31–40 of 56 posts
May consider switching and using your library!
Thanks for sharing this :)
How does this compare against something like Full Story?
Looks really cool, but I find myself thinking about the privacy implications of using this, especially by default. Even if the user gives consent, it still implies recording every single mouse movement and keystroke on the site. Has this been normalised? Is this the new default? Food for thought.
So another passion of rrweb is to teach people the 'power' of the modern browsers, and I also wish rrweb has a chance to improve the standard of web privacy.
Great work yz-yu. Hope you've learned a lot- I've personally found the session replay space to be incredibly rewarding. However, as a session replay industry competitor and a former security researcher for most industry players, I caution anyone thinking of using a side-project like this on production applications to proceed slowly with care. Security and Privacy are extremely hard to get right here. The tricky thing…
Quote from my introduction blog post:
===
Today we already have some commercial session replay products like Logrocket, Fullstory, etc.
If you are just looking for a ready-to-use tool and would like to pay for its service, I would recommend you to use the above products, because they have well-tested backend services that can store the data for you and perform some higher order features.
===
So I don't think rrweb is a competitor of these commercial products.
Actually, I would like to see rrweb grows into a base of many commercial products in the future, which means it handles most of the privacy and security issues, so the other developers can build many fancy projects base on it without spending time on the hard part again and again.
Great work yz-yu. Hope you've learned a lot- I've personally found the session replay space to be incredibly rewarding. However, as a session replay industry competitor and a former security researcher for most industry players, I caution anyone thinking of using a side-project like this on production applications to proceed slowly with care. Security and Privacy are extremely hard to get right here. The tricky thing…
Great work yz-yu. Hope you've learned a lot- I've personally found the session replay space to be incredibly rewarding. However, as a session replay industry competitor and a former security researcher for most industry players, I caution anyone thinking of using a side-project like this on production applications to proceed slowly with care. Security and Privacy are extremely hard to get right here. The tricky thing…
Great work yz-yu. Hope you've learned a lot- I've personally found the session replay space to be incredibly rewarding. However, as a session replay industry competitor and a former security researcher for most industry players, I caution anyone thinking of using a side-project like this on production applications to proceed slowly with care. Security and Privacy are extremely hard to get right here. The tricky thing…
To add to the key point about privacy, this research from Princeton is really illuminating and scary: https://freedom-to-tinker.com/2017/11/15/no-boundaries-exfil...
Companies like Walgreens should be entirely to blame.
I really do appreciate how they author(s) in that report uncovered how those services where used in practice.
[I'm not with any party listed in the report]
I checked the DOM of a angularjs app and when I enter something in the input field, its not appearing in the DOM at all.
Great work yz-yu. Hope you've learned a lot- I've personally found the session replay space to be incredibly rewarding. However, as a session replay industry competitor and a former security researcher for most industry players, I caution anyone thinking of using a side-project like this on production applications to proceed slowly with care. Security and Privacy are extremely hard to get right here. The tricky thing…
Or some great resources maybe?
I know of the obvious ones like OWASP; but that only scratches the surface.