This seems like a keen idea – but .. the example shows leaving an open port that anyone can telnet to.
While great for the application it appears to leave the client wide-open to be exploited. Am I missing something?
The source snippets don’t detail how the port is bound. It could be fairly securely bound just to localhost, like XAMPP does, or it could be bound to INADDR_ANY (that people outside the computer could telnet to).
DragonFly BSD Digest