joernchen 
.
@joern,
What could possibly go wrong?
![$ python -c 'import yaml;y = yaml.safe_load(open("lol.yaml"));print(y["A"])'
Aaaaah
$ ruby -ryaml -e 'x = YAML.safe_load(File.read("lol.yaml"));puts x["A"]'
LOL!
$](https://threatactor.club/fileserver/016C9XGNWH2G8F4WAXXE00JYE9/attachment/original/01F5PYQBM7RZ2B8KA51W9RHYHW.png)
joernchen
.
@joern,
Sandor Szücs
.
@sszuecs, @hachyderm.io
@joern for your entertainment: at kubecon there was a presentation that told that $big tech company used erb templates in their ci/cd pipeline and later they figured out that people started to download random artifacts at deployment. What could possibly go wrong with erb in a language that supports open classes and all kinds of eval?
postmodern
.
@postmodern, @infosec.exchange
@joern gotta love the subtle differences in YAML implementations...
zhenech
.
@zhenech, @chaos.social
@joern
A: Aaaah
A: LOL
Or something smarter?
joernchen
.
@joern,
@zhenech yes