Hacker News Reader

Speaking about meteor, can someone tell me if there is any way to protect the database from the user fiddling with a javascript console? In all screencasts they show how powerful it is by changing the DB with some mongodb-like commands on Chrome Developer JS Console, well, I don't want my users doing that. Anyone knows better?

View on HN

I asked the same question on #meteor. Apparently security is coming in the next 2 months.

But currently... it's pretty insecure.

Maybe I'm being overly pessemistic, but projects that don't start with security as one of their primary design goals tend to not have the best security track records. Security isn't really something you can trivially bolt on at a later date.

I'm also wondering this, there's a lot of that kind of clientside frameworks lately and I've been wondering the same about them all...

Reply on news.ycombinator.com