Repository navigation
"try" portion of site is insecure #12
Description
So I was playing with http://dreal.github.io/try/ and realized the server on the back-end ( gauss.modck.cs.cmu.edu ) basically just exposes the ability to have clients execute arbitrary code on it... (meaning just unix shell commands, not just dReal SMT proofs)
This is not a good idea, and someone should probably lock that down....
Activity
scungao commentedon Mar 9, 2017
Thanks a lot @tylerni7 Indeed we've been very careless about this, as pretty much no one uses the machine other than for this. We'll think about what to do...