4 ms·

Does each session run in an isolated container? Because I wonder, what's stopping an attacker from exhausting system resources, messing with other users stuff,

• cygned 9y ago
  Ah yeah, the fork bomb.
  • cyphar 9y ago
    Modern kernels provide the pids cgroup, which specifically protects against forkbombs. Most container runtimes support it as well.
• wsxiaoys 9y ago
  Yes it's a cloud function, an isolated docker container running node.js