Live data from Hacker News

Show HN: I got hacked, felt paranoid, made an app – GlassWire

glasswire.com

161–170 of 341 posts

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#162

All software related to security should be open source. This particular piece of software doesn't sit at a crucial point in a secure system, but a greater deal of transparency would be appreciated. I personally avoid using closed-source tools for security purposes, and especially closed-source tools that are hoping to monetize. I use Linux, though, so I guess it doesn't really matter to me in this case :) I would als…

As a (unworthy, since I happen to use proprietary software accidentally) believer in Free Software, I tend to agree, but since that's unlikely to happen, I'd say all security-related software should be at least fully auditable by end-user. That is, there must be either 1) some form of human-readable (i.e. unobfuscated) source code and means to validate the built binaries to match the provided sources or 2) means to easily decompile the binaries to a human-readable high-level language and study their behavior.

That is, one of the first things this GlassWire app did is connection to its home server. It openly admitted that itself, but nonetheless, why it did so and what kind of data (~200+ KiB, that's a fair amount that probably exceeds any analytic and update-checking needs) were transferred — I have no idea and I'm too lazy to figure out.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#163
I know saying just 'Wow, what a beautiful, useful app' doesn't really add much to the discussion, but it's all I can muster.

Beautiful app. Amazingly designed. Insanely useful with zero configuration. Would love to pay money for this, especially if you can bring this sort of zero click usability to a LAN environment.

Congratulations!

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#164

I wonder if the OP should set up UserVoice or similar for feature requests/voting. My wishes: * A pay-once Pro version * A plugin API so I can add my ISPs usage monitor * Per-app bandwidth limiting (difficult on Windows I think)

Good idea! How could we plugin with your ISP exactly? Any ideas that would work for a majority of people? We're still investigating that idea.

Doing this generically is a hard thing. I'd say pull apart http://netusage.iau5.com/ and see how that works. I feel like ISP usage APIs are mainly an Australian thing (and some of those will work via screen scraping).

Supporting Telstra, TPG, Internode and iiNet would get you a large number of Australians, but I have no idea how you'd do the same for Comcast or Time Warner Cable.

Contact details are in my profile and I'm happy to be a guinea pig for this kind of thing.

Edit: This looks pretty good, actually - http://netusage.iau5.com/ispjs.html

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#165

Wow. I hate how so many Windows applications are considerably uglier compared to Mac counterparts. The Windows apps don't seem to push forward Windows design but rather get stuck in the Windows XP design days. This is beautifully designed and clear. The graph visualization is prime, and I love that the peaks are "rounded" out instead of sharp declines (sharp declines would make it look more like a live stock ticker).…

I'm a Windows user (go on, press the down arrow) and I don't care about app design. Give me military ship grey windows, text menus and a way to hide all icons. Windows 2000 was for me the apogee of 2D design.

> go on, press the down arrow

There you go. Nothing wrong with the comment, but since you asked...

The people mentioning "this is an unpopular opinion", "why the downvotes" or "this will be downvoted to hell" always get the upvotes and indeed, I see the comment doesn't turn gray when I downvote so it means others already upvoted.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#167
post #67
post #23

Earlier quoted context omitted.

GitHub for Windows is another beautifully designed Windows app. They even published a blog post about it: https://github.com/blog/1151-designing-github-for-windows

that app has less features than a rock.

Finally. I thought I was stupid for not being able to help the Windows guys in class with their git guis.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#168

All software related to security should be open source. This particular piece of software doesn't sit at a crucial point in a secure system, but a greater deal of transparency would be appreciated. I personally avoid using closed-source tools for security purposes, and especially closed-source tools that are hoping to monetize. I use Linux, though, so I guess it doesn't really matter to me in this case :) I would als…

> All software related to security should be open source

Why just security-related software? It doesn't get special permissions or anything. All software can do equal damage on most operating systems.

> I personally avoid using closed-source tools for security purposes

I too prefer open source tools for security purposes, but that means that for security purposes I prefer all my software to be open source.

Re: Show HN: I got hacked, felt paranoid, made an app – GlassWire

#170

Earlier quoted context omitted.

That may be the case, but it's still not acceptable in my opinion. Calling home to fetch a new database of malicious hosts and such is fine, but calling home for analytics is not okay. At the very least, clearly disclose it and make it easy to opt out.

Out of curiosity, do you have any security concerns about calling home for analytic or is it just you would prefer the privacy of not having your usage tracked?

If it's opt-in, I enable it. If it's opt-out, I disable it.

For me it's a matter of principle. That people politely ask is both an indication of trustworthiness and how I prefer things to be, so I try to help by enabling it.

It also depends on the way they ask. Mozilla Firefox for Android tells me that I should choose what I share, enabling crash reports and disabling telemetry by default. Even though the crash report is technically opt-out, they ask me in clear terms. I like that.

Post reply on HN