dardeaup

I'm building a website integrity and security monitor. The backend is written in Java/PostgreSQL. The front end is written in JS/React. It will allow for interactive use via front end or be API driven.

I initially was using SSE to push events down to the front end during long scans but decided to switch over to plain old HTTP polling for better reliability across different browsers (and versions of different browsers).

Here are the areas of analysis:

    - accessibility
      -- check for images with missing alt text
      -- check for various form controls missing labels
      -- headings not following (h1->h2->h3...)
      -- missing lang attribute on <html>
    - content
      -- check for forbidden words and phrases
      -- check for required words and phrases
    - performance
      -- evaluate time to load page
      -- check for excessive inline JS
      -- check for inline styles
    - security
      -- check for SSL certificate expiring soon
      -- check for security HTTP headers
      -- check whether Server HTTP header is too revealing
    - seo
      -- check for missing title in head section
      -- check for missing meta description
      -- check for multiple H1 headings
    - site integrity
      -- check for broken links
      -- check for use of deprecated tags
      -- check for insecure http link
    - spell check
      -- check for possibly misspelled words

Having a lot of fun building it!

Going for a 100% self-service model. No corporate sales cycles, no slide decks, no meetings.

Targeting a June launch.

I'm building a website integrity and security monitor. The backend is written in Java/PostgreSQL. The front end is written in JS/React. It will allow for interactive use via front end or API driven.

I initially was using SSE to push events down to the front end during long scans but decided to switch over to plain old HTTP polling for better reliability across different browsers.

Going for a 100% self-service model. No corporate sales cycles, no slide decks, no meetings. If the tool works for you, you buy it.

Targeting a June launch.

My guess would be so that they could make use of a single code base.

It seems that peak native Windows dev tools were Delphi 7 and VB6. It's a tragedy that something at least as good as VB6 is not still developed and supported by Microsoft.

With restrictions of course.

I'm hoping to soon start beta testing of a similar SaaS. Just wanted to say that you and your business are a huge inspiration for me.

I had a very similar path starting with dBASE III Plus.

As you say the productivity it (xBASE/FoxPro/Clipper) offered was remarkable. One of the tools that I really wish I had was a FoxPro/Clipper compiler that took a subset of the language (general purpose stuff and screen functionality) and compiled it to either C or Go with ncurses. Who knows, I might have AI help me build one.

Absolutely correct! We've lost a lot along the way.

Kudos to you! Looks very nice and well thought out. I was working on a native Windows tool for data exploration of SQLite but I shelved it.

If you don't mind my asking -- what language and toolkit do you use?

I can certainly see a lot of benefits from a team oriented web-based dashboard.

I'm building a site auditing tool with a pluggable metrics pipeline. It's implemented in Java using Javalin for API, OkHttp for fetching, and jsoup for parsing. I'm experimenting with an event sink model for metrics aggregation.

Still early, but it's definitely fun and interesting.

That could be a lot of fun to play with, especially if it has PowerVM.

Very cool! What compilers and interpreters are available? I know that rexx wasn't available at the time that the open source vm/370 was released. Has the community found a way to add rexx?

Interesting! I never imagined that would be a thing. Thought that zerks were only for grease.

I made the clarification because the comment I replied to mentioned Android, iOS, and macOS. There are many who used Delphi before FMX appeared and I thought it would be helpful to point out that VCL only makes Windows executables.

Yes, you can build cross-platform GUI apps with Delphi. However, that requires using Firemonkey (FMX). If you build a GUI app using VCL on Delphi, it's limited to Windows. If you build an app with Lazarus and LCL, you CAN have it work cross-platform.

"A lot of code can be pessimized by golfing instruction counts"

Can you explain what this phrase means?

Sounds nice! I could see where that could be simultaneously rewarding and frustrating. Best of luck to you.

This was the first thought that occurred to me too when I saw this post.

I would be more inclined to use it if it didn't have punctuation within the name.

That only works for really small holes.

I've been holding off on Zig because it hasn't reached 1.0 milestone, but I'm starting to think that it might be time to start digging in. Is Ziglings kept up with language changes being made in Zig? It would be very frustrating to find that Ziglings is out of sync with the newer version of Zig that you might be using at the time.

What I tried to say (perhaps not successfully) was that core Ceph knows nothing about S3. One gets S3 endpoint capability from the radosgw which is not a required component in a ceph cluster.

"Ceph is fundamentally already RADOS at its core (fully compatible with S3 API.)"

Yes, Ceph is RADOS at its core. However, RADOS != S3. Ceph provides an S3 compatible backend with the RADOS Gateway (RGW).

Ceph has multiple daemons that would need to be running: monitor, manager, OSD (1 per storage device), and RADOS Gateway (RGW). If you only had a single storage device it would still be 4 daemons.

Ceph is awesome for software defined storage where you have multiple storage nodes and multiple storage devices on each. It's way too heavy and resource intensive for a single machine with loopback devices.

I've done some preliminary testing with garage and I was pleasantly surprised. It worked as expected and didn't run into any gotchas.

Hopefully no one is shocked or surprised.

Agreed. I'd say it goes much deeper than that in the case of FreeBSD though. It's just an ideological thing that can't be changed.

Type safety as a benefit of SQLite? For me type safety is a negative of SQLite. Being able to store a different type that what the column is declared to store is a bug (not a feature). I also find the lack of DATE and DATETIME/TIMESTAMP to be less than ideal.

Does IUP have a table control? I looked at the IUP website and didn't see one.