I’m not a fan of Deno’s security model (2024)
6 comments · security
- Comments5
6 comments · security
Story details from Lobsters ↗ · linked article on goldstein.lol.
I’m not a fan of Deno’s security model (2024) was first seen on Lobsters · Hottest on Nov 7, 2026. Since then it has appeared in 31 checks on 2 different days. Its best position was #2 of 25, reached on Nov 8, 10:21 UTC. It is #4 right now, slipping from #3 to #4 over the last 6 checks.
Position on Lobsters · Hottest at every check (lower is better).
Best rank per day (UTC).
▲ as reported by Lobsters.
A few top-level comments from Lobsters, shortened. Read the full thread on Lobsters.
Java since its inception had similar concept of Security Manager, which was eventually deprecated and removed: https://openjdk.org/jeps/411 I think it was "broken by design" similarly to the Deno's case.
Good article; though regarding the sudo example - most people's sudo is not really secure in any way: ``` echo "alias sudo='sudo echo pwned && sudo'" >> ~/.bashrc ``` Is probably a way you can get privesc on >90% of desktop users. Not that it matters since you can access saved cookies and passwords without root anyway.
that is true, but it’s more of a general problem with everyones security-sensitive settings being stored in a writeable place. sudo could do better though, by showing you what command you are running when asking for credentials. aside: I’m *really* annoyed that `run0`, which is mostly reasonable, prints the action it…
Archived daily, weekly and monthly lists that include this entry.
Yes. As of Nov 8, 14:21 UTC it is #4, slipping from #3 to #4 over the last 6 checks.
#2 on Lobsters · Hottest, on Nov 8, 10:21 UTC. Trendoday checks this list every 30 minutes.
It was first seen on Nov 7, 2026 and has been on the list on 2 days (31 checks) since.