Live data from Hacker News

Show HN: Lofi.cafe

lofi.cafe

211–220 of 237 posts

Re: Show HN: Lofi.cafe

#213
Very nice execution. Love the aesthetic. IMO the source attribution could still be better. For example I follow one of the sources (RyanCelcius). Many of their original playlist visuals (e.g. rare tapes series) stand on their own merit and deserve to be seen.

Re: Show HN: Lofi.cafe

#214
post #197

Earlier quoted context omitted.

I love breaking things and I've noticed that user are able to intercept the UID / ID of the received messages in the Websocket and edit / spoof past messages from other users. edit: And editing other user names and rooms settings. Just letting you know. :)

Thanks for catching that! One thing I really wanted for the project was not having to sign in to use, but that's been causing a lot of security holes like this. Gonna try to fix everything soon

Out of curiosity, what are the motivation(s) for not requiring users to sign in? Is it just lowering the barrier to entry, or are you concerned with privacy?

I’m curious to know how the solution would work.

Re: Show HN: Lofi.cafe

#216

Earlier quoted context omitted.

I actually really like this feature when playing music for a whole room on my OLED TV. People like watching the fancy graphics and I get to dodge a tiny little bit of burn in.

You missed the part of better alternatives. I didn't mean to turn off the anim, just switch it to a more efficient method of doing it.

What are the better alternatives?

Re: Show HN: Lofi.cafe

#217

Earlier quoted context omitted.

Yeah, lower bandwidth requirements and most computers/all smartphones have dedicated video decoding hardware, especially for h264.

Hinted at with lower bandwidth requirements, but the biggest win with video is their stellar compression. GIFs store every single color value, which is why they get so huge so quick.

GIFs use run length encoding, which usually makes them quite good for pixelly art, but not when you apply a bunch of vfx.

Re: Show HN: Lofi.cafe

#218
post #197

Earlier quoted context omitted.

Thanks for catching that! One thing I really wanted for the project was not having to sign in to use, but that's been causing a lot of security holes like this. Gonna try to fix everything soon

Out of curiosity, what are the motivation(s) for not requiring users to sign in? Is it just lowering the barrier to entry, or are you concerned with privacy? I’m curious to know how the solution would work.

I'm really not knowledgeable about firestore, firebase or even authentification systems but couldn't an user request a secret key that the user will use to authentificate itself when sending a message into the websocket (that will not be transmitted to the other users)?

For the login-gate, I'm pretty sure 99%+ of the visitor would have not created an account. Even without the login, the HN room shared in that thread was kind of inactive.

Since the rooms are "private' by default (secret token in the URL), authentification is now really necessary for casual usage.

Re: Show HN: Lofi.cafe

#219
post #194

Earlier quoted context omitted.

Why would you ever target wasting CPU/GPU when better alternatives are available?

It might be cool.

It might be cool to needlessly spin up a CPU/GPU for no reason other than not being familiar with a more effectient method of doing something? I don't know where you come from, but that's not my definition of cool at all
Post reply on HN