Access to Python in the Library

[BFCIT]

Hi all,

 

We are considering putting Python on the Library computers for student use at lunch and breaks. My python knowledge is extremely basic so I am wondering whether the risks could outweigh the benefits here.

 

The member of staff that overlooks the library is not technical and would have no clue if they were misusing Python, ie trying to escalate privileges etc. The computers are locked down with Group Policy, students are unable to access the C drive and do not have the ability to run executable files.

 

Is this something you would consider on your network?

 

Thank you,

[3s-gtech]

We have Python access here, but like most it is within a VM which has no network access. Our students can access their own VM from any computer in school, and they can save their work to a separate network user area (which Virtualbox allows). I certainly wouldn't put it onto the PCs themselves; not because it's a big risk as such but because to get it working things have to be opened up a fair bit.

[halbaradkenafin]

We've got it installed on a few computer suites, everything is locked down with GPO as normal and students can't do any more than they could through a GUI. We've had no problems with it so far.

[CyberNerd]

We've got it installed on a few computer suites, everything is locked down with GPO as normal and students can't do any more than they could through a GUI. We've had no problems with it so far.

 

Do they have network access though?

[halbaradkenafin]

Do they have network access though?

 

Just to whichever drives they'd normally have access to. I'd imagine there is some stuff they could do that we haven't planned for but I'll deal with that when it happens.

[BFCIT]

Thanks guys, they would have network access from these machines, we do currently have it installed in computer suites and we have had no problems but they are always being overlooked by our IT staff who are all relatively competent with Python and they would stop the students doing anything they shouldn't be.

[pcstru]

Thanks guys, they would have network access from these machines, we do currently have it installed in computer suites and we have had no problems but they are always being overlooked by our IT staff who are all relatively competent with Python and they would stop the students doing anything they shouldn't be.

I wouldn't rely on that! Also bear in mind that there are generally other scripting languages available on a PC - Javascript will generally be accessible to anyone as might be VBA, so if you have holes that can be exploited by Python, they are probably exploitable by a number of other means.

[BFCIT]

Thanks for the advice pcstru

[CyberNerd]

Just to whichever drives they'd normally have access to. I'd imagine there is some stuff they could do that we haven't planned for but I'll deal with that when it happens.

 

Our kids tried a DoS attack on one of our servers using some simple code - it was quite simple to track down.

I'd be more worried when they start bruteforcing things over the network. How will you know if this happens ? Just wait for SIMS records to be deleted?

[Geoff]

Just leave a few copies of this in the school library.

 

http://www.amazon.com/Violent-Python-Cookbook-Penetration-Engineers/dp/1597499579

[halbaradkenafin]

Just leave a few copies of this in the school library.

 

http://www.amazon.com/Violent-Python-Cookbook-Penetration-Engineers/dp/1597499579

 

I'd forgotten about that book, I'm sure I've got a copy somewhere at home. I'll dig it out and try some of it as a student and see what I can break.