News for hackers. Stuff that matters.
Re:A Celery-like Python Task Queue in 55 Lines of Code by jknupp on Tuesday February 11, 2014 @12:00PM (#7218596)
Pickle (or any use of eval) is a security risk only if you're using it in the context of untrusted code. Basically any distributed task queue is going to have that risk if it can execute arbitrary code.
Re:A Celery-like Python Task Queue in 55 Lines of Code by bagels on Tuesday February 11, 2014 @12:03PM (#7218634)
I thought the risk was if the data came from an untrusted source, as it might contain code?
Re:A Celery-like Python Task Queue in 55 Lines of Code by jonesetc on Tuesday February 11, 2014 @12:56PM (#7219026)
I think shooting it over the network is considered untrusted. Man in the middle becomes a problem.