Re: Picloud's pickler and mobile code (was: Getting rid of pickle as serialization protocol)

Irmen de Jong <[email protected]>
Newsgroups gmane.comp.python.pyro
Message-ID <[email protected]>
On 3-6-2013 20:15, Steve Traugott wrote:
> On Mon, Jun 3, 2013 at 10:49 AM, Steve Traugott <[email protected]> wrote:
>> See http://stackoverflow.com/a/16891169/1264797 for a little more detail.
> 
> Ah.  I have a slightly better version of that write-up posted on
> Quora, but it took me this long to figure out how to get around
> Quora's registration wall.  This link should work for anyone not
> logged in there:
> 
> http://www.quora.com/Can-lambda-functions-and-other-Python-code-be-pickled/answer/Steve-Traugott
> 
> Steve

Interesting!

But for now, I'm sticking with the limited set of serializers that don't support mobile
code at all (pickle, serpent, json, marshal). This is on purpose: a major reason to
provide an alternative serializer to pickle is because of its inherent security flaws.
Opening the drawbridge to your server by providing a mobile code pickler isn't one of
the things I want right now.

I didn't know about the Picloud pickler and will certainly give it a look.

It should be quite easy to "plug" a custom serializer into Pyro in the next release
though, you just need to implement Pyro's new serializer interface that I'm working on
at the moment.


Cheers
Irmen


------------------------------------------------------------------------------
How ServiceNow helps IT people transform IT departments:
1. A cloud service to automate IT design, transition and operations
2. Dashboards that offer high-level views of enterprise services
3. A single system of record for all IT processes
http://p.sf.net/sfu/servicenow-d2d-j
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.