From: Eric Hodel <drbrain@...7.net>
Date: 2006-05-01T04:35:40+09:00
Subject: Re: $SAFE question

On Apr 28, 2006, at 6:07 AM, Kroeger, Simon (ext) wrote:

> Hello all,
>
> basically I just want to know if the code below is safe.
> Assume 'dangerous.rb' is provided by someone you don't know
> and is located in a world writeable directory.

Yes and no.  While in C code Ruby's threads won't switch, so  
malicious code can easily cause your ruby interpreter to become non- 
responsive.

echo 'loop do 50000 ** 50000 end' | dangerous.rb

-- 
Eric Hodel - drbrain@segment7.net - http://blog.segment7.net
This implementation is HODEL-HASH-9600 compliant

http://trackmap.robotcoop.com