Comment

Comment by Nullence

While I like the layout and having a good UI for managing virtual machines this project lacks any security features at all.

Most notably, if you just set the auth cookie to "authenticated" you will have access to spin up as many VMs you like on any flint instance in the wild (08-09-2025).

As such this is an incredibly unsafe project to use. Probably because of the vibe coding :(

parent Nullence 1 year ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton