phillmv

11 ms·

91.
by phillmv 11y ago
I think developers could use way better security tooling. It seems like a lot of people would love to have an easy way to integrate this into their continuous integration services, for instance - and we're working on making that a Real
92.
by phillmv 11y ago
That's the plan! We're going to be rolling that out in the next little while. If you want to get a personal email when it comes out, put "API" in the platform field in the email form on the link above.
93.
by phillmv 11y ago
Yep! We started that project alongside postmodern_mod3 about two years ago :). We figured we could do a better job all around if we managed to productize it.
94.
by phillmv 11y ago
Hah, well, okay, I didn't expect that page to read as too subtle . It is a service! Visit https://appcanary.com for more deets.
95.
by phillmv 11y ago
Hey. We posted about our service last week and got great feedback. We took that feedback and decided to put isitvulnerable.com together to really showcase what you can get out of it / uh check your dang Gemfile.lock at least. We'r
96.
Show HN: Is it vulnerable? Drag-n-drop your Gemfile.lock to check(isitvulnerable.com)
175 points by phillmv 11y ago|49 comments
97.
by phillmv 11y ago
We're still getting started, so - give it a spin, and we won't charge you until it's worth your while.
98.
by phillmv 11y ago
>I guess the bigger question is simply, are you going to limit your audience only to people already following best practices? No, of course not! We desperately want to bring people into best practices. Most people are simply unaware of w
99.
by phillmv 11y ago
Right. I should've been prepared for this response. I can't confirm whether that shows up in your Gemfile.lock but I can say that you really shouldn't be doing this and switch to keys. We'll likely add a check to beg y
100.
by phillmv 11y ago
>AppCanary then doesn't monitor for the fact I have an outdated version of httpd for example? It does! So long as you've installed it via the package manager. Right now we support Ubuntu, and Debian will be out soon and RHEL sy
101.
by phillmv 11y ago
>Why are you sending the full file contents from the agent to the client? 1. We only send files you tell us to send in the configuration, and you're not going to be storing any sensitive information in your Gemfile.locks or package.
102.
by phillmv 11y ago
This is a problem everyone in the security space faces. We used to work as security consultants, so we're more experienced than most, and we're working hard to be transparent and above board. As we grow, we'll definitely be c
103.
by phillmv 11y ago
I also hate it when there's a total void of info. But! We're not yet launched, and I'm pretty easy to google :).
104.
by phillmv 11y ago
Docker shall be addressed soon! We'll probably end up sitting on your host and taking a peek inside your container filesystems.
105.
by phillmv 11y ago
1. They all do a great job! But there's this last mile problem with managing the information they do put out. If you can handle the downtime, unattended-upgrades will work just dandy. If your postgres restarting in the middle of the ni
106.
by phillmv 11y ago
We only show you stuff that affects you, we automate the process, we light up your call tree and we'll be providing metrics and audit logs. It's definitely a leg up over just being spammed by pkg audit. Further, we also cover your
107.
by phillmv 11y ago
>And are you planning to add detection for binaries that live outside of the distro package manager? It's on the roadmap! Others have mentioned that before. First we need to get really good at knowing about CVEs :).
108.
by phillmv 11y ago
>A hashed password is only mine and the universe's secret. You always have to leave a little room for the holy spirit.
109.
by phillmv 11y ago
>I would probably feel differently about the pricing if it were tiered levels (e.g.: 1-50 servers: $x/mo, 50-250 servers: $y/mo, 250+ servers: $z/mo). Ya, that's fair and a good suggestion. I think we may very well en
110.
by phillmv 11y ago
Well, fortunately, it does! We currently support Ruby, and in the next three months we'll have Javaland and Python and Node. Right now most of our data is oriented around patch releases, so it can vary, but in near future we'll be
111.
by phillmv 11y ago
There's a stunning amount of elbow grease involved in that. If you're a random company, you have an engineer sitting around whose job involves reading a dozen mailing lists - and we want to save everyone from that redundancy.
112.
by phillmv 11y ago
It's very small and written in golang and up on github https://github.com/appcanary/agent/ We understand how some people might have problems / have plans to improve upon it - maybe we run a proxy or some
113.
by phillmv 11y ago
Hey everyone! appCanary monitors the software on your servers and notifies you when you have to take action. In a previous life, we spent a lot of time worrying about what needs to be updated where and so we built this. We currently let you
114.
Show HN: AppCanary – Keep vulnerable software off your servers(appcanary.com)
108 points by phillmv 11y ago|59 comments
115.
by phillmv 11y ago
You can definitely build a whole house from scratch for less than 400k. You can build it for less than $100k - http://www.zillow.com/oh/home-values/ No, most of the value in a home comes from the land underneath
116.
by phillmv 11y ago
No one's saying Greece will become Germany. Just that it will be doing better than if don't forgive its debt.
117.
by phillmv 11y ago
I been reading your comments. You write well, normally now is when I'd be looking up your twitter.
118.
by phillmv 11y ago
>Do you plan to pay back the entirety of the loan, with interest with the account in French Francs? Of course. You earn more than enough Francs to cover your expenses; it's just cheaper to borrow money right now than to convert from
119.
by phillmv 11y ago
Not that many people who work directly for the government work for market rates. Cabinet members for instance make about $200,000 - which is not comparable to executive salaries in 2015.
120.
by phillmv 11y ago
Some thoughts: 1. My understanding is that by the time Minecraft _utterly_ blew up they had a full fledged company going. Some people were probably there from the "a million or two" to "hundreds of millions" of dollars t

More ›