Re:Web search 30M rows sub-second, cheaply
by jtchang on Sunday November 22, 2015 @03:09PM
(#10611280)
I recommend elasticsearch as well. Just make sure to firewall it off and be careful opening it up. Elasticsearch a few versions back had a remote exploit.
[ Parent
| on HN ]
Re:Web search 30M rows sub-second, cheaply
by GlennS on Sunday November 22, 2015 @05:38PM
(#10611798)
In particular, ElasticSearch offers the possibility to include snippets of scripts from a number of languages (e.g. Groovy) in your search. If you do so, the file-access capability of those languages remains available.
I'd be surprised if it's an issue these days, because:
1. It's disabled by default, and has been for a while.
2. If you do turn it on, the config options let you be more specific about where those scripts are allowed to come from.