48 ms·
> imports necessary modules when deserializing This is one of the fundamental security issues.
by JoshTriplett 7y ago
> imports necessary modules when deserializing
This is one of the fundamental security issues.
- nurettin 7y agoMost of the security issues are mitigated if you are only running the software internally. But it would be interesting to see a hacker who managed to get into the production systems somehow figure out your RPC scheme and try to craft packets to exploit it instead of going directly for the user/password database.