linux-dash
Infrastructure
server monitoring
SHOW HN2014
How HN took it
6 positive, 6 neutral or asking, 3 mixed, 11 critical, out of 26 comments about the project. Thread score -0.12.
Privacy: 0 for, 7 againstIdea: 4 for, 0 againstExecution: 1 for, 2 againstPerformance: 0 for, 1 againstDocs: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Interface looks nice and clean
From 3 comments
Minor typo on the header: Dashboad Looks really nice. Was this built for Debian-based distros?
_offset on HNThe interface looks very nice but no thanks, I'm not going to install PHP on my servers to have it. I'd totally set it up if it weren't for PHP. The risk is just too great to…
jdiez17 on HNI think you should remove the animation on the numbers: it prevents the user from reading quickly valuable info (and isn't really useful anyway). Still, the interface is really…
martius on HN
Objections
Uses PHP shell_exec for every metric, seen as a security risk
From 3 comments
Nice interface, but it's a bit strange to me that it uses shell exec for every kind of measure. e.g. # uptime.php <?php echo (int) (shell_exec('cat /proc/uptime')/(60*60));
riquito on HNThe interface looks very nice but no thanks, I'm not going to install PHP on my servers to have it. I'd totally set it up if it weren't for PHP. The risk is just too great to…
jdiez17 on HNIt's not how much PHP is running, it's that PHP is running _at all_. It makes me feel very, very uneasy that every time that web interface is hit PHP executes a shell command.…
jdiez17 on HN
XSS risk from unescaped JSON output
From 2 comments
> WRONG. Because you have to use mysql_REAL_escape_string. Using mysql_real_escape_string is almost a sign you're doing something wrong. You should be using prepared statements…
anglebracket on HNIt doesn't take input from the user, but it does use untrusted input in a way that allows XSS. See https://news.ycombinator.com/item?id=7128442 .
anglebracket on HN
Memory figures ignore Linux cache usage
From 1 comment
I believe the memory assessment will always show basically no free memory due to Linux's memory management and caching. It would make more sense to subtract out the cache to see…
carbocation on HN
Requests
Multi-server support
From 1 comment
This looks very nice! However, multi-server support would make this even more amazing.
Cyberpew on HN
Installation instructions
From 1 comment
Could you add installation/setup instructions?
ababab on HN
Application-level stats such as analytics and conversion rates
From 1 comment
Very cool. How difficult would it be to create widgets that show application-level stats like number of visitors on site or conversion rates (e.g. calculated from google…
ivan_ah on HN
Questions
Was it built for Debian-based distros?
From 1 comment
Minor typo on the header: Dashboad Looks really nice. Was this built for Debian-based distros?
_offset on HN
Alternatives named
conky
From 1 comment
Not much different than conky...except the web service part. http://conky.sourceforge.net/
k0 on HN
munin
From 1 comment
Be careful of any externally controllable strings which might allow XSS and give panel access to an attacker. More of a problem for admin dashboards which have two-way control,…
zaroth on HN
webmin
From 1 comment
you sure you don't want to make a go at turning this into a full blown product? Imagine a more modern version of webmin. Very nice.
Edmond on HN