Live data from Hacker News

Show HN: Silk, a profiling tool for Django

mtford.co.uk

21–25 of 25 posts

Re: Show HN: Silk, a profiling tool for Django

#21

Looks very interesting! We currently use django debug toolbar for profiling, which seems to have a lot of overlap. I like how Silk stores the profiles of multiple requests - that seems to be a nice differentiator. What else? Thanks for the awesome contribution to the Django community!

> I like how Silk stores the profiles of multiple requests

You might like my Django SQL Inspector which aggregates many SQL queries across many requests.

https://github.com/rory/django-sql-inspector

Re: Show HN: Silk, a profiling tool for Django

#22
Probably not a good idea to keep your profiler open to the world as long as you allow reading from arbitrary files. After a bit of fiddling around I was able to read your secret key from the settings file. It starts with 'es!b3'. And your soundcloud password. Sorry.

Re: Show HN: Silk, a profiling tool for Django

#23
post #22

Probably not a good idea to keep your profiler open to the world as long as you allow reading from arbitrary files. After a bit of fiddling around I was able to read your secret key from the settings file. It starts with 'es!b3'. And your soundcloud password. Sorry.

Nice... I did make an attempt to filter out sensitive stuff but clearly did a bad job. Thanks for letting me know. I will eventually introduce a demo app rather than my own site.

Re: Show HN: Silk, a profiling tool for Django

#24
post #23
post #22

Probably not a good idea to keep your profiler open to the world as long as you allow reading from arbitrary files. After a bit of fiddling around I was able to read your secret key from the settings file. It starts with 'es!b3'. And your soundcloud password. Sorry.

Nice... I did make an attempt to filter out sensitive stuff but clearly did a bad job. Thanks for letting me know. I will eventually introduce a demo app rather than my own site.

I've sent you an email with the precise steps to reproduce it.

Re: Show HN: Silk, a profiling tool for Django

#25
This is a really great tool, massive fan, made some good use of it in the ~15 hours since I installed it yesterday evening. Are you aware it seems to bork the admin interface?

If, after installing Silk, I use admin to update a record, I get "You cannot access body after reading from request's data stream" - this applies across all admin models and pages. It's not really that big a deal, as I rarely use the admin pages now, but it might have knock-on effects that I haven't seen yet. (Commenting out Silk in the installed apps list clears the problem up straight away.)

I'll ping you an email with the stack trace.

Post reply on HN