tasn

22 ms·

301.
Svix, the Enterprise Ready Webhook Service (YC W21) Is Hiring (Remote)(svix.com)
1 points by tasn 4y ago
302.
Securely Verifying Signature Hashes(svix.com)
2 points by tasn 4y ago|0 comments
303.
by tasn 4y ago
> Too bad most of the Rust jobs right now seem to be in crypto. We are hiring for Rust engineers. Not crypto. :) https://www.svix.com/careers/
304.
Svix, the Enterprise Ready Webhook Service (YC W21) Is Hiring (Remote)(svix.com)
1 points by tasn 4y ago
305.
Svix, the Enterprise Ready Webhook Service (YC W21) Is Hiring (Remote)(svix.com)
1 points by tasn 4y ago
306.
by tasn 4y ago
Keeping all of these connections alive is also not great. Updating them when things change means either polling (so 10m at least once a second) or some complex messaging mechanism.
307.
by tasn 4y ago
Like you said, the main thing is what it doesn't include. Though also specifically "D. Least server resources used", which is very much dependent on usage characteristics. If each of your customers is getting thousands of web
308.
by tasn 4y ago
The comparison in this link is quite biased - having all "X" on one side and all "V" on the other is a strong indication of that. More specifically, I disagree with some of the points there, it really just depends on you
309.
by tasn 4y ago
With pleasure, I thought you may find it useful!
310.
by tasn 4y ago
Congratulations on the launch, it's something I've been meaning to build for a while, and was actually chatting with @onassar about it (also on this thread) when he built his. It's very much useful, don't let people disc
311.
Svix (YC W21), enterprise-ready webhook service, is hiring (remote)(svix.com)
1 points by tasn 4y ago
312.
Svix, the Enterprise Ready Webhook Service (YC W21) Is Hiring (Remote)(svix.com)
1 points by tasn 4y ago
313.
by tasn 4y ago
Off topic, but I just noticed this post's post ID on HN: 32600000
314.
by tasn 4y ago
Shameless (but relevant!) plug: we built Svix to help people send webhooks from their platform. With Svix you don't have to use message queues for webhooks, at least not from the sender side: https://www.svix.com/ Note
315.
Svix (YC W21) Is Hiring (Remote) – Enterprise-Ready Webhook Service(svix.com)
1 points by tasn 4y ago
316.
by tasn 4y ago
Using lambda doesn't protect you against any of these. Timeout attacks: instead of failing you'll now be just be paying through the nose. And also with enough scale you can hit lambda limits and fail. SSRF: you are still as vulner
317.
by tasn 4y ago
Yeah, but you need to know what changed, so you need the relevant IDs.
318.
by tasn 4y ago
Yup, that's one way of doing it (which we support at Svix). Though another great way is "thin webhooks", where you just use the webhook to notify your customers something happened, and then they can use your API to get the ex
319.
by tasn 4y ago
It depends on how you use the queue, though it'll revolve around: 1. Keep a live connection to the queue, which is not great operationally (a lot of open connections just idling most of the time). 2. Poll the queue - at this point you&
320.
by tasn 4y ago
Migrating to a new service: you can just update the webhook URL. On the other hand, there are at least a couple of problems with allowing even one redirect: it opens a pandora's box of security implications, and it's a performance
321.
by tasn 4y ago
Yeah, resolving twice is a really bad idea. A good rule of thumb for security: if you think you have a clever hack (e.g. checking DNS twice as a workaround to not being able to patch DNS resolution), it probably isn't so clever as you
322.
by tasn 4y ago
Amen. FWIW, we are open source, and we publish libraries that let anyone sign and verify webhooks, hoping to save people the work and have a unified standard. Libs: https://github.com/svix/svix-webhooks Docs: https:&#
323.
by tasn 4y ago
Will email you now in a bit! I also just replied to your other comment about another topic, so there's much to discuss. :)
324.
by tasn 4y ago
Oh, I didn't know about the new --verify-webhook addition to ngrok, that's cool! Who can I chat with about adding Svix style webhooks[1] to ngrok? We do webhook sending as a service and power the webhooks for many companies, inclu
325.
by tasn 4y ago
I recorded a video with advice about designing a webhooks system a couple of months ago: https://www.svix.com/blog/webhook-architecture-design/ It's high level, so it doesn't touch everything you mention
326.
by tasn 4y ago
Those are all great points! At Svix (we do webhooks as a service), we disallow redirects because of what you mentioned above, and because it's also just bad for performance (for both sides) and is most likely a configuration error anyw
327.
by tasn 4y ago
Shameless plug: we make it super easy for companies to send webhooks. https://www.svix.com There are only 3 companies on webhooks.fyi's list with 3 green checks, and we're powering webhooks for one of those. :)
328.
by tasn 4y ago
We built Svix[1] exactly for this reason. We make it super easy for companies to send webhooks reliably. There are only three companies with a "perfect score" on webhooks.fyi's list, we power one of them. ;) [1] https:/
329.
Svix (YC W21) Is Hiring (Remote) – Enterprise-Ready Webhook Service(svix.com)
1 points by tasn 4y ago
330.
by tasn 4y ago
Thanks a lot David!

More ›