Hacker News new | ask | show | jobs
by tptacek 5072 days ago
There's badness just in rb_intern, at least in 187.

MRI scares the bejeezus out of me.

2 comments

I vaguely recall somewhere that Matz commented about how he felt that he was a good language designer, but not necessarily a good language implementor. I've always felt that MRI should be treated as a reference implementation, and the fact that there aren't more alternate implementations of Ruby is a (maybe sad?) reflection on the Ruby community.
Oh, I'll have to give it another look.

JRuby also suffers from the global symbol table =( so it does not avoid the potential denial attack through symbolizing..