Code in Response to “The Trouble with Symlinks.”

Hacker News

See: https://news.ycombinator.com/item?id=32190032 This was written in about the past hour or so; it has no documentation or test cases yet. Think twice before relying on it in production. The idea is that we can perform a detailed validation of the trustworthiness of an absolute or relative path, as a simple function that can be reused anywhere: I call this function safepath_check. A trustworthy path is one whose meaning cannot be changed by a third party: another user who isn't root. The path is therefore immune, for instance, to TOCtoTOU security problems, like the insertion of a symbolic link or other tampering. A trustworthy path is allowed to contain symbolic links. Symbolic links can be validated to be safe. To that end, safepath_check performs its own symlink resolution, to ensure that every link resolution step substitutes path material that is trustworthy.

Visit product View on Hacker NewsJul 23, 2022

Share card

Actual performance

5points

4comments

Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →

Product HuntOn track for Day 1 leaderboard · Strong signals: user, new, code · Missing: mac, agents, macos

58%58% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

Hacker NewsStrong engagement from HN community · Strong signals: ide, io · Missing: https docs, excited, just released

53%53% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

Indie HackersFits the IH revenue-focused audience · Missing: supports, reddit linkedin, podcasting

50%50% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

TrustMRRLess likely to generate early MRR · Missing: mobile apps, ios, personal

45%45% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive

35%35% predicted probability of success on AppSumo, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue

14%14% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

3%3% predicted probability of success on BetaList, based on ML models trained on real launch data.

Incorrect prediction on native model

Similar products

The average HTTP response code55%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

The average HTTP response code

Hacker News1

My response to "Why isn't your service free?"72%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

My response to "Why isn't your service free?"

Hacker News14

Kobozi33%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Audience Response System

Indie Hackerscommitment-side-project

QR Potato41%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Quick response code manager

Product Hunt+15

Vendorful AI Response Assistant29%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Cut RFP & infosec questionnaire response time by 90% with AI

Indie Hackerscommitment-full-time

Predicting Population Migration in Response to Crisis in Yemen27%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Predicting Population Migration in Response to Crisis in Yemen

Hacker News2

Slashing response time for WordPress29%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Slashing response time for WordPress

Hacker News1

Incident Response on Steroids56%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Incident Response on Steroids

Hacker News1

SetInterval as a Service: Response to Chrome 8837%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

SetInterval as a Service: Response to Chrome 88

Hacker News1

ShiLLM – An LLM that inserts ads into every response39%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

ShiLLM – An LLM that inserts ads into every response

Hacker News2

Browse all products Analyze your launch