3 ms·
A question about ngrok: If ngrok is exposing a local server to the internet, does it also open an attack surface to vulnerabilities on my machine?
by banku_brougham 9y ago
A question about ngrok:
If ngrok is exposing a local server to the internet, does it also open an attack surface to vulnerabilities on my machine?
- kevin_b_er 9y agoYes. If Flask has any insecurities, you've just exposed it to the internet and any rights Flask has (likely your local user account), plus any local privilege escalation.
- mosessoh 9y agoI definitely wouldn't start sharing the URL around. But this isn't the end goal. The end goal is to host your server code on AWS Lambda and use the endpoint that provides. ngrok's exposing of a local server just makes it easier for you to develop more quickly. Otherwise, you'd have to deploy any changes to Lambda, hit your bot's endpoint, and then check the cloud logs for any bugs. I was doing this for awhile - it really slows down development. I'm writing another post on AWS Lambda and Zappa next - hope that's useful!