On 20/02/2014, at 3:08 PM, srean wrote:

> 
> But my favourite option is to provide the UX (haha I can learn
> new jargon too) in a web browser and do the split the work
> between the web browser and the Felix webserver.
> 
> This will eventually allow you to do everything (including edit code,
> run programs, etc) using your browser.
> 
> So the user fills forms, pushes buttons, selects menu etc and those get 
> translated into some GET/PUT/POST request, which then get interpreted by a 
> Felix web application that then generate the required files.
> 
> Is that the idea ?

Something like that.

> Seems rather complicated.

IDE's always are.

> 
> It might be my bias showing. Never quite liked the idea of Felix installation 
> possibly starting services with root credentials.

Who said it had root credentials?

It has whatever permissions you give it, and goes through whatever
firewalls you put in place, and it only provides services it's configured
to provide.

The current flx_web only does get. It can get anything it has permission
to see on the file system. It can't do PUT or POST or whatever.

At the moment. Rest assured such features would be supported by a plugin
you don't have to load.

And probably the way to do this is put a request down and let a daemon
do the work. If you don't run the daemon, nothing happens :)

> That level of trust I would give only to the distribution packager because it 
> gets audited by several pairs of eyes. I dont want a simple screw up to lead 
> to /etc/shadow become world readable, or even /etc/passwd. Passwords are 
> encrypted, but in the days of the GPU that doesnt count for much, you dont 
> have to be NSA to break them.

http://felix-lang.org/$etc/passwd

But then, it's just a slice with non-critical stuff on it. If I didn't want 
that visible
I'd just start the webserver with an account that couldn't see it.

Security isn't the webservers problem. Servers that try to provide it
are, in my not very knowledgable opinion, wrong.

--
john skaller
skal...@users.sourceforge.net
http://felix-lang.org




------------------------------------------------------------------------------
Managing the Performance of Cloud-Based Applications
Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
Read the Whitepaper.
http://pubads.g.doubleclick.net/gampad/clk?id=121054471&iu=/4140/ostg.clktrk
_______________________________________________
Felix-language mailing list
Felix-language@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/felix-language

Reply via email to