Empathy List Archives

SP

Sanjeev Prabhakar

Sun, Jul 23, 2023 9:47 AM

I would request openscad software creators to add python language
support, if it is not too difficult.

This can simplify a lot of calculations and help many of us.

Although, I have found a workaround which is working quite perfectly for
me, but it would still be better in case it is made part of the openscad.

Thanks
Sanjeev

I would request openscad software creators to add python language support, if it is not too difficult. This can simplify a lot of calculations and help many of us. Although, I have found a workaround which is working quite perfectly for me, but it would still be better in case it is made part of the openscad. Thanks Sanjeev

RD

Revar Desmera

Sun, Jul 23, 2023 10:14 AM

That’s actually a pretty bad security risk. Right now you can trust that an OpenSCAD script you download from the net cannot possibly hack your system and install malware on your machine. This is not true of Python. It is doubtful that sites like Thingiverse would support running configurator scad scripts if you could run Python.

Hacking Python to be a limited subset that is “safe” has proven in the past to be a dodgy and unreliable thing.

As annoying as the OpenSCAD language’s limitations are, the focus is better directed to fixing those limitations in a secure manner. There are some promising improvements in the pipeline. We may even get to use them before the end of the decade.

-Revar

On Jul 23, 2023, at 2:48 AM, Sanjeev Prabhakar sprabhakar2006@gmail.com wrote:

I would request openscad software creators to add python language support, if it is not too difficult.

This can simplify a lot of calculations and help many of us.

Although, I have found a workaround which is working quite perfectly for me, but it would still be better in case it is made part of the openscad.

Thanks
Sanjeev

OpenSCAD mailing list
To unsubscribe send an email to discuss-leave@lists.openscad.org

That’s actually a pretty bad security risk. Right now you can trust that an OpenSCAD script you download from the net cannot possibly hack your system and install malware on your machine. This is not true of Python. It is doubtful that sites like Thingiverse would support running configurator scad scripts if you could run Python. Hacking Python to be a limited subset that is “safe” has proven in the past to be a dodgy and unreliable thing. As annoying as the OpenSCAD language’s limitations are, the focus is better directed to fixing those limitations in a secure manner. There are some promising improvements in the pipeline. We may even get to use them before the end of the decade. -Revar > On Jul 23, 2023, at 2:48 AM, Sanjeev Prabhakar <sprabhakar2006@gmail.com> wrote: > > > I would request openscad software creators to add python language support, if it is not too difficult. > > This can simplify a lot of calculations and help many of us. > > Although, I have found a workaround which is working quite perfectly for me, but it would still be better in case it is made part of the openscad. > > Thanks > Sanjeev > _______________________________________________ > OpenSCAD mailing list > To unsubscribe send an email to discuss-leave@lists.openscad.org

GS

Guenther Sohler

Sun, Jul 23, 2023 10:53 AM

The actual Python PR has Several Levels of Security gates which need to BE
activated for Python to Work. Finally the User is asked for each New
Python. File whether He Trusts IT. This Trust IS saved in Sha256 and ITS
hard to Hack IT.

Revar Desmera revarbat@gmail.com schrieb am So., 23. Juli 2023, 12:14:

That’s actually a pretty bad security risk. Right now you can trust that
an OpenSCAD script you download from the net cannot possibly hack your
system and install malware on your machine. This is not true of Python. It
is doubtful that sites like Thingiverse would support running configurator
scad scripts if you could run Python.

Hacking Python to be a limited subset that is “safe” has proven in the
past to be a dodgy and unreliable thing.

As annoying as the OpenSCAD language’s limitations are, the focus is
better directed to fixing those limitations in a secure manner. There are
some promising improvements in the pipeline. We may even get to use them
before the end of the decade.

-Revar

On Jul 23, 2023, at 2:48 AM, Sanjeev Prabhakar sprabhakar2006@gmail.com

wrote:

I would request openscad software creators to add python language

support, if it is not too difficult.

This can simplify a lot of calculations and help many of us.

Although, I have found a workaround which is working quite perfectly for

me, but it would still be better in case it is made part of the openscad.

Thanks
Sanjeev

OpenSCAD mailing list
To unsubscribe send an email to discuss-leave@lists.openscad.org

The actual Python PR has Several Levels of Security gates which need to BE activated for Python to Work. Finally the User is asked for each New Python. File whether He Trusts IT. This Trust IS saved in Sha256 and ITS hard to Hack IT. Revar Desmera <revarbat@gmail.com> schrieb am So., 23. Juli 2023, 12:14: > That’s actually a pretty bad security risk. Right now you can trust that > an OpenSCAD script you download from the net cannot possibly hack your > system and install malware on your machine. This is not true of Python. It > is doubtful that sites like Thingiverse would support running configurator > scad scripts if you could run Python. > > Hacking Python to be a limited subset that is “safe” has proven in the > past to be a dodgy and unreliable thing. > > As annoying as the OpenSCAD language’s limitations are, the focus is > better directed to fixing those limitations in a secure manner. There are > some promising improvements in the pipeline. We may even get to use them > before the end of the decade. > > -Revar > > > > On Jul 23, 2023, at 2:48 AM, Sanjeev Prabhakar <sprabhakar2006@gmail.com> > wrote: > > > > > > I would request openscad software creators to add python language > support, if it is not too difficult. > > > > This can simplify a lot of calculations and help many of us. > > > > Although, I have found a workaround which is working quite perfectly for > me, but it would still be better in case it is made part of the openscad. > > > > Thanks > > Sanjeev > > _______________________________________________ > > OpenSCAD mailing list > > To unsubscribe send an email to discuss-leave@lists.openscad.org > _______________________________________________ > OpenSCAD mailing list > To unsubscribe send an email to discuss-leave@lists.openscad.org >

SK

Sayandeep Khan

Sun, Jul 23, 2023 11:03 AM

will Lua also carry the same risks?

on the other hand, there is this : https://github.com/hydroid7/Openscad.jl

so the reverse might. be interesting as well

--- Original message ---
From: Guenther Sohler guenther.sohler@gmail.com
Date: 23.07.2023 12:53
To: OpenSCAD general discussion Mailing-list discuss@lists.openscad.org
Subject: [OpenSCAD] Re: python support for openscad

The actual Python PR has Several Levels of Security gates which need to
BE activated for Python to Work. Finally the User is asked for each New
Python. File whether He Trusts IT. This Trust IS saved in Sha256 and ITS
hard to Hack IT.
Revar Desmera < revarbat@gmail.com > schrieb am So., 23. Juli 2023,
12:14:
That’s actually a pretty bad security risk. Right now you can trust
that an OpenSCAD script you download from the net cannot possibly hack
your system and install malware on your machine. This is not true of
Python. It is doubtful that sites like Thingiverse would support running
configurator scad scripts if you could run Python.
Hacking Python to be a limited subset that is “safe” has proven in the
past to be a dodgy and unreliable thing.
As annoying as the OpenSCAD language’s limitations are, the focus is
better directed to fixing those limitations in a secure manner. There
are some promising improvements in the pipeline. We may even get to use
them before the end of the decade.
-Revar

On Jul 23, 2023, at 2:48 AM, Sanjeev Prabhakar <

sprabhakar2006@gmail.com > wrote:

I would request openscad software creators to add python language

support, if it is not too difficult.

This can simplify a lot of calculations and help many of us.

Although, I have found a workaround which is working quite perfectly

for me, but it would still be better in case it is made part of the
openscad.

Thanks
Sanjeev

OpenSCAD mailing list
To unsubscribe send an email to discuss-leave@lists.openscad.org

Your E-Mail. Your Cloud. Your Office. eclipso Mail & Cloud. https://www.eclipso.de

will Lua also carry the same risks? on the other hand, there is this : https://github.com/hydroid7/Openscad.jl so the reverse might. be interesting as well --- Original message --- From: Guenther Sohler <guenther.sohler@gmail.com> Date: 23.07.2023 12:53 To: OpenSCAD general discussion Mailing-list <discuss@lists.openscad.org> Subject: [OpenSCAD] Re: python support for openscad > The actual Python PR has Several Levels of Security gates which need to >BE activated for Python to Work. Finally the User is asked for each New >Python. File whether He Trusts IT. This Trust IS saved in Sha256 and ITS >hard to Hack IT. > Revar Desmera < revarbat@gmail.com > schrieb am So., 23. Juli 2023, >12:14: > That’s actually a pretty bad security risk. Right now you can trust >that an OpenSCAD script you download from the net cannot possibly hack >your system and install malware on your machine. This is not true of >Python. It is doubtful that sites like Thingiverse would support running >configurator scad scripts if you could run Python. >Hacking Python to be a limited subset that is “safe” has proven in the >past to be a dodgy and unreliable thing. >As annoying as the OpenSCAD language’s limitations are, the focus is >better directed to fixing those limitations in a secure manner. There >are some promising improvements in the pipeline. We may even get to use >them before the end of the decade. >-Revar >> On Jul 23, 2023, at 2:48 AM, Sanjeev Prabhakar < >sprabhakar2006@gmail.com > wrote: >> >> >> I would request openscad software creators to add python language >support, if it is not too difficult. >> >> This can simplify a lot of calculations and help many of us. >> >> Although, I have found a workaround which is working quite perfectly >for me, but it would still be better in case it is made part of the >openscad. >> >> Thanks >> Sanjeev >> _______________________________________________ >> OpenSCAD mailing list >> To unsubscribe send an email to discuss-leave@lists.openscad.org >_______________________________________________ >OpenSCAD mailing list >To unsubscribe send an email to discuss-leave@lists.openscad.org > ________________________________________________________ Your E-Mail. Your Cloud. Your Office. eclipso Mail & Cloud. https://www.eclipso.de

TP

Torsten Paul

Sun, Jul 23, 2023 11:13 AM

Yep, it seems there's no way to actually make Python safe in an untrusted
environment.

One example can be seen via https://github.com/Irev-Dev/cadhub/issues/611
which disabled Python support for now.

So the OpenSCAD language with all it's good and bad features will remain
the default language, available everywhere and the one without need for
extra flags to be enabled.

Guenther did some great work on integrating Python in a very natural way,
ignoring that seems not a good idea either. It's likely to be coming for
Linux first and may take a while to reach the other platforms. As with
all things, that will depend on people deciding to help out with the work.

So we will do both, going forward with the OpenSCAD language and the
geometry kernels, but also trying to see if the Python integration works
out and maybe even bring some extra development power for the shared
geometry handling where both languages could benefit at the same time.

ciao,
Torsten.

Yep, it seems there's no way to actually make Python safe in an untrusted environment. One example can be seen via https://github.com/Irev-Dev/cadhub/issues/611 which disabled Python support for now. So the OpenSCAD language with all it's good and bad features will remain the default language, available everywhere and the one without need for extra flags to be enabled. Guenther did some great work on integrating Python in a very natural way, ignoring that seems not a good idea either. It's likely to be coming for Linux first and may take a while to reach the other platforms. As with all things, that will depend on people deciding to help out with the work. So we will do both, going forward with the OpenSCAD language and the geometry kernels, but also trying to see if the Python integration works out and maybe even bring some extra development power for the shared geometry handling where both languages could benefit at the same time. ciao, Torsten.

SP

Sanjeev Prabhakar

Tue, Aug 15, 2023 4:27 AM

Hi ,

Is there a timeline defined for this?

Regards
Sanjeev

On Sun, 23 Jul, 2023, 3:17 pm Sanjeev Prabhakar, sprabhakar2006@gmail.com
wrote:

I would request openscad software creators to add python language
support, if it is not too difficult.

This can simplify a lot of calculations and help many of us.

Although, I have found a workaround which is working quite perfectly for
me, but it would still be better in case it is made part of the openscad.

Thanks
Sanjeev

Hi , Is there a timeline defined for this? Regards Sanjeev On Sun, 23 Jul, 2023, 3:17 pm Sanjeev Prabhakar, <sprabhakar2006@gmail.com> wrote: > I would request openscad software creators to add python language > support, if it is not too difficult. > > This can simplify a lot of calculations and help many of us. > > Although, I have found a workaround which is working quite perfectly for > me, but it would still be better in case it is made part of the openscad. > > Thanks > Sanjeev >