[23:07:13] <aclark> but in pythonpackages case i was executing on heroku which is already secure-ish, meaning you can't hurt the system that setup.py is being executed on
[23:08:16] <simon_weber> perhaps you couldn't do like rm -rf *, but I'm not sure what prevents someone from just dumping the database or something
[23:08:53] <aclark> simon_weber: because the db is not hosted where the execution occurs
[23:09:40] <aclark> it's a service you connect to…
[23:10:00] <simon_weber> yeah. I guess i'd still be nervous about it, haha