[{"data":1,"prerenderedAt":202},["ShallowReactive",2],{"project-9392345":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":35,"aspects":36,"strip":41,"post_text":43,"what":44,"said":73,"maker_in_thread":131,"shape":138,"grid":142,"attempts":163,"same_week":164,"maker_shows":34,"maker_hidden":194,"reader_version":195,"card":196},"9392345","repl.it","Embed runnable code snippets on your website","title","Show HN: Embed runnable code snippets on your website","http:\u002F\u002Famasad.me\u002F2015\u002F04\u002F09\u002Fhello-world\u002F","amasad.me","amasad",1429247199,2015,10,11,2062,2565,81,"shown","dev_tools","embeddable code runner","web_app",[24,25,26,27,28],"embed code snippets","online code runner","runnable code","repl","code sandbox","roasted",-0.125,{"positive":32,"neutral":33,"mixed":32,"critical":34},1,0,5,7,{"idea":37,"performance":38,"privacy":39},{"positive":32,"critical":33},{"positive":33,"critical":32},{"positive":33,"critical":40},4,[34,32,33,33,32,32,32,33,32,33,42],3,null,{"problem":45,"audience":51,"pricing":43,"motivation":57,"time_to_build":43,"stack":62,"openness":71,"stage":72,"team_size":71},{"value":46,"source":47,"evidence":48},"Sharing code that readers can run directly on a website","inferred",[49],{"id":50},"post",{"value":52,"source":47,"evidence":53},"Developers and teachers who publish code",[54],{"id":55,"by":11,"text":56},"9392374","One of the things that bothers me about other sites is that they're too restrictive. I want people using this to get a proper environment for testing and teaching others, and…",{"value":58,"source":59,"evidence":60},"Wants people to get a proper environment for testing and teaching, without restrictive limits","maker",[61],{"id":55,"by":11,"text":56},[63],{"value":64,"source":65,"evidence":66},"Docker containers","commenter",[67],{"id":68,"by":69,"text":70},"9396644","hamburglar","I'm not exactly sure what a root process in a docker container can do (probably depends a lot on the container configuration, plus is probably evolving as we speak, and is…","unknown","launched",{"praise":74,"objections":88,"requests":110,"questions":119,"alternatives":126},[75,82],{"value":76,"source":65,"evidence":77},"Concept praised as something GitHub should have offered",[78],{"id":79,"by":80,"text":81},"9398932","tux","Finally, this is what GitHub should have in the first place. Thank you!",{"value":83,"source":65,"evidence":84},"Front-end execution is nice and the concept is appreciated",[85],{"id":86,"by":69,"text":87},"9397361","Your root user has no password, so executing 'su' just gives you a root shell. That's pretty much it. :) You can do it by hitting my link above, running the saved code, which…",[89,103],{"value":90,"source":65,"evidence":91},"Shell execution and root access in the sandbox are a security risk",[92,96,99,102],{"id":93,"by":94,"text":95},"9392349","sarciszewski","http:\u002F\u002Frepl.it\u002FjM0 You may want to disable shell execution.",{"id":97,"by":69,"text":98},"9393102","BTW, using this trick, I managed to get root in your VM. I assume you have it logged and can see how (was hitting http:\u002F\u002Frepl.it\u002FjND\u002F13 if that helps you locate it); it wasn't…",{"id":100,"by":94,"text":101},"9395628","+1 for uid=0",{"id":68,"by":69,"text":70},{"value":104,"source":65,"evidence":105},"Environment is too permissive for running arbitrary commands",[106,107],{"id":93,"by":94,"text":95},{"id":108,"by":69,"text":109},"9392633","Here's a fun one for a ruby repl: ``` # spawn a poor man's shell from repl require 'Open3' Open3.popen3(\"\u002Fbin\u002Fsh -i\") do |stdin,stdout,stderr,wthr| loop do ready =…",[111,115],{"value":112,"source":65,"evidence":113},"Disable shell execution",[114],{"id":93,"by":94,"text":95},{"value":116,"source":65,"evidence":117},"Larger limit on saved script size",[118],{"id":86,"by":69,"text":87},[120],{"value":121,"source":59,"evidence":122},"What exactly was the privilege escalation and PoC",[123],{"id":124,"by":11,"text":125},"9397094","I am. Thanks for letting me know. Can you provide some more details about how you escalated privileges and the PoC?",[127],{"value":128,"source":65,"evidence":129},"GitHub",[130],{"id":79,"by":80,"text":81},{"comments":42,"answered":33,"key":132},[133,134,137],{"id":55,"text":56},{"id":135,"text":136},"9395702","Even if you get root, what can you really do?",{"id":124,"text":125},{"commenters":40,"max_depth":139,"maker_replies":42,"first_comment_mins":140,"lifespan_hours":141},9,2,29,[143,145,147,149,152,154,155,156,158,159,161],[79,33,34,144,80,33],"project\u002Fpositive\u002Fidea",[93,32,32,146,94,33],"project\u002Fcritical\u002Fperformance",[55,32,33,148,11,32],"maker\u002Fneutral\u002Fdesign",[150,32,33,151,94,33],"9392421","commenter\u002Fneutral\u002Fnone",[108,32,32,153,69,33],"project\u002Fcritical\u002Fprivacy",[97,32,32,153,69,33],[100,32,32,153,94,33],[135,32,33,157,11,32],"commenter\u002Fneutral\u002Fprivacy",[68,32,32,153,69,33],[124,32,33,160,11,32],"maker\u002Fneutral\u002Fprivacy",[86,32,42,162,69,33],"project\u002Fmixed\u002Fprivacy",[],[165,170,175,180,184,189],{"id":166,"name":167,"points":168,"category":169},"9386004","ACUMAN",430,"ai",{"id":171,"name":172,"points":173,"category":174},"9410452","Kubist",231,"creative",{"id":176,"name":177,"points":178,"category":179},"9413239","Infinite Monkeys",93,"learning_science",{"id":181,"name":182,"points":183,"category":20},"9414449","Theme Creator",91,{"id":185,"name":186,"points":187,"category":188},"9408208","Linkurious",86,"data",{"id":190,"name":191,"points":192,"category":193},"9420003","Credstash",69,"infrastructure",false,"v2",{"id":197,"name":5,"line":6,"ai":194,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":198,"top":18,"kw":199,"maker":11,"domain":10,"tier":19,"attempts":33,"strip":200,"url":9,"mix":201,"praise":76,"objection":90,"sub":21},9392345,-0.12,[24,25,26,27,28],"51001110103",[32,33,32,34],1794036530452]