[{"data":1,"prerenderedAt":541},["ShallowReactive",2],{"project-16619580":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":47,"post_text":49,"what":50,"said":94,"maker_in_thread":176,"shape":187,"grid":192,"attempts":502,"same_week":503,"maker_shows":43,"maker_hidden":533,"reader_version":534,"card":535},"16619580","URL Canary","Get an alert when someone finds your secrets","title","Show HN: URL Canary – Get an alert when someone finds your secrets","https:\u002F\u002Furlcanary.com\u002F","urlcanary.com","jstanley",1521476284,2018,273,116,103,2155,5,"legend","security_privacy","canary tokens","web_app",[24,25,26,27],"canary token","breach alert","honeytoken","secret leak detection","debated",-0.066,{"positive":31,"neutral":32,"mixed":33,"critical":34},16,24,2,22,64,{"idea":37,"privacy":39,"execution":41,"docs":44,"design":45,"pricing":46},{"positive":38,"critical":38},12,{"positive":40,"critical":18},1,{"positive":42,"critical":43},0,3,{"positive":42,"critical":42},{"positive":40,"critical":42},{"positive":42,"critical":33},[18,42,42,18,42,40,18,18,40,42,42,43,18,40,43,48,48,18,18,40,43,42,40,43,18,40,33,40,40,48,40,40,40,43,43,40,43,48,40,40],4,null,{"problem":51,"audience":49,"pricing":58,"motivation":49,"time_to_build":49,"stack":69,"openness":92,"stage":93,"team_size":92},{"value":52,"source":53,"evidence":54},"Knowing when a stored secret has been accessed or leaked","commenter",[55],{"id":56,"by":11,"text":57},"16619968","You won't share the URL in a public place, you'll store it alongside whatever you're trying to keep safe. If the URL gets accessed at all, you will know your secret has been…",{"value":59,"source":53,"evidence":60},"Enterprise tier exists, priced high",[61,65],{"id":62,"by":63,"text":64},"16620406","andrewmcwatters","Hah, that enterprise pricing is insane.",{"id":66,"by":67,"text":68},"16622477","CapacitorSet","Indeed, at £1k (€1136, $1403) one might as well run an internal application. At a very basic level, it can be achieved with three lines of bash: ``` while echo -en \"HTTP\u002F1.1 200…",[70,80,84,88],{"value":71,"source":72,"evidence":73},"Perl","maker",[74,77],{"id":75,"by":11,"text":76},"16620122","That's not good! Taking a look. EDIT: I believe it's because the CSPRNG state ( https:\u002F\u002Fmetacpan.org\u002Fpod\u002FBytes::Random::Secure::Tiny ) was created before the process forks, so…",{"id":78,"by":11,"text":79},"16656697","Hey, sorry for the late reply. Not sure if you'll read this... It's mostly http:\u002F\u002Fmojolicious.org\u002F SQLite for the database (for now; that'll change if it gets too big), and nginx…",{"value":81,"source":72,"evidence":82},"Mojolicious",[83],{"id":78,"by":11,"text":79},{"value":85,"source":72,"evidence":86},"SQLite",[87],{"id":78,"by":11,"text":79},{"value":89,"source":72,"evidence":90},"nginx",[91],{"id":78,"by":11,"text":79},"unknown","launched",{"praise":95,"objections":118,"requests":141,"questions":152,"alternatives":160},[96,107],{"value":97,"source":53,"evidence":98},"Simple, clever concept",[99,103],{"id":100,"by":101,"text":102},"16620093","magic_beans","I like the simplicity of this.",{"id":104,"by":105,"text":106},"16619686","ada1981","This is neat. For added security, maybe better to hide the canary URL in a bit.ly link? Someone might know your 3 URLS.",{"value":108,"source":53,"evidence":109},"Useful for reverse engineering and DRM detection",[110,114],{"id":111,"by":112,"text":113},"16621155","dsacco","Friendly feedback, coming from a reverse engineer: the commenter who also answered this question gave a really good, concrete example of how this could be used in the context of…",{"id":115,"by":116,"text":117},"16620871","droopybuns","Put a URL in a firmware image that is never called by your device\u002Fapp. Monitor the URL for access. You then receive an alert that someone accessed the URL. This gives you a…",[119,130,137],{"value":120,"source":53,"evidence":121},"Organizations can blackhole the domains",[122,126],{"id":123,"by":124,"text":125},"16620375","sitkack","Do you have domain diversity? Organizations will blackhole urlcanary.com",{"id":127,"by":128,"text":129},"16620371","efficax","Will the canary URLs always be to the same domain? If so, can't I circumvent this just by using custom dns locally to map that domain to somewhere else, like localhost? If it's…",{"value":131,"source":53,"evidence":132},"Attackers may not click links",[133],{"id":134,"by":135,"text":136},"16625485","cottsak","How does a potential customer know how effective this is? How do you even know that it's effective for your personal use case as described https:\u002F\u002Furlcanary.com\u002Fabout ? How many…",{"value":138,"source":53,"evidence":139},"Enterprise pricing seems too high",[140],{"id":62,"by":63,"text":64},[142],{"value":143,"source":53,"evidence":144},"Use custom domains and more domain diversity",[145,149],{"id":146,"by":147,"text":148},"16622173","sli","So what happens when the three offered domains become widely known to be fake? Can this service be federated and use custom domains or is it just another game of whack-a-mole?",{"id":150,"by":11,"text":151},"16620426","There are currently 3 domains available. If this takes off I could do something like mailinator (offer the user a small selection, but never reveal the full list at once). You…",[153],{"value":154,"source":53,"evidence":155},"How does it differ from canarytokens.org",[156],{"id":157,"by":158,"text":159},"16620151","JamesMcain","how does this differ from https:\u002F\u002Fcanarytokens.org\u002Fgenerate ?",[161,169],{"value":162,"source":53,"evidence":163},"canarytokens.org",[164,165],{"id":157,"by":158,"text":159},{"id":166,"by":167,"text":168},"16662665","mh_","This is neat.. Its currently a single type of token (ie. a URL). If you check out https:\u002F\u002Fcanarytokens.org you will notice the ability to create several others (be notified when…",{"value":170,"source":53,"evidence":171},"uriteller.io",[172],{"id":173,"by":174,"text":175},"16620892","makarhum","Similar idea than https:\u002F\u002Furiteller.io. This is nice way to check whether your end to end encrypted chat is really secure or not.",{"comments":177,"answered":178,"key":179},15,8,[180,183,184],{"id":181,"text":182},"16620949","Uri Teller is a perfect name, that's brilliant.",{"id":75,"text":76},{"id":185,"text":186},"16620806","Bytes::Random::Secure::Tiny seeds itself from \u002Fdev\u002Furandom, I just need to make sure to initialise it on first use, instead of when my program first starts (which I've now done).…",{"commenters":188,"max_depth":189,"maker_replies":177,"first_comment_mins":190,"lifespan_hours":191},73,7,10,150,[193,197,201,204,207,210,213,216,218,221,225,228,232,235,238,241,245,249,250,252,255,257,260,262,265,269,271,275,276,280,283,285,287,290,294,295,298,301,304,308,311,313,315,317,318,320,322,324,326,329,332,335,338,341,344,347,350,354,357,360,363,366,368,370,373,375,378,380,383,385,388,390,392,395,398,401,402,405,407,409,410,412,414,416,418,421,425,428,430,433,435,437,440,442,444,446,448,449,453,457,459,463,467,470,472,474,476,479,482,484,488,490,493,497,498,500],[194,42,43,195,196,42],"16620202","project\u002Fneutral\u002Fidea","CamTin",[198,42,18,199,200,42],"16621339","project\u002Fpositive\u002Fidea","foepys",[202,42,42,203,147,42],"16622128","commenter\u002Fneutral\u002Fnone",[205,42,42,203,206,42],"16622810","jonny_eh",[208,42,42,203,209,42],"16623149","racer-v",[211,42,42,203,212,42],"16623845","scott_s",[214,42,42,203,215,42],"16625797","wolco",[217,42,42,203,212,42],"16629079",[219,42,42,203,220,42],"16626691","dorgo",[222,42,42,223,224,42],"16621385","other\u002Fneutral\u002Fnone","hyder_m29",[226,42,18,199,227,42],"16622536","marcc",[229,42,42,230,231,42],"16624527","other\u002Fneutral\u002Fidea","zapita",[233,42,42,223,234,42],"16624797","elorm",[236,42,42,223,237,42],"16624955","bb88",[239,42,42,223,240,42],"16624985","stordoff",[242,42,40,243,244,42],"16625756","project\u002Fcritical\u002Fidea","amenghra",[246,42,42,247,248,42],"16625927","commenter\u002Fneutral\u002Fidea","admax88q",[173,40,18,199,174,42],[181,40,42,251,11,40],"project\u002Fpositive\u002Fdesign",[253,40,42,223,254,42],"16622779","softawre",[256,40,18,199,237,42],"16624995",[258,40,43,259,135,42],"16625634","project\u002Fneutral\u002Fnone",[261,40,42,223,220,42],"16626736",[263,40,43,195,264,42],"16625077","duck",[266,33,40,267,268,42],"16620089","project\u002Fcritical\u002Fprivacy","dylanpyle",[75,33,42,270,11,40],"maker\u002Fneutral\u002Fexecution",[272,33,42,273,274,42],"16620781","commenter\u002Fneutral\u002Fexecution","beefhash",[185,33,42,270,11,40],[277,33,42,278,279,42],"16623704","commenter\u002Fneutral\u002Fperformance","rocqua",[281,33,42,273,282,42],"16624575","stouset",[284,33,42,273,274,42],"16626652",[286,33,42,273,282,42],"16633922",[288,33,42,223,289,42],"16621869","bmm6o",[291,33,43,292,293,42],"16625157","maker\u002Fneutral\u002Fnone","moltar",[78,33,42,292,11,40],[296,33,18,297,293,42],"16675028","maker\u002Fpositive\u002Fnone",[299,33,43,270,300,42],"16625189","pinum",[302,33,42,203,303,42],"16620706","oh_sigh",[305,33,40,306,307,42],"16622837","project\u002Fcritical\u002Fexecution","brianwawok",[309,43,43,195,310,42],"16619955","diggan",[56,43,42,312,11,40],"maker\u002Fneutral\u002Fidea",[111,43,43,314,112,42],"project\u002Fneutral\u002Fdocs",[316,43,42,292,11,40],"16621283",[115,43,18,199,116,42],[319,43,18,199,112,42],"16621124",[321,43,40,243,116,42],"16624051",[323,43,18,199,112,42],"16624112",[325,43,43,195,240,42],"16625070",[327,43,43,195,328,42],"16621879","gricardo99",[330,48,42,223,331,42],"16622652","nzjrs",[333,48,42,223,334,42],"16623516","shurcooL",[336,18,18,199,337,42],"16621419","ActsJuvenile",[339,18,42,223,340,42],"16621991","Volt",[104,342,18,343,105,42],6,"project\u002Fpositive\u002Fprivacy",[345,342,42,346,11,40],"16619806","maker\u002Fneutral\u002Fprivacy",[348,342,40,267,349,42],"16620627","mikejarema",[351,342,43,352,353,42],"16619952","project\u002Fneutral\u002Fprivacy","rplnt",[355,342,40,267,356,42],"16620168","mikey_p",[358,342,43,352,359,42],"16620332","sorenjan",[361,342,42,362,11,40],"16620342","commenter\u002Fneutral\u002Fprivacy",[364,342,42,203,365,42],"16620787","lucb1e",[367,342,42,203,11,40],"16620981",[369,342,42,203,365,42],"16622171",[371,342,43,352,372,42],"16622206","e40",[374,342,40,243,359,42],"16628620",[376,342,42,223,377,42],"16620632","raverbashing",[379,342,42,223,105,42],"16638546",[381,342,42,203,382,42],"16620499","gruez",[384,342,43,195,105,42],"16621284",[386,342,42,387,11,40],"16621308","project\u002Fneutral\u002Fexecution",[389,342,18,297,105,42],"16623656",[391,342,43,270,279,42],"16623749",[393,342,40,306,394,42],"16624700","Moru",[396,189,40,243,397,42],"16620195","rrggrr",[399,189,43,195,400,42],"16624245","wongarsu",[146,178,43,352,147,42],[403,178,43,387,404,42],"16622434","pwinnski",[406,178,40,243,300,42],"16625259",[127,408,40,267,128,42],9,[150,408,42,352,11,40],[166,190,43,411,167,42],"project\u002Fmixed\u002Fidea",[157,413,43,195,158,42],11,[415,413,42,195,11,40],"16620196",[417,413,40,243,167,42],"16662649",[419,38,18,199,420,42],"16626451","askvictor",[422,423,43,259,424,42],"16622115",13,"overcast",[426,423,43,259,427,42],"16622133","inetknght",[134,429,40,243,135,42],14,[431,429,43,411,432,42],"16625563","imglorp",[434,429,40,243,135,42],"16625603",[436,429,42,203,432,42],"16627724",[438,177,43,259,439,42],"16619881","josefresco",[441,177,42,195,11,40],"16619908",[443,177,40,306,353,42],"16619964",[445,177,42,387,11,40],"16620005",[447,177,42,223,220,42],"16626884",[123,31,40,267,124,42],[450,451,18,199,452,42],"16622647",17,"lolc",[454,455,40,243,456,42],"16623504",18,"tzury",[458,455,42,195,11,40],"16656724",[460,461,18,199,462,42],"16622687",19,"zitterbewegung",[464,465,40,243,466,42],"16620767",20,"Kiro",[468,465,42,203,469,42],"16620795","dewey",[471,465,40,243,466,42],"16632076",[473,465,43,195,469,42],"16632148",[100,475,18,251,101,42],21,[477,34,40,243,478,42],"16623927","boardwaalk",[480,34,43,314,481,42],"16624269","hughes",[483,34,43,314,478,42],"16625445",[485,486,18,199,487,42],"16626420",23,"wxyyxc1992",[62,32,40,489,63,42],"project\u002Fcritical\u002Fpricing",[491,32,42,203,492,42],"16622104","ovao",[494,32,42,495,496,42],"16622884","commenter\u002Fneutral\u002Fpricing","jessaustin",[66,32,40,489,67,42],[499,32,42,223,254,42],"16622825",[501,32,42,203,67,42],"16623183",[],[504,509,514,519,524,528],{"id":505,"name":506,"points":507,"category":508},"16591962","Where is Sci-Hub",247,"other",{"id":510,"name":511,"points":512,"category":513},"16626374","Word2Bits",221,"languages",{"id":515,"name":516,"points":517,"category":518},"16606408","Makesite",146,"dev_tools",{"id":520,"name":521,"points":522,"category":523},"16636935","Sheet2Site",145,"web_saas",{"id":525,"name":526,"points":527,"category":518},"16594515","Fossa-cli",104,{"id":529,"name":530,"points":531,"category":532},"16591878","Talent vs. Luck",86,"learning_science",false,"v2",{"id":536,"name":5,"line":6,"ai":533,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":537,"top":18,"kw":538,"maker":11,"domain":10,"tier":19,"attempts":42,"strip":539,"url":9,"mix":540,"praise":97,"objection":120,"sub":21},16619580,-0.07,[24,25,26,27],"5005015510035134455130135121141113313411",[31,32,33,34],1794036564374]