I’m not a fan of Deno’s security model (2024)
Quick read
A developer critique of Deno’s permission-based security model, explaining why its runtime prompts and command permissions are misleading and can be exploited. The post gives concrete examples of attacks and explains why allowing programs to request runtime permissions does not reliably prevent sandbox escapes.
- Terminal prompts can be forged via stdout/stderr manipulation
- Permissions by command name are ambiguous and replaceable via PATH
- Environment vars like LD_PRELOAD can bypass command-based permissions
Reactions
No reactions yet. Record a short about this link and it shows up here, in Reels and in the community feed.
Is goldstein.lol your site? Sign in to verify it and get a Verified badge, full stats and a link-back badge.
What we found on this site
- Served through
- Nginx
- Home page answered in
- 1,154 ms
- Trackers
- None found
- Ads
- None found
- RSS feed
- No
- Set up for phones
- Yes
- Real-visitor speed
- Not enough visitors for Google data
- Popularity
- Top 200,000 domain (Cloudflare)
- Google safety check
- No threats found
- Domain registered
- 2024
- Domain renews
- October 2027
Checked November 8, 2026 from the site’s own code and public records. See how the rest of the web compares in the NexURLs Internet Report.
Sites like I’m not a fan of Deno’s security model
- Cloudflare acquires Denodeno.com
This page announces the acquisition of Deno by Cloudflare. It explains the future direction of Deno and its...
- I Dislike Pull Requests (2020)medium.com
- The Problem with C++ Safety: Why “It Works” Isn’t Good Enoughmodernescpp.com
- Tencent Hy4hy.tencent.ai
- Securing the AI Harness: Security in the Agentic Lifecyclecode-maven.com
A lecture-style article about security risks introduced by the surrounding infrastructure of AI agents and how...
- DeepSeek 4.1 Flash Analysisdgt.is
This page discusses the capabilities and cost-effectiveness of DeepSeek 4.1 Flash. It highlights how this model can...
More Tech & AI finds
- Sem86: a full-system x86 emulator without hardcoded semanticsliblisa.nl
- NetBSD 11 desktop on a Raspberry Pi 4neongd.com
- Playing with the STM32MP2serd.es
- Virtualized Redox: from Virtio-FS to Cloud Hypervisor, and beyondredox-os.org
- Nspawn 3.0: A Docker-compatible Engine API for systemd-nspawn containersblog.nspawn.org
- BUGATTI BUILT A TV THAT UNFOLDS IN 45 SECONDS.youtube.com
Feeling lucky? Try the random website generator.
Where people went next
Nobody has added a next stop yet. Be the first.