3 ms·
> They all have permission to upload your entire documents folder to the internet They do not need to, and unlike "webapps" there isn't a remote server that ca
by dependenttypes 6y ago
> They all have permission to upload your entire documents folder to the internet
They do not need to, and unlike "webapps" there isn't a remote server that can change the code that you are running at any moment.
- gruez 6y agoYour response entirely fails to address the parent's concern about security. It's like responding to a RCE in your backend with "yeah it's there but we'll trust the users to not use it"
- dependenttypes 6y agoI do not understand your example. It would not be the user triggering the RCE but rather a 3rd party. In addition I do not see how it fails to address their concern.