> I think that any ability of the (l)users to expose executables as web > services threatens the security of the web server machine, irrespective of > programming language. (But I don't see how it threatens "the internet" -- > they can already connect their own misconfigured machine to the net directly) If I compromise your home machine, I've got one computer. If I compromise some webserver that hosts several hundred websites I've got a whole lot more options via all those exploits that require I lure you to my website. I also have whatever those websites are (suppose half of them are stores that process credit cards). Geo.