3 ms·

You are misrepresenting Sentry pretty heavily here. It's an old crash reporting system and it works well. You can install it on premises completely for free and

You are misrepresenting Sentry pretty heavily here. It's an old crash reporting system and it works well. You can install it on premises completely for free and don't use any of the SaaS stuff. Your data never leaves your data center. There are also various mechanisms to avoid PII and passwords from being sent in crash reports regardless of if the installation is on-premises or in the cloud. I don't really know what you mean about sentry dependencies either. For most cases you don't add any code at all, you just add it to your project and it catches exceptions and reports them. If you don't want to use it anymore, you just remove it. I'm sure they would love to get a hook in you, but I haven't seen it yet :)

DyslexicAtheist 5y ago
> You are misrepresenting Sentry pretty heavily here. instead of generalizing and claiming that this is a misrepresentation why not engaging with my specific points that make it abundantly clear where the problems are? > It's an old crash reporting system there is nothing "old" about sentry. it's new tech using old (outdated) means to monitor an application crash. Your comment is at best ill-informed and at worst whataboutism because most fortune-500 companies in their list do not use on-premise Sentry but their SaaS service. So getting pwned with sentry is not a question of if but when. Meanwhile my post has been flagged which is normal considering that several sentry employees are on HN with high karma. That doesn't change how dangerous the ideas are that they are peddling. And I'm not talking about the wannabe-FOSS (but technically not really FOSS) on-premise service. My beef is with how they commercialize this via a SaaS (recurring revenue / subscription model) when the whole thing should be a bash 3 liner written by your friendly internal sysadmin. This post and the fact it got flagged into oblivion will be used as an "I told you so" the moment the first fortune-500 companies gets hacked via Sentry. It's not a question of if but when considering their authentication and roles are split across 2 continents and 3 countries already and there isn't any strategy for the existing 200+ engineers on how to access highly sensitive customer information and (accidentally leaked) 2nd party PII.
- zeeg 5y ago
  I will let HN users educate folks on what Sentry is and isn't, but as the creator.. > there is nothing "old" about sentry. it's new tech using old (outdated) means to monitor an application crash. Your comment is at best ill-informed and at worst whataboutism because most fortune-500 companies in their list do not use on-premise Sentry but their SaaS service. So getting pwned with sentry is not a question of if but when. It's 13 years old - I wouldn't call that new in the age of technology - and consistently using modern techniques and technology to improve upon a timeless problem.

DyslexicAtheist 5y ago

> You are misrepresenting Sentry pretty heavily here. instead of generalizing and claiming that this is a misrepresentation why not engaging with my specific points that make it abundantly clear where the problems are? > It's an old crash reporting system there is nothing "old" about sentry. it's new tech using old (outdated) means to monitor an application crash. Your comment is at best ill-informed and at worst whataboutism because most fortune-500 companies in their list do not use on-premise Sentry but their SaaS service. So getting pwned with sentry is not a question of if but when. Meanwhile my post has been flagged which is normal considering that several sentry employees are on HN with high karma. That doesn't change how dangerous the ideas are that they are peddling. And I'm not talking about the wannabe-FOSS (but technically not really FOSS) on-premise service. My beef is with how they commercialize this via a SaaS (recurring revenue / subscription model) when the whole thing should be a bash 3 liner written by your friendly internal sysadmin. This post and the fact it got flagged into oblivion will be used as an "I told you so" the moment the first fortune-500 companies gets hacked via Sentry. It's not a question of if but when considering their authentication and roles are split across 2 continents and 3 countries already and there isn't any strategy for the existing 200+ engineers on how to access highly sensitive customer information and (accidentally leaked) 2nd party PII.

zeeg 5y ago
I will let HN users educate folks on what Sentry is and isn't, but as the creator.. > there is nothing "old" about sentry. it's new tech using old (outdated) means to monitor an application crash. Your comment is at best ill-informed and at worst whataboutism because most fortune-500 companies in their list do not use on-premise Sentry but their SaaS service. So getting pwned with sentry is not a question of if but when. It's 13 years old - I wouldn't call that new in the age of technology - and consistently using modern techniques and technology to improve upon a timeless problem.