Dave Page <dpage@pgadmin.org> writes:
> The risks are pretty low imho. Not having the flag means that the
> server has access to the handles of objects in other jobs in the same
> session. When running as a service, that's basically nothing as the
> service runs in it's own session and is isolated through other means.
> When run from the command line, a hacked binary could send messages to
> the users UI (buttons and other controls for example). It would be a
> difficult attack to pull off, and very hard to gain from it. It's easy
> enough to leave the flag in console mode however - that does work on
> Windows 7.
Okay, but +1 for leaving it on in console mode.
regards, tom lane
