Show HN: OpenS3, a simple storage server

Re:Show HN: OpenS3, a simple storage server by tedchs on Saturday April 21, 2012 @04:36PM (#3872932)

First, a warning -- I read through the Ruby source code for this project and it does zero input validation and is subject to many glaring security vulnerabilities, including directory traversal attacks. If you run this code, be prepared to serve up your entire disk to the Internet -- read/write at that!

If you want a REST/JSON based HTTP file storage server, just run Riak. Or if you want HTTP but don't care about JSON, fire up a WebDAV server of your choice. Incidentally, both of those technologies are about as compatible with the S3 protocol as this so-called "OpenS3" project... which is to say, they're not at all.

If a 200-line Rack hack is what it takes to make HN then I need to start submitting more of the code I write...

[ Parent | on HN ]

Re:Show HN: OpenS3, a simple storage server by zadoxsis on Saturday April 21, 2012 @05:09PM (#3873009)

Hello! I appreciate your critic, but keep in mind I'm a Ruby beginner, I do this kind of things, and I feel proud of what I achieve. You made me notice the low security it has, so I'll try to fix it. Thanks!

[ Parent | on HN ]