Viewing profile — Dyaz17

This is just awesome... Congrats on the launch. This product seems to protect really well websites that include many third party JavaScript. On the other hand ,if you are one of th…

Regarding the security aspect, I created GuardScript to help catch malicious 3rd party (or 1st party) javascript changes: https://www.guardscript.com/ . You should use if you own a…

You can login to your instances from the admin console according to this : https://cloud.google.com/compute/docs/instances/connecting-t... So Google has a way to login to your inst…

What is the attack Vector that this solution prevent ? Am I missing something obvious ? Will it prevent Google from being able to have a Root access to the VM? From my understandin…

Great job. Here is what I propose to make it more secure and prevent you from being able to read anyone diary... I propose that each day a link/token is sent to your email. The lin…

You can also use https://www.guardscript.com that does this for free and send you a diff in your email.

Nice product! And thank you for making it opensource. Any particular reason why you chose Ruby? A little plug : I have developed https://www.guardscript.com . It is a service that …

You are right, for now all the analysis should be done by the owner of the script. I'll think about adding a runbook...

Thank you, I have corrected it

Thanks for the suggestion.

No it does not include the headers. Only the js file downloaded.

For now, Guardscript Goal is for the different SaaS services to use it, not for the individual website owners to use it to monitor the JS of SaaS services.

You are right. SRI is the best solution and I mention it in the FAQ. Unfortunately, it can't always be implemented. See my previous comment : Well many companies that offer you a s…

Exactly.

Thanks for the suggestion

Thank you! I have changed it.

Well many companies that offer you a service don't include the Subresource integrity Tag. Check for instance Stripe : " rel="nofollow">https://js.stripe.com/v3"> or Facebook : " re…

Hey HN! I created GuardScript because in my previous company we started to include more and more third-party Javascript from SaaS services on our homepage, and this created securit…