[issue12015] possible characters in temporary file name is too few

2018-04-08 Thread miss-islington
miss-islington added the comment: New changeset 335efd7c252799eeeb8cbf51d178b1b897a91ae2 by Miss Islington (bot) in branch '3.6': Update docstring of tempfile._RandomNameSequence (GH-6414)

[issue12015] possible characters in temporary file name is too few

2018-04-08 Thread miss-islington
miss-islington added the comment: New changeset d964f51f813282171d4da831e8de0fe003253e9e by Miss Islington (bot) in branch '3.7': Update docstring of tempfile._RandomNameSequence (GH-6414)

[issue12015] possible characters in temporary file name is too few

2018-04-08 Thread miss-islington
Change by miss-islington : -- pull_requests: +6125 ___ Python tracker ___

[issue12015] possible characters in temporary file name is too few

2018-04-08 Thread miss-islington
Change by miss-islington : -- pull_requests: +6124 ___ Python tracker ___

[issue12015] possible characters in temporary file name is too few

2018-04-08 Thread INADA Naoki
INADA Naoki added the comment: New changeset 9c463ec88ba21764f6fff8e01d6045a932a89438 by INADA Naoki (Wolfgang Maier) in branch 'master': Update docstring of tempfile._RandomNameSequence (GH-6414)

[issue12015] possible characters in temporary file name is too few

2014-01-30 Thread Jakub Wilk
Changes by Jakub Wilk jw...@jwilk.net: -- nosy: +jwilk ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue12015 ___ ___ Python-bugs-list mailing list

[issue12015] possible characters in temporary file name is too few

2013-08-13 Thread Roundup Robot
Roundup Robot added the comment: New changeset de5077aca668 by Victor Stinner in branch 'default': Close #12015: The tempfile module now uses a suffix of 8 random characters http://hg.python.org/cpython/rev/de5077aca668 -- nosy: +python-dev resolution: - fixed stage: patch review -

[issue12015] possible characters in temporary file name is too few

2013-08-13 Thread STINNER Victor
STINNER Victor added the comment: With 8 lowercase characters, the entropy is 41.7 bits, whereas it is only 35.9 bits for 6 characters with uppercase and lowercase letters. math.log(26+26+10+1, 2) * 6 # (a-zA-Z0-9_) x 6 35.8636795409995 math.log(26+10+1, 2) * 6 # (a-z0-9_) x 6

[issue12015] possible characters in temporary file name is too few

2013-08-03 Thread Charles-François Natali
Changes by Charles-François Natali cf.nat...@gmail.com: -- keywords: +easy, needs review stage: - patch review type: - enhancement versions: +Python 3.4 -Python 3.3 ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue12015

[issue12015] possible characters in temporary file name is too few

2011-05-09 Thread Nick Coghlan
Nick Coghlan ncogh...@gmail.com added the comment: Python should still work reliably even if the temp directory is on a case-insensitive filesystem. Since that isn't an easy thing to determine, -1 on restoring the uppercase characters to the filenames. As for it not being fixed previously,

[issue12015] possible characters in temporary file name is too few

2011-05-09 Thread STINNER Victor
STINNER Victor victor.stin...@haypocalc.com added the comment: If you would like more entry, use a longer filename: (26+10+1) ** 6 (26+26+10+1) ** 6 False (26+10+1) ** 7 (26+26+10+1) ** 6 True -- nosy: +haypo ___ Python tracker

[issue12015] possible characters in temporary file name is too few

2011-05-09 Thread Nick Coghlan
Nick Coghlan ncogh...@gmail.com added the comment: The number of characters in the filename is hardcoded in the guts of tempfile (in _RandomNameSequence.__next__ to be exact). Increasing that to 7 (or even 8) would be a straightforward change at the library level, but it can't be done from

[issue12015] possible characters in temporary file name is too few

2011-05-09 Thread Charles-François Natali
Charles-François Natali neolo...@free.fr added the comment: Could someone explain me what's the risk on a case-insensitive filesystem? Since files are created with O_CREAT|O_EXCL, I don't see where the problem is. -- nosy: +neologix ___ Python

[issue12015] possible characters in temporary file name is too few

2011-05-09 Thread Nick Coghlan
Nick Coghlan ncogh...@gmail.com added the comment: Basically, adding the uppercase letters back in would provide no gain in entropy on a case-insensitive filesystem (as the upper and lower case letters will collide). Increasing the length of the random sequence would provide a consistent gain

[issue12015] possible characters in temporary file name is too few

2011-05-09 Thread Raymond Hettinger
Raymond Hettinger raymond.hettin...@gmail.com added the comment: +1 for increasing the number of random characters to 8 -1 for restoring uppercase letters -- ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue12015

[issue12015] possible characters in temporary file name is too few

2011-05-09 Thread Nick Coghlan
Nick Coghlan ncogh...@gmail.com added the comment: Minor clarification: after my first comment, I realised that the original change in the character set didn't actually fix anything, it just propagated the effectively smaller sample space on case-insensitive filesystems to all filesystems.

[issue12015] possible characters in temporary file name is too few

2011-05-09 Thread Charles-François Natali
Charles-François Natali neolo...@free.fr added the comment: @Nick I fully agree with you, but my point was that it doesn't make it less safe on case-insensitive filesystems. Apart from that, it's of course better to increase the length of the random sequence. --

[issue12015] possible characters in temporary file name is too few

2011-05-09 Thread Nick Coghlan
Nick Coghlan ncogh...@gmail.com added the comment: Oh, you mean the security risk if the temporary names can be guessed? My recollection is that it is more of a problem for temporary directories than it is for temporary files, since the module can't control how files inside a temp directory

[issue12015] possible characters in temporary file name is too few

2011-05-09 Thread STINNER Victor
STINNER Victor victor.stin...@haypocalc.com added the comment: If you care about security, you should not use the Python random module because it is not cryptographic. Oh oh, ssl doesn't expose RAND_bytes(). -- ___ Python tracker

[issue12015] possible characters in temporary file name is too few

2011-05-09 Thread Antoine Pitrou
Antoine Pitrou pit...@free.fr added the comment: If you care about security, you should not use the Python random module because it is not cryptographic. Oh oh, ssl doesn't expose RAND_bytes(). Feel free to open a separate issue and even provide a patch! --

[issue12015] possible characters in temporary file name is too few

2011-05-09 Thread Steve Ward
Changes by Steve Ward plane...@gmail.com: Added file: http://bugs.python.org/file21950/tempfile.py.diff ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue12015 ___

[issue12015] possible characters in temporary file name is too few

2011-05-06 Thread Amaury Forgeot d'Arc
Amaury Forgeot d'Arc amaur...@gmail.com added the comment: - How is it an issue? is the number of combinations really important to you? - Isn't there a greater risk of collisions on a case-insensitive filesystem? -- nosy: +amaury.forgeotdarc ___

[issue12015] possible characters in temporary file name is too few

2011-05-06 Thread Steve Ward
Steve Ward plane...@gmail.com added the comment: It is an issue because... 1) Python falls out of line with most other popular systems and languages. 2) There was never a good reason to decrease the entropy in the first place. If there was, the reason of case-sensitive files systems was not

[issue12015] possible characters in temporary file name is too few

2011-05-06 Thread Amaury Forgeot d'Arc
Changes by Amaury Forgeot d'Arc amaur...@gmail.com: -- nosy: +rhettinger ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue12015 ___ ___

[issue12015] possible characters in temporary file name is too few

2011-05-06 Thread Éric Araujo
Éric Araujo mer...@netwok.org added the comment: FWIW: Conformity with popular systems is not a goal. -- nosy: +eric.araujo versions: -Python 3.1, Python 3.2, Python 3.4 ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue12015

[issue12015] possible characters in temporary file name is too few

2011-05-06 Thread Éric Araujo
Changes by Éric Araujo mer...@netwok.org: -- nosy: +ncoghlan, pitrou ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue12015 ___ ___ Python-bugs-list

[issue12015] possible characters in temporary file name is too few

2011-05-05 Thread Steve Ward
New submission from Steve Ward plane...@gmail.com: In this revision http://hg.python.org/cpython/rev/b6da97930f63, the possible characters that comprise a temporary file decreased. It was noted in this thread http://mail.python.org/pipermail/python-dev/2010-November/105452.html. The old