3 ms·
Very nice job. I'll be using it soon. I second the idea of submitting it as a "Tell HN." I don't think the security is a huge deal because, since it's setting
by jackowayed 17y ago
Very nice job. I'll be using it soon. I second the idea of submitting it as a "Tell HN."
I don't think the security is a huge deal because, since it's setting up a new server, you really should just change the password afterward. But it probably wouldn't be bad to reassure people (or say "don't worry about security! just use a throwaway password for us and then change it"). It doesn't matter if security shouldn't be a concern if prospective customers see it as a concern.
- melito 17y agoIt doesn't matter to a lot of the people that use it. I don't store their passwords and I pipe everything going on in the server to the user's web browser. User's are invited to snoop TTY's. But yes I agree totally. It's meant to work with cloud servers so if you grow weary or distrustful of the box, tear it down and start over. One thing I've been playing with is API integration. Not that its any more secure, but I think fewer people would confuse an "API key" input field as a "Login here" form (which some have). Security aside, I'm slowly attempting to monetize this and to be quite honest I'm more interested in people giving me their money than their passwords. I can't pay rent with passwords.