94 messages in org.blender.bf-committersRe: [Bf-committers] "Security" gets i...| From | Sent On | Attachments |
|---|---|---|
| Daniel Salazar - 3Developer.com | Apr 27, 2010 5:59 pm | |
| Matt Ebb | Apr 27, 2010 6:17 pm | |
| Benjamin Tolputt | Apr 27, 2010 7:09 pm | |
| Benjamin Tolputt | Apr 27, 2010 7:25 pm | |
| Matt Ebb | Apr 27, 2010 7:32 pm | |
| Benjamin Tolputt | Apr 27, 2010 7:57 pm | |
| Campbell Barton | Apr 28, 2010 1:03 am | |
| Daniel Salazar - 3Developer.com | Apr 28, 2010 1:14 am | |
| Remo Pini | Apr 28, 2010 1:34 am | |
| Benjamin Tolputt | Apr 28, 2010 2:36 am | |
| horace grant | Apr 28, 2010 4:28 am | |
| Benjamin Tolputt | Apr 28, 2010 7:05 am | |
| horace grant | Apr 28, 2010 7:56 am | |
| Remo Pini | Apr 28, 2010 8:32 am | |
| Nery Chucuy | Apr 28, 2010 8:41 am | |
| Raul Fernandez Hernandez | Apr 28, 2010 8:58 am | |
| male...@licuadorastudio.com | Apr 28, 2010 9:30 am | |
| Bassam Kurdali | Apr 28, 2010 9:55 am | |
| Raul Fernandez Hernandez | Apr 28, 2010 10:58 am | |
| Makslane Rodrigues | Apr 28, 2010 1:52 pm | |
| horace grant | Apr 28, 2010 2:28 pm | |
| Matt Ebb | Apr 28, 2010 2:34 pm | |
| Charles Wardlaw | Apr 28, 2010 2:58 pm | |
| Makslane Rodrigues | Apr 28, 2010 3:15 pm | |
| Tom M | Apr 28, 2010 3:16 pm | |
| Ruslan Merkulov | Apr 28, 2010 4:33 pm | |
| Charles Wardlaw | Apr 28, 2010 5:09 pm | |
| joe | Apr 28, 2010 5:21 pm | |
| Benjamin Tolputt | Apr 28, 2010 5:31 pm | |
| Ruslan Merkulov | Apr 28, 2010 5:40 pm | |
| Benjamin Tolputt | Apr 28, 2010 6:44 pm | |
| Martin Poirier | Apr 28, 2010 8:01 pm | |
| amrp...@gmail.com | Apr 28, 2010 8:27 pm | |
| Charles Wardlaw | Apr 28, 2010 8:44 pm | |
| Benjamin Tolputt | Apr 28, 2010 8:56 pm | |
| Martin Poirier | Apr 28, 2010 9:02 pm | |
| §ĥřïñïďĥï Ŗäö | Apr 28, 2010 9:03 pm | |
| Harley Acheson | Apr 28, 2010 9:31 pm | |
| Benjamin Tolputt | Apr 28, 2010 11:22 pm | |
| Ruslan Merkulov | Apr 29, 2010 12:10 am | |
| Tony Mullen | Apr 29, 2010 3:08 am | |
| Kevin Roy | Apr 29, 2010 3:30 am | |
| Charles Wardlaw | Apr 29, 2010 3:39 am | |
| horace grant | Apr 29, 2010 5:03 am | |
| Thomas Dinges | Apr 29, 2010 5:13 am | |
| Martin Poirier | Apr 29, 2010 5:57 am | |
| Benjamin Tolputt | Apr 29, 2010 5:58 am | |
| (Ry)akiotakis (An)tonis | Apr 29, 2010 6:13 am | |
| Charles Wardlaw | Apr 29, 2010 6:16 am | |
| Raul Fernandez Hernandez | Apr 29, 2010 6:35 am | |
| Charles Wardlaw | Apr 29, 2010 6:41 am | |
| Benjamin Tolputt | Apr 29, 2010 6:46 am | |
| Benjamin Tolputt | Apr 29, 2010 7:11 am | |
| Raul Fernandez Hernandez | Apr 29, 2010 8:10 am | |
| Knapp | Apr 29, 2010 8:54 am | |
| Michael Judd | Apr 29, 2010 10:55 am | |
| Martin Poirier | Apr 29, 2010 10:59 am | |
| Michael Judd | Apr 29, 2010 11:13 am | |
| Michael Fox | Apr 29, 2010 3:26 pm | |
| Benjamin Tolputt | Apr 29, 2010 4:41 pm | |
| Benjamin Tolputt | Apr 29, 2010 4:46 pm | |
| Benjamin Tolputt | Apr 29, 2010 5:03 pm | |
| Martin Poirier | Apr 29, 2010 5:08 pm | |
| Benjamin Tolputt | Apr 29, 2010 5:09 pm | |
| horace grant | Apr 29, 2010 5:26 pm | |
| Ken Hughes | Apr 29, 2010 5:47 pm | |
| Ken Hughes | Apr 29, 2010 5:52 pm | |
| Ken Hughes | Apr 29, 2010 5:54 pm | |
| Benjamin Tolputt | Apr 29, 2010 5:55 pm | |
| Benjamin Tolputt | Apr 29, 2010 5:57 pm | |
| Benjamin Tolputt | Apr 29, 2010 6:13 pm | |
| Roger Wickes | Apr 29, 2010 6:13 pm | |
| Benjamin Tolputt | Apr 29, 2010 6:25 pm | |
| Michael Judd | Apr 29, 2010 6:39 pm | |
| Benjamin Tolputt | Apr 29, 2010 6:58 pm | |
| Martin Poirier | Apr 29, 2010 7:22 pm | |
| Benjamin Tolputt | Apr 29, 2010 9:24 pm | |
| Campbell Barton | Apr 29, 2010 9:46 pm | |
| Michael Judd | Apr 29, 2010 9:48 pm | |
| Benjamin Tolputt | Apr 29, 2010 11:28 pm | |
| Luke Frisken | Apr 30, 2010 2:01 am | |
| Roger Wickes | Apr 30, 2010 4:52 am | |
| Ton Roosendaal | Apr 30, 2010 5:06 am | |
| Jason Wilkins | Apr 30, 2010 10:54 am | |
| jonathan d p ferguson | Apr 30, 2010 11:56 am | |
| Benjamin Tolputt | Apr 30, 2010 5:39 pm | |
| Ruslan Merkulov | Apr 30, 2010 7:04 pm | |
| Jason Wilkins | Apr 30, 2010 7:52 pm | |
| Tom M | Apr 30, 2010 8:06 pm | |
| Benjamin Tolputt | Apr 30, 2010 11:20 pm | |
| Benjamin Tolputt | Apr 30, 2010 11:23 pm | |
| Jason W. | Apr 30, 2010 11:43 pm | |
| jsplifer | May 1, 2010 1:45 am | |
| horace grant | May 1, 2010 8:38 am |
| Subject: | Re: [Bf-committers] "Security" gets in the way | |
|---|---|---|
| From: | horace grant (hora...@gmail.com) | |
| Date: | Apr 29, 2010 5:26:45 pm | |
| List: | org.blender.bf-committers | |
http://www.philhassey.com/blog/tinypy-ideas/
""" Embed tinypy
* Objective: sandbox tinypy and then (as in lunatic python) build a python module that uses tinypy for safe execution of “unknown” code """
it's just an idea at the moment and not implemented but this sounds interesting. :) tinypy could be used for drivers in the long term.
in the short to mid term there doesn't seem to be an easy and secure solution but in the long term all the "this is impossible with python" seems to be wrong to me. to me it looks like in 2-3 years the whole situation will look different (pypy, tinypy,...) and there will be feasible solutions.
On Fri, Apr 30, 2010 at 2:09 AM, Martin Poirier <the...@yahoo.com> wrote:
There's still very little doubt that this will be the solution that is going to
be adopted (in the short to mid term at least).
Martin
--- On Thu, 4/29/10, Benjamin Tolputt <btol...@internode.on.net> wrote:
From: Benjamin Tolputt <btol...@internode.on.net> Subject: Re: [Bf-committers] "Security" gets in the way To: "bf-blender developers" <bf-c...@blender.org> Received: Thursday, April 29, 2010, 7:46 PM Martin Poirier wrote:
0. Keep current features, switch from default on to default off.
In which case you may as well not have the feature at all. The people most vulnerable to a malware attack from ANY vector are those that would not know to turn security on.
Not to mention the fact that security of an "on/off" variety pretty much hoses any chance of decent rigs whilst having security enabled. As I've mentioned, it's like disabling macros in Office and it not allowing you to use bold fonts and paragraph spacing. Sure you can get around it, but it is not what one would consider a "good solution"
_______________________________________________ Bf-committers mailing list Bf-c...@blender.org http://lists.blender.org/mailman/listinfo/bf-committers
_______________________________________________ Bf-committers mailing list Bf-c...@blender.org http://lists.blender.org/mailman/listinfo/bf-committers
_______________________________________________ Bf-committers mailing list Bf-c...@blender.org http://lists.blender.org/mailman/listinfo/bf-committers