Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Meteor Raises $20M

techcrunch.com

Post reply on HN
Print view View original

71–80 of 163 posts

Re: Meteor Raises $20M

#71

Post by debaserab2 »

sergiotapia wrote: post #31
juliangregorian wrote: post #30

Earlier quoted context omitted.

I'm apprehensive of the security model. Everything is highly ease-of-use optimized, to the point that you can query Mongo via the browser console. My preferred "easy/simple" model of app design is Firebase (backend and JS lib for pure web clients), who have security figured out.

What you're saying is only true on a barebones default Meteor app. Please don't comment on a tool if you've never used it for anything other than a hello world, you're doing a very sophisticated tool a huge disservice. You remove the autopublish package and you can no longer query records from the client.

There's no excuse for insecure defaults.

Re: Meteor Raises $20M

#72

Post by debaserab2 »

It's amazing how many developers willingly giving up their entire tech stack in exchange for a proprietary one.

If it was MSFT trying to pull this off, would the reaction on HN be as positive?

Re: Meteor Raises $20M

#73

Post by trcollinson »

debaserab2 wrote: post #72

It's amazing how many developers willingly giving up their entire tech stack in exchange for a proprietary one. If it was MSFT trying to pull this off, would the reaction on HN be as positive?

Maybe I am getting lost in your comment but, are you trying to suggest that Meteor is a proprietary stack?

Re: Meteor Raises $20M

#74

Post by imslavko »

joeyyang wrote: post #53
imslavko wrote: post #43

Earlier quoted context omitted.

Meteor's security model allows app developer to validate any operation or RPC going through, based on the arguments or userId (by writing JS code). Also, the published set is controlled by publications, allowing to publish only filtered out data with specific fields. Unlike Firebase, Meteor actually allows you to send "first top 20 guest posts from November" as an example. The filtering can happen on the server, befo…

Hey there, I'm Joey, a Firebase dev — last November, we shipped advanced querying support[0] to address this! You can now use orderByChild(), orderByKey() or orderByPriority() to build a query. We also have limitToFirst(), limitToLast(), startAt(), endAt(), and equalTo() methods to further filter your data. This allows you to build queries like this: ref.orderByChild("weight").limitToLast(2).on("child_added", functio…

This is great! I didn't doubt that Firebase will roll out features to paginate and sort data. I also don't doubt that Firebase will implement filtering in the future. Great work.

Re: Meteor Raises $20M

#75

Post by merb »

danenania wrote: post #58

Beginner question: how does Meteor handle storing server-side web socket connections in a scalable way? Are they kept in ram? Redis? Mongo's ram? The complexity of this is why I always end up reaching for hosted WS solutions like pusher or fanout.io.

Why is this complex? There are so many ways for pub/sub implementations.

However I always ended up using Playframework for WS, since it's really really easy to set this up in a scalable way.

Re: Meteor Raises $20M

#76

Post by trcollinson »

smaili wrote: post #59

Not trying to sound like a jerk, but I'm just wondering is it really a good thing to put on your homepage that there are nearly 12K questions posted on StackOverflow about Meteor? Seeing a number like that makes me wonder if maybe the documentation and or APIs are not very well done if it's generated that kind of activity on SO.

Maybe it works as the opposite. On SO there are ~800,000 questions about Java, Javascript, and C#, each.

Re: Meteor Raises $20M

#78

Post by KurtMueller »

sergiotapia wrote: post #11

I looked into Meteor and it's amazing how everything clicks together. It's just such a drastic change in complexity and feels like a breath of fresh air. The one thing that made me drop it as the choice for a primary stack was the fact that it's tied so heavily into MongoDB. Meteor has a mongodb 'server' replicated client side, that's how they can actually make Meteor so god damn snappy, it's latancy compensation. If…

I've heard the sales pitch for ember and ember-cli and I've seriously begun developing with Ember for the past 2 weeks. So far, I really like the tooling around Ember but am not a huge fan of the actual framework itself.

I mean, you have routers, routes, controllers, views, templates, and components - how many concepts do you need to display a ui?

Maybe it's just that I can't see the forest through the trees. Perhaps you could help me gain this perspective?

Re: Meteor Raises $20M

#79

Post by _greim_ »

My worry is that with JavaScript-based stacks evolving so fast these days, monied interest in one way of doing things would ultimately be incentivized to suppress better ways of doing things, as they emerge.

Re: Meteor Raises $20M

#80

Post by KurtMueller »

sergiotapia wrote: post #31
juliangregorian wrote: post #30

Earlier quoted context omitted.

I'm apprehensive of the security model. Everything is highly ease-of-use optimized, to the point that you can query Mongo via the browser console. My preferred "easy/simple" model of app design is Firebase (backend and JS lib for pure web clients), who have security figured out.

What you're saying is only true on a barebones default Meteor app. Please don't comment on a tool if you've never used it for anything other than a hello world, you're doing a very sophisticated tool a huge disservice. You remove the autopublish package and you can no longer query records from the client.

Hi Sergio,

One of the things I like about rails (and ember-cli) is that it is "secure-by-default". If I am going to make a choice that potentially has security vulnerabilities, I have to deliberately make that choice - I basically have to create a whitelist of things I want to allow.

Post reply on HN