Re:Show HN: OpenS3, a simple storage server
by tedchs on Saturday April 21, 2012 @04:36PM
(#3872932)
First, a warning -- I read through the Ruby source code for this project and it does zero input validation and is subject to many glaring security vulnerabilities, including directory traversal attacks. If you run this code, be prepared to serve up your entire disk to the Internet -- read/write at that!
If you want a REST/JSON based HTTP file storage server, just run Riak. Or if you want HTTP but don't care about JSON, fire up a WebDAV server of your choice. Incidentally, both of those technologies are about as compatible with the S3 protocol as this so-called "OpenS3" project... which is to say, they're not at all.
If a 200-line Rack hack is what it takes to make HN then I need to start submitting more of the code I write...
Re:Show HN: OpenS3, a simple storage server
by zadoxsis on Saturday April 21, 2012 @05:09PM
(#3873009)
Hello! I appreciate your critic, but keep in mind I'm a Ruby beginner, I do this kind of things, and I feel proud of what I achieve. You made me notice the low security it has, so I'll try to fix it. Thanks!
Re:Show HN: OpenS3, a simple storage server
by zadoxsis on Saturday April 21, 2012 @12:28PM
(#3872162)
Hello! It would be cool to have a C implementation, but I don't know C, so I couldn't do it. It'd be nice if someone made a C implementation! I'd push it on the main repo under the C branch
If you want a REST/JSON based HTTP file storage server, just run Riak. Or if you want HTTP but don't care about JSON, fire up a WebDAV server of your choice. Incidentally, both of those technologies are about as compatible with the S3 protocol as this so-called "OpenS3" project... which is to say, they're not at all.
If a 200-line Rack hack is what it takes to make HN then I need to start submitting more of the code I write...
Could be useful for testing or home-grown S3 network. Ie. put that in front of a bunch of Riak-backed servers.
I love Ruby, but do you have any plans for a C implementation?
It would allow binding to a lot of other languages.