By the way, it occurrs to me that "netsend" is a gaping security hole; anyone who knows your port number could send Pd commands to read and write files on your system. I'm trying to think of a way to restrict what a netreceive can do but in the meantime, perhaps you shouldn't tell the world what port numbers your patches use, or run anyone else's patch without changing the port number. And don't leave the help window open...
cheers Miller
hm. it shoudl be able to restrict access via the hosts.allow/deny config in uniks to known hosts .. of course this is no help against ip spoofs ..
so, one more reason not to be running pd as root i guess. ;))
-- On Tue, 31 Aug 1999, Miller Puckette wrote:
|-<By the way, it occurrs to me that "netsend" is a gaping security hole; |-<anyone who knows your port number could send Pd commands to read and |-<write files on your system. I'm trying to think of a way to restrict |-<what a netreceive can do but in the meantime, perhaps you shouldn't tell |-<the world what port numbers your patches use, or run anyone else's patch |-<without changing the port number. And don't leave the help window open... |-< |-<cheers |-<Miller |-< ::00 ����| ;641137777Z one person - many names - still me http://jodel.org - 00001 10000 11000 00111 00111 00011 000 000
-
91.xbtIr_T>XR.724.31 -
Miller Puckette