[Twisted-Python] pb.Copyable, round trip objects, and untrusted clients

[Glyph Lefkowitz]

On Wed, 2004-05-19 at 23:54, David Ripton wrote:

> This is simple and works, but it's annoyingly repetitive.  And plumbing 
> code is infecting the application level.  And I know there are other 
> object vs. id caches inside PB, so this feels redundant.  What's the 
> right way to do this with Copyable?

Use Cacheable - sort of.  That helps with the state-management issues. 
There are about ten other holes you didn't notice and rewinding changes
is an inherently unsafe way to conceptualize the problem.

If you're seriously interested in security with PB, you will need
newpb.  You should bother Brian Warner, since it seems like it's
*almost* there and he just needs a little more nudging.