4 ms·

Wow, and your website isn't even HTTPS for what appears to be a security company. Get it together.

• bdcravens 10y ago
  Seems like a non sequitur when discussing an open source project they have released.
  • heartsucker 10y ago
    The tool phones home. Their website doesn't have HTTPS. It's plausible that the tools phones home over an unencrypted channel (I didn't look, so I could be wrong). My overall impression is that they don't do security very well.
    • deleted 10y ago
      [deleted]
    • bdcravens 10y ago
      Anyone can release a project on Github; the project should be based on its merits, not how well an unrelated project is implemented. (and vice versa) A quick search of the repo of https:// https:// and then http:// http:// shows that the stats collection is apparently https.
      • heartsucker 10y ago
        Sure, and if we imagine a hypothetical entity that has 10 products with security holes and then releases and 11th, it might be worth looking at the 11th more suspiciously. Things don't happen in a vacuum.
      • hbbio 10y ago
        @heartsucker If you want to judge on previous things, we are the team that created http://opalang.org http://opalang.org and have no tie at all with the company static and outsourced portal. Also, will be in Berlin soon, contact me will gladly meet there.