On: You cannot start a tweet with “D. Tusk”

[BorisMelnik]

Somewhere someone is finding a way to make this a buffer overflow. Wonder how long this will take to get fixed. I totally forgot about Twitter's in-band and SMS features until now.

[tyho → BorisMelnik]

It is likely a scala program running, no buffer overflows to be found. In a modern language, you have to be very careless to allow RCE.

[gohrt → tyho]

buffer overflow is not the only way to get a RCE.

String manipulation and 'eval' (which gives access to system APIs) is a common culprit

[Dylan16807 → gohrt]

Using eval is gratuitous carelessness. At least a buffer overflow can be a mistake.

[chc → gohrt]

Is anything like eval commonly used in Scala? That language is static as all get-out.

[eropple → chc]

I've started seeing (and occasionally using) util-eval as a configuration language for Scala, but it's generally pretty rare.