python code

Bob Ippolito bob at
Fri Feb 27 05:03:12 CET 2004

On 2004-02-26 21:21:37 -0500, "Terry Reedy" <tjreedy at> said:

> "Noen" <not.available at> wrote in message
> news:hQq%b.41604$BD3.8026233 at
>> Im developing a game where the players will program their equipment with
>> python. Are there any ways to run insecure code?
> safely, without letting
>  > clients mess with the server-code through their own code, or even DOS
> the box
>> by using up too much memory.
> There have been several threads on this topic.  Quick answer: nothing as
> good as you would want.  Stackless, with its tasklets, may be your best bet
> once updated to run with 2.3.3.

Even with stackless, you're not going to be able to stop them from 
using "too much memory".  Besides, you can't stop a determined and 
experienced python hacker from getting ANYTHING (even if it's written 
in C) ;)

Stackless 3.0 (Python 2.3.3) compiles and works just fine from CVS 
HEAD, and I believe windows binaries are even available.  Of course, 
documentation is lacking, and we're planning to do quite a bit of stuff 
during the sprints next month.. but it's good enough to use if you want 


More information about the Python-list mailing list