Re: How to protect Python source from modification

2005-09-14 Thread Frank Millman
Dennis Lee Bieber wrote: On 13 Sep 2005 01:00:37 -0700, Frank Millman [EMAIL PROTECTED] declaimed the following in comp.lang.python: 2. I am a great believer in 'field-by-field' validation when doing data entry, instead of filling in the entire form, submitting it, and then being

Re: How to protect Python source from modification

2005-09-14 Thread Frank Millman
Magnus Lycka wrote: [snip lots of interesting stuff] There is the question of where state should be maintained. If on the server, I would have to keep all the client/server connections open, and maintain the state of all the sessions, which would put quite a load on the server.

Re: How to protect Python source from modification

2005-09-14 Thread Magnus Lycka
Frank Millman wrote: I have seen Twisted mentioned many times in this ng, but I have no idea what it actually does. Can someone tell me in simple terms what advantage it might give me over a multi-threaded socket server program. More control. Less resource usage. Twisted also provides a very

Re: How to protect Python source from modification

2005-09-14 Thread Frank Millman
Magnus Lycka wrote: Frank Millman wrote: I have seen Twisted mentioned many times in this ng, but I have no idea what it actually does. Can someone tell me in simple terms what advantage it might give me over a multi-threaded socket server program. More control. Less resource usage.

Re: How to protect Python source from modification

2005-09-13 Thread Robert Kern
Frank Millman wrote: Steven D'Aprano wrote: On Mon, 12 Sep 2005 08:33:10 -0700, Frank Millman wrote: My problem is that, if someone has access to the network and to a Python interpreter, they can get hold of a copy of my program and use it to knock up their own client program that makes a

Re: How to protect Python source from modification

2005-09-13 Thread Bryan Olson
Steve M wrote: [...] 1. Based on your description, don't trust the client. Therefore, security, whatever that amounts to, basically has to happen on the server. That's the right answer. Trying to enforce security within your software running the client machine does not work. Forget the

Re: How to protect Python source from modification

2005-09-13 Thread Frank Millman
Dennis Lee Bieber wrote: On 12 Sep 2005 08:33:10 -0700, Frank Millman [EMAIL PROTECTED] declaimed the following in comp.lang.python: My problem is that, if someone has access to the network and to a Python interpreter, they can get hold of a copy of my program and use it to knock up

Re: How to protect Python source from modification

2005-09-13 Thread Frank Millman
Bugs wrote: As a side question Frank, how was your experiences using wxPython for your GUI? Any regrets choosing wxPyton over another toolkit? Was it very buggy? How was it to work with in general? Any other real-world wxPython feedback you have is appreciated. Frank Millman wrote: I am

Re: How to protect Python source from modification

2005-09-13 Thread Frank Millman
Steve M wrote: This is a heck of a can of worms. I've been thinking about these sorts of things for awhile now. I can't write out a broad, well-structured advice at the moment, but here are some things that come to mind. [snip lots of interesting stuff] Thanks for the reply, Steve. My

Re: How to protect Python source from modification

2005-09-13 Thread Bugs
Thanks Frank, I appreciate the feedback. -- http://mail.python.org/mailman/listinfo/python-list

Re: How to protect Python source from modification

2005-09-13 Thread Magnus Lycka
Frank Millman wrote: Hi all I am writing a multi-user accounting/business system. Good! The client program contains all the authentication and business logic. Not good. You lose...if it's *only* in the client. Of course, there is no such thing as a safe system, and you need a pragmatic

Re: How to protect Python source from modification

2005-09-13 Thread Bryan Olson
bruno modulix wrote: Frank Millman wrote: I am writing a multi-user accounting/business system. Data is stored in a database (PostgreSQL on Linux, SQL Server on Windows). I have written a Python program to run on the client, which uses wxPython as a gui, and connects to the database via

How to protect Python source from modification

2005-09-12 Thread Frank Millman
Hi all I am writing a multi-user accounting/business system. Data is stored in a database (PostgreSQL on Linux, SQL Server on Windows). I have written a Python program to run on the client, which uses wxPython as a gui, and connects to the database via TCP/IP. The client program contains all the

Re: How to protect Python source from modification

2005-09-12 Thread Gerhard Häring
Frank Millman wrote: Hi all I am writing a multi-user accounting/business system. Data is stored in a database (PostgreSQL on Linux, SQL Server on Windows). I have written a Python program to run on the client, which uses wxPython as a gui, and connects to the database via TCP/IP. The

Re: How to protect Python source from modification

2005-09-12 Thread Peter Hansen
Frank Millman wrote: I am writing a multi-user accounting/business system. Data is stored in a database (PostgreSQL on Linux, SQL Server on Windows). I have written a Python program to run on the client, which uses wxPython as a gui, and connects to the database via TCP/IP. The client

Re: How to protect Python source from modification

2005-09-12 Thread Frank Millman
Gerhard Häring wrote: Frank Millman wrote: Hi all I am writing a multi-user accounting/business system. Data is stored in a database (PostgreSQL on Linux, SQL Server on Windows). I have written a Python program to run on the client, which uses wxPython as a gui, and connects to the

Re: How to protect Python source from modification

2005-09-12 Thread bruno modulix
Frank Millman wrote: Hi all I am writing a multi-user accounting/business system. Data is stored in a database (PostgreSQL on Linux, SQL Server on Windows). I have written a Python program to run on the client, which uses wxPython as a gui, and connects to the database via TCP/IP. The

Re: How to protect Python source from modification

2005-09-12 Thread Frank Millman
Peter Hansen wrote: Frank Millman wrote: I am writing a multi-user accounting/business system. Data is stored in a database (PostgreSQL on Linux, SQL Server on Windows). I have written a Python program to run on the client, which uses wxPython as a gui, and connects to the database via

Re: How to protect Python source from modification

2005-09-12 Thread Frank Millman
bruno modulix wrote: Frank Millman wrote: Hi all I am writing a multi-user accounting/business system. Data is stored in a database (PostgreSQL on Linux, SQL Server on Windows). I have written a Python program to run on the client, which uses wxPython as a gui, and connects to the

Re: How to protect Python source from modification

2005-09-12 Thread Bugs
As a side question Frank, how was your experiences using wxPython for your GUI? Any regrets choosing wxPyton over another toolkit? Was it very buggy? How was it to work with in general? Any other real-world wxPython feedback you have is appreciated. Frank Millman wrote: I am writing a

Re: How to protect Python source from modification

2005-09-12 Thread Steve M
This is a heck of a can of worms. I've been thinking about these sorts of things for awhile now. I can't write out a broad, well-structured advice at the moment, but here are some things that come to mind. 1. Based on your description, don't trust the client. Therefore, security, whatever that

Re: How to protect Python source from modification

2005-09-12 Thread Michael Ekstrand
On Sep 12, 2005, at 11:26 AM, Frank Millman wrote: If I move all the authentication and business logic to a program which runs on the server, it is up to the system administrator to ensure that only authorised people have read/write/execute privileges on that program. Clients will have no

Re: How to protect Python source from modification

2005-09-12 Thread Bruno Desthuilliers
Frank Millman a écrit : bruno modulix wrote: Frank Millman wrote: Hi all I am writing a multi-user accounting/business system. Data is stored in a database (PostgreSQL on Linux, SQL Server on Windows). I have written a Python program to run on the client, which uses wxPython as a gui, and

Re: How to protect Python source from modification

2005-09-12 Thread Steven D'Aprano
On Mon, 12 Sep 2005 06:34:45 -0700, Frank Millman wrote: The client program contains all the authentication and business logic. It has dawned on me that anyone can bypass this by modifying the program. As it is written in Python, with source available, this would be quite easy. My target

Re: How to protect Python source from modification

2005-09-12 Thread Philippe C. Martin
Hi, Why not just releasing the *.pyc ? Regards, Philippe Frank Millman wrote: Hi all I am writing a multi-user accounting/business system. Data is stored in a database (PostgreSQL on Linux, SQL Server on Windows). I have written a Python program to run on the client, which uses

Re: How to protect Python source from modification

2005-09-12 Thread Steven D'Aprano
On Mon, 12 Sep 2005 08:33:10 -0700, Frank Millman wrote: My problem is that, if someone has access to the network and to a Python interpreter, they can get hold of a copy of my program and use it to knock up their own client program that makes a connection to the database. They can then

Re: How to protect Python source from modification

2005-09-12 Thread Frank Millman
Steven D'Aprano wrote: On Mon, 12 Sep 2005 08:33:10 -0700, Frank Millman wrote: My problem is that, if someone has access to the network and to a Python interpreter, they can get hold of a copy of my program and use it to knock up their own client program that makes a connection to the