Re: Globbing

[Rahul Siddharthan <rsidd120@xxxxxxxxx>]

"Simon 'corecode' Schubert" wrote:
>echo * | xargs rm, like find . -type f | xargs rm can be exploited,
>because xargs treats every whitespace as a separation character.

Like most unix programs and shell commands.  Yet another reason to do
these things in python.

When Oliver talked of security implications I thought of race attacks,
it didn't occur to me that the shell's commandline expansion is itself
a source of an attack (like creating a file called "-r") even though
I've been bitten by such things.

Another thing that has bitten me is trying to remove all my config
files/directories, that begin with a ".", thusly
  rm -rf .*
Luckily I had backups.

This thread caused me to google a bit and I found ipython:
  http://ipython.scipy.org/
and I've just picked my jaw off the floor.  It has everything I'm
looking for -- full access to the python interpreter AND full access
to the shell.  All the best features of shells like bash, the regular
python interactive interpreter, and programs like Mathematica.  In
fact it has a "shell mode" that should, in principle, work as a
regular command shell.  Time to start exploring.

Rahul