Re: How to protect Python source from modification

2005-09-14 Thread Frank Millman
Magnus Lycka wrote: > Frank Millman wrote: > > I have seen Twisted mentioned many times in this ng, but I have no idea > > what it actually does. Can someone tell me in simple terms what > > advantage it might give me over a multi-threaded socket server program. > > More control. Less resource usa

Re: How to protect Python source from modification

2005-09-14 Thread Magnus Lycka
Frank Millman wrote: > I have seen Twisted mentioned many times in this ng, but I have no idea > what it actually does. Can someone tell me in simple terms what > advantage it might give me over a multi-threaded socket server program. More control. Less resource usage. Twisted also provides a very

Re: How to protect Python source from modification

2005-09-13 Thread Frank Millman
Magnus Lycka wrote: [snip lots of interesting stuff] > > > There is the question of where state should be maintained. If on the > > server, I would have to keep all the client/server connections open, > > and maintain the state of all the sessions, which would put quite a > > load on the server.

Re: How to protect Python source from modification

2005-09-13 Thread Frank Millman
Dennis Lee Bieber wrote: > On 13 Sep 2005 01:00:37 -0700, "Frank Millman" <[EMAIL PROTECTED]> > declaimed the following in comp.lang.python: > > > > 2. I am a great believer in 'field-by-field' validation when doing data > > entry, instead of filling in the entire form, submitting it, and then > >

Re: How to protect Python source from modification

2005-09-13 Thread Bryan Olson
bruno modulix wrote: > Frank Millman wrote: >>I am writing a multi-user accounting/business system. Data is stored in >>a database (PostgreSQL on Linux, SQL Server on Windows). I have written >>a Python program to run on the client, which uses wxPython as a gui, >>and connects to the database

Re: How to protect Python source from modification

2005-09-13 Thread Magnus Lycka
Frank Millman wrote: > Hi all > > I am writing a multi-user accounting/business system. Good! > The client program contains all the authentication and business logic. Not good. You lose...if it's *only* in the client. Of course, there is no such thing as a safe system, and you need a pragmatic

Re: How to protect Python source from modification

2005-09-13 Thread Bugs
Thanks Frank, I appreciate the feedback. -- http://mail.python.org/mailman/listinfo/python-list

Re: How to protect Python source from modification

2005-09-13 Thread Frank Millman
Steve M wrote: > This is a heck of a can of worms. I've been thinking about these sorts > of things for awhile now. I can't write out a broad, well-structured > advice at the moment, but here are some things that come to mind. > [snip lots of interesting stuff] Thanks for the reply, Steve. My thi

Re: How to protect Python source from modification

2005-09-13 Thread Frank Millman
Bugs wrote: > As a side question Frank, how was your experiences using wxPython for > your GUI? > Any regrets choosing wxPyton over another toolkit? > Was it very buggy? > How was it to work with in general? > Any other real-world wxPython feedback you have is appreciated. > > Frank Millman wrote:

Re: How to protect Python source from modification

2005-09-13 Thread Frank Millman
Dennis Lee Bieber wrote: > On 12 Sep 2005 08:33:10 -0700, "Frank Millman" <[EMAIL PROTECTED]> > declaimed the following in comp.lang.python: > > > > > My problem is that, if someone has access to the network and to a > > Python interpreter, they can get hold of a copy of my program and use > > it t

Re: How to protect Python source from modification

2005-09-12 Thread Bryan Olson
Steve M wrote: [...] > 1. Based on your description, don't trust the client. Therefore, > "security", whatever that amounts to, basically has to happen on the > server. That's the right answer. Trying to enforce security within your software running the client machine does not work. Forget the

Re: How to protect Python source from modification

2005-09-12 Thread Robert Kern
Frank Millman wrote: > Steven D'Aprano wrote: > >>On Mon, 12 Sep 2005 08:33:10 -0700, Frank Millman wrote: >> >>>My problem is that, if someone has access to the network and to a >>>Python interpreter, they can get hold of a copy of my program and use >>>it to knock up their own client program tha

Re: How to protect Python source from modification

2005-09-12 Thread Frank Millman
Steven D'Aprano wrote: > On Mon, 12 Sep 2005 08:33:10 -0700, Frank Millman wrote: > > > My problem is that, if someone has access to the network and to a > > Python interpreter, they can get hold of a copy of my program and use > > it to knock up their own client program that makes a connection to

Re: How to protect Python source from modification

2005-09-12 Thread Steven D'Aprano
On Mon, 12 Sep 2005 08:33:10 -0700, Frank Millman wrote: > My problem is that, if someone has access to the network and to a > Python interpreter, they can get hold of a copy of my program and use > it to knock up their own client program that makes a connection to the > database. They can then ex

Re: How to protect Python source from modification

2005-09-12 Thread Philippe C. Martin
Hi, Why not just releasing the *.pyc ? Regards, Philippe Frank Millman wrote: > Hi all > > I am writing a multi-user accounting/business system. Data is stored in > a database (PostgreSQL on Linux, SQL Server on Windows). I have written > a Python program to run on the client, which uses w

Re: How to protect Python source from modification

2005-09-12 Thread Steven D'Aprano
On Mon, 12 Sep 2005 06:34:45 -0700, Frank Millman wrote: > The client program contains all the authentication and business logic. > It has dawned on me that anyone can bypass this by modifying the > program. As it is written in Python, with source available, this would > be quite easy. My target m

Re: How to protect Python source from modification

2005-09-12 Thread Bruno Desthuilliers
Frank Millman a écrit : > bruno modulix wrote: > >>Frank Millman wrote: >> >>>Hi all >>> >>>I am writing a multi-user accounting/business system. Data is stored in >>>a database (PostgreSQL on Linux, SQL Server on Windows). I have written >>>a Python program to run on the client, which uses wxPyth

Re: How to protect Python source from modification

2005-09-12 Thread Michael Ekstrand
On Sep 12, 2005, at 11:26 AM, Frank Millman wrote: > If I move all the authentication and business logic to a program which > runs on the server, it is up to the system administrator to ensure that > only authorised people have read/write/execute privileges on that > program. Clients will have no p

Re: How to protect Python source from modification

2005-09-12 Thread Steve M
This is a heck of a can of worms. I've been thinking about these sorts of things for awhile now. I can't write out a broad, well-structured advice at the moment, but here are some things that come to mind. 1. Based on your description, don't trust the client. Therefore, "security", whatever that a

Re: How to protect Python source from modification

2005-09-12 Thread Bugs
As a side question Frank, how was your experiences using wxPython for your GUI? Any regrets choosing wxPyton over another toolkit? Was it very buggy? How was it to work with in general? Any other real-world wxPython feedback you have is appreciated. Frank Millman wrote: > I am writing a multi-use

Re: How to protect Python source from modification

2005-09-12 Thread Frank Millman
bruno modulix wrote: > Frank Millman wrote: > > Hi all > > > > I am writing a multi-user accounting/business system. Data is stored in > > a database (PostgreSQL on Linux, SQL Server on Windows). I have written > > a Python program to run on the client, which uses wxPython as a gui, > > and connec

Re: How to protect Python source from modification

2005-09-12 Thread bruno modulix
Frank Millman wrote: > Peter Hansen wrote: > >>Frank Millman wrote: >> (snip) >>>The only truly secure solution I can think of would involve a radical >>>reorganisation of my program >> >>Please define what "truly secure" means to you. >> > > > Fair question. I am not expecting 'truly' to mean 1

Re: How to protect Python source from modification

2005-09-12 Thread Frank Millman
Peter Hansen wrote: > Frank Millman wrote: > > I am writing a multi-user accounting/business system. Data is stored in > > a database (PostgreSQL on Linux, SQL Server on Windows). I have written > > a Python program to run on the client, which uses wxPython as a gui, > > and connects to the databa

Re: How to protect Python source from modification

2005-09-12 Thread bruno modulix
Frank Millman wrote: > Hi all > > I am writing a multi-user accounting/business system. Data is stored in > a database (PostgreSQL on Linux, SQL Server on Windows). I have written > a Python program to run on the client, which uses wxPython as a gui, > and connects to the database via TCP/IP. > >

Re: How to protect Python source from modification

2005-09-12 Thread Frank Millman
Gerhard Häring wrote: > Frank Millman wrote: > > Hi all > > > > I am writing a multi-user accounting/business system. Data is stored in > > a database (PostgreSQL on Linux, SQL Server on Windows). I have written > > a Python program to run on the client, which uses wxPython as a gui, > > and conne

Re: How to protect Python source from modification

2005-09-12 Thread Peter Hansen
Frank Millman wrote: > I am writing a multi-user accounting/business system. Data is stored in > a database (PostgreSQL on Linux, SQL Server on Windows). I have written > a Python program to run on the client, which uses wxPython as a gui, > and connects to the database via TCP/IP. > > The client

Re: How to protect Python source from modification

2005-09-12 Thread Gerhard Häring
Frank Millman wrote: > Hi all > > I am writing a multi-user accounting/business system. Data is stored in > a database (PostgreSQL on Linux, SQL Server on Windows). I have written > a Python program to run on the client, which uses wxPython as a gui, > and connects to the database via TCP/IP. > >

How to protect Python source from modification

2005-09-12 Thread Frank Millman
Hi all I am writing a multi-user accounting/business system. Data is stored in a database (PostgreSQL on Linux, SQL Server on Windows). I have written a Python program to run on the client, which uses wxPython as a gui, and connects to the database via TCP/IP. The client program contains all the