Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: HackerForums.co, a forum for the crowd that hangs out on HN

hackerforums.co

Post reply on HN
Print view View original

131–140 of 140 posts

Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN

#131

Post by dchuk »

danmaz74 wrote: post #121

I really miss a way to connect with other interesting people from HN. I'm afraid that a simple forum won't work, though, because of (social) scalability: there are good reasons why HN practically bans all banter, light exchanges, or turf wars that usually come to dominate popular subreddits and similar places. As a matter of fact, I'm thinking about a possible solution focused on allowing remote hackers to at least d…

Thank you!

Regarding this: "It could become a real project; anybody interested, feel free to contact me (email in my profile)." Start a Show HF thread on the board!

Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN

#133

Post by krapp »

zrm wrote: post #129
angelsl wrote: post #89

Earlier quoted context omitted.

This just makes the password the hash of the user's passphrase.

> This just makes the password the hash of the user's passphrase. There are some other advantages that others have already mentioned, but even if that was all it did it would still be useful in inhibiting an attacker from learning the actual passphrase which many users are likely to have reused on other services.

It would also be useful in finding hash collisions which would give an attacker access to a user's account without needing the actual password, which is made easier with the ability to study the client-side code doing the hashing, and taking note of the algorithm and methods used.

Sending a password in plaintext over HTTPS is more secure than hashing it in javascript first and sending the hash.

Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN

#134

Post by zrm »

krapp wrote: post #133
zrm wrote: post #129

Earlier quoted context omitted.

> This just makes the password the hash of the user's passphrase. There are some other advantages that others have already mentioned, but even if that was all it did it would still be useful in inhibiting an attacker from learning the actual passphrase which many users are likely to have reused on other services.

It would also be useful in finding hash collisions which would give an attacker access to a user's account without needing the actual password, which is made easier with the ability to study the client-side code doing the hashing, and taking note of the algorithm and methods used. Sending a password in plaintext over HTTPS is more secure than hashing it in javascript first and sending the hash.

> It would also be useful in finding hash collisions which would give an attacker access to a user's account without needing the actual password

If it's practical to find a hash collision, your hash algorithm is broken.

> which is made easier with the ability to study the client-side code doing the hashing, and taking note of the algorithm and methods used.

The security of a system should not depend at all on that information being secret.

Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN

#135

Post by danmaz74 »

dchuk wrote: post #131
danmaz74 wrote: post #121

I really miss a way to connect with other interesting people from HN. I'm afraid that a simple forum won't work, though, because of (social) scalability: there are good reasons why HN practically bans all banter, light exchanges, or turf wars that usually come to dominate popular subreddits and similar places. As a matter of fact, I'm thinking about a possible solution focused on allowing remote hackers to at least d…

Thank you! Regarding this: "It could become a real project; anybody interested, feel free to contact me (email in my profile)." Start a Show HF thread on the board!

> Start a Show HF thread on the board!

I will - when I'll have something to show :)

Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN

#136

Post by grandpoobah »

Jake232 wrote: post #28
Washuu wrote: post #25

Earlier quoted context omitted.

That is happening because you are running PHP 7.2. In that file $this->extra_headers is initialized as non-countable NULL. Basically phpBB needs to update their code base to support newer versions of PHP. A quick fix would be to change "var ... $extra_headers" at the top of the file to "protected $extra_headers = [];".

It's probably a safe assumption that they use a similar style elsewhere though, so probably better to just change PHP version rather than edit the source files? I could be wrong, (I'm a Python guy - not PHP), just seems a safe assumption that it's likely not the only spot.

I agree with your logic. Best to just do what jwong_ said and disable warnings.

Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN

#137

Post by Jaruzel »

LinuxBender wrote: post #59
LeoPanthera wrote: post #58

A forum for hackers that doesn't have an NNTP interface? ;)

I might spin up some NNTP servers if there was enough interest. I would likely keep it text-only.

'comp.misc' exists on USENet and has done since the dawn of time. It's fairly spam free these days, and a few dedicated people post stuff to it. It's in a perfect place to be used again and turned into a meaningful discussion hub.

Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN

#138

Post by LinuxBender »

Jaruzel wrote: post #137
LinuxBender wrote: post #59

Earlier quoted context omitted.

I might spin up some NNTP servers if there was enough interest. I would likely keep it text-only.

'comp.misc' exists on USENet and has done since the dawn of time. It's fairly spam free these days, and a few dedicated people post stuff to it. It's in a perfect place to be used again and turned into a meaningful discussion hub.

I've noticed a lot of the spammers have vanished. Good point. I am certainly lazy enough to not stand up more servers or buy feeds again.

Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN

#139

Post by Jaruzel »

LinuxBender wrote: post #138
Jaruzel wrote: post #137

Earlier quoted context omitted.

'comp.misc' exists on USENet and has done since the dawn of time. It's fairly spam free these days, and a few dedicated people post stuff to it. It's in a perfect place to be used again and turned into a meaningful discussion hub.

I've noticed a lot of the spammers have vanished. Good point. I am certainly lazy enough to not stand up more servers or buy feeds again.

A nice simple USENet Web gateway would be useful tho, as Google groups is hideous.

Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN

#140

Post by unicornomy »

mykull wrote: post #62
caitlinface wrote: post #33

Earlier quoted context omitted.

What about a Discord server?

Don't you think many HN posters will object to using a chat service with a fishy as-of-yet probably-not-profitable business model and a big ol' database of all the messages sent? Discord is a great service for now, but it's unclear to me what their plans are in terms of monetization and user privacy.

I don't think HN users will actually object using this service. Although I dont understand why would you call it FISHY - because what's there on Discord that's not anywhere else on Google :) or Alexa ;) About Monetization Here you go : https://goo.gl/Af7xwR
Post reply on HN