Live data from Hacker News

Create a web app from scratch in under 5 minutes with Meteor and Mailgun

blog.mailgun.net

31–40 of 112 posts

Re: Create a web app from scratch in under 5 minutes with Meteor and Mailgun

#31
post #27

> $ meteor add email > This package is automatically configured to send emails (up to 300 per day) through Mailgun I'm not sure I like having 'email' linked to a specific service. But maybe that's the Meteor way?

You can use other things, but if you want to use one instantly with zero configuration, there's this.

Re: Create a web app from scratch in under 5 minutes with Meteor and Mailgun

#32
post #27

> $ meteor add email > This package is automatically configured to send emails (up to 300 per day) through Mailgun I'm not sure I like having 'email' linked to a specific service. But maybe that's the Meteor way?

You can use other things, but if you want to use one instantly with zero configuration, there's this.

That's correct. Here is a quote from the meteor blog announcing this feature: " But there's more than just an API. We've partnered with Rackspace's Mailgun team so that every app deployed with $ meteor deploy can send email right away, without any annoying configuration process. These automatic accounts are capped at 200 messages a day, but of course you're not tied to them. You can use any SMTP server (your own box, a paid Mailgun account, or anything else) just by setting the $MAIL_URL environment variables, whether you're using our deploy servers or running your own bundles."

Re: Create a web app from scratch in under 5 minutes with Meteor and Mailgun

#33
post #28

$ curl https://install.meteor.com | sh I really wish people would stop giving instructions like this. Despite all the focus on web security and sandboxing, we continue to instruct people to run arbitrary code on their user account. People should at least give any shell script they download from the internet a cursory look to see if it's doing what it should be doing instead of blindly executing the response from an H…

At least it's https; I've seen sites on HN recently[1] that suggest you run code pulled over plain http, as if that wasn't an even more horrible security risk than just blindly running a script from the Internet.

[1] http://chocolatey.org/

Re: Create a web app from scratch in under 5 minutes with Meteor and Mailgun

#34

whats the difference between mailgun and sendgrid?

Full disclosure: I am the OP and work at Mailgun

This is tough for me to answer objectively, but I'll do my best.

Both services offer many of the same features and eliminate the pain of managing your own email server. Both services will achieve better deliverability at scale than managing your own server unless you know what you are doing and most people aren't interested in diving that deep into email.

Mailgun is very focused on serving developers and that guides our product roadmap. Therefore, we don't offer features like WYSYWIG newsletter creation tools. We build everything API first and we strive to make them RESTful, intuitive and well documented. Admittedly, our GUI / control panel is not the strongest part of the product. We also focus a lot on incoming email and we are pretty proud of our inbound email parsing through Routes. Mailgun is owned by Rackspace (acquired in Aug 2012).

Sendgrid is definitely the largest transactional email sender in the market. I recently read they do something like 7 billion emails monthly. They have more tools for non-developers like newsletter creators and support language wrappers that some developers prefer. They also offer inbound through their Parse App. Sendgrid is an independent, private company that has raised $27.4mm in funding according to Crunchbase [1].

My recommendation would be to try both - the docs are all online and both offer free plans to test with.

[1] http://www.crunchbase.com/company/sendgrid

Re: Create a web app from scratch in under 5 minutes with Meteor and Mailgun

#35
post #28

$ curl https://install.meteor.com | sh I really wish people would stop giving instructions like this. Despite all the focus on web security and sandboxing, we continue to instruct people to run arbitrary code on their user account. People should at least give any shell script they download from the internet a cursory look to see if it's doing what it should be doing instead of blindly executing the response from an H…

I don't understand this argument, unless you include things like gem, pip, npm, etc.

`pip install foobar-py` runs a Python setup script, which can do anything bash can. Do you inspect all of those, and comment about their insecurities on HN?

Re: Create a web app from scratch in under 5 minutes with Meteor and Mailgun

#37
post #18

"Type this code and run it". Hey, I can teach you the theory of relativity in 30 seconds: type this "e=mc2".

O'Reilly: Teach yourself xyz in 14 days...

Me: But...but..how does this all work? Why?

Harvard University Press: Why? That's us! Dude check us out !! The 600 page book on the top rung with no cool memes and 1980 typeface. That's us.

Re: Create a web app from scratch in under 5 minutes with Meteor and Mailgun

#39
post #28

$ curl https://install.meteor.com | sh I really wish people would stop giving instructions like this. Despite all the focus on web security and sandboxing, we continue to instruct people to run arbitrary code on their user account. People should at least give any shell script they download from the internet a cursory look to see if it's doing what it should be doing instead of blindly executing the response from an H…

I don't understand this argument, unless you include things like gem, pip, npm, etc. `pip install foobar-py` runs a Python setup script, which can do anything bash can. Do you inspect all of those, and comment about their insecurities on HN?

Don't these generally do some sort of cursory signature check?

Re: Create a web app from scratch in under 5 minutes with Meteor and Mailgun

#40
post #28

$ curl https://install.meteor.com | sh I really wish people would stop giving instructions like this. Despite all the focus on web security and sandboxing, we continue to instruct people to run arbitrary code on their user account. People should at least give any shell script they download from the internet a cursory look to see if it's doing what it should be doing instead of blindly executing the response from an H…

I don't understand this argument, unless you include things like gem, pip, npm, etc. `pip install foobar-py` runs a Python setup script, which can do anything bash can. Do you inspect all of those, and comment about their insecurities on HN?

This method makes you vulnerable to attacks that change the script being run. DNS spoofing, HTTP proxy hacking or hacking of the source server itself.

Good package management systems use digital signatures to ensure that the original package wasn't tampered with. Not that hacking of the central repositories never happened, but it's a major (and thus infrequent) event.

Post reply on HN