Hacker News new | ask | show | jobs
by heartsucker 3413 days ago
Wow, and your website isn't even HTTPS for what appears to be a security company. Get it together.
1 comments
bdcravens 3413 days ago
Seems like a non sequitur when discussing an open source project they have released.
link
heartsucker 3413 days ago
The tool phones home. Their website doesn't have HTTPS. It's plausible that the tools phones home over an unencrypted channel (I didn't look, so I could be wrong).

My overall impression is that they don't do security very well.

link
bdcravens 3412 days ago
Anyone can release a project on Github; the project should be based on its merits, not how well an unrelated project is implemented. (and vice versa)

A quick search of the repo of https:// and then http:// shows that the stats collection is apparently https.

link
hbbio 3412 days ago
@heartsucker If you want to judge on previous things, we are the team that created http://opalang.org and have no tie at all with the company static and outsourced portal. Also, will be in Berlin soon, contact me will gladly meet there.
link
heartsucker 3412 days ago
Sure, and if we imagine a hypothetical entity that has 10 products with security holes and then releases and 11th, it might be worth looking at the 11th more suspiciously. Things don't happen in a vacuum.
link