Live data from Hacker News

Show HN: oculus - a logging, web-based SQL client for teams (open source)

oculusapp.com

1–10 of 14 posts

Re: Show HN: oculus - a logging, web-based SQL client for teams (open source)

#3
Author here. I do a lot of analysis each day and am constantly sharing it with my team by taking screenshots of Sequel Pro. I built Oculus so I could keep a centrally available repository of my research, that everyone could access and collaborate on. It definitely has a ways to go, but I would love feedback!

Also, this is my first attempt at providing a live demo of software that can execute arbitrary SQL. I'm probably crazy for doing this, but I thought it was a lot more interesting than doing a video. If the demo suddenly disappears, you'll know I wasn't able to harden it enough... :)

Re: Show HN: oculus - a logging, web-based SQL client for teams (open source)

#7
post #4

I would be fascinated to find out how you protect against SQL injection.

It's designed to be used within a team environment, where you trust everyone. (Although even then, I highly recommend using it with a readonly SQL account!) I would be skeptical of any situation where you could run raw untrusted SQL without any risks, at least without reimplementing MySQL's AST parser.

As for the demo, it's isolated, and locked down as well as MySQL will allow. (For starters, just SELECT privileges.)

Post reply on HN