On Tue, Feb 25, 2014 at 3:06 PM, Chris Angelico <ros...@gmail.com> wrote: > On Tue, Feb 25, 2014 at 11:59 PM, Maciej Fijalkowski <fij...@gmail.com> wrote: >>> Last issues: >>> - hash DoS >> >> is this fixed? > > Yes, hash randomization was added as an option in 2.7.3 or 2.7.4 or > thereabouts, and is on by default in 3.3+. You do have to set an > environment variable for 2.7 (and I think 2.6 got that too (??)), as > it can break code.
No, the hash randomization is broken, it does not provide enough randomness (without changing the hash function which only happened in 3.4+) _______________________________________________ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com