Live data from Hacker News

Heroku: We’ve Heard Your Feedback

blog.heroku.com

111–120 of 151 posts

Re: Heroku: We’ve Heard Your Feedback

#111
post #7

Heroku has always been the opposite of transparent. I still don't forget how they handled the Intelligent Routing fiasco from back in the day.

Maybe that’ll change, there’s a new Sheriff in town as the saying goes? Bob was previously General Manager of AWS Elastic Kubernetes (EKS) which seemed to have a good reputation and to engage with its customers pretty well.

EKS was really bad in it's first days.

Re: Heroku: We’ve Heard Your Feedback

#112

Earlier quoted context omitted.

Is Matz still there?

Matz might have been on the payroll, but he never really worked for Heroku.

Sure, that was always clear enough. I'm asking whether or not the arrangement continues.

Re: Heroku: We’ve Heard Your Feedback

#113

Earlier quoted context omitted.

They got hacked about a month ago and have been extremely cagey about what exactly was hacked ever since. Turns out the master database with encrypted username/passwords got leaked and encrypted environment variables were also leaked but it was like pulling teeth to get them to answer whether or not these happened or even admit that it might have been possible. Presumably more than this was also leaked but so far the…

> Turns out the master database with encrypted username/passwords got leaked and encrypted environment variables were also leaked WTF!!!! That alone is disastrous enough, they should be reprimanded for this. Are there I'm sure, class action lawsuits happening? How much of an impact will this have on Salesforce? I mean imagine the data from that alone would be immensely valuable.

I should've said "hashed" not encrypted passwords. But the env vars are the real problem. They haven't categorically dismissed the hacker somehow getting access to the actual environment variables either. Only said there isn't evidence of that happening.

If it comes out that the hacker did get to unencrypted env vars I think it's game over for Heroku. Nobody should trust them with sensitive data.

Re: Heroku: We’ve Heard Your Feedback

#114

So I looked at their product offerings and the Wikipedia page about Heroku and I'm still left scratching my head as to what it actually even is. They basically rent out other cloud computer providers' time at a higher price and make you use some kind of shitty middleware? Is that all this actually is? Please help me to understand what in the hell this even is.

You broadly have it right, but it's not "shitty" middleware, despite their problems the actual process of launching an app on Heroku is stellar and was especially groundbreaking 10 years ago. It would provision a server, install dependencies, configure, then launch your app just by pushing a git repository to them.

They were the gold standard for rails deployments back in the day when rails was popular—which was important since rails was actually pretty hard to host on a server compared to say PHP.

Re: Heroku: We’ve Heard Your Feedback

#115

Earlier quoted context omitted.

The amount of Salesforce fluff in the post is quite palpable. There is a clear lack of control with the leaders in Heroku judging off this post because of the salesforce transition. This project Periwinkle sounds awful. Basically thats the end of using Heroku for us. If it remains like this its something to judge from.

There really aren't any Heroku leaders anymore. I think anyone director level or higher is Salesforce—not Heroku. It's worth mentioning that this isn't a result of Salesforce acquiring Heroku. That happened 12 years ago when Heroku was next to nothing. Salesforce gets credit for investing in and making Heroku. Why they ultimately have decided to give up on it I have no idea. I hear it's because salespeople had a hard…

>I have no idea. I hear it's because

So you had an idea after all?

Re: Heroku: We’ve Heard Your Feedback

#116
post #94
post #71

Earlier quoted context omitted.

More context, from the latest email notification: > We also wanted to address a question regarding impact to environment variables. While we confirmed that the threat actor had access to encrypted Heroku customer secrets stored in config var, the secrets are encrypted at rest and the threat actor did not access the encryption key necessary to decrypt config var secrets.

Where do I find those notifications? I only got a single email, stating I should "reset my user password as mentioned in our previous notification". Nothing prior, nothing since, and their password reset form shows nothing but "Internal Server Error". I've been getting some details from HN but I think I'm missing a lot of the picture since they obviously don't send everyone every email.

I have 21 emails from them with the subject "[Issue] Heroku Security Notification", since this started.

Re: Heroku: We’ve Heard Your Feedback

#117
post #61

Earlier quoted context omitted.

> 2. Customers sign up at "heroku.com", the platform is called "Heroku", the CLI is "heroku", everything's heroku, so don't send emails from a parent company (Salesforce), send them from "Heroku". They're working on something called "Project Periwinkle" that is intended to remove all Heroku branding and make everything Salesforce branded. Periwinkle being a colour between blue (salesforce) and purple (heroku). No mor…

Any suggestions on a rival PaaS that has a similar engineering philosophy to the old Heroku?

There's Clever Cloud which I use personally

Re: Heroku: We’ve Heard Your Feedback

#118
post #25

As a former herokai, communication was always the #1 point of discussion internally. This idea that they "can" do better is a half truth. They DID do better. I leave it as an exercise to the reader to determine what the limiting resource was here. By the way, how many senior devs and cofounders are left at Heroku Bob? Why doesn't it show up at dreamforce anymore?

I knew the writing was on the wall for Heroku a few years back. I had asked a group of Salesforce sales reps about Heroku Connect (two-way sync between postgres and salesforce - amazing!), and they had no absolutely no idea what it was. They checked back with their team and weren't able to get any information. We basically couldn't buy it.

That's crazy! I work with Salesforce reps a lot for some pre-sales bids and they've been pushing connect (both salesforce connect and heroku connect) for the last few years. Cost is in the range of 5k/m or so for salesforce connect (from what I recall).

Re: Heroku: We’ve Heard Your Feedback

#119

“I have a lifelong enthusiasm for developers and the experience they have building software together” And then drops a link to contact them, via LinkedIn… LinkedIn is the polar opposite of GitHub. It’s the worst example of social media, from its news feed, to spam invites. And it’s broken every rule in the “be a good netizen” play book, from constant spam, to slurping your email contacts and surveillance to the extre…

> LinkedIn is the polar opposite of GitHub. It’s the worst example of social media, from its news feed, to spam invites.

I agree with the general sentiment of your comment, but LinkedIn is the worst? Really?

I can think of a couple social media platforms that add less value to society.

LinkedIn has helped democratise the recruitment landscape significantly across many parts of Africa; we rely on it extensively.

Not wanting to pick a fight here, but that’s one helluva hyperbole I just couldn’t let slide ^_^

Post reply on HN