Running database drivers as sandboxed external processes (and why a HashMap insert was a security boundary)

About three months ago I added support for plugin drivers outside the Tabularis process. External drivers are ordinary programs speaking JSON-RPC over stdin/stdout. This is a retrospective on why that design held up, where it leaked, and the credential bug hidden in a HashMap insert.

View Post on Scour ↗

More from tabularis.dev on Scour.

Discussed on r/programming