Re: Re: Blatant security problem in certain CPAN module installs

CPAN is not a site you can trust.

Yet CPAN is often the first thing a Perl advocate trumpets.

Comment on Re: Re: Blatant security problem in certain CPAN module installs

Replies are listed 'Best First'.
Re: Blatant security problem in certain CPAN module installs by Abigail-II (Bishop) on May 04, 2004 at 00:02 UTC
CPAN is not a site you can trust. Yet CPAN is often the first thing a Perl advocate trumpets. Trumpets by advocates don't create security. Just because something isn't secure doesn't mean it can't be useful. CPAN is nothing more than an archive - and an archive with no control. CPAN is made by people. Good coders. Bad coders. Trustworthy coders. Malicious coders. PAUSE is an equal opportunity CPAN portal. Anyone can upload anything. This is CPAN's power. This is also what makes it dangerous. (Just like a motorsaw. Powerful, but dangerous). People should be well aware of the risks. Education is their only safety net. Abigail	[reply]

Replies are listed 'Best First'.

Re: Blatant security problem in certain CPAN module installs
by Abigail-II (Bishop) on May 04, 2004 at 00:02 UTC

CPAN is not a site you can trust.
Yet CPAN is often the first thing a Perl advocate trumpets.

Just because something isn't secure doesn't mean it can't be useful. CPAN is nothing more than an archive - and an archive with no control. CPAN is made by people. Good coders. Bad coders. Trustworthy coders. Malicious coders. PAUSE is an equal opportunity CPAN portal. Anyone can upload anything. This is CPAN's power. This is also what makes it dangerous. (Just like a motorsaw. Powerful, but dangerous). People should be well aware of the risks. Education is their only safety net.

Abigail

[reply]