Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
tyho
on July 13, 2015
|
parent
|
context
|
favorite
| on:
You cannot start a tweet with “D. Tusk”
It is likely a scala program running, no buffer overflows to be found. In a modern language, you have to be very careless to allow RCE.
gohrt
on July 13, 2015
[–]
buffer overflow is not the only way to get a RCE.
String manipulation and 'eval' (which gives access to system APIs) is a common culprit
Dylan16807
on July 13, 2015
|
parent
|
next
[–]
Using eval is gratuitous carelessness. At least a buffer overflow can be a mistake.
chc
on July 13, 2015
|
parent
|
prev
[–]
Is anything like eval commonly used in Scala? That language is static as all get-out.
eropple
on July 13, 2015
|
root
|
parent
[–]
I've started seeing (and occasionally using) util-eval as a configuration language for Scala, but it's generally pretty rare.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
