JoePublic posted at 12:37 PM Sat, 6 January 2024 - #4480146

Soo, if Bondware was so concerned about my security that it had to take "unsafe" Python 2 out of my hands, why don't they just allow me to disable Poser 11's "phoning home" functionality so I can run it on a computer that is NOT connected to the internet at all?

I mean, what could be safer to avoid malware infection than an airgap?

Did you wear a spacesuit to avoid COVID?  Lets follow the science on this <Hah, I thought I would NEVER say that!>

Most do not dedicate their PC to one stand-alone application, and that hardware would be a hefty requirement for Poser users to asorb.  Python (PY) is a widly adopted, independantly developed scripting language, so Poser developers do not control the version lifecycle.  Furthermore, PY is a programming language that can hook to the Windows operating system API, with or without Poser open on the PC.  The Poser licence validation scheme, the "phone home" is a webservice and poses no further risk than the Internet Browser also installed on the operating system.  Internet connectivity and your firewall NAT may be a necessary point of of entry, however vulnerable software can be exploiuted from air gap too, if the payload is introduced in the installed content.  A PY can be installed hidden inside a zip package, in theory and a malicipous package could be introiduced any number of ways, the more obscure and manual the method the more likely it would be excused by anti-malware.  Who scans thier thumbdrives everytime?