[{"data":1,"prerenderedAt":369},["ShallowReactive",2],{"project-10022717":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":46,"post_text":48,"what":49,"said":85,"maker_in_thread":205,"shape":215,"grid":218,"attempts":332,"same_week":333,"maker_shows":33,"maker_hidden":361,"reader_version":362,"card":363},"10022717","Is it vulnerable","Is it vulnerable? Drag-n-drop your Gemfile.lock to check","title","Show HN: Is it vulnerable? Drag-n-drop your Gemfile.lock to check","https:\u002F\u002Fisitvulnerable.com\u002F","isitvulnerable.com","phillmv",1438958343,2015,175,49,104,2565,5,"notable","security_privacy","vulnerability scanning","web_app",[24,25,26,27],"gemfile.lock","ruby gems vulnerability","dependency security","bundler audit","mixed",-0.056,{"positive":31,"neutral":32,"mixed":33,"critical":34},6,12,2,8,28,{"execution":37,"idea":40,"design":42,"privacy":43,"performance":44,"docs":45},{"positive":38,"critical":39},1,0,{"positive":41,"critical":39},4,{"positive":38,"critical":18},{"positive":39,"critical":38},{"positive":39,"critical":38},{"positive":39,"critical":38},[18,39,18,39,47,38,47,47,47,39,39,39,39,18,39,39,39,18,38,39,38,39,18,47,47,38,47,47,38,39,47,39,38,39,38,38,47,39,18,47],3,null,{"problem":50,"audience":57,"pricing":48,"motivation":69,"time_to_build":48,"stack":73,"openness":82,"stage":83,"team_size":84},{"value":51,"source":52,"evidence":53},"Checks whether gems in a Gemfile.lock have known vulnerabilities","maker",[54],{"id":55,"by":11,"text":56},"10022750","Hey. We posted about our service last week and got great feedback. We took that feedback and decided to put isitvulnerable.com together to really showcase what you can get out of…",{"value":58,"source":59,"evidence":60},"Ruby on Rails developers","inferred",[61,65],{"id":62,"by":63,"text":64},"10022870","methyl","It's a file which Ruby on Rails uses to keep track of currently used gem versions. Gems are just Ruby libraries. So the app just runs through the list and check whether version…",{"id":66,"by":67,"text":68},"10022883","werdnapk","Rails apps use a Gemfile.lock file to \"lock\" an app to specific Ruby library\u002Fdependency (gems) versions.",{"value":70,"source":52,"evidence":71},"Showcase what their service can find and push developers to check dependencies",[72],{"id":55,"by":11,"text":56},[74],{"value":75,"source":76,"evidence":77},"Ruby","commenter",[78],{"id":79,"by":80,"text":81},"10022931","sciurus","You can run this check yourself using the bundle-audit tool. It uses the list of vulnerabilities from ruby-advisory-db. Checking the git history, I see that phillmv is a…","unknown","launched","team",{"praise":86,"objections":105,"requests":138,"questions":164,"alternatives":179},[87,98],{"value":88,"source":76,"evidence":89},"Simple, fast and useful",[90,94],{"id":91,"by":92,"text":93},"10022792","bshimmin","This is terrific. Easy to understand, fast, and very useful. Great job, guys!",{"id":95,"by":96,"text":97},"10023067","busterarm","THANK YOU! I think this is really awesome... ...I have to go update a few projects right now.",{"value":99,"source":76,"evidence":100},"Useful build check idea",[101],{"id":102,"by":103,"text":104},"10023485","boie0025","This is pretty awesome, thanks! Can't wait for a GitHub integration and a badge to paste on the app readme. Seems like an excellent build check.",[106,116,123],{"value":107,"source":76,"evidence":108},"Installing a service monitor on servers raises privacy concerns",[109,113],{"id":110,"by":111,"text":112},"10022964","bhaak","Really nice and straightforward. Although I'm worried about the part where I'm supposed to install a service monitor on our servers. I know, many people already do stuff like…",{"id":114,"by":111,"text":115},"10028881","Sending data from your server to a third party is something many people are not comfortable with. In environments with tighter security needs, this is outright verboten. It is…",{"value":117,"source":76,"evidence":118},"Some reported severities are overstated",[119],{"id":120,"by":121,"text":122},"10024528","homakov","Someone should reestimate severity of those \"CVEs\". I got 10 warnings and none of them is any severe for my app(and yours too, likely), so I'm definitely not vulnerable. Also LOL…",{"value":124,"source":76,"evidence":125},"Page text overlaps and renders poorly in some browsers",[126,130,134],{"id":127,"by":128,"text":129},"10023482","brobinson","Great tool! Bookmarked. Bug report: text here [1] is not rendering properly, but if I resize the window to be smaller it adjusts and is fine. Happens in Firefox 39.0.3 (no…",{"id":131,"by":132,"text":133},"10023854","dboyd","Looks great. Your formatting on the result page is messed up in my browser (chrome on osx). You can see a screen shot here...…",{"id":135,"by":136,"text":137},"10024893","aidenn0","FWIW, The font spacing is too tight to the point of overlapping text on my browser (firefox 39, linux)",[139,146,157],{"value":140,"source":76,"evidence":141},"Support package.json and bower files",[142],{"id":143,"by":144,"text":145},"10023088","thoughtpalette","This is awesome, great idea! I see the sign-up for additional platforms. Thinking of supporting package.json and bower files?",{"value":147,"source":76,"evidence":148},"Offer an API or CI integration",[149,152,153],{"id":150,"by":11,"text":151},"10023063","I think developers could use way better security tooling. It seems like a lot of people would love to have an easy way to integrate this into their continuous integration…",{"id":110,"by":111,"text":112},{"id":154,"by":155,"text":156},"10022906","NateLawson","Very nice and simple. Maybe you can expose this as a public API too?",{"value":158,"source":76,"evidence":159},"Subscription email alerts",[160],{"id":161,"by":162,"text":163},"10022807","cstuder","How about a subscription service? Email me as soon as my installed gems are getting vulnerable.",[165,172],{"value":166,"source":76,"evidence":167},"What is a Gemfile.lock?",[168],{"id":169,"by":170,"text":171},"10022849","recursive","I guess the presentation is pretty clean. But what's a gemfile.lock?",{"value":173,"source":76,"evidence":174},"Is there a Python equivalent to ruby-advisory-db?",[175],{"id":176,"by":177,"text":178},"10025036","caioariede","I'd like to know if there is something similar for Python, or something like https:\u002F\u002Fgithub.com\u002Frubysec\u002Fruby-advisory-db for Python.",[180,184,191,198],{"value":181,"source":76,"evidence":182},"bundler-audit",[183],{"id":79,"by":80,"text":81},{"value":185,"source":76,"evidence":186},"Gemnasium",[187],{"id":188,"by":189,"text":190},"10023248","bdcravens","Gemnasium.com offers this. (as does OP, see sibling comment)",{"value":192,"source":76,"evidence":193},"SensioLabs security checker for PHP",[194],{"id":195,"by":196,"text":197},"10022969","Mojah","If you're into PHP, SensioLabs has a similar service you can use in your Composer.lock file: https:\u002F\u002Fsecurity.sensiolabs.org\u002Fcheck It'll block any vulnerable version of a…",{"value":199,"source":76,"evidence":200},"requires.io",[201],{"id":202,"by":203,"text":204},"10025124","aaronbasssett","https:\u002F\u002Frequires.io\u002F",{"comments":206,"answered":41,"key":207},10,[208,211,212],{"id":209,"text":210},"10022993","Yep! We started that project alongside postmodern_mod3 about two years ago :). We figured we could do a better job all around if we managed to productize it.",{"id":55,"text":56},{"id":213,"text":214},"10022831","Hah, well, okay, I didn't expect that page to read as too subtle. It is a service! Visit https:\u002F\u002Fappcanary.com for more deets.",{"commenters":216,"max_depth":18,"maker_replies":206,"first_comment_mins":18,"lifespan_hours":217},35,290,[219,221,223,227,229,231,233,237,238,239,241,243,245,249,250,253,255,258,260,264,266,270,271,272,274,276,279,282,284,285,288,292,293,294,297,301,304,308,311,313,314,317,320,322,325,326,327,329,330],[79,39,18,220,80,39],"project\u002Fpositive\u002Fexecution",[209,39,39,222,11,38],"maker\u002Fneutral\u002Fnone",[224,39,18,225,226,39],"10023604","project\u002Fpositive\u002Fidea","sarwechshar",[55,38,39,228,11,38],"project\u002Fneutral\u002Fnone",[161,38,47,230,162,39],"project\u002Fneutral\u002Fidea",[213,38,39,232,11,38],"project\u002Fneutral\u002Fdocs",[234,38,38,235,236,39],"10023107","project\u002Fcritical\u002Fdesign","tschuy",[188,38,47,230,189,39],[154,38,47,230,155,39],[150,38,39,240,11,38],"maker\u002Fneutral\u002Fidea",[110,38,47,242,111,39],"project\u002Fmixed\u002Fprivacy",[244,38,39,222,11,38],"10023041",[246,38,39,247,248,39],"10023160","commenter\u002Fneutral\u002Fprivacy","pjungwir",[114,38,39,247,111,39],[251,38,39,247,252,39],"10025835","peteforde",[254,38,39,247,111,39],"10028806",[256,38,18,225,257,39],"10023236","alexbecker",[259,38,39,222,11,38],"10023292",[261,38,39,262,263,39],"10023992","other\u002Fneutral\u002Fnone","maxs",[265,38,39,262,121,39],"10025565",[267,38,39,268,269,39],"10086621","other\u002Fpositive\u002Fidea","jayfk",[102,38,18,225,103,39],[135,38,38,235,136,39],[195,33,39,273,196,39],"other\u002Fneutral\u002Fidea",[120,47,38,275,121,39],"project\u002Fcritical\u002Fperformance",[277,47,39,278,11,38],"10024781","maker\u002Fneutral\u002Fexecution",[280,47,47,281,121,39],"10025555","project\u002Fmixed\u002Fexecution",[91,41,18,283,92,39],"project\u002Fpositive\u002Fdesign",[169,41,47,232,170,39],[286,41,47,232,287,39],"10022867","cseelus",[289,41,38,290,291,39],"10024607","project\u002Fcritical\u002Fdocs","MatthewMcDonald",[62,41,47,232,63,39],[66,41,47,232,67,39],[295,41,47,232,296,39],"10022942","JonnieCache",[298,18,38,299,300,39],"10023600","project\u002Fcritical\u002Fprivacy","piratebroadcast",[302,18,39,303,11,38],"10023631","maker\u002Fneutral\u002Fprivacy",[305,18,47,306,307,39],"10024418","project\u002Fneutral\u002Fprivacy","shostack",[309,18,39,247,310,39],"10024582","Cyranix",[312,18,39,262,307,39],"10024819",[127,31,38,235,128,39],[315,31,39,316,11,38],"10023539","maker\u002Fneutral\u002Fdesign",[318,31,38,235,319,39],"10023565","scott_karana",[131,321,38,235,132,39],7,[323,321,47,316,324,39],"10023999","ontoillogical",[176,34,47,230,177,39],[202,34,39,262,203,39],[95,328,18,225,96,39],9,[143,206,47,230,144,39],[331,206,39,240,11,38],"10023133",[],[334,339,343,348,353,357],{"id":335,"name":336,"points":337,"category":338},"10035008","Big List of Naughty Strings",514,"dev_tools",{"id":340,"name":341,"points":342,"category":338},"10050949","NaSC",127,{"id":344,"name":345,"points":346,"category":347},"10049631","openlistings.co",94,"web_saas",{"id":349,"name":350,"points":351,"category":352},"10029078","tray_rust",77,"creative",{"id":354,"name":355,"points":351,"category":356},"10033605","pulse.turbobytes.com","infrastructure",{"id":358,"name":359,"points":360,"category":338},"10030658","tpm",73,false,"v2",{"id":364,"name":5,"line":6,"ai":361,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":365,"top":18,"kw":366,"maker":11,"domain":10,"tier":19,"attempts":39,"strip":367,"url":9,"mix":368,"praise":88,"objection":107,"sub":21},10022717,-0.06,[24,25,26,27],"5050313330000500051010533133103010113053",[31,32,33,34],1794036534265]