5 ms·
Can someone inject bytecode into webpy process via url lookup table or python JSON parser? If so, this bug report would be a lot more serious. I think no-tri
by tkinom 11y ago
Can someone inject bytecode into webpy process via url lookup table or python JSON parser?
If so, this bug report would be a lot more serious. I think no-trivial CMS app server is writting in python.
- orf 11y ago> Can someone inject bytecode into webpy process via url lookup table or python JSON parser? Obviously not, that would be the biggest security hole ever even without this issue. > I think no-trivial CMS app server is writting in python. There are plenty. And are you saying no CMS app should be written in Python because of this issue? Or are you suggesting everyone switch to PHP where it's 100x easier to shoot yourself in the foot (or head)?
- sp332 11y agotkinom is just asking about the potential impact if this were a security problem.
- orf 11y agoHe's asking about the potential impact of running untrusted bytecode?
- sp332 11y agoSure, this (hypothetical) exploit would be a lot more damaging if it were widespread.
- orf 11y agoNot really, because simply by running untrusted Python bytecode in any form you are exposing yourself to much worse than this. You're already past the airtight hatch[1], so it's pointless - "It's like saying that somebody's home windows are insecure because a burglar could get into the house by merely unlocking and opening the windows from the inside." 1. http://blogs.msdn.com/b/oldnewthing/archive/2006/05/08/592350.aspx http://blogs.msdn.com/b/oldnewthing/archive/2006/05/08/59235...
- shanemhansen 11y agoA very similar bug happened to rails. They parsed json using a yaml parser that loaded code. http://ronin-ruby.github.io/blog/2013/01/28/new-rails-poc.html http://ronin-ruby.github.io/blog/2013/01/28/new-rails-poc.ht...