HackerTube.dev

Netanel Rubin: The Perl Jam: Exploiting a 20 Year-old Vulnerability

media.ccc.de · 7.9K views · 2014-12-30 · 29:01

Open on YouTube ↗

If playback is restricted in your region, try opening the original video. Use Mark watched to add it to your marked videos.

Overview

Netanel Rubin's 31C3 talk chains Perl's syntax quirks into a powerful remote code execution attack, taking down popular Perl-based projects.

On Hacker News

Recommended as a funny, engaging look at how Perl's quirks create real security vulnerabilities.

Recommended by 2 HN people across 2 months · HN mentions 2018–2023

Topics

Security & hackingPython, Ruby & scripting languages
Search by tags
perlrceweb securitylanguage quirks31c3

What people said

BonoboIO · 2022-04 · Strong recommendation

Bit of offtopic: Best bash of a programming language „The Perl Jam: Exploiting a 20 Year-old Vulnerability“ [VIDEO] And part 2 „The Perl Jam 2 The Camel Strikes Back“ [LINK]

Read the original HN comment ↗
lathiat · 2018-09 · Strong recommendation

If you loved that video, try this great Perl presentation from Netanel Rubin: [VIDEO] And it's follow-up cousin "The Camel Strikes Back" [LINK] (He says wat alot and it's hilarious)

Read the original HN comment ↗
Kostarrr · 2023-04 · Criticism

Friends dont let friends write perl. Source: The legendary "Perl Jam" talk from the chaos communication congress. * [VIDEO] * [LINK] Also I find the "ubiquity" argument very side loped. What I could agree with is "small/self-contained install" (e.g. small single executable available for many platforms). But not sure how well perl fares there.

Read the original HN comment ↗

Sources

Video by media.ccc.de, played through YouTube.

Data and selection notes

HN summaries and labels may contain AI errors. HN dates refer to discussions, not video publication.

HN Library: HackerTube export (2026-10-31) and open-index/hacker-news. Upstream summaries and classifications may contain AI errors.

Views, duration and playback status refresh separately from the published catalog. When an update fails, existing data remains visible.

Selection checks
  • SaaS & AI candidates: Topic keywords do not match
  • Editor-approved picks: Editorial review is required

Rule matches identify candidates. They do not guarantee video quality or financial results.

About the library and its sources