Live data from Hacker News

Show HN: Collections, a fast multiple-account Google Docs client for Mac

beta.collections.me

41–50 of 101 posts

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#41

psql -h ec2-107-22-171-68.compute-1.amazonaws.com -p 5732 -U u1npugarlguimh -d ddbs2kvmqeieon Since DEBUG=True, finding the password is left as a trivial exercise for the reader. I wouldn't trust the service until they fix the issue.

Hi thomas-st, thanks a lot for bring this up. we just fixed the issue and changed credentials on the server as well. All transmission also happen securely through HTTPS and contents are only stored on Google's server, not ours.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#42
post #41

psql -h ec2-107-22-171-68.compute-1.amazonaws.com -p 5732 -U u1npugarlguimh -d ddbs2kvmqeieon Since DEBUG=True, finding the password is left as a trivial exercise for the reader. I wouldn't trust the service until they fix the issue.

Hi thomas-st, thanks a lot for bring this up. we just fixed the issue and changed credentials on the server as well. All transmission also happen securely through HTTPS and contents are only stored on Google's server, not ours.

Since you store the Google auth_token couldn't anyone with access to the database also gain access to sessions?

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#43

Kind of confused by this heroku error message I received? Are you storing my gmail credentials on heroku? When I tried again I have a google /looking/ login screen? http://cl.ly/1p0M0o2t0H1E3Z1h3i0n

I think they are mimicking the Google Login page and just saving your username/password. Seems damn fishy to me.

no. these guys are legit. they work in our sandhill office. They're not out to steal your login credentials.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#44
post #7

This is awesome. Are there any plans to port this to other platforms?

Thanks! There certainly are, but not for a little while. Which would you prefer we support first?

Personally, I would love a native Linux version. Especially since there's no official Google Drive client currently available for Linux.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#45
post #41

psql -h ec2-107-22-171-68.compute-1.amazonaws.com -p 5732 -U u1npugarlguimh -d ddbs2kvmqeieon Since DEBUG=True, finding the password is left as a trivial exercise for the reader. I wouldn't trust the service until they fix the issue.

Hi thomas-st, thanks a lot for bring this up. we just fixed the issue and changed credentials on the server as well. All transmission also happen securely through HTTPS and contents are only stored on Google's server, not ours.

You should also notify any users who already signed up and stored their access token in the database.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#46
Hi --

I suggest you not use this app right now. It is currently throwing up debug pages that include information that allows someone to connect to Postgres and dump the database containing information about your documents.

App developers -- please update your Heroku settings and/or turn this off immediately. You are exposing confidential company information to the wild.

Thanks.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#47
post #6

I know that this isn't really related to the application, but anyway... Please, don't let the browser scale the images for you. I don't like opening a site, and seeing something like this ( http://sadpanda.us/images/1078451-DUYING8.png ). Beside that, this client seems something really awesome, especially the ability to easily edit docs from different accounts.

What browser are you using? I thought modern browsers did a better job of scaling. Chrome does, at least.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#48

Kind of confused by this heroku error message I received? Are you storing my gmail credentials on heroku? When I tried again I have a google /looking/ login screen? http://cl.ly/1p0M0o2t0H1E3Z1h3i0n

I haven't used this so I'm not sure what's going on, but I believe OAuth involves a redirect back to servers controlled by the third party to actually do something with the authentication token. This doesn't strike me as necessarily fishy.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#49
post #2

Super nice, but I worry about the slower webkit in webview. If it is much slower, you would get a better experience in the browser, despite the nice UI additions in this app.

Why would an embedded web view be slower than Safari on a Mac? Mac OS doesn't have the restrictions on generated code that iOS does.

Plus he could always embed WebKit or Chromium.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#50
post #41

psql -h ec2-107-22-171-68.compute-1.amazonaws.com -p 5732 -U u1npugarlguimh -d ddbs2kvmqeieon Since DEBUG=True, finding the password is left as a trivial exercise for the reader. I wouldn't trust the service until they fix the issue.

Hi thomas-st, thanks a lot for bring this up. we just fixed the issue and changed credentials on the server as well. All transmission also happen securely through HTTPS and contents are only stored on Google's server, not ours.

Actually, your Postgres credentials still work. I am currently able to connect to the database and I can still view people in the role I grabbed.

I'm not sure how to validate that this is still timely, though... oh, I created a table:

public | hacker_news_1342216769 | table | ruwdncbzdkulsh

With the current timestamp. So, if you changed anything, it hasn't actually taken effect in the part that matters -- the exposed database.

Post reply on HN