in reply to Re: Re: Blatant security problem in certain CPAN module installs
in thread Blatant security problem in certain CPAN module installs
Trumpets by advocates don't create security.
CPAN is not a site you can trust.
Yet CPAN is often the first thing a Perl advocate trumpets.
Just because something isn't secure doesn't mean it
can't be useful. CPAN is nothing more than an archive - and
an archive with no control. CPAN is made by people. Good coders. Bad coders. Trustworthy coders. Malicious coders.
PAUSE is an equal opportunity CPAN portal. Anyone can upload anything. This is CPAN's power. This is also what makes it dangerous. (Just like a motorsaw. Powerful, but dangerous). People should be well aware of the risks. Education is their only safety net.