Plays via YouTube's privacy-enhanced embed

Netanel Rubin: The Perl Jam: Exploiting a 20 Year-old Vulnerability

Name: Netanel Rubin: The Perl Jam: Exploiting a 20 Year-old Vulnerability
Description: Netanel Rubin's 31C3 talk chains Perl's syntax quirks into a powerful remote code execution attack, taking down popular Perl-based projects.

media.ccc.de

24 videos recommended on HN

YouTube

2 HN users recommended this talk2 months2018–2023 score 3

Years with an HN recommendation, 2007–2026

Recommended as a funny, engaging look at how Perl's quirks create real security vulnerabilities.

Netanel Rubin's 31C3 talk chains Perl's syntax quirks into a powerful remote code execution attack, taking down popular Perl-based projects.

“try this great Perl presentation from Netanel Rubin” (HN, 2018)

2 strong recommendations · 1 critical · Talks · intermediate

Security & hacking Python, Ruby & scripting languages Talks Systems, Networks & Security

3 Hacker News comments

From the HN archive; up to 20 kept per video, favoring different commenters. Recommendations first.

@lathiat Sep 2018 Strongly recommends

on HN thread Show HN: Wat

If you loved that video, try this great Perl presentation from Netanel Rubin: [this video] And it's follow-up cousin "The Camel Strikes Back" [link] (He says wat alot and it's hilarious)

Funny, engaging Perl security talk exploiting a 20-year-old vulnerability.

View on Hacker News

@BonoboIO Apr 2022 Strongly recommends

on HN thread Experience Report: 6 months of Go

Bit of offtopic: Best bash of a programming language „The Perl Jam: Exploiting a 20 Year-old Vulnerability“ [this video] And part 2 „The Perl Jam 2 The Camel Strikes Back“ [link]

View on Hacker News

Citations, criticism and jokes

@Kostarrr Apr 2023 Pushes back

on HN thread Why Perl?

Friends dont let friends write perl. Source: The legendary "Perl Jam" talk from the chaos communication congress. * [this video] * [link] Also I find the "ubiquity" argument very side loped. What I could agree with is "small/self-contained install" (e.g. small single executable available for many platforms). But not sure how well perl fares there.

View on Hacker News

Video list and Hacker News comment labels from HackerTube (prompted by @karpathy), released under ODC-By 1.0, built on the open-index/hacker-news archive. Hacker News data is provided by Y Combinator; comments remain the work of their authors. Video titles, channel names and thumbnails belong to their creators and are shown via YouTube. HackerTube Watch is an unofficial edition. Data export of 2026-10-31.