Live data from Hacker News

Heroku: We’ve Heard Your Feedback

blog.heroku.com

21–30 of 151 posts

Re: Heroku: We’ve Heard Your Feedback

#21
post #4

> I started as Heroku GM a few weeks ago with intense enthusiasm to be a part of such a storied team. Wow talk about terrible timing.

Well, it's a great timing.

Fail it's because I am new; Succeed then it's my superior capability; plus, the learning rate during crisis is at least 10 times higher than the peaceful time, let alone the nerves and mental fortitude where peaceful time would never train one for.

Re: Heroku: We’ve Heard Your Feedback

#22
Heroku is a one of kind platform, many tried to replicate, none have come close, the ability to setup a whole app with a few clicks on dynos and add-ons is great. The price was always salty $50/month for 1gb RAM shared CPU, and in the few past years no newly released features comes to mind. As a customer I have no idea what this security issue impact, the communication has been poor as this post does not clarify much, you have to click a status post link to see a feed of what's going on.

Re: Heroku: We’ve Heard Your Feedback

#23
post #7

Heroku has always been the opposite of transparent. I still don't forget how they handled the Intelligent Routing fiasco from back in the day.

Maybe that’ll change, there’s a new Sheriff in town as the saying goes? Bob was previously General Manager of AWS Elastic Kubernetes (EKS) which seemed to have a good reputation and to engage with its customers pretty well.

[deleted]

Re: Heroku: We’ve Heard Your Feedback

#24

As a former herokai, communication was always the #1 point of discussion internally. This idea that they "can" do better is a half truth. They DID do better. I leave it as an exercise to the reader to determine what the limiting resource was here. By the way, how many senior devs and cofounders are left at Heroku Bob? Why doesn't it show up at dreamforce anymore?

(Former) Salesforce employee here, long enough to have been there a couple of years before the Heroku acquisition. I can't let this stand without a comment.

Heroku never seemed to want to integrate, but instead be the "cool kids", those who just do not have to worry about the enterprisy stuff such as automated backups, DR, high availability, enabling Java, etc. Everything they did was great, everything "Salesforce" sucked, yet they never made any money before the acquisition. The acquisition was a waste of money in first place (IMHO).

The founders did not even try and so they left.

Re: Heroku: We’ve Heard Your Feedback

#25

As a former herokai, communication was always the #1 point of discussion internally. This idea that they "can" do better is a half truth. They DID do better. I leave it as an exercise to the reader to determine what the limiting resource was here. By the way, how many senior devs and cofounders are left at Heroku Bob? Why doesn't it show up at dreamforce anymore?

I knew the writing was on the wall for Heroku a few years back. I had asked a group of Salesforce sales reps about Heroku Connect (two-way sync between postgres and salesforce - amazing!), and they had no absolutely no idea what it was. They checked back with their team and weren't able to get any information. We basically couldn't buy it.

Re: Heroku: We’ve Heard Your Feedback

#26
post #5

Earlier quoted context omitted.

That isn’t a very charitable take. It’s been 24x7 for them, the acknowledgement is most welcome, in my opinion. I’m not sure waiting until Monday 9AM Pacific just to avoid these type of comments would be the right choice. The internet is 24x7 after all.

There doesn't seem to be anything different now than 6 hours ago. So posting it after 8pm EDT/5pm PDT Friday seems very intentional.

With what intention? Honest question, I don't see a strategic advantage in posting this on a Friday. More of a disadvantage, actually, with less visibility.

Re: Heroku: We’ve Heard Your Feedback

#27

>The Heroku team and their colleagues have worked around the clock, including nights and weekends Can someone more familiar with an event like this tell me what they are working so hard on? I imagine securing the vulnerable service and resetting various credentials doesn't take that much work.

[deleted]

Re: Heroku: We’ve Heard Your Feedback

#28
post #26

Earlier quoted context omitted.

There doesn't seem to be anything different now than 6 hours ago. So posting it after 8pm EDT/5pm PDT Friday seems very intentional.

With what intention? Honest question, I don't see a strategic advantage in posting this on a Friday. More of a disadvantage, actually, with less visibility.

> With what intention? Honest question, I don't see a strategic advantage in posting this on a Friday. More of a disadvantage, actually, with less visibility.

The intention presumably is to be able to say they communicated this while (intentionally) limiting the amount of awareness that's spread about this.

Re: Heroku: We’ve Heard Your Feedback

#29
post #26

Earlier quoted context omitted.

There doesn't seem to be anything different now than 6 hours ago. So posting it after 8pm EDT/5pm PDT Friday seems very intentional.

With what intention? Honest question, I don't see a strategic advantage in posting this on a Friday. More of a disadvantage, actually, with less visibility.

The point is less visibility/criticism. Since this is confirming pretty bad news (the attackers had access to the environment variables.) The concept of a Friday night news dump is a fairly well-worn, but basically true, trope.

Re: Heroku: We’ve Heard Your Feedback

#30

Curious why they would need to keep the GitHub integration down for a while longer. Are they afraid someone could still grab credentials?

They were using a legacy GitHub integration. Maybe it's inherently unsafe and they need to rewrite things using the new API.
Post reply on HN