News for hackers. Stuff that matters.

A comment on Show HN: Alien – Self-hosting with remote management (written in Rust). Parent comment

Re:Show HN: Alien – Self-hosting with remote management (wri... by alongub on Monday April 20, 2026 @01:12PM (#47837366)
It's not RCE. The commands are predefined RPCs written into the deployed code. Customers can review and approve them. Trust between the vendor and the customer is still required and Alien doesn't make it unnecessary.
[ Parent | on HN ]
Re:Show HN: Alien – Self-hosting with remote management (wri... by cassianoleal on Tuesday April 21, 2026 @04:38AM (#47846199)
It may not be arbitrary code but it's still remote code execution.

The service provider has direct access to my infrastructure. It's one supply chain attack, one vulnerability, one missed code review away from data exfiltration or remote takeover.

[ Parent | on HN ]
Re:Show HN: Alien – Self-hosting with remote management (wri... by armagnac2 on Tuesday April 21, 2026 @01:48PM (#47852045)
what better alternative do you have? It's either you go full SaaS, which means you rely 100% on the vendor, or work like 20 years ago with fully on prem. BYOC is the fine balance imo, that requires proper infra and implementation.
[ Parent | on HN ]