Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Pākiki Proxy – An intercepting proxy for penetration testing

pakikiproxy.com

Post reply on HN
Print view View original

41–46 of 46 posts

Re: Show HN: Pākiki Proxy – An intercepting proxy for penetration testing

#41

Post by JanNash »

sneak wrote: post #40

I’m exactly the target market for this. I won’t pay for subscriptionware. I switched from Premiere to Resolve just to avoid having to be someone’s MRR and I now pirate Lightroom pending its replacement. It’s a terrible, user-hostile model. I don’t think developers should be entitled to payment in perpetuity for work they did once.

But do you think “work they did once” holds true for the majority of software that uses subscription based pricing? No updates, no migrations to new OSs, no bugfixing, no support, would you want that? Should people just write perfect software off the bat?

Re: Show HN: Pākiki Proxy – An intercepting proxy for penetration testing

#42

Post by sneak »

JanNash wrote: post #41
sneak wrote: post #40

I’m exactly the target market for this. I won’t pay for subscriptionware. I switched from Premiere to Resolve just to avoid having to be someone’s MRR and I now pirate Lightroom pending its replacement. It’s a terrible, user-hostile model. I don’t think developers should be entitled to payment in perpetuity for work they did once.

But do you think “work they did once” holds true for the majority of software that uses subscription based pricing? No updates, no migrations to new OSs, no bugfixing, no support, would you want that? Should people just write perfect software off the bat?

Most of the time, I don’t want the new version or features. If I didn’t think the current version were suitable for my needs, I wouldn’t buy it as-is.

You seem to be conflating future updates with the software as it stands today.

I am not buying support, I am not buying upgrades. I’m buying software once today (and even that is an exception, as the majority of my tools, including 100% of the most critical ones, are free software).

Additionally, I find proprietary software vendors who do open source cosplay (“open core” is something made by people who dgaf about software freedoms) to be generally disdainful. Open core is a slap in the face; nobody is forcing proprietary software vendors to be in denial about being proprietary software vendors.

Re: Show HN: Pākiki Proxy – An intercepting proxy for penetration testing

#43

Post by pipeline_tux »

sumedh wrote: post #36

Does it work if you have a work vpn like Cisco Anyconnect or Cato. Proxyman does not with those Vpns :(

I haven't tested with either of those unfortunately, but I do regularly test when connected to a VPN using OpenVPN.

From a PC/Mac, if you can reconfigure your browser to proxy traffic via Pākiki, it should work with them (and then subsequently route traffic over the VPN).

Unfortunately I'm not sure what the network routing/proxying behaviour is on mobile when you have a VPN like those configured, but my assumption is that it probably wouldn't work.

Re: Show HN: Pākiki Proxy – An intercepting proxy for penetration testing

#45

Post by Sytten »

ping00 wrote: post #38
Sytten wrote: post #20

Hi there! Co-founder of Caido ( https://caido.io ) here. Glad to see more competition in the space, we also went the route of using an API (built in Rust). We decided to focus only on a web UI in vue.js I will look how you are storing data and all, we went the sqlite way to save on RAM. Looks like we are both going after Burp, it's not going to be an easy ride for sure. What we found is it is very hard to make people…

Hi, I took some time to use Caido. I really like it, especially the ability to switch between projects. I also thought the UX that introduces users to the application was well-done. Tbf, I have years of experience with Burp, but I think anyone would have been able to follow along. Nice, clean UI and installation was breezy. Great job! Looking forward to seeing how this project develops, and I wish you success in your…

Thanks for the review and kind words. This was really one of the core goal to make it super accessible.

We developed it in Rust because we wanted to create a client/server architecture that you can deploy everywhere (Caido runs even on a rapsberry pi). We worked a lot on the frontend to make it snappy too, so its a combination of both.

Yes for sure, there is a privacy concern too with us forwarding request. It is in the issues of https://github.com/caido/caido.

Re: Show HN: Pākiki Proxy – An intercepting proxy for penetration testing

#46

Post by Fnoord »

JanNash wrote: post #41
sneak wrote: post #40

I’m exactly the target market for this. I won’t pay for subscriptionware. I switched from Premiere to Resolve just to avoid having to be someone’s MRR and I now pirate Lightroom pending its replacement. It’s a terrible, user-hostile model. I don’t think developers should be entitled to payment in perpetuity for work they did once.

But do you think “work they did once” holds true for the majority of software that uses subscription based pricing? No updates, no migrations to new OSs, no bugfixing, no support, would you want that? Should people just write perfect software off the bat?

I like the model in use by software such as Hopper (disassember with nice native UI) and Sublime Text. You buy a license for a major version and get updates for that for X years. You may use these versions forever. But a new major is gonna cost you.

I'd never buy subscriptionware for hobbyist or fun purposes. Or so I thought. Because I do pay for a WoW sub :/

Post reply on HN