From david at manicelement.com  Tue Mar  1 08:06:16 2005
From: david at manicelement.com (David Crean)
Date: Tue Mar  1 08:06:41 2005
Subject: [LA.pm] perl cpu spike
Message-ID: <422492F8.6060206@manicelement.com>

We have a webserver running mandrake linux.  It's a pretty basic server 
that gets respectable, but not mind-bending traffic.  We use coldfusion 
development environment, and mssql server (housed on a different machine 
in the same location).  This computer also runs some small time email 
and handles some dns.  Two nights ago we had an issue, and while looking 
into it we found that perl was running at 99% CPU for a good long time.  
We don't really have anything that runs on perl, or uses perl.  The DNS 
and webmin use it to some small degree, but nothing that could account 
for this kind of spike.  Anyone experienced this before?

David
From rspier at pobox.com  Tue Mar  1 08:42:43 2005
From: rspier at pobox.com (Robert Spier)
Date: Tue Mar  1 08:43:10 2005
Subject: [LA.pm] perl cpu spike
In-Reply-To: <422492F8.6060206@manicelement.com>
References: <422492F8.6060206@manicelement.com>
Message-ID: <m3r7iztj0c.wl_rs@pobox.com>



You really haven't given us enough information.

Mandrake heavily uses perl for its system tools, so it could really
have been anything.

If this happens again, you'll want to use tools like lsof, and strace,
to figure out whats going on.

-R

At Tue, 01 Mar 2005 08:06:16 -0800,
David Crean wrote:
> 
> We have a webserver running mandrake linux.  It's a pretty basic
> server that gets respectable, but not mind-bending traffic.  We use
> coldfusion development environment, and mssql server (housed on a
> different machine in the same location).  This computer also runs some
> small time email and handles some dns.  Two nights ago we had an
> issue, and while looking into it we found that perl was running at 99%
> CPU for a good long time.  We don't really have anything that runs on
> perl, or uses perl.  The DNS and webmin use it to some small degree,
> but nothing that could account for this kind of spike.  Anyone
> experienced this before?
> 
> David
> _______________________________________________
> Losangeles-pm mailing list
> Losangeles-pm@pm.org
> http://mail.pm.org/mailman/listinfo/losangeles-pm
From ben_tilly at operamail.com  Tue Mar  1 12:07:36 2005
From: ben_tilly at operamail.com (Benjamin J. Tilly )
Date: Tue Mar  1 12:07:48 2005
Subject: [LA.pm] perl cpu spike
Message-ID: <20050301200736.A8DFD3AA515@ws5-8.us4.outblaze.com>

"David Crean" <david@manicelement.com> wrote:
> 
> We have a webserver running mandrake linux.  It's a pretty basic 
> server that gets respectable, but not mind-bending traffic.  We use 
> coldfusion development environment, and mssql server (housed on a 
> different machine in the same location).  This computer also runs 
> some small time email and handles some dns.  Two nights ago we had 
> an issue, and while looking into it we found that perl was running 
> at 99% CPU for a good long time.  We don't really have anything 
> that runs on perl, or uses perl.  The DNS and webmin use it to some 
> small degree, but nothing that could account for this kind of 
> spike.  Anyone experienced this before?

I'll give you 3 possibilities.

1. Some piece of Perl was poorly written and got into a tight
   loop somewhere.
2. There's a Perl job there that you don't know about.
3. Someone who isn't supposed to have access got access.

The third is unlikely (rootkits generally run fairly fast).
None of us have information on the first two.

If it happens again then identify the process ID, and poke
around in /proc/<pid>/ to see if you can learn something
more about the offending process.

Cheers,
Ben
From rower at MovieEditor.com  Thu Mar  3 22:24:57 2005
From: rower at MovieEditor.com (Robin Rowe)
Date: Thu Mar  3 22:26:05 2005
Subject: [LA.pm] push question
Message-ID: <204401c52082$e60ee3e0$0300a8c0@cary>

Hi. Having a little trouble with 'push' not doing what I'd hoped.

I'm reading an array from a file:

 @lines = <FILE>;

I want to append some additional data to the array, but it doesn't do what I 
expect.

Here's a test program that illustrates what I'm doing.

@lines={1,2,3};
push(@lines,4);
push(@lines,5);

foreach(@lines)
{ printf "%s-", $_
}

Here's the output:

% perl pushtest.pl
HASH(0x334ca0)-4-5

What I want is 1-2-3-4-5. How?

Thanks!

Robin
-------------------------------------------------------------------
Robin.Rowe@MovieEditor.com   Beverly Hills, California
www.LinuxMovies.org - Advancing Linux motion picture technology 

From allenday at ucla.edu  Thu Mar  3 22:34:58 2005
From: allenday at ucla.edu (Allen Day)
Date: Thu Mar  3 22:35:08 2005
Subject: [LA.pm] push question
In-Reply-To: <204401c52082$e60ee3e0$0300a8c0@cary>
References: <204401c52082$e60ee3e0$0300a8c0@cary>
Message-ID: <Pine.LNX.4.58.0503032234480.25502@sumo.ctrl.ucla.edu>

On Thu, 3 Mar 2005, Robin Rowe wrote:

> Hi. Having a little trouble with 'push' not doing what I'd hoped.
> 
> I'm reading an array from a file:
> 
>  @lines = <FILE>;
> 
> I want to append some additional data to the array, but it doesn't do what I 
> expect.
> 
> Here's a test program that illustrates what I'm doing.
> 
> @lines={1,2,3};

@lines = (1,2,3);

> push(@lines,4);
> push(@lines,5);
> 
> foreach(@lines)
> { printf "%s-", $_
> }
> 
> Here's the output:
> 
> % perl pushtest.pl
> HASH(0x334ca0)-4-5
> 
> What I want is 1-2-3-4-5. How?
> 
> Thanks!
> 
> Robin
> -------------------------------------------------------------------
> Robin.Rowe@MovieEditor.com   Beverly Hills, California
> www.LinuxMovies.org - Advancing Linux motion picture technology 
> 
> _______________________________________________
> Losangeles-pm mailing list
> Losangeles-pm@pm.org
> http://mail.pm.org/mailman/listinfo/losangeles-pm
> 
From mrkoffee at saltedsnail.com  Thu Mar  3 22:46:09 2005
From: mrkoffee at saltedsnail.com (Brian Cooke)
Date: Thu Mar  3 22:46:16 2005
Subject: [LA.pm] push question
In-Reply-To: <204401c52082$e60ee3e0$0300a8c0@cary>
References: <204401c52082$e60ee3e0$0300a8c0@cary>
Message-ID: <7d74cf73ed5f6b6cc91fc127048a9744@saltedsnail.com>

>
> I'm reading an array from a file:
>
> @lines = <FILE>;
>
...
>
> @lines={1,2,3};
> push(@lines,4);
> push(@lines,5);
>
> foreach(@lines)
> { printf "%s-", $_
> }
>
> Here's the output:
>
> % perl pushtest.pl
> HASH(0x334ca0)-4-5
>
> What I want is 1-2-3-4-5. How?
>
The {1,2,3} assignment places an anonymous hash reference in the first 
element of @lines. Warnings enabled or -w would have alerted you about 
an odd number of elements in that anonymous hash.  So the first element 
is a reference to a hash, and the second and third are 4 and 5.

This will give you the 1-2-3-4-5 you're looking for:

#!/usr/bin/perl

use warnings;
use strict;

my @lines = (1,2,3);
push @lines, 4;
push @lines, 5;

print join('-', @lines), "\n";


Not sure where the file slurp comes in, though, in relation to the 
later assignment to (1,2,3)...

Cheers,

Brian

From rower at MovieEditor.com  Thu Mar  3 23:05:29 2005
From: rower at MovieEditor.com (Robin Rowe)
Date: Thu Mar  3 23:06:30 2005
Subject: [LA.pm] push question
References: <204401c52082$e60ee3e0$0300a8c0@cary>
	<Pine.LNX.4.58.0503032234480.25502@sumo.ctrl.ucla.edu>
Message-ID: <207001c52088$8cecfdf0$0300a8c0@cary>

>> @lines={1,2,3};
>
> @lines = (1,2,3);

Nice thought, but changing a line of example code that's only in my test 
program isn't going to get me far! As mentioned, in my real program that 
input is '@lines = <FILE>;'. Pushing onto that is what I'm trying to figure 
out.

Robin


From ofer at netapt.com  Thu Mar  3 23:09:46 2005
From: ofer at netapt.com (Ofer Nave)
Date: Thu Mar  3 23:09:59 2005
Subject: [LA.pm] push question
In-Reply-To: <204401c52082$e60ee3e0$0300a8c0@cary>
Message-ID: <Pine.LNX.4.44.0503032307560.2534-100000@otis.netapt.com>


<email1>

On Thu, 3 Mar 2005, Robin Rowe wrote:

> Hi. Having a little trouble with 'push' not doing what I'd hoped.
> 
> I'm reading an array from a file:
> 
>  @lines = <FILE>;
> 
> I want to append some additional data to the array, but it doesn't do what I 
> expect.
> 
> Here's a test program that illustrates what I'm doing.
> 
> @lines={1,2,3};
> push(@lines,4);
> push(@lines,5);
> 
> foreach(@lines)
> { printf "%s-", $_
> }
> 
> Here's the output:
> 
> % perl pushtest.pl
> HASH(0x334ca0)-4-5
> 
> What I want is 1-2-3-4-5. How?

<email2>

> Nice thought, but changing a line of example code that's only in my test 
> program isn't going to get me far! As mentioned, in my real program that 
> input is '@lines = <FILE>;'. Pushing onto that is what I'm trying to 
> figure out.

The reason you're getting HASH(0x334ca0)-4-5 from your test program is 
that you have a bug in your test program.  Since you only posted your test 
program, that's the only thing we can help you with.

If you post your *real* code, or at least describe what problem you are 
having with push in your *real* code, then we can help you solve your 
*real* problem.

What are you doing in your real program, what do you expect to see, and 
what are you actually seeing?

-ofer

From rower at MovieEditor.com  Thu Mar  3 23:29:08 2005
From: rower at MovieEditor.com (Robin Rowe)
Date: Thu Mar  3 23:30:09 2005
Subject: [LA.pm] push question
References: <Pine.LNX.4.44.0503032307560.2534-100000@otis.netapt.com>
Message-ID: <209101c5208b$dae08f60$0300a8c0@cary>

> What are you doing in your real program, what do you expect to see, and
> what are you actually seeing?

These are the only lines that matter.

@lines = <FILE>;
push(@lines,$string);

I simply want to append another line to an array of lines read from a file, 
but push doesn't do what I expected. Does anyone know how to push a string 
onto an array of strings read from a file?

Robin 

From ofer at netapt.com  Thu Mar  3 23:35:04 2005
From: ofer at netapt.com (Ofer Nave)
Date: Thu Mar  3 23:35:21 2005
Subject: [LA.pm] push question
In-Reply-To: <209101c5208b$dae08f60$0300a8c0@cary>
Message-ID: <Pine.LNX.4.44.0503032333030.2534-100000@otis.netapt.com>


On Thu, 3 Mar 2005, Robin Rowe wrote:

> > What are you doing in your real program, what do you expect to see, and
> > what are you actually seeing?
> 
> These are the only lines that matter.

Probably not.  Read on.

> @lines = <FILE>;
> push(@lines,$string);

You're doing it perfectly.

> I simply want to append another line to an array of lines read from a file, 
> but push doesn't do what I expected. Does anyone know how to push a string 
> onto an array of strings read from a file?

I see nothing wrong with your code.  It looks to me like it's doing 
exactly what you described wanted to accomplish.

Now, when you say "doesn't do what I expected"... well, we can't even 
begin to fathom what's wrong and how to help you unless you tell us what 
it IS doing.

Quick guide to writing intelligent questions:

1) show us the code, preferably with a brief explanation of what it's 
about
2) say what you expected it to do
3) say what it actually did

Remember - you're helping us to help YOU.

-ofer

From kevin+lapm at scaldeferri.com  Thu Mar  3 23:37:35 2005
From: kevin+lapm at scaldeferri.com (Kevin Scaldeferri)
Date: Thu Mar  3 23:37:46 2005
Subject: [LA.pm] push question
In-Reply-To: <209101c5208b$dae08f60$0300a8c0@cary>
References: <Pine.LNX.4.44.0503032307560.2534-100000@otis.netapt.com>
	<209101c5208b$dae08f60$0300a8c0@cary>
Message-ID: <c147cbf59f2bd8795b21e233be2c043a@scaldeferri.com>


On Mar 3, 2005, at 11:29 PM, Robin Rowe wrote:

>> What are you doing in your real program, what do you expect to see, 
>> and
>> what are you actually seeing?
>
> These are the only lines that matter.
>
> @lines = <FILE>;
> push(@lines,$string);
>
> I simply want to append another line to an array of lines read from a 
> file, but push doesn't do what I expected. Does anyone know how to 
> push a string onto an array of strings read from a file?

Just like that:

[kevin]% cat foo
foo
bar
[kevin]% perl -e 'open FOO, "foo"; @lines = <FOO>; push @lines, 
"baz\n"; print @lines'
foo
bar
baz


Maybe you can explain what output you are getting that is not what you 
expect.


-kevin

From rower at MovieEditor.com  Thu Mar  3 23:58:48 2005
From: rower at MovieEditor.com (Robin Rowe)
Date: Thu Mar  3 23:59:53 2005
Subject: [LA.pm] push question
References: <Pine.LNX.4.44.0503032307560.2534-100000@otis.netapt.com>
	<209101c5208b$dae08f60$0300a8c0@cary>
	<c147cbf59f2bd8795b21e233be2c043a@scaldeferri.com>
Message-ID: <20b001c52090$01dff0c0$0300a8c0@cary>

Kevin,

You're right that push does work. I was a little confused about arrays and 
push.

Thanks for your help.

Robin

From ofer at netapt.com  Sun Mar  6 09:16:05 2005
From: ofer at netapt.com (Ofer Nave)
Date: Sun Mar  6 09:16:14 2005
Subject: [LA.pm] next time we need to give away a book...
In-Reply-To: <Pine.LNX.4.44.0502171019510.14064-100000@otis.netapt.com>
Message-ID: <Pine.LNX.4.44.0503060915341.9367-100000@otis.netapt.com>


http://search.cpan.org/~petdance/Acme-PM-Chicago-0.01/Chicago.pm

>From the SYNOPSIS:

"We here in Chicago.PM have the monthly problem of how to give away books. 
Names from a hat? Bizarre statistical extraction from Lembark? Who can 
tell? We decided once and for all to have ONE WAY to do it."

-ofer

From rspier at pobox.com  Sun Mar  6 13:07:29 2005
From: rspier at pobox.com (Robert Spier)
Date: Sun Mar  6 13:07:45 2005
Subject: [LA.pm] next time we need to give away a book...
In-Reply-To: <Pine.LNX.4.44.0503060915341.9367-100000@otis.netapt.com>
References: <Pine.LNX.4.44.0502171019510.14064-100000@otis.netapt.com>
	<Pine.LNX.4.44.0503060915341.9367-100000@otis.netapt.com>
Message-ID: <m33bv8pjou.wl_rs@pobox.com>

> http://search.cpan.org/~petdance/Acme-PM-Chicago-0.01/Chicago.pm
> >From the SYNOPSIS:
> "We here in Chicago.PM have the monthly problem of how to give away books. 
> Names from a hat? Bizarre statistical extraction from Lembark? Who can 
> tell? We decided once and for all to have ONE WAY to do it."

This boils down to:

sub random_name {
    my @names = @_;

    return $names[rand @names];
}


which is really less interesting than what we have now.

Perl won't run on my Treo, but I think I can still get Python there,
and then implement the equivalent... but really.. I think our games
are more fun :)

-R
From ofer at netapt.com  Sun Mar  6 17:16:08 2005
From: ofer at netapt.com (Ofer Nave)
Date: Sun Mar  6 17:16:16 2005
Subject: [LA.pm] next time we need to give away a book...
In-Reply-To: <m33bv8pjou.wl_rs@pobox.com>
Message-ID: <Pine.LNX.4.44.0503061715030.31031-100000@otis.netapt.com>


On Sun, 6 Mar 2005, Robert Spier wrote:

> > http://search.cpan.org/~petdance/Acme-PM-Chicago-0.01/Chicago.pm
> > >From the SYNOPSIS:
> > "We here in Chicago.PM have the monthly problem of how to give away books. 
> > Names from a hat? Bizarre statistical extraction from Lembark? Who can 
> > tell? We decided once and for all to have ONE WAY to do it."
> 
> This boils down to:
> 
> sub random_name {
>     my @names = @_;
> 
>     return $names[rand @names];
> }

I know.  :)

> which is really less interesting than what we have now.

And I agree!  But I thought ya'll might be amused that someone in Chicago 
actually created a function for that express purpose, despite it being 
implemented in the most obvious fashion.

-ofer

From andy at petdance.com  Sun Mar  6 18:53:51 2005
From: andy at petdance.com (Andy Lester)
Date: Sun Mar  6 18:54:08 2005
Subject: [LA.pm] next time we need to give away a book...
In-Reply-To: <m3y8d0nrzt.wl_rs@pobox.com>
References: <m33bv8pjou.wl_rs@pobox.com>
	<Pine.LNX.4.44.0503061715030.31031-100000@otis.netapt.com>
	<m3y8d0nrzt.wl_rs@pobox.com>
Message-ID: <869b657b40a297a99beb5259002f9d65@petdance.com>

> And I agree!  But I thought ya'll might be amused that someone in 
> Chicago
> actually created a function for that express purpose, despite it being
> implemented in the most obvious fashion.

Acme::PM::Chicago was started when I gave a talk at Chicago.PM on "how 
to create a module for CPAN."  The entire talk was me walking through 
the process of creating a distribution, including creating Makefile.PL, 
the MANIFEST, tests, etc, etc etc.  Then, of course, I had to upload it 
to CPAN.  All this was on a big screen.

The only thing I didn't have prepared was what we'd release as code.  I 
asked the group, and they brought up the monthly random picking of a 
name from a list to do the book giveaway, so we made a function out of 
it.  We added a couple of other functions, too.  The whole module was 
one big in-joke.

It was not long after that talk that I created Module::Starter.

Oh, and hi everyone!

xoxo,
Andy

-- 
Andy Lester => andy@petdance.com => www.petdance.com => AIM:petdance

From fred.kleindenst at citigroup.com  Mon Mar  7 09:39:58 2005
From: fred.kleindenst at citigroup.com (Kleindenst, Fred)
Date: Mon Mar  7 09:42:06 2005
Subject: [LA.pm] next time we need to give away a book...
Message-ID: <1E6014B28FEE6F43A5F49C6628B7B85E4F6533@EXNJMB11.nam.nsroot.net>

Ofer,

That's a cool link, and very appropo to our last LA.pm meeting.  Now your task, if you choose to accept it grasshopper, is to have this running on your PDA for the next meeting ....

Cheers

--Fred

> -----Original Message-----
> From: losangeles-pm-bounces@pm.org
> [mailto:losangeles-pm-bounces@pm.org]On Behalf Of Ofer Nave
> Sent: Sunday, March 06, 2005 9:16 AM
> To: losangeles-pm@pm.org
> Subject: [LA.pm] next time we need to give away a book...
> 
> 
> 
> http://search.cpan.org/~petdance/Acme-PM-Chicago-0.01/Chicago.pm
> 
> >From the SYNOPSIS:
> 
> "We here in Chicago.PM have the monthly problem of how to 
> give away books. 
> Names from a hat? Bizarre statistical extraction from 
> Lembark? Who can 
> tell? We decided once and for all to have ONE WAY to do it."
> 
> -ofer
> 
> _______________________________________________
> Losangeles-pm mailing list
> Losangeles-pm@pm.org
> http://mail.pm.org/mailman/listinfo/losangeles-pm
> 
From ofer at netapt.com  Mon Mar  7 10:24:07 2005
From: ofer at netapt.com (Ofer Nave)
Date: Mon Mar  7 10:25:21 2005
Subject: [LA.pm] next time we need to give away a book...
In-Reply-To: <1E6014B28FEE6F43A5F49C6628B7B85E4F6533@EXNJMB11.nam.nsroot.net>
Message-ID: <Pine.LNX.4.44.0503071022360.27559-100000@otis.netapt.com>


I don't own a PDA.  I do have a laptop, though.

We could publish Acme::PM::LA, but it's so frivolous.  :)

Tell you what.  I'll make sure to bring at least two quarters that are 
hot-swappable, in case the first fails.

-ofer

On Mon, 7 Mar 2005, Kleindenst, Fred wrote:

> Ofer,
> 
> That's a cool link, and very appropo to our last LA.pm meeting.  Now your task, if you choose to accept it grasshopper, is to have this running on your PDA for the next meeting ....
> 
> Cheers
> 
> --Fred
> 
> > -----Original Message-----
> > From: losangeles-pm-bounces@pm.org
> > [mailto:losangeles-pm-bounces@pm.org]On Behalf Of Ofer Nave
> > Sent: Sunday, March 06, 2005 9:16 AM
> > To: losangeles-pm@pm.org
> > Subject: [LA.pm] next time we need to give away a book...
> > 
> > 
> > 
> > http://search.cpan.org/~petdance/Acme-PM-Chicago-0.01/Chicago.pm
> > 
> > >From the SYNOPSIS:
> > 
> > "We here in Chicago.PM have the monthly problem of how to 
> > give away books. 
> > Names from a hat? Bizarre statistical extraction from 
> > Lembark? Who can 
> > tell? We decided once and for all to have ONE WAY to do it."
> > 
> > -ofer
> > 
> > _______________________________________________
> > Losangeles-pm mailing list
> > Losangeles-pm@pm.org
> > http://mail.pm.org/mailman/listinfo/losangeles-pm
> > 
> 

From ben_tilly at operamail.com  Mon Mar  7 11:39:51 2005
From: ben_tilly at operamail.com (Benjamin J. Tilly )
Date: Mon Mar  7 11:40:01 2005
Subject: [LA.pm] next time we need to give away a book...
Message-ID: <20050307193951.3E64B3AA515@ws5-8.us4.outblaze.com>

"Ofer Nave" <ofer@netapt.com> wrote:
> 
> 
> I don't own a PDA.  I do have a laptop, though.
> 
> We could publish Acme::PM::LA, but it's so frivolous.  :)

You mean you don't want to show people how we choose winners?

  sub choose_winner {
    my $total = 0;
    $total += rand(@_) for @_;
    return $_[ $total%@_ ];
  }

> Tell you what.  I'll make sure to bring at least two quarters that are
> hot-swappable, in case the first fails.

That's actually a fun math problem.  Suppose that you have an even
number of people who you want to divide perfectly randomly into
even teams by having people toss quarters.  You want an algorithm
that is both simple to use in practice and is fairly quick about
choosing the teams.  What might a good strategy be?

(With 10 people, there is a simple strategy that has nearly even
odds of achieving the division in one round of coin tosses, and
extremely good odds of finishing it in 2 rounds.)

Cheers,
Ben
From david at manicelement.com  Mon Mar  7 14:43:23 2005
From: david at manicelement.com (David Crean)
Date: Mon Mar  7 14:43:48 2005
Subject: [LA.pm] udp.pl
Message-ID: <422CD90B.2060506@manicelement.com>

Hey,

I had sent a message about a perl spike on a cpu.  Appearently, this is 
due to a worm that takes advantage of a vulnerability in phpbb, attached 
to a file called udp.pl.  Anyone have any experience with it?

David
From ben_tilly at operamail.com  Mon Mar  7 15:27:50 2005
From: ben_tilly at operamail.com (Benjamin J. Tilly )
Date: Mon Mar  7 15:27:59 2005
Subject: [LA.pm] udp.pl
Message-ID: <20050307232750.F1B073AA515@ws5-8.us4.outblaze.com>

"David Crean" <david@manicelement.com> wrote:
> 
> Hey,
> 
> I had sent a message about a perl spike on a cpu.  Appearently, 
> this is due to a worm that takes advantage of a vulnerability in 
> phpbb, attached to a file called udp.pl.  Anyone have any 
> experience with it?

I don't, but if you google for it you'll find out more.

I'd suggest (based on what I found quickly) that you should
upgrade to http://www.phpbb.com/phpBB/viewtopic.php?t=240636.
While doing that, you should also review all other PHP code
that you have.  PHP as a design philosophy has focussed on
convenience more than security, and many PHP programmers
aren't aware of what they are getting wrong.  The result is
that many PHP scripts have quality similar to what people
used to complain about with Perl CGIs back in Matt Wright's
heyday.

Cheers,
Ben
From tbrannon at valueclick.com  Mon Mar  7 15:57:08 2005
From: tbrannon at valueclick.com (Terrence Brannon)
Date: Mon Mar  7 15:57:04 2005
Subject: [LA.pm] udp.pl
Message-ID: <6225C73BA2E30E46BC43A061878B21E008A5AA85@vchqex01.wl.corp.valueclick.com>

 

> -----Original Message-----
> From: losangeles-pm-bounces@pm.org 
> [mailto:losangeles-pm-bounces@pm.org] On Behalf Of Benjamin J. Tilly 
> The result is 
> that many PHP scripts have quality similar to what people 
> used to complain about with Perl CGIs back in Matt Wright's heyday.

Is there any info on the security of modern 
CGI.pm versus mod_perl applications?

From ben_tilly at operamail.com  Mon Mar  7 16:40:42 2005
From: ben_tilly at operamail.com (Benjamin J. Tilly )
Date: Mon Mar  7 16:48:50 2005
Subject: [LA.pm] udp.pl
Message-ID: <20050308004042.EE1BC3AA517@ws5-8.us4.outblaze.com>

"Terrence Brannon" <tbrannon@valueclick.com> wrote:
> 
> 
> 
> > -----Original Message-----
> > From: losangeles-pm-bounces@pm.org 
> > [mailto:losangeles-pm-bounces@pm.org] On Behalf Of Benjamin J. 
> > Tilly The result is that many PHP scripts have quality similar to 
> > what people used to complain about with Perl CGIs back in Matt 
> > Wright's heyday.
> 
> Is there any info on the security of modern
> CGI.pm versus mod_perl applications?

I have no concrete data.  However I'd strongly suspect that
the platform is less important here than what people are
trying to do and how good the programmers are.

For most basic applications, I'd suspect that the quality of
random free scripts remains about what it was.  (ie terrible)
There are, however, higher quality scripts available (see the
NMS project for some) for those who look.

In theory CGI.pm is going to be more secure than mod_perl.
CGI.pm avoids possible security holes due to stale data (which
might randomly crop up because people wrote "my $foo if $bar"
without realizing that it creates a sometimes static) and
introduces none of its own.

However in practice I'd guess that people writing mod_perl
usually know more than ones using CGI.pm so quality should be
higher.  Of course mod_perl people may be doing something more
complex (they're more likely to be using databases etc), so it
could work out either way.

And, as I said, I don't know of any concrete data on the topic.

Cheers,
Ben
From pete at peterbenjamin.com  Mon Mar  7 22:09:27 2005
From: pete at peterbenjamin.com (Peter Benjamin)
Date: Mon Mar  7 22:16:21 2005
Subject: [LA.pm] udp.pl
In-Reply-To: <422CD90B.2060506@manicelement.com>
References: <422CD90B.2060506@manicelement.com>
Message-ID: <6.1.2.0.2.20050307220823.0621a160@peterbenjamin.com>

At 02:43 PM 3/7/2005, David Crean wrote:
>Hey,
>
>I had sent a message about a perl spike on a cpu.  Appearently, this is due to a worm that takes advantage of a vulnerability in phpbb, attached to a file called udp.pl.  Anyone have any experience with it?


I've heard it puts root back doors in.
My advice is to research how to recovery.
What I've heard on other lists is to format
the hard drive and reinstall to eliminate
all back doors.  If phpbb was not fully
chrooted...

From glim at mycybernet.net  Sat Mar 19 11:37:00 2005
From: glim at mycybernet.net (glim@mycybernet.net)
Date: Sat Mar 19 12:04:51 2005
Subject: [LA.pm] Yet Another Perl Conference, North America,
	2005 Registration now open
Message-ID: <m1DCkCW-000YmrC@mail.cybrnet.net>

    ---------->
    Yet Another Perl Conference, North America, 2005 Registration now
    open.

    Conference dates:  Monday - Wednesday 27 - 29 June 2005

    Location:  89 Chestnut Street         http://89chestnut.com/
               University of Toronto
               Toronto, Ontario, Canada

    Info at: http://yapc.org/America

    Direct registration: 
http://donate.perlfoundation.org/index.pl?node=registrant%20info&conference_id=423

    Full registration fee $85 (USD)

    Book now for great deals on accommodations and ensure a space for
    yourself.

    Speaking slots are still open.  If you would like to present at
    YAPC::NA 2005, see: http://yapc.org/America/cfp-2005.shtml

    Details of this announcement:
       http://yapc.org/America/registration-announcement-2005.txt
    <----------

More Details
============

Registration for YAPC::NA (Yet Another Perl Conference, North America)
2005 in Toronto, Ontario, Canada is now open.

The conference registration price is USD$85.  This price includes
admission to all aspects of the conference, respectable amounts of
catering, several activities and a few conference goodies.

The YAPC North America 2005 conference features...

     * Fantastic speakers

         +  most are the core creators of the technology on which
            they present

         +  many are professional IT authors, trainers and conference
            speakers

     * An excellent learning opportunity

     * A chance to meet Perl professionals from all over North America
       and the world

         +  YAPC attendees tend to be very involved in Perl and so are
            another great way to learn more about what the language
            has to offer beyond just what the speakers have to say

     * Extra-curricular / after hours activities

     * A great location in downtown Toronto

All this, and the price is more than an order of magnitude cheaper
than what commercial conferences can offer.  This is because YAPC is a
100% volunteer effort, both from its organizers and its speakers.
Quality is *not* sacrificed to achieve this stunning level of
affordability.

YAPC provides the best value-for-dollar in IT conferences.  And it's a
ton of fun, too.

The dates of the conference are Monday - Wednesday 27-29 June
2005. The location is 89 Chestnut Street in downtown Toronto, Ontario,
Canada. (Note that a different date block was previously announced;
we moved the conference date to accommodate venue availability.)

http://89chestnut.com/  -- a facility within the University of Toronto

If you are at all interested in attending the conference...

                              Book now!

                              Book now!

                              Book now!

We have room for about 400 attendees and we hope to sell out well
in advance of the late June conference date.  However, the critical
matter is that of hotels.

The YAPC::NA 2005 organizers have made group arrangements with several
facilities around the city to provide _excellent_ quality
accommodations in _very_ convenient locations at _terrific_ prices for
the _full_ capacity of conference attendees (around 400 people).

(Finding, booking and paying accommodations is the responsibility of
the attendees, but we will provide you with a list of the hotels and
university dorms to try first based on our group arrangement with them
when you register for the conference.  Also, see the web site at
http://yapc.org/America/accommodations-2005.shtml.  More details will be
up shortly.  The dorm option will be approx. C$55/night, the hotel
options will be more like C$90/night, and for slightly different prices
there will be options for putting more than 1 person in a room.  Exact
details and how to book will be emailed directly to people who have
registered for the conference as soon as they become available.)

*The catch is -- book now!!*  The group reservations will expire in
early May, at which point in time the group rates will mostly still
apply, but the rooms will be given out on an "availability basis".
Which means that someone else outside of the YAPC group can book the
rooms as well.

Make no mistake -- the rooms *will* be sold.  Toronto is a very active
conference city in the summer and there will be _no_ guarantee of
vacancies either at the facilities we made arrangements with or
anywhere else in the city if you leave it to within 6 weeks of the
conference date.  So, if you want to save yourself the likely-fruitless
headache of scrambling around looking for accommodations at the last
minute,

                              Book now!

                              Book now!

                              Book now!

Have any questions?  Email na-help@yapc.org for more details.

Additionally, we are still welcoming submissions for proposals via:

       http://yapc.org/America/cfp-2005.shtml

The close of the call-for-papers is April 18, 2005 at 11:59 pm
(Toronto time).

If you have any questions regarding the call-for-papers or speaking at
YAPC::NA 2005 please email na-author@yapc.org

We would love to hear from potential sponsors. Please contact the
organizers at na-sponsor@yapc.org to learn about the benefits of
sponsorship.

From e at arix.com  Sat Mar 19 14:01:27 2005
From: e at arix.com (Erick Calder)
Date: Sat Mar 19 14:02:09 2005
Subject: [LA.pm] back in LA
In-Reply-To: <m3psz8c2r9.wl_rs@pobox.com>
Message-ID: <BE61E137.8FCC%e@arix.com>

hei everyone!

I missed the last get-together.  I was in South America for vacation!
anyway, I've slapped together a page with pix from the trip that I wanted to
share.  please feel free to share your thoughts on it.

    http://www.arix.com/ec/reisen/?sa

- erick


From stigliz at gmail.com  Thu Mar 24 14:25:27 2005
From: stigliz at gmail.com (Amedeo Guffanti)
Date: Thu Mar 24 14:25:35 2005
Subject: [LA.pm] Reseach on Open Source Developers
Message-ID: <a2f9676f050324142531261b89@mail.gmail.com>

Hi,
I'm Amedeo Guffanti,
a 22 years old  Italian student at Bocconi university in Milan,

I' m doing a research to write a work about Open Source Movement, in
particular, about the developers.

I try to collect the opinions of developers like you.

My little poll is at this page :

http://www.alberocavo.com/OSSprojects.asp

It takes less then 4 minutes.

I hope the Open Source Communities will give me a help for my research.

I apologize for taking your time and for my English that I hope it's
understandable ^^

Sincerly,
Amedeo Guffanti
From allenday at ucla.edu  Fri Mar 25 15:26:31 2005
From: allenday at ucla.edu (Allen Day)
Date: Fri Mar 25 15:26:42 2005
Subject: [LA.pm] Reseach on Open Source Developers
In-Reply-To: <a2f9676f050324142531261b89@mail.gmail.com>
References: <a2f9676f050324142531261b89@mail.gmail.com>
Message-ID: <Pine.LNX.4.58.0503251525350.26194@sumo.ctrl.ucla.edu>

completed.  i'd like to see some response distribution histograms when
you're done.

-allen


On Thu, 24 Mar 2005, Amedeo Guffanti wrote:

> Hi,
> I'm Amedeo Guffanti,
> a 22 years old  Italian student at Bocconi university in Milan,
> 
> I' m doing a research to write a work about Open Source Movement, in
> particular, about the developers.
> 
> I try to collect the opinions of developers like you.
> 
> My little poll is at this page :
> 
> http://www.alberocavo.com/OSSprojects.asp
> 
> It takes less then 4 minutes.
> 
> I hope the Open Source Communities will give me a help for my research.
> 
> I apologize for taking your time and for my English that I hope it's
> understandable ^^
> 
> Sincerly,
> Amedeo Guffanti
> _______________________________________________
> Losangeles-pm mailing list
> Losangeles-pm@pm.org
> http://mail.pm.org/mailman/listinfo/losangeles-pm
>