News for hackers. Stuff that matters.

A comment on Why does OpenBSD still include Perl in its base installation?.

Re:Why does OpenBSD still include Perl in its base installat... by lmm on Saturday May 30, 2020 @08:04AM (#23360541)
How is TCL less secure than Perl? I've seen a lot less weird surprises in TCL code than Perl code.
[ Parent | on HN ]
Re:Why does OpenBSD still include Perl in its base installat... by microtherion on Saturday May 30, 2020 @09:40AM (#23361111)
* In my recollection, Tcl relies a lot on string interpolation and run time evaluation, both of which carry some risk.

* Perl has a built in taint checking facility which is quite good at preventing the naive use of non-vetted user data; I don't recall whether Tcl has anything similar. https://perldoc.perl.org/perlsec.html

[ Parent | on HN ]
Re:Why does OpenBSD still include Perl in its base installat... by sigzero on Saturday May 30, 2020 @10:32AM (#23361450)
Tcl is not less secure than Perl.
[ Parent | on HN ]