Hello71

95 ms·

1. 961.▲
   by Hello71 14y ago

   Point taken. Allow me to revise my statement. "In production, one should create a specialized user to run any service." And if you have lots of money to waste, stick 'em all in separate VMs too.
2. 962.▲
   by Hello71 14y ago

   It kinda does, unless you restrict execution of nodejs to root/nodejs group anyways. It's like setting /bin/bash setuid.
3. 963.▲
   by Hello71 14y ago

   Not a good idea to hardcode the name of the "owner". Standard practice is to setuid/gid to 65535 (nobody).
4. 964.▲
   by Hello71 14y ago

   That kinda defeats the purpose of restricting ports under 1024.
5. 965.▲
   by Hello71 14y ago

   Looking at the other comments, this seems like basic CSRF to me.
6. 966.▲
   by Hello71 14y ago

   So it's basically WebCite.
7. 967.▲
   by Hello71 14y ago

   I think the example was "botnet" implying exploited consumer-level hardware not likely to have hundreds of gigabytes of free RAM that's not going to be missed.
8. 968.▲
   by Hello71 14y ago

   1. I think you need to format it as 2. numbers followed by periods. Edit: Nope, just make a new paragraph with two line breaks.
9. 969.▲
   by Hello71 14y ago

   I was sure that everyone knew about this already...
10. 970.▲
    by Hello71 14y ago

    Because they have no reason to do so.
11. 971.▲
    by Hello71 14y ago

    Where's creat?
12. 972.▲
    by Hello71 14y ago

    Pretty sure that'll replace the contents of the document with "[object Object]".
13. 973.▲
    by Hello71 14y ago

    Was wondering where I saw the name feross before...