Hacker News Reader

edgeyboyon The V Programming Language is open source

They're called through os.system.

Say that you have a website that relies on downloading content from URLs supplied by users. A user can send a "specially constructed" URL ("anything;commandgoeshere") and run any command they'd like on your server.

edgeyboyon The V Programming Language is open source

My apologies, I'll be more careful, and more factual.

edgeyboyon The V Programming Language is open source

I apologize for criticizing the person and not the project, but again, the fact that he deleted the issues is unreasonable.

edgeyboyon The V Programming Language is open source

I didn't ever say "Oh god this is a fucking goldmine". That was a reply.

edgeyboyon The V Programming Language is open source

Now that the release is out, it's actually worse than we expected: https://news.ycombinator.com/item?id=20251344

edgeyboyon The V Programming Language

After going through the source code, I can tell for sure that it's an insecure C transpiler.

- Most things call just out to C.

- A lot of examples don't even compile.

- Some things use CLI curl or mkdir, this is /INCREDIBLY/ insecure.

- Many things are unimplemented.

- Dev banned me off org when I opened issues about these and deleted issues. I was unnecessarily rude on some which I apologize for, but deleting them and calling me a troll was uncalled for.

I wrote about them here: https://twitter.com/boy_edgey/status/1142504580074344448 (thread)