Forum: Poser Python Scripting


Subject: Poser Remote Proceedure Call - new beta

tromnek opened this issue on Sep 14, 2005 ยท 17 posts


tromnek posted Wed, 16 November 2005 at 8:13 AM

Attached Link: http://www.mort.net/users/krm/dist/poser/prpc/

Take a look at my web page (see attached link) for the security note towards the bottom of the page. The default operation listens on the loopback interface (lo) and will only accept connection from lo. Loading and saving content can only be done with locations mapped to a drive letter. This is a requirement of the load and save python methods that are supplied with Poser. Thus, if you map a drive letter to an outside network (for saving or loading), then the security risk has already been created. What do you mean by 'encrypt the script'? I should probably provide an MD5 digest of the script so that people have a minimum check for authenticity. I think most (or all) of the security risks would be associated with a virus or worm infecting your local machine. That virus or worm could use the script (if it's running) for it's own designs. However, in truth, why would it bother going thru this script (on the off chance that it's running) if it's already got your machine and is able to much more on it's own.