{"action":"created","issue":{"url":"https://api.github.com/repos/iojs/io.js/issues/528","labels_url":"https://api.github.com/repos/iojs/io.js/issues/528/labels{/name}","comments_url":"https://api.github.com/repos/iojs/io.js/issues/528/comments","events_url":"https://api.github.com/repos/iojs/io.js/issues/528/events","html_url":"https://github.com/iojs/io.js/issues/528","id":54925823,"number":528,"title":"io.js starts slower than node.js on windows x64","user":{"login":"kuseni","id":5655905,"avatar_url":"https://avatars.githubusercontent.com/u/5655905?v=3","gravatar_id":"","url":"https://api.github.com/users/kuseni","html_url":"https://github.com/kuseni","followers_url":"https://api.github.com/users/kuseni/followers","following_url":"https://api.github.com/users/kuseni/following{/other_user}","gists_url":"https://api.github.com/users/kuseni/gists{/gist_id}","starred_url":"https://api.github.com/users/kuseni/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kuseni/subscriptions","organizations_url":"https://api.github.com/users/kuseni/orgs","repos_url":"https://api.github.com/users/kuseni/repos","events_url":"https://api.github.com/users/kuseni/events{/privacy}","received_events_url":"https://api.github.com/users/kuseni/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/iojs/io.js/labels/windows","name":"windows","color":"0052cc"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-01-20T19:15:36Z","updated_at":"2015-01-22T11:47:33Z","closed_at":null,"body":"Z:\\bin\\iojs-1.0.3>iojs -p \"new Date().valueOf()\" & iojs -p \"new Date().valueOf()\"\r\noutputs\r\n1421781086774\r\n1421781086987\r\n~ 200 ms diff\r\n\r\nZ:\\bin\\nodejs-0.10.35>node -p \"new Date().valueOf()\" & node -p \"new Date().valueOf()\"\r\noutputs\r\n1421781064772\r\n1421781064831\r\n~ 60 ms diff\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/iojs/io.js/issues/comments/71009086","html_url":"https://github.com/iojs/io.js/issues/528#issuecomment-71009086","issue_url":"https://api.github.com/repos/iojs/io.js/issues/528","id":71009086,"user":{"login":"bnoordhuis","id":275871,"avatar_url":"https://avatars.githubusercontent.com/u/275871?v=3","gravatar_id":"","url":"https://api.github.com/users/bnoordhuis","html_url":"https://github.com/bnoordhuis","followers_url":"https://api.github.com/users/bnoordhuis/followers","following_url":"https://api.github.com/users/bnoordhuis/following{/other_user}","gists_url":"https://api.github.com/users/bnoordhuis/gists{/gist_id}","starred_url":"https://api.github.com/users/bnoordhuis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bnoordhuis/subscriptions","organizations_url":"https://api.github.com/users/bnoordhuis/orgs","repos_url":"https://api.github.com/users/bnoordhuis/repos","events_url":"https://api.github.com/users/bnoordhuis/events{/privacy}","received_events_url":"https://api.github.com/users/bnoordhuis/received_events","type":"User","site_admin":false},"created_at":"2015-01-22T11:47:33Z","updated_at":"2015-01-22T11:47:33Z","body":"> although snapshots are currently off for (questionable) security reasons\r\n\r\nI wouldn't say it's questionable.  Turning on snapshots in release builds means that everything in the snapshot uses a single, known hash seed.  Remember [this thread](https://groups.google.com/d/topic/nodejs/007S7DUm21o/discussion)?  That's the kind of denial-of-service it makes possible.\r\n\r\nThe one mitigating factor is that objects and strings created at run-time are still hashed with a random seed but that's essentially crossing your fingers and hoping that nothing from the snapshot is under the control of an attacker.\r\n\r\nIf joyent/node enables snapshots just because it starts up a few milliseconds faster now, I'd say that's pretty darn irresponsible of them."}}