[Scilab-users] Run your Scilab Codes Through Browser

[Sylvestre Ledru]

Hello

If you want to make it safe and public, you should:
* disable the Scilab features related to files management (rmdir,
deletefile, mdelete, etc). Note that this is likely to have side effects
on other functions
* disable the dynamic link functions (it is easy to write a C file which
will be compiled by Scilab and delete file)
* disable the link function (through this function, you can load the
libc and call the delete C functions)
* probably some other functions that I forget
* launch Scilab within a chroot

Scilab has not been made to be publicly used by anyone. We have in the
roadmap a "safe mode" planned but this won't happen soon.

Sylvestre

On 10/11/2012 19:55, Saket Choudhary wrote:
> Hello Everyone!
> 
> We are back again at : http://scilab-test.garudaindia.in/cloud/
> 
> Username: guest
> Password : guest123
> 
> Lets hope the hacker doesnt try ti pull it down again ! 
> 
> The books and examples are still missing as we are still under the
> process of migrating our whole site ! The hacker(read cracker) deleted
> everything we had ! I am sure his/her act of 'cracking' can be utilised
> in much ethical ways , rather than just deleting the content of a site
> like ours meant for community education.
> 
> 
> Regards,
> Saket Choudhary
> Fourth Year Undergraduate
> IIT Bombay
> 
> On 9 November 2012 14:21, Saket Choudhary <saketkc at gmail.com
> <mailto:saketkc at gmail.com>> wrote:
> 
>     Hi Antoine,
> 
>     It looks like someone hacked our website. We are investigating it
>     and should be up soon
> 
>     Thanks
> 
>     Saket
> 
> 
> 
> 
> _______________________________________________
> users mailing list
> users at lists.scilab.org
> http://lists.scilab.org/mailman/listinfo/users
>