123 reputation
5
bio website hannover.pm
location Germany
age 29
visits member for 1 year, 6 months
seen Jan 27 at 22:32

I'm a software developer working mostly in with the occasional , , and thrown in. I also do a lot of in Perl. I'm also active in the German Perl community.

Events:


May
29
awarded  Autobiographer
Mar
18
awarded  Scholar
Mar
18
accepted Perl CPAN modules in a PCI-DSS environment
Feb
28
comment Perl CPAN modules in a PCI-DSS environment
I think it is not really the works as described part that they are worried about, but rather the got more than we asked for part. They are saying there could be malicious code in there. Personally I think it is more likely that the code might contain flaws regarding security-issues. The machines we are talking about are all hosting either an ecommerce app that receives the cc data, or a CRM. I should have put that in the question... will do that shotly.
Feb
27
awarded  Editor
Feb
27
revised Perl CPAN modules in a PCI-DSS environment
added 198 characters in body
Feb
27
comment Perl CPAN modules in a PCI-DSS environment
Thank you for sharing this.
Feb
27
comment Perl CPAN modules in a PCI-DSS environment
Thank you for this argumentation. Could you please explain the difference between evaluate and audit in this context? I'm not sure I'm grasping the full meaning of these and the machine-translated versions of the PCI docs is not very usefull either.
Feb
27
awarded  Student
Feb
27
asked Perl CPAN modules in a PCI-DSS environment
Feb
27
comment Tools for analyzing Perl 5 code?
Perl::Critic mostly deals with the way you write your code. A huge legacy app would fail this miserably. There are IDEs like Komodo that have Critic support built-in, like syntax checking. it will squiggle things it deems wrong, depending on its configuration. But many of the default rules aren't very security-relevant. It's more a question of coding style really. A typical application would be to have a standard set of rules and let your git/svn check against these in a pre-commit hook.
Feb
27
answered Need help decoding suspicious Perl .cgi files
Feb
27
awarded  Supporter