RELEASED Python 3.0 final
Peter Pearson
ppearson at nowhere.invalid
Fri Dec 5 12:33:11 EST 2008
On Thu, 4 Dec 2008 15:49:46 -0600, skip at pobox.com <skip at pobox.com> wrote:
>
> It's more than warnings. With properly crafted
> combinations of spaces and tabs you can get code which
> looks like it has a certain indentation to the human
> observer but which looks like it has different indentation
> (and thus different semantics) to the byte code compiler.
> There is often no warning.
Fascinating. Has anybody developed demo code that looks,
during code review, as if it prints a Snoopy calendar, but
really, during execution, emails your password file to
Minsk? The security implications are intriguing. What's the
most underhanded thing anybody has seen done?
--
To email me, substitute nowhere->spamcop, invalid->net.
More information about the Python-list
mailing list