Live data from Hacker News

Show HN: Plus – Self-updating screenshots

plusdocs.com

91–100 of 126 posts

Re: Show HN: Plus – Self-updating screenshots

#92
post #35

I worked for a personalization vendor a few years ago and was on an engineering team that built a feature like this. It was ... a major headache, and I don't think anyone was ever completely comfortable with the security implications. So I wish the team good luck, and especially with issues like: * A/B testing. How can you ensure that what your clients are seeing is the same thing you are seeing? Maybe you've been as…

Tangentially related question, what are the most successful products built around browser extensions? I sometime have ideas that would require browser extensions, but it feels like the target market must be computer literate for any chance or success (no mobile support for example).

Honey was primarily a browser extension. 4 billion exit

Re: Show HN: Plus – Self-updating screenshots

#93
post #3

This is so clever. Love it. Would love a version that just runs locally without sending things to the cloud.

The Arc browser has something like this with their Capture + Easels feature (example of this post: https://arc.net/e/A6D1FE0C-063A-4500-8D19-46581D16181E ), and it supposedly does update. Truth be told, I have no clue how the live-updating feature works when I share an Easel but it does capture the page as I see it Edit: It does change on my local "Easel" almost instantly with my reply, but we'll see if that screensh…

what's an Easel?

Re: Show HN: Plus – Self-updating screenshots

#95
post #83

Earlier quoted context omitted.

We appreciate the good luck! We're definitely going to need it. I spoke to the security side in a previous comment, but here's some thoughts on the other points you mentioned: * A/B testing: We're grabbing the browser session data, which includes things like cookies and local storage. In our experience, this tends to be where A/B testing group identifiers are stored. But, if it was on something like the IP, then, yea…

So you keep client cookies and auth tokens… somewhere?

Sounds like one of those cases where convenience trumps security for business users and the engineers keep their palms close to their faces.

Re: Show HN: Plus – Self-updating screenshots

#96
post #64
post #58

Earlier quoted context omitted.

I assume they mean by default, employees do not have access to the KMS key necessary to decrypt the sensitive data. (They mention using an individual KMS key per customer) I suspect there must be a handful of SREs who, who could access it if they really wanted to - though that access would still be logged in cloudtrail.

You've got it right! The KMS keys used to encrypt sensitive data are generated per customer, and the majority of our engineering team cannot access any sensitive production data at all. In theory, it would only be the select team members with privileged access that could access it, but as you mentioned, it would be logged in CloudTrail. We also have GuardDuty enabled, and it would likely alert on anomalous activity.…

> Our employees do not have access to the private key to decrypt sensitive data.

So this is literally a lie?

Re: Show HN: Plus – Self-updating screenshots

#99
post #35

I worked for a personalization vendor a few years ago and was on an engineering team that built a feature like this. It was ... a major headache, and I don't think anyone was ever completely comfortable with the security implications. So I wish the team good luck, and especially with issues like: * A/B testing. How can you ensure that what your clients are seeing is the same thing you are seeing? Maybe you've been as…

Tangentially related question, what are the most successful products built around browser extensions? I sometime have ideas that would require browser extensions, but it feels like the target market must be computer literate for any chance or success (no mobile support for example).

Rakuten (formerly Ebates).

Fakespot and Bubbles have raised millions. Will see how they go

Re: Show HN: Plus – Self-updating screenshots

#100

Earlier quoted context omitted.

The Arc browser has something like this with their Capture + Easels feature (example of this post: https://arc.net/e/A6D1FE0C-063A-4500-8D19-46581D16181E ), and it supposedly does update. Truth be told, I have no clue how the live-updating feature works when I share an Easel but it does capture the page as I see it Edit: It does change on my local "Easel" almost instantly with my reply, but we'll see if that screensh…

what's an Easel?

It's their term for a board you can add shapes and captures of webpages to, and you can share it. Might be good for building a personal dashboard composed of multiple monitoring services
Post reply on HN