3 ms·
What sold me on coderpad.io was the README_IF_YOU_ARE_HACKING_ME file in the working directory. Contents below: Hello! Hope you are enjoying CoderPad. I've add
by epochwolf 13y ago
What sold me on coderpad.io was the README_IF_YOU_ARE_HACKING_ME file in the working directory. Contents below:
Hello! Hope you are enjoying CoderPad. I've added this file because a lot of
people have emailed me voicing security concerns. Usually these concerns are
to the tune of "programming language X lets me run Y system call."
They're not wrong, you can run any system call! Security in CoderPad happens
at the LXC sandbox layer. You are currently in an ephemeral container that
will be destroyed upon your departure. You are welcome to run any
privileged operation you can get your hands on. CoderPad is, after all,
the highest fidelity programming interview tool there is.
That said, if you do manage to uncover something like privilege escalation
or data created by other users, I want to hear about it. You can email me at
vincent@coderpad.io, and I look forward to hearing from you.