Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

F-Secure has open-sourced its Sandboxed Execution Environment

github.com

Post reply on HN
Print view View original

11–20 of 22 posts

Re: F-Secure has open-sourced its Sandboxed Execution Environment

#11

Post by wlesieutre »

AnkhMorporkian wrote: post #4
wnevets wrote: post #3

Earlier quoted context omitted.

I don't write python but what makes it nice python?

It uses classes, magic methods where appropriate, is well documented, does its loops in a pythonic way; lots of things! It's taking advantage of idiomatic python, as opposed to simply using python as a C-style hammer.

I wasn't familiar with the "magic methods" term, so for anyone else in the same boat, that refers to the functions like __init__, __repr__, __add__, __hex__, __len__, etc that you can define in your classes to make them work with built in functions like len(custom_listy_thing) or arithmetic.

Re: F-Secure has open-sourced its Sandboxed Execution Environment

#12

Post by orf »

wlesieutre wrote: post #11
AnkhMorporkian wrote: post #4

Earlier quoted context omitted.

It uses classes, magic methods where appropriate, is well documented, does its loops in a pythonic way; lots of things! It's taking advantage of idiomatic python, as opposed to simply using python as a C-style hammer.

I wasn't familiar with the "magic methods" term, so for anyone else in the same boat, that refers to the functions like __init__, __repr__, __add__, __hex__, __len__, etc that you can define in your classes to make them work with built in functions like len(custom_listy_thing) or arithmetic.

More than just built in functions, any object that defines a __len__ and a __index__ method (that provide len(x) and x[0] respectively) can also be iterated over in a for loop ('for item in instance'). A good reference for magic methods is [1] for anyone interested.

1. http://www.rafekettler.com/magicmethods.html

Re: F-Secure has open-sourced its Sandboxed Execution Environment

#14

Post by baq »

paxcoder wrote: post #6
orf wrote: post #2

Woah, I was not expecting that. Not only is it in Python but it's nice Python, not the bastardized "I can write C, let's try Python" style you often see from big companies.

As a C programmer who "tried" Python, I feel offended. I wrote substantial OO code using list comperhensions and other things pythonic. I am also a functional programming affectionado, though a realist, not a fan. Don't label people. Speak against companies mismanaging people by driving them to write low quality code. Be open and promote useful programming concepts and tools. P.S. Long live static typing. Down with E…

when you write C, you should be writing elegant C. when you write Python, you should be writing elegant Python. trying to code Python in C is about as ugly as trying to code C in Python and both should be discouraged equally.

the thing i don't understand is what you took offense at.

Re: F-Secure has open-sourced its Sandboxed Execution Environment

#15

Post by vill1 »

eugenekolo2 wrote: post #10

What are the advantages of using this over Cuckoo Sandbox, or Anubis?

Maybe the biggest advantage is the plugin system and how those can be hooked to the execution. Developer focuses on writing a LEGO brick that can be used as a part of execution. Also different plugins do not need to care about existence of other plugins, but on the other hand those plugins can be chained by firing and listening to events.

Re: F-Secure has open-sourced its Sandboxed Execution Environment

#17

Post by eugenekolo2 »

vill1 wrote: post #15
eugenekolo2 wrote: post #10

What are the advantages of using this over Cuckoo Sandbox, or Anubis?

Maybe the biggest advantage is the plugin system and how those can be hooked to the execution. Developer focuses on writing a LEGO brick that can be used as a part of execution. Also different plugins do not need to care about existence of other plugins, but on the other hand those plugins can be chained by firing and listening to events.

Cuckoo supports plugins too, I wrote up a summary of them here: https://www.eugenekolo.com/blog/cuckoo-sandbox-notes/#div_cu.... Can also edit the Analyzer/monitor part to add in new function hooks.

Re: F-Secure has open-sourced its Sandboxed Execution Environment

#18

Post by paxcoder »

baq wrote: post #14
paxcoder wrote: post #6

Earlier quoted context omitted.

As a C programmer who "tried" Python, I feel offended. I wrote substantial OO code using list comperhensions and other things pythonic. I am also a functional programming affectionado, though a realist, not a fan. Don't label people. Speak against companies mismanaging people by driving them to write low quality code. Be open and promote useful programming concepts and tools. P.S. Long live static typing. Down with E…

when you write C, you should be writing elegant C. when you write Python, you should be writing elegant Python. trying to code Python in C is about as ugly as trying to code C in Python and both should be discouraged equally. the thing i don't understand is what you took offense at.

Swap the languages around and see if the statement doesn't sound a bit elitist to you. I feel like the parent could have chosen more neutral words if they wanted to. Their particular experience with irreverent/careless programmers just rubbed against my experience with technology fans I guess (the word fans used in the same sense as in my previous comment).

Re: F-Secure has open-sourced its Sandboxed Execution Environment

#19

Post by scott_karana »

paxcoder wrote: post #18
baq wrote: post #14

Earlier quoted context omitted.

when you write C, you should be writing elegant C. when you write Python, you should be writing elegant Python. trying to code Python in C is about as ugly as trying to code C in Python and both should be discouraged equally. the thing i don't understand is what you took offense at.

Swap the languages around and see if the statement doesn't sound a bit elitist to you. I feel like the parent could have chosen more neutral words if they wanted to. Their particular experience with irreverent/careless programmers just rubbed against my experience with technology fans I guess (the word fans used in the same sense as in my previous comment).

Swapping the languages fits exactly consistently with what GP said.

Trying to use first-class functions and OO paradigms in C is going to bite you in the ass, hard.

Just as iterative pointer manipulations in Python aren't preferable.

Both languages have different "styles" that suit their purposes excellently, but mixing them improperly in either direction will be painful.

Re: F-Secure has open-sourced its Sandboxed Execution Environment

#20

Post by baltoo »

paxcoder wrote: post #18
baq wrote: post #14

Earlier quoted context omitted.

when you write C, you should be writing elegant C. when you write Python, you should be writing elegant Python. trying to code Python in C is about as ugly as trying to code C in Python and both should be discouraged equally. the thing i don't understand is what you took offense at.

Swap the languages around and see if the statement doesn't sound a bit elitist to you. I feel like the parent could have chosen more neutral words if they wanted to. Their particular experience with irreverent/careless programmers just rubbed against my experience with technology fans I guess (the word fans used in the same sense as in my previous comment).

    DH2. Responding to Tone.
Post reply on HN