3 ms·
After going through the source code, I can tell for sure that it's an insecure C transpiler. - Most things call just out to C. - A lot of examples don't even
by edgeyboy 7y ago
After going through the source code, I can tell for sure that it's an insecure C transpiler.
- Most things call just out to C.
- A lot of examples don't even compile.
- Some things use CLI curl or mkdir, this is /INCREDIBLY/ insecure.
- Many things are unimplemented.
- Dev banned me off org when I opened issues about these and deleted issues. I was unnecessarily rude on some which I apologize for, but deleting them and calling me a troll was uncalled for.
I wrote about them here: https://twitter.com/boy_edgey/status/1142504580074344448 https://twitter.com/boy_edgey/status/1142504580074344448 (thread)
- tasty_freeze 7y agoI have to agree from the snippets of your reports, the tone of those reports were needlessly antagonistic and superior. Starting a report with "You idiot" or "Oh god this is a fucking goldmine" should get you banned, even if the issue you are reporting is real. Such reports aren't trying to contribute to the project; they are trying to boost the reporter.
- edgeyboy 7y agoI didn't ever say "Oh god this is a fucking goldmine". That was a reply.
- SolarNet 7y agoWell you were calling him an idiot in the issues and being overall aggressive. I would ban you too (but I'd keep the issues after some editing).
- edgeyboy 7y agoI apologize for criticizing the person and not the project, but again, the fact that he deleted the issues is unreasonable.
- drusepth 7y agoI, too, would delete needlessly aggressive issues on my open source projects if I didn't end up editing them to make them actually usable. Either way, it'd definitely be a ban so the user wouldn't edit them back or escalate with more aggression in other issues.
- amedvednikov 7y agoBesides on many of those you were simply wrong like with rand.next() returning 0 and missing _lin.v files.
- coldtea 7y ago>I was unnecessarily rude on some which I apologize for, but deleting them and calling me a troll was uncalled for. I wouldn't say troll, but you still come out as rude-ish in this comment. "- Some things use CLI curl or mkdir, this is /INCREDIBLY/ insecure." Not anymore than tons of established projects that use the same...
- yjftsjthsd-h 7y agoWhat's insecure about curl and mkdir?
- edgeyboy 7y agoThey're called through os.system. Say that you have a website that relies on downloading content from URLs supplied by users. A user can send a "specially constructed" URL ("anything;commandgoeshere") and run any command they'd like on your server.
- yccheok 7y agoI would be surprised if you're not banned, for personal attack the author.