Live data from Hacker News

A fast and static web server for serving web apps

shortfin.io

11–20 of 135 posts

Re: A fast and static web server for serving web apps

#12
post #6

>wget http://shortfin.io/install.sh && sh install.sh Isn't it recommended that any project doing one-line installs use HTTPS?

Side-note for the author: the download can be made more elegant that way

    $ curl http://shortfin.io/install.sh | sh
I definitely agree with the HTTPS. For example this is what meteor proposes:

    $ curl https://install.meteor.com | sh

Re: A fast and static web server for serving web apps

#13
post #6

>wget http://shortfin.io/install.sh && sh install.sh Isn't it recommended that any project doing one-line installs use HTTPS?

... and especially not if you're suggesting run it as root. You should never run anything as root unless you know what it is. Having it over HTTP vs HTTPS makes things really bad though.

Re: A fast and static web server for serving web apps

#14
post #4

I don't get it. You create a server to solve C10K problem, and then host its own website with nginx? Why? Having HN crowd coming and testing your server would be a great test, no?

From the footer:

> It was created in 2011 by Timothy E. Johansson and is the base for the send-API and the tracking server for AlphaMail.

> It also powers this website (though behind nginx). You can reach it directly on port 88: shortfin.io:88

Re: A fast and static web server for serving web apps

#18
I was going to say that there are *~ files in the repository, they should tidy a little bit because things like that don't look good.

Then I thought may be I was being a little bit to picky and unfair, so I checked the code of some random files and... well, it looks like it was part of a learning experience but it definitely needs work before being considered a viable option.

Re: A fast and static web server for serving web apps

#19
post #11

Just run the following command as root to install the server. # wget http://shortfin.io/install.sh && sh install.sh What? Are they serious? Is this becoming a thing? Please don't tell me that this is a thing.

This has been a thing since the mid-90s when you could execute 'telnet sci.dixie.edu 1 | sh' to install an IRC client. It preys on the clueless and one of these days, some project that uses this install method is going to get owned and a bunch of machines will get malware.

Then again, most of us blindly run what we assume to be GNU autoconf scripts and never read Makefiles before we 'make install' as root. Nor do most of us read or audit source code, even for security-sensitive applications.

Re: A fast and static web server for serving web apps

#20
What's a "static web server"? I haven't seen this term.

A webserver for only static pages, i.e. it won't talk to a runtime? But it's "for serving web apps", this means all the dynamic content is pulled from client side JS? Then you would still need programs on the server to answer AJAX requests.

I did not find an explanation on the page or by Googling.

Post reply on HN