Top all-time · #391
Phusion Blog
Company blog · blog.phusion.nlprogrammingweb
Phusion Blog is the company blog at blog.phusion.nl, writing about programming and web. Since 2008, 140 different Hacker News readers have linked it 245 times, most often “Docker and the PID 1 zombie reaping problem (2015)”. It is still writing: the last post was on 2026-10-19, and you can follow it by feed.
Pushing the state of art in web apps, microservices and devops.
Most-linked posts?
- Docker and the PID 1 zombie reaping problem (2015)19 people · 20 mentions · first linked 2015-03-11
- Bootstrapping a Business Around Open Source8 people · 8 mentions · first linked 2015-11-03
- Bootstrapped, Profitable and Proud: Our Journey to $1M+ ARR at Phusion6 people · 6 mentions · first linked 2016-10-04
- ActionCable Under Stress: Finding a DoS Vulnerability in Rails 5 WebSockets Apps5 people · 6 mentions · first linked 2016-12-21
- Rails 5 ActionCable under stress: fixing data corruption and socket leak issues5 people · 5 mentions · first linked 2016-07-07
- Using Rails 5 ActionCable and RethinkDB to Build a Reactive WebSocket App4 people · 4 mentions · first linked 2016-08-04
- Securing the Rails session secret4 people · 4 mentions · first linked 2013-01-04
- Baseimage-docker, fat containers and “treating containers as VMs”4 people · 4 mentions · first linked 2015-03-24
- Phusion Passenger, now with Global Queuing3 people · 3 mentions · first linked 2008-10-30
- The Road to Passenger 3: Phusion Passenger Lite3 people · 3 mentions · first linked 2010-07-01
What Hacker News says?
Passenger author here. Phusion is excited about the Rails 5.0 release! Rails is one of the most productive web frameworks out there, and 5.0 just makes it even better. We have release various Passenger updates to ensure that Passenger plays well with Rails 5, Action Cable etc: https://blog.phusion.nl/2016/02/18/passenger-5-0-25/ https://www.phusionpassenger.com/library/config/nginx/action... However we found a bug i…
Comment linking /2016/02/18/passenger-5-0-25/
on “Rails 5.0: Action Cable, API mode, and more”Submitted Rails SQL injection vulnerability: here are the facts as a story · 289 points
HN discussionAdd support for GPG-signed `btrfs pull` and `btrfs push` and I'm totally sold! I've been working on something similar to this but on top of systemd-nspawn, which already does some stuff for you. systemd-nspawn is nice because I run systemd in all my containers and thus allows me to easily do logging etc. I don't really dig the docker-microservices mantra that much. I just use them as glorified VMs I guess. (And yes,…
Comment linking /2015/01/20/docker-and-the-pid-1-zombie-reaping-problem/
on “Show HN: Bocker – Docker implemented in 100 lines of bash”Submitted Why Ruby App Servers Break on MacOS High Sierra as a story · 259 points
HN discussionPhusion Passenger 4 supports JRuby (and Rubinius): http://blog.phusion.nl/2012/10/30/phusion-passenger-4-0-supp...
Comment linking /2012/10/30/phusion-passenger-4-0-supports-jruby-rubinius/
on “Why Ruby?”Submitted Rails, still? as a story · 239 points
HN discussionhttp://blog.phusion.nl/2013/01/03/rails-sql-injection-vulner... Here are some good and experienced Rails developers who apparently had no idea that Rails would automagically suck in XML and YAML and turn it into symbols instead of strings. Clearly they aren't the only ones who didn't "understand the framework" or we wouldn't have gone a week with the impression that CVE-2012-5664 was only exploitable in specific cir…
Comment linking /2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts/
on “Multiple vulnerabilities in parameter parsing in Action Pack”Submitted Duplicity + S3: Easy, cheap, encrypted, automated full-disk backups as a story · 171 points
HN discussionPhusion (Passenger) | Customer Success Manager (Sales / Account Manager) | Amsterdam or Remote | Full-time Over 650.000 websites worldwide use Phusion Passenger to improve web app performance, boost productivity, and maximize security. As a Customer Success Manager your focus is creating and maintaining friendly relationships with our customers around the globe. Tasks include maintaining account information, collect…
Comment linking /2018/06/18/happy-birthday-phusion/
on “Ask HN: Who is hiring? (July 2018)”Submitted Phusion Passenger 3.0 Public Beta 1 is out as a story · 158 points
HN discussionMore information here: http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulner...
Comment linking /2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts/
on “SQL Injection Vulnerability in Ruby on Rails; affects all versions”Submitted Phusion Passenger 3.0.0 final released as a story · 141 points
HN discussionI've written a blog post which explains what this vulnerability is, how it works, what the facts and non-facts are: http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulner...
Comment linking /2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts/
on “SQL Injection Vulnerability in Ruby on Rails; affects all versions”Submitted Phusion Passenger now supports Nginx as a story · 133 points
HN discussionIt is based on the observation that most apps only store the user ID and other non-sensitive data in the session. Storing the session in the cookie then brings many benefits. It does not require any server side session store maintenance, it is very fast and scalable because no database lookup is required. The fact that this store should not be used for storing sensitive information is well-documented in the Rails se…
Comment linking /2010/04/13/announcing-encryptedcookiestore-plugin-for-rails-2-3/
on “Is it OK to hold credit card numbers in cookies, Santander?”Submitted Introducing Phusion Passenger 5 beta 1, codename “Raptor” as a story · 123 points
HN discussionActually, these guys cost people a whole hell of a lot more time and money than someone breaking into a home probably ever did. Just for starters: http://blog.phusion.nl/2013/05/07/phusion-server-security-re...
Comment linking /2013/05/07/phusion-server-security-report/
on “The story around the Linode hack”Submitted Docker and the PID 1 zombie reaping problem as a story · 119 points
HN discussionPhusion co-founder here (creators of the Passenger app server); just wanted to chime in and say that this article resonated a lot with our experiences with VCs and our ventures in open source. Even down to the "lifestyle business" remark. Like OP, I'd encourage first-time founders to talk to VCs when starting out just to get an idea of how they perceive your business. Yes, even if you don't plan on raising. You may…
Comment linking /2015/10/30/bootstrapping-a-business-around-open-source/
on “RethinkDB, SageMath, Andreessen-Horowitz, Basecamp and Open Source Software”Submitted LVE: an alternative container technology to Docker and Virtuozzo/LXC as a story · 74 points
HN discussionI forgot to mention, the Phusion guys (who Mitchell mentions in the post and who create the excellent Passenger web server) have created some great assets for Vagrant and Docker: https://github.com/phusion/baseimage-docker https://github.com/phusion/passenger-docker (built on the baseimage above) http://blog.phusion.nl/2013/11/08/docker-friendly-vagrant-bo... And regarding role-based containers, Phusion's Hong Lai s…
Comment linking /2013/11/08/docker-friendly-vagrant-boxes/
on “Vagrant Feature Preview: Docker-Based Development Environments”Submitted The right way to deal with frozen processes on Unix as a story · 69 points
HN discussionWell, that depends. Are you running Passenger? http://blog.phusion.nl/2014/09/25/security-advisory-phusion-... What about the rest of your servers? I can't claim to know that none of mine don't call system() somewhere deep in them.
Comment linking /2014/09/25/security-advisory-phusion-passenger-cve-2014-6271-bash-vulnerability/
on “Bash 'shellshock' bug is wormable”Submitted Baseimage-docker, fat containers and “treating containers as VMs” as a story · 68 points
HN discussionAfter giving many of the comments here a thought, I've written a follow-up article "Securing the Rails session secret" in which different ways to secure the session secret are considered. Feedback is more than welcome. http://blog.phusion.nl/2013/01/04/securing-the-rails-session...
Comment linking /2013/01/04/securing-the-rails-session-secret/
on “Rails SQL injection vulnerability: here are the facts”Submitted The Road to Passenger 3: Performance as a story · 68 points
HN discussionI think they mean this: https://blog.phusion.nl/2015/01/20/docker-and-the-pid-1-zomb...
Comment linking /2015/01/20/docker-and-the-pid-1-zombie-reaping-problem/
on “Things to avoid in Docker containers”Submitted Phusion Passenger 5.0.1 “Raptor” Released as a story · 65 points
HN discussionI am not sure if I saw it HN recently, but there is an article by Phusion [1] talking about the init process and how to handle it with Docker. They have a base image, baseimage-docker [2], that is supposed to solve that problem. [1]: https://blog.phusion.nl/2015/01/20/docker-and-the-pid-1-zomb... [2]: https://phusion.github.io/baseimage-docker/
Comment linking /2015/01/20/docker-and-the-pid-1-zombie-reaping-problem/
on “Super small Docker image based on Alpine Linux”Submitted Traveling Ruby 20150210: smaller, supports Ruby 2.2, Windows as a story · 64 points
HN discussion
