To answer another question you may be implying - if you are connected to the Erlang runtime via Erlang distribution, then the other system already owns you - no security whatsoever. So you should exercise judgement in who you let connect node to node. Only a trusted source like your own machine. In mob you can shut down epmd so you could just run with it shut the whole time and if you want to hot upgrade, negotiate that via http (cookie exchange) and then open epmd for the duration of the code upload. Then close it again.
