Re: Blatant security problem in certain CPAN module installs

[Abigail-II]

CPAN is not a site you can trust.

Yet CPAN is often the first thing a Perl advocate trumpets.

Trumpets by advocates don't create security.

Just because something isn't secure doesn't mean it can't be useful. CPAN is nothing more than an archive - and an archive with no control. CPAN is made by people. Good coders. Bad coders. Trustworthy coders. Malicious coders. PAUSE is an equal opportunity CPAN portal. Anyone can upload anything. This is CPAN's power. This is also what makes it dangerous. (Just like a motorsaw. Powerful, but dangerous). People should be well aware of the risks. Education is their only safety net.

Abigail