Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yes, they do make it incredibly easy for you to do node, you know what else they do?! They make it completely insecure by default.

If you don't know what I mean by that, then you should probably go with a serverless architecture instead of whatever your company has going right now.



Can you please explain what you do mean by that? Are you talking about node/js apps being insecure by default? I guess that's a fault of the specific app framework, rather than an inherent issue with running on a server.

Our company runs services written in C# running on .NET Core in containers. It's fast, secure, and makes development simple.


It's if you're using on the server side, all packages/dependencies included and running on your nodejs-backend have full access to your network and filesystem, even if it's just a css styles library, if updated it there's no permissions stopping it from grabbing files or monitoring the network.

Instead of wrapping security layers around it ourselves with docker, selinux configs etc, it's safer to let gcp or aws filter that out for you because they're likely to have way better security.

Serverless ( there's still servers/containers ) just means that you don't touch the devops and scaling. You can still have your DB and APIs separately in order to be cost effective.

In your case your servers are not using node on the backend to run the servers thus you don't have this vulnerability.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: