Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: UrlRoulette – Pass a URL to the next visitor

urlroulette.net

Post reply on HN
Print view View original

121–130 of 143 posts

Re: Show HN: UrlRoulette – Pass a URL to the next visitor

#122

Post by eeZah7Ux »

tyingq wrote: post #77
throwaway5752 wrote: post #72

Is this some sort of infosec performance art? This seems extremely inadvisable for users or the person running the site. What if someone posts something illegal in the jurisdiction of the viewer or a link to a site with an embedded exploit?

Is it worse than clicking random links on Reddit, other than maybe you can't see the url first?

Yes: links on redding or many other sources come with a degree of trust.

Re: Show HN: UrlRoulette – Pass a URL to the next visitor

#123

Post by tyingq »

johnfn wrote: post #113
tyingq wrote: post #97

Earlier quoted context omitted.

Generalizing about Reddit is hard. There are plenty of subreddits where outbound links are dangerous or offensive. Even one where they are almost guaranteed to have a 50/50 chance of being so. https://www.reddit.com/r/FiftyFifty/

I feel like every time I leave a comment on HN that is 98% true, someone comes a long to helpfully inform me of the remaining 2%. Sorry man, but that sort of thing just drives me nuts! Maybe I should paste a signature onto my posts. Something like "I estimate this comment to be 93 +/- 5% accurate. Please inform me of inaccuracies only if they fall out of those bounds." :)

Heh. I see what you mean, but that wasn't the intention. I'm not a reddit regular, but I know it's got plenty of dark places. I just don't get the uproar of OMG, something called "xyzroulette" that says it will send me to random places is dangerous. It doesn't seem deceptive or unexpected, that's the comparison I was trying to make.

Maybe I should have compared to outbound links on 4chan.

Re: Show HN: UrlRoulette – Pass a URL to the next visitor

#128

Post by shurcooL »

tyingq wrote: post #91
shurcooL wrote: post #73

I tried submitting my personal site, https://dmitri.shuralyov.com , and got: URL seems to be invalid, please try again! I tried with and without scheme, no luck. Is it a bug? My site redirects from http to https for all queries.

It's because your site responds to HEAD requests with a 405. They are doing a HEAD request to see if the url is valid, and if it returns anything other than 200 OK, they reject the url. $ curl -IX HEAD https://dmitri.shuralyov.com/ HTTP/1.1 405 Method Not Allowed

Thanks. Do you have a recommendation on how I should handle HEAD requests?

Edit: I went with something like this [1] for now. It worked to solve this problem. I can adjust later as needed.

[1] https://github.com/shurcooL/home/commit/b4a601ff7a3752feb291...

Re: Show HN: UrlRoulette – Pass a URL to the next visitor

#129

Post by tyingq »

shurcooL wrote: post #128
tyingq wrote: post #91

Earlier quoted context omitted.

It's because your site responds to HEAD requests with a 405. They are doing a HEAD request to see if the url is valid, and if it returns anything other than 200 OK, they reject the url. $ curl -IX HEAD https://dmitri.shuralyov.com/ HTTP/1.1 405 Method Not Allowed

Thanks. Do you have a recommendation on how I should handle HEAD requests? Edit: I went with something like this [1] for now. It worked to solve this problem. I can adjust later as needed. [1] https://github.com/shurcooL/home/commit/b4a601ff7a3752feb291...

The general idea is to return all the same headers as a get, without the body, so that's likely correct.

Unless there's code farther down that sends content length, etags, etc. You would want to send those too. Though I don't know that it really matters much.

Post reply on HN