Hacker News new | ask | show | jobs
by stephenr 2552 days ago
Apart from the "SaaS services" (I mean, are they really services for services?), this seems to boil down to:

"We can't trust SaaS.... so we built a SaaS to alert you when the JS delivered by your SaaS changes...". So now you have to trust this SaaS to tell you that the other SaaS is still trustworthy.
2 comments
quickthrower2 2552 days ago
That's the premise behind most security software. We can't trust the internet, so download a firewall from the internet to block traffic from the internet.
link
stephenr 2552 days ago
The software you download is generally signed by a party that you do trust though, and then runs locally on your computer.

And of course, that also doesn't really apply if you're using an operating system that includes a firewall by default.

link
Dyaz17 2552 days ago
For now, Guardscript Goal is for the different SaaS services to use it, not for the individual website owners to use it to monitor the JS of SaaS services.
link