Full Disclosure mailing list archives

Re: Re: Gaim festival plugin exploit


From: merlyn () stonehenge com (Randal L. Schwartz)
Date: 23 Oct 2003 17:05:49 -0700

"Shawn" == Shawn McMahon <smcmahon () eiv com> writes:

Shawn> The fact that he's arguing with Randal is not the problem, Randal makes
Shawn> mistakes too.

Precisely.  Some of them a matter of public record:
http://www.lightlink.com/fors/ :)

Shawn>   The fact that he's arguing what the Perl interpreter does
Shawn> without looking at the source code is the problem.  The fact that he's
Shawn> arguing that way to Randal is just icing on the cake, right up there
Shawn> with the David Korn / Microsoft story almost.  Almost; Randal is Just
Shawn> Another Perl Hacker, he didn't write the code in question.

True, but these are things that have not changed function since Perl version
2, and I've been around since then. :)

The fact that Perl doesn't use /bin/sh for system(), exec(),
`backticks`, or pipe-open when they are simple enough is a very cool
fact.  And I like promoting that fact.

Save forks().  Use Perl. :)

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
<merlyn () stonehenge com> <URL:http://www.stonehenge.com/merlyn/>
Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.
See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: