phranque - 9:11 am on Nov 8, 2008 (gmt 0)

welcome to WebmasterWorld [webmasterworld.com], QLifeTilt!

you should think of "nobody" as a complete stranger going through your environment.
think about what you want visible to an unknown/untrusted agent and what you want modifiable or removable by that agent.
i wouldn't give "nobody" ownership or write access to a web script.
if "nobody" happens to be the user name of the server process and it needs write access to something, make sure it is in a safe place.