4 ms·
What is the state of the art concerning security of Jupyter? As it provides in essence a remote shell it's vulnerable to local privilege escalation. Some peopl
by zeptomu 9y ago
What is the state of the art concerning security of Jupyter? As it provides in essence a remote shell it's vulnerable to local privilege escalation.
Some people "sandbox" it in Docker (and this is controversial AFAIK), but although I like the notebook UI, I don't want to give people a "native" shell just to do some data exploration.
- blitzd 9y agoMost recentlyv they generate a token on startup, which you need to interact with anything. It's fairly seamless on a client computer as the browser that is launched will get that token added automatically.