I haven't tested this yet, but if you haven't already, you might also want
to disable functions like unix_g and related functions.


On Sun, Nov 11, 2012 at 1:06 AM, Sylvestre Ledru <
sylvestre.le...@scilab-enterprises.com> wrote:

> Hello
>
> If you want to make it safe and public, you should:
> * disable the Scilab features related to files management (rmdir,
> deletefile, mdelete, etc). Note that this is likely to have side effects
> on other functions
> * disable the dynamic link functions (it is easy to write a C file which
> will be compiled by Scilab and delete file)
> * disable the link function (through this function, you can load the
> libc and call the delete C functions)
> * probably some other functions that I forget
> * launch Scilab within a chroot
>
> Scilab has not been made to be publicly used by anyone. We have in the
> roadmap a "safe mode" planned but this won't happen soon.
>
> Sylvestre
>
> On 10/11/2012 19:55, Saket Choudhary wrote:
> > Hello Everyone!
> >
> > We are back again at : http://scilab-test.garudaindia.in/cloud/
> >
> > Username: guest
> > Password : guest123
> >
> > Lets hope the hacker doesnt try ti pull it down again !
> >
> > The books and examples are still missing as we are still under the
> > process of migrating our whole site ! The hacker(read cracker) deleted
> > everything we had ! I am sure his/her act of 'cracking' can be utilised
> > in much ethical ways , rather than just deleting the content of a site
> > like ours meant for community education.
> >
> >
> > Regards,
> > Saket Choudhary
> > Fourth Year Undergraduate
> > IIT Bombay
> >
> > On 9 November 2012 14:21, Saket Choudhary <sake...@gmail.com
> > <mailto:sake...@gmail.com>> wrote:
> >
> >     Hi Antoine,
> >
> >     It looks like someone hacked our website. We are investigating it
> >     and should be up soon
> >
> >     Thanks
> >
> >     Saket
> >
> >
> >
> >
> > _______________________________________________
> > users mailing list
> > users@lists.scilab.org
> > http://lists.scilab.org/mailman/listinfo/users
> >
>
> _______________________________________________
> users mailing list
> users@lists.scilab.org
> http://lists.scilab.org/mailman/listinfo/users
>
_______________________________________________
users mailing list
users@lists.scilab.org
http://lists.scilab.org/mailman/listinfo/users

Reply via email to