news:3rl62uodn1uloq3k54orn97jh6b45bihoo@4ax.com...
> On Fri, 21 Dec 2001 16:36:05 +0100, "Gergely Vandor"
<ger### [at] vandordatanethu>
> wrote:
> > This is getting a bit theoretical, but I believe it would be an
acceptable
> > limitation for my "imagined" program to refuse any pov file with I/O
> > commands...
>
> I/O scripts are very usefull. Imagine tree-macro. Put it in animation. Do
you
> want 10 minutes per frame for parsing of tree generation for every client?
Or do
> you want send over internet megabytes of this tree for every client? Or do
you
> want send short script over internet and allow clients apps to
generate/write it
> once ?
>

Ok. I have to admit this IS an issue :)

File I/O should not be ruled out, but should be strictly controlled to avoid
bad things...

I accept any feature requests, but please be aware that there is only a very
slim chance that the software will ever come to existence. :)

Cheers,
Gergely

Post a reply to this message

Warp wrote:

> Gergely Vandor <ger### [at] vandordatanethu> wrote:
> : It should be pretty easy to scan a pov text file for dangerous I/O commands.
> 
>   Except that it is probably possible to obfuscate commands so that a program
> will not recognize them.


??  The I/O restrictions in POV-Ray 3.5 should suffice.  Just allow 
read/write in a single given directory, and you have full functionality
without a risk.

Fabien.

Post a reply to this message

Warp wrote:
> Except that it is probably possible to obfuscate commands so
> that a program will not recognize them.

Which is why you restrict access to specific directories a la
morpheus.  Just make it not eat all your memory like morpheus :P

-- 
Tim Cook
http://personal.lig.bellsouth.net/lig/z/9/z993126

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GFA dpu- s: a?-- C++(++++) U P? L E--- W++(+++)>$
N++ o? K- w(+) O? M-(--) V? PS+(+++) PE(--) Y(--)
PGP-(--) t* 5++>+++++ X+ R* tv+ b++(+++) DI
D++(---) G(++) e*>++ h+ !r--- !y--
------END GEEK CODE BLOCK------

Post a reply to this message

Actually if you could have a trusted network shared along with simple
io blocking I think it would be 'fairly safe' just use something like
a trusted key system or a central server that passes out trusted files
to be shared and auto combines them I know this is more talk then
programming (oh how I miss my linux side and gcc or I would be getting
out the faq's and such to see if I could help but alas cygwin is just
not my cup of tea under nt :(

being on an old clunker and I run setiservice but I think this would
be a great idea, could run it background low priority on the windows
system actually as I think about this and I know its not a new idea
its a dream of every povray user I think to have a power rendering
farm for those dream job's. but the more I think about it trusted
server's to pass out slices of work and or at least links/port's to
slices of work etc would be sweet. heck I leave my old crate on 24/7
honestly because scared to death one of the old HD's is gonna fail on
on cold start and would gladly donate my cycles to worthy projects.

great to see the discussion going though, only good things can come
from free exchange.

Rob

>On Fri, 21 Dec 2001 14:58:42 +0100, "Gergely Vandor" <ger### [at] vandordatanethu> wrote:

>"Warp" <war### [at] tagpovrayorg> wrote in message
>news:3c233237@news.povray.org...
>>   You should be aware of security issues. Automatically running povray
>with a
>> pov-file sent by someone can be a dangerous thing (because pov-files can
>have
>> I/O commands).
>>
>> --
>
>It should be pretty easy to scan a pov text file for dangerous I/O commands.
>Blocking all pov files with any I/O commands is even easier. I believe this
>is (almost) a non-issue.
>
>Gergely
>

Post a reply to this message

Hi Gergely,

> Is there a program which does just this? Would it be possible for me to
> start a render on your machine (and possibly several others) right now for
> example?
>
> Or is such a thing currently being developed?

Have a look at:
http://sourceforge.net/projects/pvmpov/

Greetings
    Thies Heidecke

Post a reply to this message

I'd like to have such a program. Maybe it wouldn't even have to be
restricted to share power for Povray. But how will you split a Pov rendering
into pieces? The wise people say you can't use multiple CPU's in one
computer, so how will you do it over the Internet?

And there has to be done a lot for security as already said. Especially if
it's a broad application that allows other programs than Povray.


Hugo

Post a reply to this message

> IMP seems interesting, but it seems it is focused on the purpose of
creating
> this movie, and the actual thing is not downloadable yet.
>

Only for members right now.  Once the bugs are worked out both the server
and client will be released to the public.

Tom

Post a reply to this message

"Hugo" <hua### [at] post3teledk> wrote in message
news:3c28f2b2@news.povray.org...
> I'd like to have such a program. Maybe it wouldn't even have to be
> restricted to share power for Povray. But how will you split a Pov
rendering
> into pieces? The wise people say you can't use multiple CPU's in one
> computer, so how will you do it over the Internet?

Povray is able to render only a specified region of an image. It should be
fairly easy to combine these regions to the whole image. Although as I'm
writing this I'm becoming a bit uncertain since AA, radiosity, and photons
(and maybe some other features too) can be problematic.

>
> And there has to be done a lot for security as already said. Especially if
> it's a broad application that allows other programs than Povray.

If we're talking about povray, the only  real risk is file IO, which can be
restricted to a single dir.

Cheers

Gergely

Post a reply to this message

Wasn't it Gergely Vandor who wrote:

>Povray is able to render only a specified region of an image. It should be
>fairly easy to combine these regions to the whole image. Although as I'm
>writing this I'm becoming a bit uncertain since AA, radiosity, and photons
>(and maybe some other features too) can be problematic.

AA is not a problem. The pixels just outside the specified region are
calculated and used for the AA calculations, but are not output.

For radiosity, what you probably need to do is arrange for a radiosity
savefile to be created once for the whole scene. The partial renderers
would then all load the same save file.

I can't see that photons would be a problem at all. Photons interact
quite happily with objects that are outside the frame, so they should
work just as well with objects that are inside the frame but outside the
selected region.

-- 
Mike Williams
Gentleman of Leisure

Post a reply to this message

"Mike Williams" <mik### [at] nospamplease> wrote in message
news:Md7### [at] econymdemoncouk...
> Wasn't it Gergely Vandor who wrote:
>
> >Povray is able to render only a specified region of an image. It should
be
> >fairly easy to combine these regions to the whole image. Although as I'm
> >writing this I'm becoming a bit uncertain since AA, radiosity, and
photons
> >(and maybe some other features too) can be problematic.
>
> AA is not a problem. The pixels just outside the specified region are
> calculated and used for the AA calculations, but are not output.
>
> For radiosity, what you probably need to do is arrange for a radiosity
> savefile to be created once for the whole scene. The partial renderers
> would then all load the same save file.
>
> I can't see that photons would be a problem at all. Photons interact
> quite happily with objects that are outside the frame, so they should
> work just as well with objects that are inside the frame but outside the
> selected region.

Nice then, thanks for the info. :)

Knowing this I believe that what I was thinking of is far from impossible.
If there's demand for such a program, and there is no similar program in
development right now (maybe the IMP project will give birth to the right
thing), we could start to recruit programmers for the job :)

And if we are talking about IMP, can anyone give details about the software
they are making? How it will work, to what extent it is capable of doing
what I was thinking of (or what other pov users would expect).
I find their website confusing.

---
Cheers
Gergely

Post a reply to this message