Name: Anonymous 2015-04-28 1:22
http://joyful.com/blog/2015-04-20-ssh-darcs-hub-vulnerability.html
Well typed programs don't go wrong!
Well typed programs don't go wrong!
Public announcement on 4/20Keep on blazing it!
the haskell “ssh” library used by darcs hub does not check for a valid signature on the public key during authentication. This means it was possible to authenticate as any other ssh user if you knew their public key.
main = putStrLn . show $ 2 + 3
You seem to think that because someone can fail to use a tool correctlyBut the tool wasn't used incorrectly in this case. The tool was used correctly, but the tool was inadequate. No one in the thread said type systems should be abandoned. Just that Haskell's doesn't come near what its supporters profecize it to be.
But it's the sort of tool that's there to keep you from jamming your elbow up your nose.No, it's not.
But the tool wasn't used incorrectly in this case.I can't say it was used incorrectly because I am not sure it was used at all. I can say it was not used correctly.
Just that Haskell's doesn't come near what its supporters profecize it to be.
You know now what it feels like to be bashed on public forums just for your choice of language!It ith not a choithe! We were born thith way!
if null xs then tail xs else xs
tail []
doesn’t go wrong – well-typed programs don’t go wrong – so we’d better pick a different word for the way they do go.