lathiaton Hacker News • Recommends
On “Show HN: Wat”
If you loved that video, try this great Perl presentation from Netanel Rubin: link to this video And it's follow-up cousin "The Camel Strikes Back" link (He says wat alot and it's hilarious)
0:00 / 0:00
#perl#31c3#remotecodeexecution
Netanel Rubin: The Perl Jam: Exploiting a 20 Year-old Vulnerability
media.ccc.de
274K subscribers • 56 videos on Hallway • Conference channel
- Recommended by 2 people: 2 on Hacker News.
- A classic. People kept recommending it from 2018 to 2022.
- Presented by Netanel Rubin
Intermediate. Assumes working knowledge.
7.9K views11 years ago2 recommendations
SecurityProgramming languagesWeb and application securityExploits and vulnerabilities
Netanel Rubin demonstrates how to chain Perl syntax quirks to achieve remote code execution in popular Perl-based projects.
media.ccc.de/browse/congress/2014/31c3_-_6243_-_en_-_saal_1_… tl;dr EXPLOIT ALL THE PERL. We chained several of Perl’s ridiculous syntax quirks in order to create a surprisingly powerful attack, bringing down some of the most popular Perl-based projects in the world to their knees. Brace yourselves, RCE exploits are coming. Netanel Rubin Help us caption & translate this video! amara.org/v/FuFr/Why it's here
2 people recommend this, 1 disputes itWhat people say. Recommended as a classic and highly entertaining security talk demonstrating language-specific exploit chains.
BonoboIOon Hacker News • Recommends
On “Experience Report: 6 months of Go”
Bit of offtopic: Best bash of a programming language „The Perl Jam: Exploiting a 20 Year-old Vulnerability“ link to this video And part 2 „The Perl Jam 2 The Camel Strikes Back“ link
Kostarrron Hacker News • Disputes
On “Why Perl?”
Friends dont let friends write perl. Source: The legendary "Perl Jam" talk from the chaos communication congress. * link to this video * link Also I find the "ubiquity" argument very side loped. What I could agree with is "small/self-contained install" (e.g. small single executable available for many platforms). But not sure how well perl fares there.
u/syklemilconsidered harmfulin r/ProgrammingLanguages • Mentions
On “Were multiple return values Go's biggest mistake?”
I feel like there's some bond of kinship between the multiple return values in Go and lists in Perl, in the sense that they're absolutely a language feature, but they're not a proper data type. At least Go seems to have more of a type system than Perl so I'm not aware of anything taking the piss out of it like that video.