Mason opened this issue on Feb 05, 2001 ยท 12 posts
Mason posted Mon, 05 February 2001 at 9:47 PM
I wrote Curious Labs and asked what restrictions if any they put into the scripting language. Here is their reply: *********************************** Thanks for your understandable concern. The answer is "No. We do not restrict Python's use... At least not for this release. It is certainly possible to create malicious scripts... but at the same time it is possible to create very powerful scripts. While embedding Python, we have mostly been concerned with empowering the professional communtity... i.e. giving them the tools they need to do whatever they want with Poser. The problem with restriction is that there will invariably be users out there that want or need whatever Python features we remove. Thanks again for your questions. We're doing the best we can to listen to and work for our online community, so please keep up the feedback, be it complimentary or critical. -Jack Walther ************************************** So apparently the socket support and everying is available. Just be cautious when accepting scripts.
Fox-Mulder posted Mon, 05 February 2001 at 10:43 PM
Thanks for checking into this Mason- All MORE the reason why the Renderosity Community should set some kind of standards with this. We have Violence, Nudity options for posting... what helps the "Average Joe" know if a script is good, bad, insane...??? Are we just supposed to download and run them and "See What Really Happens?"... To me this is like handing out firearms to everyone and saying "don't use these in any harmful way, O.K.???"... Also, does PP actually load and run Python scripts "Automatically" (as the manual says). Don't we have the option of just saying "No"???...
bushi posted Tue, 06 February 2001 at 12:15 AM
Fox - I've been following your comments on PoserPython with some interest. I do agree that there is an element of risk with downloading any script that comes down the pike. Acknowledging the risk is about as far as it goes. The "atomic bomb" comment and this one about "handing out the firearms" are, in my opinion, bordering on hysteria. A better anology would be handing out a complete machine shop and all the raw materials to build an A-bomb or firearms. Most folks aren't going to have the ability or desire to learn the tools well enough to accomplish the task. Folks that would be malicious enough to cause havoc-via-script are also going to be versed enough to cover their tracks. With Python being an extensable language, there are plenty of ways of accomplishing this. Given the history of the free utilities available for Poser, un-toward actions seem a pretty remote possibility. Another point that you made concerning newbies sticking parts of scripts together to create a Franken-script just isn't going to happen. Python shares a common attribute with most other programming languages. They are fragile creatures, very self-centered, that want things exactly their way or "no way!" Someone that is adept enough to stick scripts together would have to have a fairly high level of sophistication. Sophisticated enough to do it all from scratch. To tell the truth, I'm beginning to wonder why and to what end you protest with such fervor.
bushi posted Tue, 06 February 2001 at 12:21 AM
Damn! I meant to change the subject of the last post to "PoserPython - Threat or Menace?" ;-)
Mason posted Tue, 06 February 2001 at 2:07 AM
Fox, I don't have the propack yet but, if its like Max 3.1 with their script language, I would imagine placing a script in a startup dir would get it executed automatically. If not then it would have to be run from a command line. I was a little shocked C. Labs decided to leave in things like the socket connections and destructive file io but then its hard to not have them. Like Jack said. you take something out and someone will bitch for it. If the scripts really bug you out Fox, just avoid them and wait till the dust settles.
bushi posted Tue, 06 February 2001 at 2:58 AM
Mason - Sorry to be blunt, but since you have worked with Python before I don't understand why you'd be 'a little shocked' that CL would keep PoserPython open. After all, Python has a long and turbulent history of keeping the whole thing available to those that want to add to it. 'An open language' has been the basis of this software from the beginning. If the Poser community wants new functionality, then they have to accept the changes. If not, then Poser really will remain a toy. It's going to be difficult for a while getting this stuff sorted out. We're trying to align two VERY different communities. The Python community is much larger the Poser community so it is a great resource if we tap into it. Who knows, maybe we'll get some of them interested in Poser.
Mason posted Tue, 06 February 2001 at 12:09 PM
True. I've had to trim down the python c libs for a video game system because we were worried that users would create viruses. Dealing with 14 year old kids who think its cool to destroy someone's hard drive is a bit different than dealing with adults. I'm actually glad its not restricted, this way you don't have to poke around with it to figure out what is or is not usable. I don't think this whole virus thing is going to be an issue. And like you said, the python community has been out for a while and is much larger. I think if someone wanted to disseminate a virus they would do it through that community and not Poser.
ScottA posted Tue, 06 February 2001 at 12:18 PM
It's just a matter of people (person)not understanding what a python script is. I'm sure people once thought that toasters would come alive in the middle of the night. And eat their children. ;-) It will blow over once everyone uses them on a regular basis. ScottA
Fox-Mulder posted Tue, 06 February 2001 at 3:11 PM
I guess I am a victim of reading the daily news at MSNBC.COM and about the rapid development and deployment of new Trojans at Symantec and McAfee websites... Whether it is 14 year olds or sophisticated snoopers and hackers, running any script freely handed out in an anonymous way is a recipe for disaster if NOTHING is being done to provide some TRUSTED testing and script-writing responsibility. The first people here POSTING responses are all TRUSTED members of the Poser Community. What about the LURKERS? Maybe they would like to show how CLEVER they are and that they can't be caught either... Poser will attract a DIFFERENT Python Script writer I think. The average Poser user, who will eventually aquire PP script-writing by purchase, hook, crook - or maybe doesn't even have to- maybe just copy the other Python scripts, etc. I think that with this much POWER it is hard to believe there won't be some real pain...
Grammer posted Tue, 06 February 2001 at 4:58 PM
Nobody asked you to download a PythonScript from anywere and run it on your computer, trojans etc can happen with any script from any place and this problem is absolutely no problem restricted to Poser. Would you run a script downloaded from somewhere ? Or an .exe file coming with a email - you guys are poking in the wrong hole. Nobody is forced to run Python scripts. I want to write my own scripts in an unrestricted environment, and this was the only way to open Poser for professionals. You can use Python to do anything in Poser you want, this goes from automatizing animation, like breaths and blinks to manipulation of meshes, like cloth simuation and so on. Python rules !
Marque posted Thu, 08 February 2001 at 10:59 AM
I wonder if it's possible to sell a version without the Python, for people who aren't interested in learning it or using it. I want the full ability, as I will be learning Python for this and other reasons. I think the community would better serve the newbies if they pulled the Python Script stuffage out of the regular Poser freestuff and put it in it's own spot with a disclaimer stating the problems that you might have if you don't know what you're doing...well, maybe put a little better than that...lol I think Fox is right in being concerned, but I think if newbies go in to download the scripts and they are told they need to read the manual carefully that would be enough. You can't hold their hand all the way, but to separate them and give the warning will show that the moderators are showing concern for the new peeps. They can really screw up the models in the setup room too, so you can't sit with them and walk them through, but warnings are nice. Rambling on, Marque
JeffH posted Thu, 08 February 2001 at 11:08 AM
The propack does have it's own FS spot. Why would a newbie want to use the PRO pack? ;-)