Developing a network protocol with Python

Laszlo Zsolt Nagy gandalf at
Wed Dec 14 19:20:13 CET 2005

Paul Rubin wrote:

>Laszlo Zsolt Nagy <gandalf at> writes:
>>But how can I transfer pure python objects otherwise? Pyro also uses
>>Pickle and it also transfers bytecode.
>Pyro in the past used pickle in an insecure way.  I'd heard it had
>been fixed and I didn't realize it still uses pickle.
On the features page, you can read this:

"Mobile objects. Clients and servers can pass objects around - even when 
the server has never known them before. Pyro will then automatically 
transfer the needed Python bytecode."

I believe that using cPickle and transferring data (but not the code) is 
still more secure than transferring bytecode. :-)


More information about the Python-list mailing list