Live data from Hacker News

Heroku CI and Review App Secrets Compromised

news.ycombinator.com

31–40 of 98 posts

Re: Heroku CI and Review App Secrets Compromised

#31
post #21
post #18

I spent the last two days migrating my company to Render from Heroku, and now I'm glad I did. Render is a little rough around the edges; Heroku is far more polished. But it's probably to Render's credit that, in my opinion, the most annoying thing about Render is that it's impossible to google about Render because "render" is such a common word in the tech world! Their support is good and responsive, and the develope…

We just started planning our transition, as well. This was handled so poorly I can't imagine anyone would ever plan to start a new project on their platform.

What happened?

Re: Heroku CI and Review App Secrets Compromised

#32
post #18

I spent the last two days migrating my company to Render from Heroku, and now I'm glad I did. Render is a little rough around the edges; Heroku is far more polished. But it's probably to Render's credit that, in my opinion, the most annoying thing about Render is that it's impossible to google about Render because "render" is such a common word in the tech world! Their support is good and responsive, and the develope…

How did the pricing compare? What was the Render server needed to match what you were using with the Heroku Dyno? I run a high-traffic nonprofit edtech app that runs on 3-5 Heroku L Dynos, and I'm curious how well Render will perform at this level.

Off the top of my head, I'd say Render is a little more expensive at the lower tiers and less expensive at the higher tiers.

Re: Heroku CI and Review App Secrets Compromised

#33
post #18

I spent the last two days migrating my company to Render from Heroku, and now I'm glad I did. Render is a little rough around the edges; Heroku is far more polished. But it's probably to Render's credit that, in my opinion, the most annoying thing about Render is that it's impossible to google about Render because "render" is such a common word in the tech world! Their support is good and responsive, and the develope…

I also intend to deploy some new services on render (having previously used Heroku).

I was debating between render & fly, which I've also had my eye on and may still try for something else in the future.

Re: Heroku CI and Review App Secrets Compromised

#34
post #31
post #21

Earlier quoted context omitted.

We just started planning our transition, as well. This was handled so poorly I can't imagine anyone would ever plan to start a new project on their platform.

What happened?

https://hn.algolia.com/?dateRange=pastMonth&page=0&prefix=fa...

Re: Heroku CI and Review App Secrets Compromised

#35
post #33
post #18

I spent the last two days migrating my company to Render from Heroku, and now I'm glad I did. Render is a little rough around the edges; Heroku is far more polished. But it's probably to Render's credit that, in my opinion, the most annoying thing about Render is that it's impossible to google about Render because "render" is such a common word in the tech world! Their support is good and responsive, and the develope…

I also intend to deploy some new services on render (having previously used Heroku). I was debating between render & fly, which I've also had my eye on and may still try for something else in the future.

I think Fly will be great, but it's not there yet. I migrated to Render.

Re: Heroku CI and Review App Secrets Compromised

#37

Has anyone done a load test comparison for Heroku vs. Render.com? The "Pro Ultra" on Render is $450/month for 32 GB RAM + 8 CPU. The Heroku Performance L Dyno is $500 a month for 14 GB RAM. The Render server seems like a much better offering.

Has anyone done a security review of Heroku alternatives? I see lots of comments about moving there and using them instead of Heroku because of this incident. But that's hardly a justifiable reason alone, since those new platforms are probably worse off in security.

Re: Heroku CI and Review App Secrets Compromised

#39
post #18

I spent the last two days migrating my company to Render from Heroku, and now I'm glad I did. Render is a little rough around the edges; Heroku is far more polished. But it's probably to Render's credit that, in my opinion, the most annoying thing about Render is that it's impossible to google about Render because "render" is such a common word in the tech world! Their support is good and responsive, and the develope…

(Render founder) Thank you for the support. You might have shared this with our support engineers already but I'd love to hear about what you missed from Heroku (email in profile). We're building Render for the very long term and every bit of feedback helps, even if we can't get to it right away.

Re: Heroku CI and Review App Secrets Compromised

#40
post #37

Has anyone done a load test comparison for Heroku vs. Render.com? The "Pro Ultra" on Render is $450/month for 32 GB RAM + 8 CPU. The Heroku Performance L Dyno is $500 a month for 14 GB RAM. The Render server seems like a much better offering.

Has anyone done a security review of Heroku alternatives? I see lots of comments about moving there and using them instead of Heroku because of this incident. But that's hardly a justifiable reason alone, since those new platforms are probably worse off in security.

Fly have https://news.ycombinator.com/user?id=tptacek working for them so it's hard to imagine they would get security wrong.
Post reply on HN