Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: A web debugger an ex-Cloudflare team has been working on for 4 years

news.ycombinator.com

Post reply on HN
Print view View original

61–70 of 240 posts

Re: Show HN: A web debugger an ex-Cloudflare team has been working on for 4 years

#61

Post by Bilal_io »

thedg wrote: post #18
Thaxll wrote: post #14

"network tab" isn't it a security concern to record API calls? Also how future proof it is with Google changing Chrome addons permissions / API etc...?

Great concern! We do two things to address that: The first is nothing gets recorded and saved (or even sent to our backend) until the user actively chooses to log a bug. So it’s like actively choosing to save a HAR file when there’s a bug. The second is we scrub all network requests on the client side for anything that resembles PII or sensitive data. We just don’t want it on our servers. Is there anything else you t…

I see in the Security page [0] that you filter out headers that you think are PII or tokens. And I see that you're willing to receive feedback via email. I don't think this approach is scalable, for the main reason that sometimes we use custom headers to pass tokens.

My suggestion is to have a setting that lists default headers you think should be obfuscated, and the user/team can remove and add to them as they like.

0. https://jam.dev/docs/product-features/dev-tools/security

Re: Show HN: A web debugger an ex-Cloudflare team has been working on for 4 years

#62

Post by dotBen »

tiffanyh wrote: post #37

Too cheap. It seems extremely inexpensive. Even though it's not a direct comparison, look at https://www.hotjar.com/pricing/ (and switch to the "pay by month" pricing view)

Looks like the Jam team have some great investors who will steer them correctly but the founders need to consider whether they can raise the amounts needed the same way Matthew and Michelle (founders of CloudFlare) could back in the day - which enabled the generous CF freemium model and turned the company into the $25bn company it is today.

From a funding perspective things are very different than when CF started.

Re: Show HN: A web debugger an ex-Cloudflare team has been working on for 4 years

#65

Post by n00bskoolbus »

Nice! I remember when this tool launched and I checked it out. It's really nice to use with easy to setup integrations. The instant replay feature especially is super cool! My biggest request would be to please add a Firefox extension!

The Jam team seems like a talented and good group of people. I applied a while back and while I was turned down I got an actual human response from the team. They also did a push to ask for input on improvements for Jam maybe a year ago and offered to donate $25 (iirc) to St Judes for every person who responded.

Re: Show HN: A web debugger an ex-Cloudflare team has been working on for 4 years

#66

Post by tharkun__ »

Looks awesome, thanks for sharing. I definitely am also fighting with this. Common complaints "where is the video?" "where is the HAR file" etc. Their repro steps are usually bad.

So automatic repro steps sound great.

Looking at the homepage on that though it seems way too detailed and will fall prey to how I see our support and PM staff reporting bugs via videos they record today already: too many clicks and steps that are not necessary and when I try the exact same thing it works correctly.

The hard part of proper steps to reproduce is to reproduce it with a minimal set of steps that are also actually reproducible "from zero".

(of course there are some bugs that are very specific to some specific customers data you won't be able to repro but they are in the minority at least for us)

How do you solve that part?

Re: Show HN: A web debugger an ex-Cloudflare team has been working on for 4 years

#67

Post by toekneestuck »

sandstrom wrote: post #55

Some thoughts: - Make the scrubbed headers configurable (if it isn't already). For example, our token header is called `X-Session-Token` and is passed on every request. Would your current regex scrub this? - Maybe clarify that the seat (pricing) is for recorders, not for people viewing them (which I think is a reasonable choice). - Would be nice to configure auto-deletion of Jams after X days. We'd probably go with 1…

[I work at Jam]

- Yep, your header would be scrubbed by our default definition. And also: yes definitely, configurable scrubbing is on our radar/an inevitability. Sensible defaults has been our goal, but we're definitely aware that any given keyword may be sensitive to one company but not be to another! (e.g, an address in the context of a healthcare org's patients may be sensitive, but likely wouldn't be considered sensitive for an MLS search product)

- Re: Sentry — Makes sense! There's likely a lot of team-level configuration we can add for integrations over time

- Re: Linear — that's a good question. We used to have much deeper integration with some third parties, so I think we may be able to tighten up some of those scopes. I created a ticket for us to follow up on this, thank you!

Re: Show HN: A web debugger an ex-Cloudflare team has been working on for 4 years

#68

Post by thedg »

tharkun__ wrote: post #66

Looks awesome, thanks for sharing. I definitely am also fighting with this. Common complaints "where is the video?" "where is the HAR file" etc. Their repro steps are usually bad. So automatic repro steps sound great. Looking at the homepage on that though it seems way too detailed and will fall prey to how I see our support and PM staff reporting bugs via videos they record today already: too many clicks and steps t…

It’s a super interesting problem

I wonder if soon LLMs are going to be able to help us get automatic repro steps to be exactly the right level of detail for an engineer.

Re: Show HN: A web debugger an ex-Cloudflare team has been working on for 4 years

#69

Post by thedg »

n00bskoolbus wrote: post #65

Nice! I remember when this tool launched and I checked it out. It's really nice to use with easy to setup integrations. The instant replay feature especially is super cool! My biggest request would be to please add a Firefox extension! The Jam team seems like a talented and good group of people. I applied a while back and while I was turned down I got an actual human response from the team. They also did a push to as…

Thank you so much!! And so kind of you to say, you just made my day.

Firefox version - totally agree. We have to do it. I promise we will :)

Re: Show HN: A web debugger an ex-Cloudflare team has been working on for 4 years

#70

Post by thedg »

TacticalCoder wrote: post #57

> but the important information the engineer needed was what was actually right outside the boundary of the screenshot I took Ah ah. At one gig we had trained the users to always send a screenshot of the entire screen. People reviewing the tickets would dump them if the screenshot was cropped and the user warned: "No full screenshot, no ticket" . Why? The most important info was the time at which the error happened (…

Ha! Right, totally!

That’s a great trick to get the exact time from full screenshot

Post reply on HN