Can a compromised worker wait until I -reload to steal vhosts?
In theory it it possible for a compromised worker to “lie and wait” for you to -reload (which unlocks the worker process’s connection to the hub) and then feed in extra unwanted vhosts for it to listen on. You should always check the hub status with the -stats command after a -reload to make sure this hasn’t happened (make sure the worker has the right vhosts and is locked). The effectiveness of this attack is diminished by the following two points: • A worker cannot do this to steal vhosts being listened on by other workers. If a worker tries this, the hub will instantly cut it off (and log what happened). • In no situations does this attack allow log messages to be intercepted.
