I wish Ruby had a way to shut off eval completely. $SAFE seems pretty worthless
-
-
@bascule At some point you need to put down ruby and find a more suitable tool if you seriously consider that route. -
@KirinDave I'm not sure what other language I could write a system like Celluloid in besides Python. I've seen the result in Scala and o_O -
@bascule What does that have to do with dynamic class loading? -
@KirinDave well, about the only language I can think that's more suitable for this is... E -
@bascule What does it have to do with dynamic class loading or eval, though? -
@KirinDave haha, you were telling me to find a different language... E has a capabilities model that can prevent... those things -
@bascule Does Celluloid require eval though? -
@KirinDave no, but I can't add a security model to distributed Celluloid. Someone can still do remote_obj.instance_eval("`echo pwned`")
End of conversation
New conversation -
-
-
@bascule@KirinDave IMHO, Java has eval too, it's just cumbersome. I think it's the ease of ruby's eval that tempts users. -
-
@KirinDave@bascule Sure, I guess it depends on how you define 'eval'. I do as "ability to create and execute unknown code at runtime." -
@evanphx@KirinDave yeah, I think someone described the same idea as VM.freeze
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.