km

And in the meantime, CVSS went down to 7.0.

I wonder why Trend publishes such upcoming advisories -- are those even helpful? For sure, I am going to be more critical of anything that ends up there.

After running uptime.is for 12+ years, I finally built a monitoring service I always wished existed. It's powered by pyng, a monitoring system that started with just using Python standard library but now uses a bit more (mostly Twisted, though). It's still all boring tech, though, and mostly usable without JavaScript.

Key features:

* Powerful DNS monitoring (traces NS/DS records from root, DNSSEC validation, DNS-based blacklists)

* HTTP checks with full control (GET/HEAD/PUT/POST, custom headers, JSON parsing, multi-location via Mullvad)

* Tor network monitoring

* Push checks (inverted monitoring for cron jobs/batch tasks)

* Multiple integrations (Atom feeds, JSON data, DNS-queryable status, ntfy.sh push alerts)

The tech stack is boring: Python + Twisted + SQLite, boring CLI tools (ping, drill, curl, nc), no containers, no exotic dependencies. The setup runs on a mix of OpenBSD/FreeBSD/Alpine Linux.

Pricing is simple: $15/year for basic checks, $20/year for checks that notify on output changes. No account creation – configure your check, pay, and it starts running.

This is still a proof-of-concept, but it's been monitoring my own infrastructure reliably. I realise that there are probably that many potential users, but the 'net is big, so I might get some anyway.

I'd love feedback from the HN community.

Yesterday I finally completed writing the documentation, and published my own reinvented wheel: Pyng.

Pyng is a daemon which runs checks and sends alerts on certain events. It is written in Python and uses Twisted event-driven networking engine for scheduling and retries, but uses existing command line tools for the dirty work.

I started on the project last year, primarily due to NodePing's DNS check limitations, and have been happily using Pyng ever since. I hope that others might find Pyng useful.

I consider Pyng finished software, i.e. it now has all the features I wanted from it.