On 8 August 2016 at 02:14, Nick Coghlan <ncogh...@gmail.com> wrote:

> In a lot of ways, I see it as being similar to our dependency on the Linux
> platform locale being set correctly to get boundary processing right: if
> you get an exception, the problem *isn't* generally with the application,
> it's with the way Linux has been configured. The same holds here - if you
> get BlockingIOError from os.urandom under PEP 524, there's nothing wrong
> with your application, but there *is* something wrong with your environment
> (since security sensitive Python code should only be run after the system
> RNG is ready)
>

Oops, that reference should have been to PEP 522.

Cheers,
Nick.

-- 
Nick Coghlan   |   ncogh...@gmail.com   |   Brisbane, Australia
_______________________________________________
Security-SIG mailing list
Security-SIG@python.org
https://mail.python.org/mailman/listinfo/security-sig

Reply via email to