mwmanning

Yeah I'm assuming the methodology is:

1) Find high-value target libraries

2) Grab the usernames of accounts with push access

3) Check those against password dumps

I feel really stupid about this, but like I said it was an oversight. I apologize and will try to do better.

Hey since this is blown up I just want to address it directly.

I take responsibility for what happened here. My RubyGems.org account was using an insecure, reused password that has leaked to the internet in other breaches.

I made that account probably over 10 years ago, so it predated my use of password managers and I haven't used it much lately, so I didn't catch it in a 1password audit or anything.

Sometimes we miss things despite our best efforts.

Rotate your passwords, kids.

That repo could use a refresh. convox-exmples/rails is most pertinent here.

We're working on revamped examples for many popular languages now and expect to see them rolling out soon.

Hi, Matt from Convox here. I'm happy to answer any questions you might have about this feature, Convox, or development workflows using Docker.

The base cost for a rack is about $85/mo. Convox is extremely cost effective for small businesses and up, but would be expensive for running a single, low-traffic hobby app.

We were in the Summer 2015 YC batch and we've taken some VC funding.

Our other main offering is a web console for managing your team's access to rack(s) and integrations with 3rd party services. https://console.convox.com We charge a subscription fee for that and we also sell support and services packages.

That's exactly the etymology. We were thinking about datacenters and servers. The original name was convox/kernel, but we thought it wasn't very descriptive.

The naming collision with the Ruby interface is unfortunate, but we figured it was pretty easy to tell them apart from context.

Hi, Matt from Convox here.

I'm happy to answer any questions you have about Rack or any of Convox's other offerings.

To join a discussion with our user community please join our Slack! https://invite.convox.com

Convox (YC S15) is hiring a Solutions Engineer.

Convox is an open-source, private PaaS that runs in your own AWS account. http://www.convox.com

You can read the full job description here: https://www.dropbox.com/s/g0o2dv9j7nsg8gi/ConvoxSolutionsEng...

The cedar image is admittedly pretty large. There's a lot of stuff in there.

Building a much more lightweight image for your node app shouldn't be too hard, though. Check out https://github.com/convox-examples/express for a simple example.

Hey this is Matt from the Convox team. I'm happy to answer any questions about Grid (what it is, why we built it), Convox, or AWS/Docker in general.

Hey, Convox cofounder Matt here. Great questions!

1) You can update your Convox rack and cli using the cli. `convox update && convox system update`. http://docs.convox.com/docs/updating-convox/

2) We're working on an RDS provisioning service today and hope to release something this weekend. We're also in early talks with other addon (we call them "services") providers. For now if you want to use one of these services you can connect to them using environment variables. http://docs.convox.com/docs/environment-variables/

3) Our RDS service will eventually handle backups and recovery, but those features aren't implemented yet. We're also exploring partnering with other hosted database services that already have these features.

4) Convox is open source https://github.com/convox and totally free. You can use it however you want and you only have to pay for the AWS expenses. We're also experimenting with managed hosting, which we'll charge a small premium for, so please let me know if you're interested in that.

Thank you!

You could run Wordpress today, afaik. Anything that can run in a Docker container can run on on Convox. You'd just need to use some sort of hosted database service like Amazon RDS to persist your data.

edit: Just looked at Wordpress a little closer. I didn't realize it expects a persistent filesystem, which I guess is what you're asking about. Convox follows the 12factor.net philosophy of ephemeral filesystems, so you'd need to figure out a way to persist files to S3 or similar...

Correct. It does default to us-east-1. The main reason is that we are using some fairly new AWS services that aren't launched in all regions, but we do want to and expect to expand to more regions.

Thanks! Yes right now we have a small team working on this full time. We do plan to commercialize it, but intend to always keep it open source.

We're super confident it will get to a more mature state. We have some resources to keep working on it ourselves, and we're seeing lots of interest and participation from the open source community as well.

If anyone here would like an invitation to the Convox #public Slack channel please email me at matt@convox.com.

Looks cool. Thanks for the link. We'll definitely check it out.

Great minds think alike ;)

Cloudiron.io looks cool. I'll definitely check it out.

This is a separate venture from Nitrous.

hibikir got it right. Privacy comes from VPCs.

You're right. It's technically a virtual private cloud. We've found that nowadays VPC works for most people. The days of on-premises platforms are numbered.

That one hasn't been on our radar, but we'll definitely check it out.

You're welcome! Please contact us if you have more questions.

We're most familiar with OpsWorks. The main difference is simplicity. Convox doesn't require you to think much about infrastructure or write big JSON config files. We want the developer experience to be very app-focused like Heroku.

We don't yet, unfortunately, but we will add one soon.

If you'd like to see for yourself you can install it and then check the Resources tab on your CloudFormation page in the AWS web console to inspect everything it created.

https://docs.convox.com/docs/getting-started-with-convox

You can uninstall when you're done to avoid paying for the AWS resources if you're not ready to use it yet.

https://docs.convox.com/docs/uninstall-convox

Good point. Any suggestions?

Explicit error handling is part of Go. It's pretty common to see lots of conditionals in a Go codebase.

Thanks Eric!

+1 Check out Convox and Empire. See which one works best for you.

Thanks for the input. Google's offerings are really picking up steam. We've been in touch with Google and are excited about expanding onto their infrastructure in the future.