HN user

dardeaup

156 karma
Posts0
Comments120
View on HN
No posts found.

I'm building a website integrity and security monitor. The backend is written in Java/PostgreSQL. The front end is written in JS/React. It will allow for interactive use via front end or be API driven.

I initially was using SSE to push events down to the front end during long scans but decided to switch over to plain old HTTP polling for better reliability across different browsers (and versions of different browsers).

Here are the areas of analysis:

    - accessibility
      -- check for images with missing alt text
      -- check for various form controls missing labels
      -- headings not following (h1->h2->h3...)
      -- missing lang attribute on <html>
    - content
      -- check for forbidden words and phrases
      -- check for required words and phrases
    - performance
      -- evaluate time to load page
      -- check for excessive inline JS
      -- check for inline styles
    - security
      -- check for SSL certificate expiring soon
      -- check for security HTTP headers
      -- check whether Server HTTP header is too revealing
    - seo
      -- check for missing title in head section
      -- check for missing meta description
      -- check for multiple H1 headings
    - site integrity
      -- check for broken links
      -- check for use of deprecated tags
      -- check for insecure http link
    - spell check
      -- check for possibly misspelled words
Having a lot of fun building it!

Going for a 100% self-service model. No corporate sales cycles, no slide decks, no meetings.

Targeting a June launch.

I'm building a website integrity and security monitor. The backend is written in Java/PostgreSQL. The front end is written in JS/React. It will allow for interactive use via front end or API driven.

I initially was using SSE to push events down to the front end during long scans but decided to switch over to plain old HTTP polling for better reliability across different browsers.

Going for a 100% self-service model. No corporate sales cycles, no slide decks, no meetings. If the tool works for you, you buy it.

Targeting a June launch.

I had a very similar path starting with dBASE III Plus.

As you say the productivity it (xBASE/FoxPro/Clipper) offered was remarkable. One of the tools that I really wish I had was a FoxPro/Clipper compiler that took a subset of the language (general purpose stuff and screen functionality) and compiled it to either C or Go with ncurses. Who knows, I might have AI help me build one.

Kudos to you! Looks very nice and well thought out. I was working on a native Windows tool for data exploration of SQLite but I shelved it.

If you don't mind my asking -- what language and toolkit do you use?

I can certainly see a lot of benefits from a team oriented web-based dashboard.

I'm building a site auditing tool with a pluggable metrics pipeline. It's implemented in Java using Javalin for API, OkHttp for fetching, and jsoup for parsing. I'm experimenting with an event sink model for metrics aggregation.

Still early, but it's definitely fun and interesting.

I made the clarification because the comment I replied to mentioned Android, iOS, and macOS. There are many who used Delphi before FMX appeared and I thought it would be helpful to point out that VCL only makes Windows executables.

Yes, you can build cross-platform GUI apps with Delphi. However, that requires using Firemonkey (FMX). If you build a GUI app using VCL on Delphi, it's limited to Windows. If you build an app with Lazarus and LCL, you CAN have it work cross-platform.

Performance Hints 7 months ago

"A lot of code can be pessimized by golfing instruction counts"

Can you explain what this phrase means?

I've been holding off on Zig because it hasn't reached 1.0 milestone, but I'm starting to think that it might be time to start digging in. Is Ziglings kept up with language changes being made in Zig? It would be very frustrating to find that Ziglings is out of sync with the newer version of Zig that you might be using at the time.

What I tried to say (perhaps not successfully) was that core Ceph knows nothing about S3. One gets S3 endpoint capability from the radosgw which is not a required component in a ceph cluster.

"Ceph is fundamentally already RADOS at its core (fully compatible with S3 API.)"

Yes, Ceph is RADOS at its core. However, RADOS != S3. Ceph provides an S3 compatible backend with the RADOS Gateway (RGW).

Ceph has multiple daemons that would need to be running: monitor, manager, OSD (1 per storage device), and RADOS Gateway (RGW). If you only had a single storage device it would still be 4 daemons.

Ceph is awesome for software defined storage where you have multiple storage nodes and multiple storage devices on each. It's way too heavy and resource intensive for a single machine with loopback devices.

Agreed. I'd say it goes much deeper than that in the case of FreeBSD though. It's just an ideological thing that can't be changed.

Type safety as a benefit of SQLite? For me type safety is a negative of SQLite. Being able to store a different type that what the column is declared to store is a bug (not a feature). I also find the lack of DATE and DATETIME/TIMESTAMP to be less than ideal.