Re^2: Stop Using Perl pt. 2

in reply to Re: Stop Using Perl pt. 2
in thread Stop Using Perl pt. 2

Netanel Rubin cannot resist embarrasing himself :)

Published on Dec 28, 2015
The Perl Jam 2
The Camel Strikes Back
tl;dr EXPLOIT ALL THE PERL. AGAIN.
After last year’s Perl crackdown, I decided I have to take the Perl abuse to the next level. This time I focused on Perl’s core, or more specifically, the referencing mechanism, and shattered the security of most Perl CGI projects in the world.
With more WATs, more broken concepts, and more wildly popular 0-days, we will finally prove the Perl language is a broken concept, one that stood tall for way too many years.
Presenting „The Perl Jam: Exploiting a 20 Year-old Vulnerability“ at 31c3 opened a Pandora’s Box full of Perl debates and controversies. Many of these debates originated from the Perl community itself, with unforgiving arguments such as „vulnerabilities are the developer’s fault“, „RTFM“ and „I really hate the Camel abuse in the presentation“ that were mostly directed at me.
This is why I’m proud to say that this year I finally got the message: Finding vulnerabilities in core modules is not enough. I need to prove there are problems in the most fundamental aspects of the Perl language, or the Perl community will keep ignoring the language many issues.
So I did, and we are going to analyze it in a presentation filled with lolz, WATs, and 0-days, so maybe this time something will change.
Join me for a journey in which we will delve into more 0-days in Bugzilla, an RCE on everyone who follows CGI.pm documentation, and precious WTF moments with basically any other CGI module in the world, including (but not limited to) Mojolicious, Catalyst and PSGI, affecting almost every Perl based CGI application in existence.
I hope this talk will finally prove that developers are NOT the fault here, it’s the LANGUAGE, and its anti-intuitive, fail-prone ‚TMTOWTDI‘ syntax. btw, maybe it’s time to check your $$references ;)
──────────
➤Speaker: Netanel Rubin
➤EventID: 7130
➤Event: 32th Chaos Communication Congress 32c3 of the Chaos Computer Club CCC
➤Location: Congress Centrum Hamburg (CCH); Am Dammtor; Marseiller Straße; 20355 Hamburg; Germany
➤Language: english
➤Begin: Mon, 12/28/2015 20:30:00 +01:00

Comment on Re^2: Stop Using Perl pt. 2

Replies are listed 'Best First'.
Re^3: Stop Using Perl pt. 2 -- vergüenza ajena by Discipulus (Canon) on Dec 29, 2015 at 09:38 UTC
..embarrasing himself It is arrived the time to make English a better language? In Castellano there is a precious concept: vergüenza ajena Deutsch altready upgraded with the fremdschämen neologism. I dont think 'embarassing himself' it's enough: can other's shamefulness rend better the concept? L* There are no rules, there are no thumbs.. Reinvent the wheel, then learn The Wheel; may be one day you reinvent one of THE WHEELS.	[reply] [d/l]
Re^4: Stop Using Perl pt. 2 -- vergüenza ajena by Anonymous Monk on Dec 29, 2015 at 09:42 UTC
huh? can you translate whatever you're saying in simple english?	[reply]
Re^5: Stop Using Perl pt. 2 -- vergüenza ajena by Discipulus (Canon) on Dec 29, 2015 at 09:53 UTC
yes: the shame, disgrace, ignominy, embarrassment, shamefulness, bashfulness, abashment or shamefacedness that you feel for others, when they pose themselves into an embarassing situation, with their words or acts. L* There are no rules, there are no thumbs.. Reinvent the wheel, then learn The Wheel; may be one day you reinvent one of THE WHEELS.	[reply] [d/l]
Re^6: Stop Using Perl pt. 2 -- vergüenza ajena by Anonymous Monk on Dec 29, 2015 at 11:11 UTC
Re^5: Stop Using Perl pt. 2 -- vergüenza ajena by Anonymous Monk on Dec 30, 2015 at 11:26 UTC
Discipulus wants English to have a word that already exists in other languages. The word expresses the feeling of you being ashamed of the behaviour of other people, as opposed to your own.	[reply]

In Section Meditations