2 ms·
Python is not (typically) a "powerful" program in the sense of a confused deputy; in runs with exactly the same powers as the user who runs it. If you want secu
by gizmo686 9y ago
Python is not (typically) a "powerful" program in the sense of a confused deputy; in runs with exactly the same powers as the user who runs it. If you want security, you need well defined security boundaries, not removing arbitrary programs that "seem" powerful.
- benchaney 9y agoAlthough this obviously isn't what GP meant, I had fun imagining what sort of ridiculous abuses of a system would result in python actually being a confused deputy. Making a python interpreter that is also a setuid binary for example.