4 ms·
From the source of the app (https://github.com/cloudfuji/kandan https://github.com/cloudfuji/kandan), it seems that it doesn't check for authorization -for now-
by necrodome 14y ago
From the source of the app (https://github.com/cloudfuji/kandan https://github.com/cloudfuji/kandan), it seems that it doesn't check for authorization -for now-, so be aware that anyone can signup to your own private instance if they know your url and do nasty things like deleting channels.
- sgrove 14y agoGood point - we wanted to keep it as open as possible, and as easy to get started as possible. Hence the (literally) copy/paste instructions to get running on somewhere like Heroku, with no need to provision other services. But obscurity isn't security. We'd love to hear what people think about how this should be handled - https://github.com/cloudfuji/kandan/issues https://github.com/cloudfuji/kandan/issues