[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: intent to package Festival::Client Perl module

Roderick Schertler wrote:
> On Wed, 28 Oct 1998 13:18:39 -0800, Joey Hess <joey@kitenet.net> said:
> >
> > Does it depend on festival? If so, since festival is itself non-free, it
> > would have to go in contrib.
> No, I've got it suggesting festival, since it communicates with the
> server via TCP.

Oh, I see.

Note that running festival in server mode is an enourmous security hole. A
festival server can be made to read and probably write to arbitrary files on
the system. I've talked to the authors about this, but they don't seem too
interested in fixing it.

see shy jo

Reply to: