Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Just wondering about how you are doing or going to do your sandboxing for languages like c, c++, etc. If you are running arbitrary code from the user on the server, it could be risky I would imagine, so I am wondering what steps you take to make sure the user won't do anything nasty?


I would be pretty interested in this as well. I imagine that they only have a loose idea at this point, if at all. If the list of "coming soon languages" is any indication of priority, c and c++ are at the bottom of the pack.


Great questions guys - we use locked-down language sandboxes on our own servers right now (github.com/codewars) for JS and Ruby. Then we're developing a Docker/LXC based server sandbox that will allow us to safely run each code submission in any language in its own container... Another OSS option out there is: http://eval.so/


Also take a look at ZeroVM: http://zerovm.org/




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: