http://qs321.pair.com?node_id=513001

Brothers Monks, I just saw this article on C|Net: Danger level rises for Perl app flaws and my blood's boiling. Webmin is insecure (how useful it can be, we all know it's a huge pile of perl4-style insecure crap), a new webmin flaw arose, and what can we see in one of the most prominent news site? Perl is insecure. Argh!

I know journalists (or web-wannabe-journalists) to be clueless, but this one is too much for me to stand. How can we respond to such attacks against our language and community ? I'm still waiting for "Java is insecure" or "C# stinks" on C|Net!

update: according to http://www.webmin.com/security.html, the bug is already corrected anyway. Where are the headlines?

update 2: There is a nasty Perl bug. However, is there any evidence that it presents a major security flaw for some applications around ?

update 3: it seems so at last : Searching for sprintf() bug exploit opportunities in core and CPAN modules