garu

• Website: onionstand.blogspot.com
• About: hmm?

Recent Actions

• Commented on A Question of Location
  Loved it! Can’t wait for “A study() in RedHat” or “The round()s of Posixville” :D...
• Commented on Is there a list of CERT advisories keyed to fixed Perl versions?
  Hi brian! You can search the CVE/NVD for a lot of products, including perl, separated by version. The link below, for example, should contain the list of known vulnerabilities ever found in perl: http://web.nvd.nist.gov/view/vuln/search-results?adv_search=true&cves=on&cve_id=&query=&cwe_id=&cpe_product=cpe%3A%2Fa%3Aperl%3Aperl&cpe_version=&pub_date_start_month=-1&pub_date_start_year=-1&pub_date_end_month=-1&pub_date_end_year=-1&mod_date_start_month=-1&mod_date_start_year=-1&mod_date_end_month=-1&mod_date_end_year=-1&cvss_sev_base=&cvss_av=&cvss_ac=&cvss_au=&cvss_c=&cvss_i=&cvss_a=...
• Commented on Deep Cloning
  So, turns out it really was a long-standing bug in Clone. Florian Ragwitz was kind enough to spot and fix it. Now we just have to wait for the patch to be applied. Until it happens, you should be mindful...
• Commented on Deep Cloning
  As an extra bit of information, fieldhash() changing the internal representation of the variable is expected. This issue with Clone seems to be another manifestation of a 2-year old open ticket in Clone's RT queue. Data::Printer is not even close...
• Commented on Deep Cloning
  Ok guys. The more I look at this the more I feel this is *not* a bug in Data::Printer. First of all, as I'm sure you know, this is not "Data::Printer's doing" in the pure sense of the word. Data::Printer...
• Commented on Deep Cloning
  Hey guys, thanks for the feedback. I think there are two issues at play here: why is Data::Printer changing the internal representation of the variable from an IV to a PVMG; why is Clone not able to clone that representation....
• Commented on Partially leaving Perl to change the world with Kaggle
  Kaggle, huh? Exciting! Good luck on your new endeavour, and many thanks for all the amazing stuff you have done over the years for Perl! I'm sad that you won't have as much time as you did before to work...
• Commented on One Unit of Stepping Up
  What a great story! Congratulations!...
• Commented on Perl in Pop Culture
  Very cool! This isn't the first time Perl went into Pop Culture. The Camel Book has appeared not once, but *twice*, on the TV Series "Chuck" :) http://ikeapimp.blogspot.com.br/2009/03/chuck-vs-camel.html...
• Commented on Easy Data::Printer in the perl debugger
  Wow, I'm really glad you enjoy Data::Printer - and even more that you took the time to write and share this nice tip! Speaking of tips and the debugger, have you seen the ones in DDP's documentation? https://metacpan.org/module/Data::Printer#Using-Data::Printer-from-the-Perl-debugger One uses...
• Commented on The Perl Learning Environment
  This is a great initiative! For newcomers, I agree IDEs are the way to go. One way to minimize issue #4, as you have taught me, is to ask students beforehand to bring laptops with similar operating systems to where...

Comment Threads

• Mike Friedman commented on Is there a list of CERT advisories keyed to fixed Perl versions?

  Some of those CERT recommendations do list Perl::Critic modules under "Automated Detection." (This one, for example.) It would be pretty awesome to have a single policy bundle for all those recommendations, though.

  I'm feeling an itch in my coding fingers...

• Toby Inkster commented on Is there a list of CERT advisories keyed to fixed Perl versions?

  xkcd: 28 Hour Day

• Jeffrey Ryan Thalhammer commented on Is there a list of CERT advisories keyed to fixed Perl versions?

  It would be trivial to create a theme includes all the existing Perl::Critic policies that fall under the CERT guidelines. See

  http://search.cpan.org/~thaljef/Perl-Critic-1.118/lib/Perl/Critic/DEVELOPER.pod#Themes

  Patches welcome.

  -Jeff

• cmlh commented on Is there a list of CERT advisories keyed to fixed Perl versions?

  Another thing to consider would be for Perl::Critic (or cpan, etc) to trigger an alert when vulnerable CPAN modules are used.

  The Java community has recently attempted to tackle this problem i.e. https://github.com/jeremylong/DependencyCheck#readme and http://www.scmagazine.com.au/News/320617,redhat-project-fights-java-vulnerabilities.aspx
  

• riesm.myopenid.com commented on A Question of Location

  Thank you.