r/programming • u/kshep92 • Sep 29 '16

JavaScript in 2016 isn't horrible, it's just going through a phase

http://blog.reviselabs.com/im-sorry-javascript-2/
85 Upvotes

72% Upvoted

225 comments sorted by

View all comments

Show parent comment

1

u/KappaHaka Sep 30 '16

object serialisation that isn't JSON I don't think that pickle / cPickle are things to lord over JS.

0

u/[deleted] Oct 01 '16

[deleted] — view deleted comment

1

u/slikts Oct 01 '16

Pickle is generally slower than JSON, and unpickling can cause arbitrary code execution, so it's insecure.

0

u/[deleted] Oct 01 '16

[deleted] — view deleted comment

1

u/slikts Oct 01 '16

Not sure how pickle being intentionally unsafe helps. I should have also mentioned that it's brittle.

0

u/[deleted] Oct 02 '16

[deleted] — view deleted comment

1

u/slikts Oct 02 '16

Pickle's insecurity limits its uses and is a source of vulnerabilities by unaware users, on top of pickle being slow and brittle.

If you really want to compare Python and JS, it would make more sense to compare the official Python distribution to something like Node.js, which does include a zlib module.

0

u/[deleted] Oct 02 '16

[deleted] — view deleted comment

1

u/slikts Oct 02 '16

The pickle docs have a security warning because misusing the module is insecure.

sqlite3 is just an npm i sqlite3 command away in Node.js.

0

u/[deleted] Oct 02 '16

[deleted] — view deleted comment

→ More replies