Beware if you have UK users, you should read the new law in the UK called the online safety act.
Your site has young trans people, sexual content, and would also be a target for grooming from chasers. The risks, for you, are very high.
Show HN: I built an active community of trans people online
81–90 of 411 posts
Re: Show HN: I built an active community of trans people online
#82Earlier quoted context omitted.
Interpreting Animats' question as concern for the user population, I think it's a valid one. The new administration in the US is openly hostile, and a lot of damage could be done to peoples' lives if, say, the community was hacked and private email addresses (or other PII) was leaked. And I also agree with you -- now's the time for those of us who can afford it, to fly our ally flags as loudly and proudly as possible…
I am taking security very seriously. All sensitive rows are protected by RLS, and I have gone even further by adding random noise to all location data. Locations are locked down, but in the unfortunate event of a hack what would be leaked is location within a 5 or so mile range, not exact location. If it is possible on Supabase I would like to eventually obscure emails and oauth info.
5 mile range is pretty serious, it narrows someones locations down to a single town in the entire world. Just dont store it at all and you're all good.
Re: Show HN: I built an active community of trans people online
#83Earlier quoted context omitted.
That used to be true but Grindr has pivoted and now advertises itself as a 2SLGBTQIA+ community app
"Grindr advertises itself as community app" is about as meaningful as "Fast Food advertises itself as healthy" :) (Also, for those who were confused by 2S - "Two-spirit". That one's new to me in terms of adding it to the acronym list)
[flagged]
Re: Show HN: I built an active community of trans people online
#84Earlier quoted context omitted.
I would assume most non-trans people aren't willing to date trans people, so there's probably a pretty glaring need for them to have their own spaces.
[flagged]
For casual readers: Blanchard's theories are widely discredited and "Autogynephile" is considered an impolite term among trans people.
Re: Show HN: I built an active community of trans people online
#85Earlier quoted context omitted.
email me if you need a code review
Without wishing to appear overly snippy, this is how I would begin hacking such a site. Offer to do a "code review".
I got an offer of a "code review" like that once for an authentication system and never heard back; it was open source anyway so anybody could have downloaded it and found my rookie mistakes like
signed_token = content + MD5(secret_key+content)
Re: Show HN: I built an active community of trans people online
#86Mobile app only and no source code? I appreciate the effort but I'll stick with Mastodon for now.
Re: Show HN: I built an active community of trans people online
#87Earlier quoted context omitted.
No, trans people dating other trans people is actually extremely common (both homo- and heterosexual). Often because both (or more) people often understand each others struggles and wants way better than cis people do, and simply because if you like spending time primarily in trans-heavy communities, you will likely fall for someone who's also trans.
[flagged]
Can you cite any trans person who publicly agrees with your description of them as "HSTS"?
Re: Show HN: I built an active community of trans people online
#88Beware if you have UK users, you should read the new law in the UK called the online safety act. Your site has young trans people, sexual content, and would also be a target for grooming from chasers. The risks, for you, are very high.
> The risks, for you, are very high.
Is the creator in the UK? Or do they visit regularly? It wasn't mentioned in the original post.
Re: Show HN: I built an active community of trans people online
#89Re: Show HN: I built an active community of trans people online
#90Earlier quoted context omitted.
Interpreting Animats' question as concern for the user population, I think it's a valid one. The new administration in the US is openly hostile, and a lot of damage could be done to peoples' lives if, say, the community was hacked and private email addresses (or other PII) was leaked. And I also agree with you -- now's the time for those of us who can afford it, to fly our ally flags as loudly and proudly as possible…
I am taking security very seriously. All sensitive rows are protected by RLS, and I have gone even further by adding random noise to all location data. Locations are locked down, but in the unfortunate event of a hack what would be leaked is location within a 5 or so mile range, not exact location. If it is possible on Supabase I would like to eventually obscure emails and oauth info.
[flagged]