News for hackers. Stuff that matters.

A comment on Python bytecode is heavily trusted by CPython. Parent comment

Re:Python bytecode is heavily trusted by CPython by sp332 on Wednesday October 21, 2015 @08:33AM (#10424967)
tkinom is just asking about the potential impact if this were a security problem.
[ Parent | on HN ]
Re:Python bytecode is heavily trusted by CPython by orf on Wednesday October 21, 2015 @08:59AM (#10425075)
He's asking about the potential impact of running untrusted bytecode?
[ Parent | on HN ]
Re:Python bytecode is heavily trusted by CPython by sp332 on Wednesday October 21, 2015 @09:50AM (#10425362)
Sure, this (hypothetical) exploit would be a lot more damaging if it were widespread.
[ Parent | on HN ]
Re:Python bytecode is heavily trusted by CPython by orf on Wednesday October 21, 2015 @10:37AM (#10425687)
Not really, because simply by running untrusted Python bytecode in any form you are exposing yourself to much worse than this. You're already past the airtight hatch[1], so it's pointless - "It's like saying that somebody's home windows are insecure because a burglar could get into the house by merely unlocking and opening the windows from the inside."

1. http://blogs.msdn.com/b/oldnewthing/archive/2006/05/08/59235...

[ Parent | on HN ]