There is no Magic: Write your own HTTP server, and then stop
summary
Shows how to write a minimal Ruby TCP echo server and a tiny HTTP server using the socket library that listens on port 2015 and serves a single cat PNG. Code sends raw 200 responses, has no 404s or input sanitization, and a simple path‑traversal allows reading files like a private SSH key. Demonstrates the bug by fetching sensitive files, confirms the server “works” but is insecure, and recommends using nginx as a safer static server.
AI-written summary · about
chapters (9)
- 0:00Introduction and joke
- 1:12About the speaker
- 3:21How the internet works
- 4:24Echo server demo
- 6:08HTTP basics
- 9:02Building a simple HTTP server
- 13:20Why not to use your own server
- 15:54Security risks and solutions
- 17:20Why write your own server
