Hacker News Reader

Comment by ChrisBland | Hacker News Reader

I miss heroku dearly. somewhere at Salesforce there is an exec who killed the product and shifted it to enterprise and is now looking at the vibe coding revolution seeing their opportunity missed.

View on HN

I suspect the people responsible have fully justified to themselves any decisions they made, helped along with any bonuses they got for doing it.

Render has been excellent replacement, in my experience.

Last time I tried render, it did not allow me to spin up 1 instance of my web app, so I'm never going back. (To clarify: Render would always spin up a minimum of 2 instances.)

Fly and Render are what heroku would be if they didn’t stop innovating. And neon db for Postgres.

> And neon db for Postgres.

For 90% of the time when they're up.

Fly is unreliable. Render does not allow you to spin up 1 instance of an app.

Digital ocean is the answer. You give it a container and off you go.

Use to be now they are requiring 2fa for addon domains over a certain amount

Of all the things to be upset about, mandatory 2FA doesn't seem like one.

2FA has been in place for years through email but this new requirement forces a phone.

Good. E-mail based 2FA is bad, and they appear to support TOTP too as an option, as they should. Wish they supported U2F though.

Why is email based 2fa bad but phone good? There are classes of issues you get through phone 2fa compared to email

Typically, you can also reset password via email, so it's really only one factor. Compromised email = compromised server.

It’s negligent to not use 2FA for any cloud platform where credentials can be used to spin up resources.

I should have been more clear 2FA has been in place for years the phone requirement is new.

They use TOTP for 2FA (industry standard), which doesn't require a phone.

Their help page lists a bunch of 2FA app options, all of which run on phones, so it's understandable to think a phone is required. (I'm disappointed they don't list the app I use, which is Aegis Authenticator.)

But actually you can use any TOTP app, and they don't all need a phone. For example, macOS (desktop) has built-in TOTP 2FA as part of the password manager.

Good! Should have been done long ago

Not sure how Digital Ocean is comparable to what Heroku used to be.

I've been enjoying railway!

More likely than not they’re probably long gone, or have completely forgotten. The idea that someone out there regrets that decision is laughable. The fact that it’s laughable is sad.

Why? It is still up, and working just as it used to.

That won't last. https://www.heroku.com/blog/an-update-on-heroku/

Uhoh. I don't know what that means, but I unfortunately detect double-speak.

No longer developing new features or offering new contracts, but eVerYtHinG iS FiNe.

Reply on news.ycombinator.com