Live data from Hacker News

Heroku: We’ve Heard Your Feedback

blog.heroku.com

81–90 of 151 posts

Re: Heroku: We’ve Heard Your Feedback

#81
post #61

Earlier quoted context omitted.

Any suggestions on a rival PaaS that has a similar engineering philosophy to the old Heroku?

If you want a more minimal do-it-yourself option you could self-host something like Dokku[1]. [1] https://dokku.com/

I feel confident nobody using heroku is doing it because they want a more minimal do-it-yourself option.

Re: Heroku: We’ve Heard Your Feedback

#82

Earlier quoted context omitted.

I assume it’s so that they can mine your LinkenIn connection data and make it available to their sales teams to upsell you and people you know. I’d imagine they would end up storing all that data in some kind of web-based CRM, possibly sold as a SAAS product.

Hmm, yeah, maybe one where with "sales" in its name. I think you're into something here.

Whoa, whoa, what kind of conspiracy theory are you trying to force, here?

Re: Heroku: We’ve Heard Your Feedback

#83
So I looked at their product offerings and the Wikipedia page about Heroku and I'm still left scratching my head as to what it actually even is. They basically rent out other cloud computer providers' time at a higher price and make you use some kind of shitty middleware? Is that all this actually is? Please help me to understand what in the hell this even is.

Re: Heroku: We’ve Heard Your Feedback

#84
post #18

> We’ve heard your feedback on our communications during this incident. You want more transparency, more in-depth information, and fewer “we are working on it” posts. Well, those, and : 1. Speed. It took days for heroku customers to be told about this. 2. Customers sign up at "heroku.com", the platform is called "Heroku", the CLI is "heroku", everything's heroku, so don't send emails from a parent company (Salesforce…

> 2. Customers sign up at "heroku.com", the platform is called "Heroku", the CLI is "heroku", everything's heroku, so don't send emails from a parent company (Salesforce), send them from "Heroku". They're working on something called "Project Periwinkle" that is intended to remove all Heroku branding and make everything Salesforce branded. Periwinkle being a colour between blue (salesforce) and purple (heroku). No mor…

I work for a non-Heroku tech vendor, and I have always spoken highly of Heroku to my customers from my past experience of going all-in on Heroku, and receiving a top quality of support from Heroku back in 2017-2019. I'm going to point folks to the recent Hacker News threads now.

It is difficult for me to understand why Salesforce is not aware of the strength of the Heroku brand among experienced technology workers, and how much they have destroyed that brand in the last 2-3 years.

Re: Heroku: We’ve Heard Your Feedback

#85
post #37

If you're on Heroku how do you deploy now? It says it's still weeks away before you can deploy - did I read this right?

Still weeks away from enabling the GitHub integration again, you can still manually deploy via the heroku CLI. Our team realised heroku was going to take weeks and we’ve replicated our “review app” development workflow with GitHub actions that clone apps on PR, push code and rebuild them on push and destroy them on PR close. It’s not as seamless as the heroku GitHub integration but it’s good enough for now.

You don't even need the "heroku cli" to deploy -- just git. That was heroku's original famous innovation, you may recall!

Re: Heroku: We’ve Heard Your Feedback

#86
post #18

> We’ve heard your feedback on our communications during this incident. You want more transparency, more in-depth information, and fewer “we are working on it” posts. Well, those, and : 1. Speed. It took days for heroku customers to be told about this. 2. Customers sign up at "heroku.com", the platform is called "Heroku", the CLI is "heroku", everything's heroku, so don't send emails from a parent company (Salesforce…

> 2. Customers sign up at "heroku.com", the platform is called "Heroku", the CLI is "heroku", everything's heroku, so don't send emails from a parent company (Salesforce), send them from "Heroku". They're working on something called "Project Periwinkle" that is intended to remove all Heroku branding and make everything Salesforce branded. Periwinkle being a colour between blue (salesforce) and purple (heroku). No mor…

> [..] No more Heroku signups, you'll need a Salesforce account to use it. No more free tier either.

Guess I'm packing it up as I'm no longer seen as target audience (its my hobby project platform)

> New features have been banned for years. Only "keep the lights on" projects are allowed.

What???

Re: Heroku: We’ve Heard Your Feedback

#87

Earlier quoted context omitted.

Sorry but Render at their lunch entirely. Try it. https://render.com/docs/deploy-rails Want simple? Use a build.sh Want a bit complexity? Use a Dockerfile. Their docs are really copy paste for 99.9% applications. Whoever in that company made the decision to invest in docs was right on the money. It made switching to them a much easier choice. https://render.com

> Whoever in that company made the decision to invest in docs was right on the money. Also the reason Django has always been so approachable (particularly in the early days, as it is orders of magnitude more complex now) and therefore popular Older still, IMHO also why mIRC scripting was so much fun despite its shortcomings. The help file had literally everything you could want to learn about the language and it almo…

+1, Django docs were gold standard when I last used it. Also DRF. I still miss them, 5 years later.

Re: Heroku: We’ve Heard Your Feedback

#88
post #18

> We’ve heard your feedback on our communications during this incident. You want more transparency, more in-depth information, and fewer “we are working on it” posts. Well, those, and : 1. Speed. It took days for heroku customers to be told about this. 2. Customers sign up at "heroku.com", the platform is called "Heroku", the CLI is "heroku", everything's heroku, so don't send emails from a parent company (Salesforce…

> 2. Customers sign up at "heroku.com", the platform is called "Heroku", the CLI is "heroku", everything's heroku, so don't send emails from a parent company (Salesforce), send them from "Heroku". They're working on something called "Project Periwinkle" that is intended to remove all Heroku branding and make everything Salesforce branded. Periwinkle being a colour between blue (salesforce) and purple (heroku). No mor…

Well, that’s sad. I guess it’s Fly or Digital Ocean for all future projects then.

Re: Heroku: We’ve Heard Your Feedback

#89
post #71
post #67

> Additionally, we have no evidence that the attacker has accessed any customer accounts or decrypted customers’ environment variables. Now the attackers had access to encrypted environment variables?

More context, from the latest email notification: > We also wanted to address a question regarding impact to environment variables. While we confirmed that the threat actor had access to encrypted Heroku customer secrets stored in config var, the secrets are encrypted at rest and the threat actor did not access the encryption key necessary to decrypt config var secrets.

> and the threat actor did not access the encryption key necessary to decrypt config var secrets.

If the threat actor had access to any of the systems that use the key, they may not have needed to. Even this statement isn't clear that they couldn't have done it, but suggests that they don't think it's true...

This is really bad incident response messaging.

Re: Heroku: We’ve Heard Your Feedback

#90
post #18

> We’ve heard your feedback on our communications during this incident. You want more transparency, more in-depth information, and fewer “we are working on it” posts. Well, those, and : 1. Speed. It took days for heroku customers to be told about this. 2. Customers sign up at "heroku.com", the platform is called "Heroku", the CLI is "heroku", everything's heroku, so don't send emails from a parent company (Salesforce…

> 2. Customers sign up at "heroku.com", the platform is called "Heroku", the CLI is "heroku", everything's heroku, so don't send emails from a parent company (Salesforce), send them from "Heroku". They're working on something called "Project Periwinkle" that is intended to remove all Heroku branding and make everything Salesforce branded. Periwinkle being a colour between blue (salesforce) and purple (heroku). No mor…

Periwinkle never materialized. Neither did Shinrai, or a number of other projects that people brought up in hn threads about this incident. It’s clear that Heroku has lost a ton of great talent and momentum due to questionable business decisions but some of the most controversial fail to ever make it past codename status.
Post reply on HN