Top all-time · #4407
Appcanary
Company blog · blog.appcanary.comsecurityprogramming
Appcanary is the company blog at blog.appcanary.com, writing about security and programming. Since 2016, 16 different Hacker News readers have linked it 25 times, most often “HTTP security headers”. The last post was in 2018, but the archive is still widely read.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers link Appcanary posts on automatic security updates, why you shouldn't compress before encrypting, and a Ruby versus Clojure experience. The comments cite these posts as sources or background; none praise the writing.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
aToday, we’re excited to announce that we’re going to be able to build tools that impact almost every software developer on the planet — we’re joining GitHub.
Most-linked posts?
- HTTP security headers7 people · 7 mentions · first linked 2017-01-16
- Simple Ain't Easy, but Hard Ain't Simple: Leaving Clojure for Ruby3 people · 3 mentions · first linked 2017-05-23
- Hacking your Elixir Editor3 people · 3 mentions · first linked 2017-07-31
- Good News: Ubuntu now ships with unattended-upgrades on by default2 people · 2 mentions · first linked 2016-11-18
What Hacker News says?
For what it's worth, as of 16.04 Ubuntu automatically installs security updates: https://blog.appcanary.com/2016/unattended-upgrades.html In snapcraft, all updates are automatically installed: https://docs.ubuntu.com/core/en/reference/automatic-refreshe... https://www.youtube.com/watch?v=DLxqdf89hRo
Comment linking /2016/unattended-upgrades.html
on “Don't tell people to turn off Windows Update”Submitted “Should you encrypt or compress first?” as a story · 463 points
HN discussionAs pointed out by Microsoft earlier today, MDN is one of the best resources on this sort of thing. Here they write: > The upgrade-insecure-requests directive is evaluated before block-all-mixed-content and If the former is set, the latter is effectively a no-op. It is recommended to set one directive or the other – not both. Source: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Co... and https://develope…
Comment linking /2017/http-security-headers.html
on “The “Happy Path” to HTTPS”Submitted The Mirai Botnet Is Proof the Security Industry Is Broken as a story · 279 points
HN discussionFrom my limited knowledge of encryption, this is why you don't compress before you encrypt. So if I understand the following article correctly, this kind of attack is well known. https://blog.appcanary.com/2016/encrypt-or-compress.html
Comment linking /2016/encrypt-or-compress.html
on “A proof-of-concept system for counter-surveillance against spy drones”Submitted HTTP security headers as a story · 224 points
HN discussionShameless plug but… we left Ruby and then came back ;) - https://blog.appcanary.com/2017/hard-isnt-simple-ruby-clojur... It's tricky, it's definitely not the bleeding edge like it used to be but – if you already know the toolset well, it does a good job at what it's meant to.
Comment linking /2017/hard-isnt-simple-ruby-clojure.html
on “Ask HN: Why are you leaving Ruby?”Submitted Symantec's Bad Week as a story · 182 points
HN discussionSubmitted GitHub acquires AppCanary as a story · 160 points
HN discussionSubmitted Simple Ain't Easy, but Hard Ain't Simple: Leaving Clojure for Ruby as a story · 34 points
HN discussionSubmitted Good News: Ubuntu now ships with unattended-upgrades on by default as a story · 8 points
HN discussionSubmitted Simple Ain't Easy, but Hard Ain't Simple: Leaving Clojure for Ruby as a story · 6 points
HN discussionSubmitted Everything you need to know about HTTP security headers as a story · 5 points
HN discussionSubmitted Morris and badBIOS, 25 years in 2 worms as a story · 5 points
HN discussionSubmitted Slippery exceptions in Clojure and Ruby as a story · 5 points
HN discussionSubmitted Everything you need to know about HTTP security headers (2017) as a story · 4 points
HN discussionSubmitted Improve Your Security: Port Scan Yourself as a story · 3 points
HN discussionSubmitted Everything you need to know about HTTP security headers as a story · 3 points
HN discussionSubmitted Everything you need to know about HTTP security headers as a story · 3 points
HN discussionSubmitted Hacking your Elixir Editor as a story · 2 points
HN discussionSubmitted Hacking your Elixir Editor as a story · 2 points
HN discussionSubmitted Slippery exceptions in Clojure and Ruby as a story · 2 points
HN discussionSubmitted Everything you need to know about HTTP security headers (2017) as a story · 1 points
HN discussionSubmitted Hacking your Elixir editor as a story · 1 points
HN discussionSubmitted A tale of 2 worms, 3 vulns and the NSA as a story · 1 points
HN discussion
