[erlang-questions] A less trusting Erlang.

Jacob Torrey <>
Wed Oct 14 17:13:49 CEST 2009


Ulf,
	If rex a required process? Is there any way to turn it off, or replace
it with a module of my choosing? Could you please point me to a
reference on rex, all I can find is a passing reference in erl_call.

		Jacob

Ulf Wiger wrote:
> Jacob Torrey wrote:
>> Could perhaps the pid generation in the VM be made more random,
>> therefore you can only gain access to pids that you know the name to?
>> This seems like an obvious (and pretty trivial) solution to obscure and
>> increase the security of the Erlang system.
> 
> You don't even need to bother with the pids:
> 
> {rex,Node} ! {'$gen_cast',{cast,M,F,A,user}}
> 
> ...will allow you to execute any function on Node.
> 
> BR,
> Ulf W



More information about the erlang-questions mailing list