Re: How to answer "Perl is not secure" objections?

[moritz]

You have to distinguish between perl (the compiler/interpreter) and Perl (the language).

As for the program, I'd like to point you to the Common Vulnerabilities and Exposures List, search for Products -> Perl (don't enter 'perl' in the search box, it will find 'properly' as well).

Now compare these results to other interpreters and virtual maschines.

As for the language: you don't have to mess with your memory on your own (like C), you have tainting, no insecure register_globals (or whatever that stuff is called in PHP).

[CountZero]

13 vulnerabilties for product "Perl" since 1999 and the last one dates back from 2005!

Compare this to PHP, which has 185 vulnerabiities since 2000, with the last one in April 2007.