Show HN: I got hacked, felt paranoid, made an app – GlassWire

Post by Nilzor » Wed, Aug 27, 2014, 11:05 AM UTC

mbrownnyc wrote: post #298

greenwalls wrote: post #280

Earlier quoted context omitted.

My name is Jon Hundley. Anton is my cofounder. I founded ManyCam also with Anton and it was acquired last year. We need an "About" page on our site. GlassWire is now my only project. https://twitter.com/hundley

Honestly, sorry about that Jon. I wanted to bring some transparency where there was none, and this seemed reasonable to actually share some concerns (and I don't consider this "doxxing" or whatever that other guy said, more like "googleing over coffee"). I did install your app and it is great! Coming from using the flow tool argus (part of the CALEA collection toolkit), I always thought that analyzing flow/connection…

Post by arihant » Wed, Aug 27, 2014, 2:44 PM UTC

PinguTS wrote: post #296

arihant wrote: post #276

Earlier quoted context omitted.

It's not just about screwing intentionally. Open source also helps with getting more eyes on the code. You need to be able to catch vulnerabilities before the bad guys or no amount of good reputation would survive. That is the primary reason for security software to be open source - reducing security by obfuscation and easy vulnerability check. That said, all software is written and audited by a group of individuals.…

That argument is often repeated and also that often falsified, that Open Source is better because there are more people who have an eye on it. I just want to mention: — The famous Debian-Bug, which lead to easily guessable "random" numbers. Nobody reviewed that code change for years. — SSL Heartbleed. Nobody reviewed the code change by that guy. Not even the maintainer reviewed it. So the problem with Open Source is,…

Post by bsamuels » Wed, Aug 27, 2014, 3:57 PM UTC

arihant wrote: post #333

PinguTS wrote: post #296

Earlier quoted context omitted.

That argument is often repeated and also that often falsified, that Open Source is better because there are more people who have an eye on it. I just want to mention: — The famous Debian-Bug, which lead to easily guessable "random" numbers. Nobody reviewed that code change for years. — SSL Heartbleed. Nobody reviewed the code change by that guy. Not even the maintainer reviewed it. So the problem with Open Source is,…

So if it wasn't open source, how would you go about discovering Heartbleed? It was discovered independently by multiple people beacause it was open source - so contrary to your naive assumption, people are looking at these things. Here is a story how it happened and how it was patched - http://en.wikipedia.org/wiki/Heartbleed#Discovery Are you really arguing that discovering and fixing Heartbleed would be simpler and…

Post by skrskr » Thu, Aug 28, 2014, 10:36 AM UTC

Post by ark15 » Fri, Aug 29, 2014, 4:19 PM UTC

slavik81 wrote: post #112

cledet wrote: post #23

Earlier quoted context omitted.

GitHub for Windows is another beautifully designed Windows app. They even published a blog post about it: https://github.com/blog/1151-designing-github-for-windows

It's a little over-simplified, I think. In migrating some technical writers to git, I thought it might be a good tool to introduce people to git. I ran into 5 problems: 1. It spit out vague error messages, requiring repeating the action in the CLI to see git's actual, specific problem. 2. There's no option to do the initial clone via ssh, which was a problem because http was failing to download the full repository. 3…