Hacker News Reader

Comment by ontoillogical | Hacker News Reader

At Appcanary, we're thinking about opening up our vulnerability database to be browsable and searchable by the public. If you're not sure which version has the patch for this vulnerability in your distro, here's what we know:

Ubuntu - https://appcanary.com/vulns/45984

Debian - https://appcanary.com/vulns/45983

Amazon Linux - https://appcanary.com/vulns/45992

Centos - no patch yet

If you found this useful, please let me know!

View on HN

If you wanted to create a useful tool to promote yourselves you could make something for CentOS that allows a user to apply critical security updates only. yum-security doesn't seem to work on CentOS as the repos don't have the correct meta data. Currently that requires a satellite subscription.

That sounds like an awesome idea - and a good way of promoting yourselves!

I'll admit I spent a bit of time on your homepage thinking "the use of those birds are a bit twitter". Then I realised you're called App Canary.

Do you keep track of Android releases?

edit: https://appcanary.com/vulns made my browser crawl. Please fix that page.

I think you just need more RAM, it's convenient having it all on one page instead of paginated.

Do you know any good sites where I could download some more? ;)

I think there's some FPGA code somewhere to emulate external RAM...

Re Android: No we don't, but I'd be interested to know what we can do with Android to be helpful to you. Send me an email (max at our domain) if you want to talk more.

vulns page: yeesh that is slow. This is the first time I'm sharing our vuln pages outside of our logged-in users, and yeah, that index is definitely not ready for public consumption yet.

It's sad that security information and news is so confusing as it is, but thank you for trying to improve it. I'll try to remember your site.

Some operating systems like FreeBSD and (I think) Debian have this functionality built in without the need for external service. So it depends on what you are using. RedHat had a similar functionality as well AFAIR.

SUSE-based distros have it as well (zypper tells you about CVE patches and how severe they are).

Are you constructing the descriptions by scraping something else?

They really need a lot of work.

Please do! Great work.

Reply on news.ycombinator.com