News for hackers. Stuff that matters.

A comment on Zulip Server 1.6 released. Parent comment

Re:Zulip Server 1.6 released by donalhunt on Thursday June 08, 2017 @07:50AM (#14513438)
concerns stemmed from the various mentions of everything being in /root which just seems like plain bad security practice.

however a cursory review of the codebase indicates that most of the services run as the zulip user and authentication uses certificates rather than passwords.

[ Parent | on HN ]
Re:Zulip Server 1.6 released by aero31aero on Saturday June 10, 2017 @01:36PM (#14528252)
It might not have been obvious, but for installation, you should use a dedicated machine or virtual machine.

That would mean your concerns regarding /root would be solved automatically.

[ Parent | on HN ]