From brianhray at gmail.com  Thu Jul 10 12:06:50 2014
From: brianhray at gmail.com (Brian Ray)
Date: Thu, 10 Jul 2014 05:06:50 -0500
Subject: [ChiPy-announce] [ANN] ChiPy July monthly meeting *tonight*
Message-ID: <CANKg38ujN-KjW3=1su241=-uung85yaDACxYexqzw7Kuxy56GA@mail.gmail.com>

*When:* July 10, 2014, 7 p.m.

*Where:* Vokal interactive / Mobile makers <http://www.chipy.org/#>

223 W Erie St, Suite 4 NW Chicago, IL


We found a great meeting space JIT. All are welcome to attend. Food
provided by Braintree. Drink provided by Paypal. Best meeting ever...
This Month's Topics

   - *Webhooks @ Braintree*
   (0:20:00 Minutes)
   By: Brian Lesperance
   At Braintree, we use Tornado to send thousands of simultaneous webhook
   requests and Pika to pull incoming webhooks from RabbitMQ. Learn about how
   we've set it up and problems we've had to overcome with this approach.
   - An amazing mystery topic from VOKAL






-- 
Brian Ray
@brianray
(773) 669-7717
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/chipy-announce/attachments/20140710/e52fc659/attachment.html>

From pkpp1233 at gmail.com  Tue Jul 15 20:07:26 2014
From: pkpp1233 at gmail.com (Paul Katsen)
Date: Tue, 15 Jul 2014 18:07:26 -0000
Subject: [ChiPy-announce] built app to auto-generate UI for scripts.
Message-ID: <CACFjNe6QAuQLtJ2Xwk6JTJe+YSjDE40mzc_74j-3v3mq=Uh9Kw@mail.gmail.com>

Hey ya'll.

I kept needing to teach non-engineers how to use the terminal to run
scripts. Decided to just hack up a site last week where you can copy/paste
your script in, select inputs for your script, and you get a shareable link
to run your code.

Check it out - would love your feedback: https://python.blockspring.com/.

-Paul
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/chipy-announce/attachments/20140715/2b8a102f/attachment-0001.html>

From japhy at pearachute.com  Tue Jul 15 20:21:49 2014
From: japhy at pearachute.com (Japhy Bartlett)
Date: Tue, 15 Jul 2014 18:21:49 -0000
Subject: [ChiPy-announce] [Chicago] built app to auto-generate UI for
	scripts.
In-Reply-To: <CACFjNe6QAuQLtJ2Xwk6JTJe+YSjDE40mzc_74j-3v3mq=Uh9Kw@mail.gmail.com>
References: <CACFjNe6QAuQLtJ2Xwk6JTJe+YSjDE40mzc_74j-3v3mq=Uh9Kw@mail.gmail.com>
Message-ID: <CANTsVHKniH2eNExP8pneFA_ix3iMXDPsFwH_GgN1cp1VLvGkBw@mail.gmail.com>

you're kind of sandboxed at least because you're running in docker, but
this is very vulnerable to malicious code!

import subprocess
subprocess.call('whoami')


> root


On Tue, Jul 15, 2014 at 1:06 PM, Paul Katsen <pkpp1233 at gmail.com> wrote:

> Hey ya'll.
>
> I kept needing to teach non-engineers how to use the terminal to run
> scripts. Decided to just hack up a site last week where you can copy/paste
> your script in, select inputs for your script, and you get a shareable link
> to run your code.
>
> Check it out - would love your feedback: https://python.blockspring.com/.
>
>  -Paul
>
> _______________________________________________
> Chicago mailing list
> Chicago at python.org
> https://mail.python.org/mailman/listinfo/chicago
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/chipy-announce/attachments/20140715/a590894b/attachment-0001.html>

From pkpp1233 at gmail.com  Tue Jul 15 20:34:09 2014
From: pkpp1233 at gmail.com (Paul Katsen)
Date: Tue, 15 Jul 2014 18:34:09 -0000
Subject: [ChiPy-announce] [Chicago] built app to auto-generate UI for
	scripts.
In-Reply-To: <CANTsVHKniH2eNExP8pneFA_ix3iMXDPsFwH_GgN1cp1VLvGkBw@mail.gmail.com>
References: <CACFjNe6QAuQLtJ2Xwk6JTJe+YSjDE40mzc_74j-3v3mq=Uh9Kw@mail.gmail.com>
 <CANTsVHKniH2eNExP8pneFA_ix3iMXDPsFwH_GgN1cp1VLvGkBw@mail.gmail.com>
Message-ID: <CACFjNe5z69LObWYpjX_raMEje3G7X7pg6B8tiP5s37qFPc2gcg@mail.gmail.com>

any advice on how to sandbox even more? i know sites like Udacity and
Coursera are running arbitrary code too.


On Tue, Jul 15, 2014 at 1:21 PM, Japhy Bartlett <japhy at pearachute.com>
wrote:

> you're kind of sandboxed at least because you're running in docker, but
> this is very vulnerable to malicious code!
>
> import subprocess
> subprocess.call('whoami')
>
>
> > root
>
>
> On Tue, Jul 15, 2014 at 1:06 PM, Paul Katsen <pkpp1233 at gmail.com> wrote:
>
>> Hey ya'll.
>>
>> I kept needing to teach non-engineers how to use the terminal to run
>> scripts. Decided to just hack up a site last week where you can copy/paste
>> your script in, select inputs for your script, and you get a shareable link
>> to run your code.
>>
>> Check it out - would love your feedback: https://python.blockspring.com/.
>>
>>  -Paul
>>
>> _______________________________________________
>> Chicago mailing list
>> Chicago at python.org
>> https://mail.python.org/mailman/listinfo/chicago
>>
>>
>
> _______________________________________________
> Chicago mailing list
> Chicago at python.org
> https://mail.python.org/mailman/listinfo/chicago
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/chipy-announce/attachments/20140715/fdecd369/attachment-0001.html>