4 ms·

It seems like they still struggle with Security exploits--It's not a perfect system. For example: https://blog.heroku.com/archives/2013/1/9/password_hijacking_

It seems like they still struggle with Security exploits--It's not a perfect system. For example: https://blog.heroku.com/archives/2013/1/9/password_hijacking_security_incident_and_response https://blog.heroku.com/archives/2013/1/9/password_hijacking... Also, you could get pretty solid protection and faster response time with something like unattended-upgrades https://help.ubuntu.com/community/AutomaticSecurityUpdates https://help.ubuntu.com/community/AutomaticSecurityUpdates I think the value proposition mostly lies in the autoscaling, but seems like a waste in aggregate since most apps never hit any sort of scale.

dlss 11y ago
In fairness to Heroku you're citing a security issue with the heroku.com webapp, not an issue with the platform they're selling. Also: as long as traffic spikes remain a thing, autoscaling isn't wasteful... The alternatives are your site going down or buying bigger servers than you need in the first place... (That's not to say I approve of heroku though, the foundation it supplies is horrible, and missing basic things like [gzip'd asset transfers](https://stackoverflow.com/questions/12326191/any-way-to-serve-gzip-assets-from-heroku https://stackoverflow.com/questions/12326191/any-way-to-serv...)...)