safety-db
Security and privacy
vulnerability database
SHOW HN2016
How HN took it
3 positive, 3 neutral or asking, 0 mixed, 3 critical, out of 9 comments about the project. Thread score 0.00.
Idea: 2 for, 0 againstDocs: 0 for, 1 againstExecution: 0 for, 1 againstDesign: 1 for, 0 againstPerformance: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful, great service for Python security
From 2 comments
Really cool stuff. I love it! Thank you for making this. A side note anyone using Django should keep up to date. If you see the list of versions and the related packages which…
vinayan3 on HNThis is awesome. What a great service! Just curious, what stack did you use for the human browsable site and database? I am looking for a quick data reporting stack like this…
daveguy on HN
Objections
Unclear standard for what counts as insecure
From 1 comment
What standard are you applying to distinguish "insecure" from "secure"?
pekk on HN
Hard to know the version where a CVE was introduced
From 1 comment
This can detect when a CVE vulnerability is fixed but how would you know the version number at which it was introduced?
svisser on HN
Human-browsable site stops loading data partway
From 1 comment
It doesn't seem to be loading all the data when you browse the "human" site. Stops at ftw.mail (if there's a way to go on to the next page, it isn't obvious)
Twirrim on HN
Requests
Connect with OWASP Dependency Check project
From 1 comment
Can you get in touch with the guys at OWASP Dependency Check? It's one of their more mature projects, and it essentially does a lot of what you described and then some, including…
eganist on HN
Questions
What stack is used for the browsable site and database?
From 1 comment
This is awesome. What a great service! Just curious, what stack did you use for the human browsable site and database? I am looking for a quick data reporting stack like this…
daveguy on HN
Alternatives named
OWASP Dependency Check
From 1 comment
Can you get in touch with the guys at OWASP Dependency Check? It's one of their more mature projects, and it essentially does a lot of what you described and then some, including…
eganist on HN