here's one for the systemd haters: you can set up a service with a username starting with a digit (whether or not it exists) and it will run as root. worse yet is that Lennart thinks it's not a bug.
https://lwn.net/SubscriberLink/727490/d161e315ff0775c1/
#security
Chirp! is a social network. It runs on GNU social, version 2.0.1-beta0, available under the GNU Affero General Public License.
All Chirp! content and data are available under the Creative Commons Attribution 3.0 license.