Hacker News Reader

Is there a description of the sandboxing and watchdogging performed that we can read?

Are said components open source?

I cannot find this information about SPOJ. It is a black box.

Unfortunatelly for the readers it is closed-source, and part of the security model is obscurity. The core service has been developed for http://spoj.pl - a bit ancient-looking repository of algorithmic problems.

Security by obscurity is not security at all. You should seriously consider opening up the source.

As my great aunt Ada used to say, "more eyeballs are better than your eyeballs."

yes, properly sandboxing all of those languages would be quite a feat, amirite?

letting lots of people execute arbitrary code in lots of languages on your servers seems like a huge "what could go wrong here?" from a security perspective.

Actually if you can do it properly for C using off-the-shelf gcc the rest follows - PHP or Java are on a completely different threat level.

Reply on news.ycombinator.com