*** petr has quit IRC | 00:03 | |
*** c74d has quit IRC | 01:17 | |
*** c74d has joined #io | 01:19 | |
*** petr has joined #io | 01:52 | |
*** gatesphere has quit IRC | 02:19 | |
*** TheMonkey has joined #io | 02:33 | |
*** levitation[A] has quit IRC | 04:04 | |
*** levitation[A] has joined #io | 04:06 | |
*** pchalupa has quit IRC | 05:35 | |
*** pchalupa has joined #io | 06:44 | |
*** irclogger_ has joined #io | 07:29 | |
*** levitation[A] has joined #io | 07:36 | |
*** robonerd has quit IRC | 12:07 | |
*** robonerd has joined #io | 12:08 | |
*** ijon_ has joined #io | 12:31 | |
*** fredreichbier has joined #io | 13:17 | |
*** gatesphere has joined #io | 13:20 | |
*** hashmal has joined #io | 14:05 | |
*** noTHD has quit IRC | 14:41 | |
*** hashmal has quit IRC | 14:47 | |
*** noTHD has joined #io | 14:55 | |
*** levitation[A] has quit IRC | 14:59 | |
*** noTHD has quit IRC | 15:02 | |
*** levitation[A] has joined #io | 15:06 | |
*** TheMonkey has joined #io | 15:10 | |
*** pchalupa has quit IRC | 15:14 | |
*** fredreichbier has quit IRC | 17:02 | |
*** ijon_ has quit IRC | 17:12 | |
*** levitation[A] has quit IRC | 17:28 | |
*** stapler has joined #io | 17:30 | |
stapler | why isn't io more popular | 17:30 |
---|---|---|
*** levitation[A] has joined #io | 17:36 | |
*** c74d has quit IRC | 17:59 | |
*** robonerd has quit IRC | 18:08 | |
*** zephyrtronium has quit IRC | 18:08 | |
*** zehl_ has quit IRC | 18:08 | |
*** fabjan has quit IRC | 18:08 | |
*** bomma has quit IRC | 18:08 | |
*** c74d3 has joined #io | 18:10 | |
*** robonerd has joined #io | 18:10 | |
*** zephyrtronium has joined #io | 18:10 | |
*** bomma has joined #io | 18:10 | |
*** fabjan has joined #io | 18:10 | |
*** zehl_ has joined #io | 18:10 | |
*** c74d3 has quit IRC | 18:11 | |
jer | stapler, possibly because it's horribly unsafe in terms of predictability and constraints (it basically has less than 5 constraints) -- as well as marketing | 18:11 |
jer | and a strong community. the community revives and then fades over long periods of time | 18:11 |
*** c74d has joined #io | 18:14 | |
*** robonerd has quit IRC | 18:14 | |
*** zephyrtronium has quit IRC | 18:14 | |
*** zehl_ has quit IRC | 18:15 | |
*** fabjan has quit IRC | 18:15 | |
*** bomma has quit IRC | 18:15 | |
stapler | jer, could you say a little more on io being unsafe | 18:15 |
*** robonerd has joined #io | 18:16 | |
*** zephyrtronium has joined #io | 18:16 | |
*** bomma has joined #io | 18:16 | |
*** fabjan has joined #io | 18:16 | |
*** zehl_ has joined #io | 18:16 | |
jer | stapler, sure | 18:17 |
jer | Number + := Number getSlot("-") | 18:17 |
jer | now do any addition | 18:17 |
jer | even less overt: | 18:17 |
jer | YourThing _somethingYouCallALot := YourThing getSlot("somethingYouCallALot") clone; YourThing somethingYouCallALot := method(Number + = Number getSlot("-"); call target doMessage(call message clone setName("_somethingYouCallALot"))) | 18:19 |
jer | then you won't even know, because i can inject that at any time i want | 18:20 |
jer | i could even hide it in the compiler | 18:20 |
jer | lightweight profiling what code of yours gets called a lot, and insert some code to covertly mine for bitcoins, or ddos some site | 18:20 |
jer | Io provides no protections against these sort of injection attacks | 18:20 |
jer | Io'd be great when narrowly focused and with full disclosure of the injection problems | 18:20 |
jer | but i would highly not recommend it for running outside of a sandbox that you control, not one that io controls | 18:21 |
stapler | but how realistic is that, really | 18:24 |
*** robonerd has quit IRC | 18:37 | |
*** levitation[A] has quit IRC | 18:56 | |
*** levitation[A] has joined #io | 19:06 | |
*** stapler1 has joined #io | 19:19 | |
*** stapler has quit IRC | 19:19 | |
*** stapler has joined #io | 19:19 | |
*** stapler2 has joined #io | 19:20 | |
*** stapler1 has quit IRC | 19:21 | |
*** stapler has quit IRC | 19:23 | |
*** noTHD has joined #io | 19:25 | |
*** stapler has joined #io | 19:25 | |
*** stapler2 has quit IRC | 19:26 | |
*** jezen has joined #io | 19:28 | |
*** stapler1 has joined #io | 19:31 | |
*** stapler has quit IRC | 19:32 | |
*** levitation[A] has quit IRC | 19:33 | |
*** pchalupa has joined #io | 19:36 | |
*** levitation[A] has joined #io | 19:36 | |
*** stapler has joined #io | 19:39 | |
*** stapler has quit IRC | 19:41 | |
*** stapler1 has quit IRC | 19:41 | |
*** stapler has joined #io | 19:41 | |
*** stapler has quit IRC | 19:41 | |
*** stapler has joined #io | 19:41 | |
*** stapler1 has joined #io | 19:44 | |
*** stapler has quit IRC | 19:44 | |
*** stapler1 has quit IRC | 19:53 | |
*** jezen has quit IRC | 19:58 | |
*** ni94283 has joined #io | 20:49 | |
*** ni94283 has quit IRC | 20:55 | |
*** pchalupa has quit IRC | 21:01 | |
*** petr has quit IRC | 22:04 | |
*** petr has joined #io | 22:06 | |
*** petr has quit IRC | 22:16 | |
*** noTHD has quit IRC | 22:23 | |
*** noTHD has joined #io | 22:27 | |
*** hashmal has joined #io | 22:42 | |
*** petr has joined #io | 22:52 | |
*** robonerd has joined #io | 22:54 | |
*** Raimondi has quit IRC | 23:40 | |
*** Raimondi has joined #io | 23:41 | |
prologic | jer: yeah how realistic is that really? :) | 23:55 |
prologic | The same sorts of arguments could be made of for example Python | 23:55 |
prologic | or really any dynamic language that has metaprogramming | 23:55 |
prologic | protecting against malicious devleopers is like protecting against a disgrunteled employee | 23:55 |
robonerd | how realistic is what? | 23:57 |
prologic | malicious developers in an organization | 23:58 |
prologic | deliberatly writing code to break systems or destroy data | 23:58 |
robonerd | well, very, no? | 23:58 |
prologic | I honestly wouldn’t have thought so | 23:58 |
robonerd | what was jer driving at tho as a solution? | 23:58 |
prologic | that sort of thing generally gets you fired | 23:58 |
prologic | oh he wasn't | 23:58 |
robonerd | yea but if you're working for a competitor/foreign nation, you don't care | 23:58 |
prologic | he was just pointing out some very powerful but also very dangerous features of Io | 23:58 |
prologic | and other langauges like it | 23:58 |
robonerd | data as code? | 23:59 |
prologic | *nods* | 23:59 |
prologic | or rather | 23:59 |
prologic | code as data | 23:59 |
prologic | othe rway around :0 | 23:59 |
prologic | the fact you can do: | 23:59 |
robonerd | well code as data is fine imo, but data as code is a problem | 23:59 |
prologic | Number + := Number getSlot(“-“) | 23:59 |
prologic | now try to do basic armitmetic involving addition | 23:59 |
robonerd | right | 23:59 |
prologic | but my point is still this | 23:59 |
prologic | if I caught a developer doing this in my codebase | 23:59 |
Generated by irclog2html.py 2.11.0 by Marius Gedminas - find it at mg.pov.lt!