jayfk

Snarkiness aside, fixed :)

Yep. If I remember correctly I've paid ~$8 to run the query. That's one of the reasons I've made the raw result public on https://github.com/pyupio/github-requirements

The query I ran against the GitHub dataset has no activity/age/popularity data, just plain requirements files.

I'll write a follow up post on this :)

For the pull request. The bot creates a branch, commits the changes and sends you a pull request on your repo.

This it how it looks like: https://github.com/pydanny/cookiecutter-django/pull/1065

I've built something like this for Python projects.

You add your repo and a bot is constantly checking for insecure and/or outdated packages and sends you a pull request if you need to update.

It's free for open source projects at https://pyup.io

I've built this last year because it was a great hassle for me to keep multiple projects updated and secure.

Would love to get some feedback!

fastly is offering their services to the python community for free.

For everyone that depends on GitHub to build production code, add a fallback on gitlab:

`git remote add fallback git@gitlab.com:user/repo`

and then push/pull your code with:

`git push fallback whatever` `git pull fallback whatever`

I'm currently running https://pyup.io

I wouldn't call it a success yet, but it is growing :)

I really don't like the onboarding process so far.

- Typed in a URL to get a free scan

- Needed to create an account

- Needed to confirm my email

- Needed to verify my site ownership

- Got a mail that my site is "borderline insecure". When I click on the link, I'm redirected to the "create an account view"

- Created a new account that opened in a half cropped Iframe displaying some error message I can't read.

This is where I finally gave up.

I'm working on a command line tool that checks Python virtual environments for packages with known security vulnerabilities: https://github.com/pyupio/safety

How does this compare to, say s3?

At 14 Cents Per GB / Month, rsync.net costs me ~$1720 per year for 1TB (14 * 1024 * 12 / 100).

S3 at 3 Cents Per GB / Month clocks in at ~$368 per year for 1TB (3 * 1024 * 12 / 100). Let's say I'm using a lot of transfer, so I'm going to double the price to ~$720 per year.

Still, rsync.net costs me $1000 more per year. Convince me :).

This looks cool, but ~$300 a month for 16GB of ram?

Where am I supposed to run my DB?

I wouldn't call it stack, really. It's just a little bit jQuery flavored JavaScript that loads the DB via ajax and adds all entries to the DOM. Under 30 LOC: https://github.com/pyupio/safety-db/blob/master/docs/index.h...

It's a bit dirty, but was the right tool for the job. If you are working on a larger project, I'd probably use some template language like mustache to render the elements.

Most CVEs have a pretty good descriptions. For example CVE-2016-6186[1]:

Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors involving unsafe usage of Element.innerHTML.

[1] http://www.cvedetails.com/cve/CVE-2016-6186/

The site is loading the data directly from the repo. Maybe HN has triggered some abuse mechanism.

Edit: Switched to S3 to load the data.

Same with overcast.

Just curious: why isn't frankfurt supported?

I bought a Mac Pro 4,1 from 2010, flashed it to the 5,1 firmware, upgraded the CPU, added a Graphics Card, 4x 3TB drives and a PCIe SSD blade.

Best thing I've ever did in terms of apple hardware.

Absolutely. Once the site is generated, you want to push the following files:

- index.html - style.css - milligram.min.css

and, if you need the logo/favicon

- favicon.png - logo.png

Not specifically.

If you take a look at statuspage.io [1], status.io [2] or cachet [3] they look more or less the same.

[1] https://www.statuspage.io/ [2] https://status.io/ [3] https://cachethq.io/

In other news, mounting / gives you access to the root filesystem.

I've put something together over the last weekend, tailored for django. It's still relatively early, but if you want to check it out: https://github.com/jayfk/django-updater

Yay, more wifi data. Android wasn't enough ;)

http://www.businessinsider.com/google-collecting-wi-fi-passw...

Don't know about windows, but you can use NFS on OS X and Linux.

If you mount your working directory exactly like on your host machine, you can even use relative paths in your Dockerfile.

E.g mount /Users/tracker1 from your host on /Users/tracker1 on the VM.

Since your Dockerfile working dir matches on both systems, you can use them as if you were working directly on the machine, like:

ADD ./entrypoint.sh /entrypoint.sh COPY ./app/code /code

etc.

CoreOS is not docker. You can run docker on ubuntu and install fail2ban on it. I don't see the problem here.

404?

Great watch, but why is this on ask HN?

Why shutting it down? 200 users can be served using a $5 droplet from digital ocean.