>>5
Obviously this thing is protected, dumbass
How it works
Code execution is handled by a supervisor based on geordi. The strategy is to run everything under ptrace, with many system calls disallowed or ignored. Compilers and final executables are both executed in a chroot jail, with strict resource limits.
Paranoia
When your app is remote code execution, you have to expect security problems. Rather than rely on just the chroot and ptrace supervisor, I've taken some additional precautions:
* The supervisor processes run on virtual machines, which are firewalled such that they are incapable of making outgoing connections.
* The machines that run the virtual machines are also heavily firewalled, and restored from their source images periodically.