7 ms·

Reminds me of my all time favorite programming talk-- (4:17) https://www.destroyallsoftware.com/talks/wat https://www.destroyallsoftware.com/talks/wat

• leipert 9y ago
  Which reminds me of the perl jam (29 min) https://media.ccc.de/v/31c3_-_6243_-_en_-_saal_1_-_201412292200_-_the_perl_jam_exploiting_a_20_year-old_vulnerability_-_netanel_rubin https://media.ccc.de/v/31c3_-_6243_-_en_-_saal_1_-_201412292...
  • madsohm 9y ago
    It's a nice talk, but does he have to swear so much?
    • leipert 9y ago
      I don't know, I think it's just how you are... Some people swear, other's don't. And I think it easier to be cynical/sarcastic than to criticize in a positive way. This is especially true, if you are a) limited in time, because you do research in your free time. b) getting negative, or even worse, no or ignorant feedback by the other party. c) getting tired, because you preach the same stuff over and over again. I think is really hard to do responsible disclosure and maintain a calm attitude during the whole process. There is this awesome talk about responsible disclosure by David Kriesel who found bugs in Xerox's compression algorithms: https://media.ccc.de/v/froscon2015-1524-lies_damned_lies_and_scans https://media.ccc.de/v/froscon2015-1524-lies_damned_lies_and...
  • b2gills 9y ago
    There is a slide in there where he makes something like 5 mistakes, and yet most people think he knows what he is talking about. I will grant that he found a problem where DBI and CGI was used together carelessly. I think I remember him saying that perl comes with DBI, even though it has never done so. Also CGI has recently been taken out of the core distribution. (Most people have been recommending to not use it since around the year 2000.)