On Feb 25, 2014, at 8:07 AM, Maciej Fijalkowski <fij...@gmail.com> wrote:
> On Tue, Feb 25, 2014 at 3:06 PM, Chris Angelico <ros...@gmail.com> wrote: >> On Tue, Feb 25, 2014 at 11:59 PM, Maciej Fijalkowski <fij...@gmail.com> >> wrote: >>>> Last issues: >>>> - hash DoS >>> >>> is this fixed? >> >> Yes, hash randomization was added as an option in 2.7.3 or 2.7.4 or >> thereabouts, and is on by default in 3.3+. You do have to set an >> environment variable for 2.7 (and I think 2.6 got that too (??)), as >> it can break code. > > No, the hash randomization is broken, it does not provide enough > randomness (without changing the hash function which only happened in > 3.4+) > _______________________________________________ > Python-Dev mailing list > Python-Dev@python.org > https://mail.python.org/mailman/listinfo/python-dev > Unsubscribe: > https://mail.python.org/mailman/options/python-dev/donald%40stufft.io More information available here: http://legacy.python.org/dev/peps/pep-0456/ ----------------- Donald Stufft PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ Python-Dev mailing list Python-Dev@python.org https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com
