Netanel Rubin: The Perl Jam: Exploiting a 20 Year-old Vulnerability

media.ccc.de · 7K views · 2014 · 29:01

Open on YouTube

Security & hackingPython, Ruby & scripting languagestalk

Why Hacker News recommends it

Recommended as a funny, engaging look at how Perl's quirks create real security vulnerabilities.

What it is

Netanel Rubin's 31C3 talk chains Perl's syntax quirks into a powerful remote code execution attack, taking down popular Perl-based projects.

Recommended by 2 HN commenters across 2 different months, 2018 to 2023.

What Hacker News said

Strong rec lathiat · 2018-09 · on “Show HN: Wat”

If you loved that video, try this great Perl presentation from Netanel Rubin: [this video] And it's follow-up cousin "The Camel Strikes Back" [LINK] (He says wat alot and it's hilarious)

Strong rec BonoboIO · 2022-04 · on “Experience Report: 6 months of Go”

Bit of offtopic: Best bash of a programming language „The Perl Jam: Exploiting a 20 Year-old Vulnerability“ [this video] And part 2 „The Perl Jam 2 The Camel Strikes Back“ [LINK]

Critical Kostarrr · 2023-04 · on “Why Perl?”

Friends dont let friends write perl. Source: The legendary "Perl Jam" talk from the chaos communication congress. * [this video] * [LINK] Also I find the "ubiquity" argument very side loped. What I could agree with is "small/self-contained install" (e.g. small single executable available for many platforms). But not sure how well perl fares there.