edgeyboy
Re:The V Programming Language is open source
on Sunday June 23, 2019 @02:38AM (#20253638)
They're called through os.system.
Say that you have a website that relies on downloading content from URLs supplied by users. A user can send a "specially constructed" URL ("anything;commandgoeshere") and run any command they'd like on your server.
Re:The V Programming Language is open source
on Saturday June 22, 2019 @04:27PM (#20251560)
My apologies, I'll be more careful, and more factual.
Re:The V Programming Language is open source
on Saturday June 22, 2019 @04:23PM (#20251544)
I apologize for criticizing the person and not the project, but again, the fact that he deleted the issues is unreasonable.
Re:The V Programming Language is open source
on Saturday June 22, 2019 @04:22PM (#20251540)
I didn't ever say "Oh god this is a fucking goldmine". That was a reply.
Re:The V Programming Language is open source
on Saturday June 22, 2019 @03:44PM (#20251352)
Now that the release is out, it's actually worse than we expected: https://news.ycombinator.com/item?id=20251344
Re:The V Programming Language is open source
on Saturday June 22, 2019 @03:42PM (#20251344)
After going through the source code, I can tell for sure that it's an insecure C transpiler.
- Most things call just out to C.
- A lot of examples don't even compile.
- Some things use CLI curl or mkdir, this is /INCREDIBLY/ insecure.
- Many things are unimplemented.
- Dev banned me off org when I opened issues about these and deleted issues. I was unnecessarily rude on some which I apologize for, but deleting them and calling me a troll was uncalled for.
I wrote about them here: https://twitter.com/boy_edgey/status/1142504580074344448 (thread)