Hacker News Reader

Parent Full thread

apazzolini

So is the idea here that you're just monitoring the libraries my web application is using? So for example:

1. I have library X version 1.2.3 in package.json.

2. My package.json file gets sent to you

3. You parse this file, and tell me library X version 1.2.3 has a vulnerability, and that I should upgrade

AppCanary then doesn't monitor for the fact I have an outdated version of httpd for example?

View on HN

>AppCanary then doesn't monitor for the fact I have an outdated version of httpd for example?

It does! So long as you've installed it via the package manager. Right now we support Ubuntu, and Debian will be out soon and RHEL systems in the very near future.

In the near future we'll add the ability to scan hand-compiled binaries, but that's a technical challenge that depends on solving the first part of the equation (knowing what's vulnerable) really well.

Reply on news.ycombinator.com