3 ms·

Congrats on the launch! I love this idea. It’s so simple but it immediately clicks. My instant reaction was thinking of the various ways I’d totally use this (a

Congrats on the launch! I love this idea. It’s so simple but it immediately clicks. My instant reaction was thinking of the various ways I’d totally use this (and gladly pay for it, if reasonably priced). A few things: - Add support for user secrets. - Work on pricing ASAP. You’ve built something dope. You can be paid for it. In fact, I prefer to pay, because it makes it easier for me to feel that the product won’t just disappear after I begin to use it and rely on it. I also just like knowing folks are compensated for the work they do. - Due to the type of product this is, security should be the #1 priority here. I understand you’re in the early stages, but please make this a focus. V8 has pretty decent isolation, but honestly, for a product like this, WebAssembly is your friend — it was quite literally designed for this type of product. A side benefit of relying on WebAssembly is that you’ll be able to support as many languages/environments as you can get to compile. Once again, dope work!

conradev 4y ago
> V8 has pretty decent isolation, but honestly, for a product like this, WebAssembly is your friend — it was quite literally designed for this type of product. The big thing that WebAssembly allows you to do security-wise is to execute multiple untrusted programs securely in the same address space. This is a new capability for some languages, but JS has supported it since day one. The most popular WebAssembly runtimes are already the JS runtimes – Cloudflare uses V8 isolates to run their edge workers, for example. You could use a lighter weight and purpose built runtime for WebAssembly like wasmtime, but the immediate benefits of doing that are unclear to me
mdaniel 4y ago
> Add support for user secrets. They're under your username, in the link labeled Secrets. One can see them in use in the author's hackerNewsSearch which consumes an algolia key, and probably a bunch of others since there's a Twitter API example, too
stevekrouse 4y ago
Thanks! Yeah we have made security our #1 after this launch went so much better than expected. As someone else noted, we already have secrets on the platform, but I am eager to hear more about what you'd like to pay for it and what you'd expect to get in exchange. We are all ears on suggestions :)

conradev 4y ago

> V8 has pretty decent isolation, but honestly, for a product like this, WebAssembly is your friend — it was quite literally designed for this type of product. The big thing that WebAssembly allows you to do security-wise is to execute multiple untrusted programs securely in the same address space. This is a new capability for some languages, but JS has supported it since day one. The most popular WebAssembly runtimes are already the JS runtimes – Cloudflare uses V8 isolates to run their edge workers, for example. You could use a lighter weight and purpose built runtime for WebAssembly like wasmtime, but the immediate benefits of doing that are unclear to me

mdaniel 4y ago

> Add support for user secrets. They're under your username, in the link labeled Secrets. One can see them in use in the author's hackerNewsSearch which consumes an algolia key, and probably a bunch of others since there's a Twitter API example, too

stevekrouse 4y ago

Thanks! Yeah we have made security our #1 after this launch went so much better than expected. As someone else noted, we already have secrets on the platform, but I am eager to hear more about what you'd like to pay for it and what you'd expect to get in exchange. We are all ears on suggestions :)