Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: UrlRoulette – Pass a URL to the next visitor

urlroulette.net

Post reply on HN
Print view View original

101–110 of 143 posts

Re: Show HN: UrlRoulette – Pass a URL to the next visitor

#102

Post by bigbugbag »

artursapek wrote: post #26
mmathias wrote: post #3

Earlier quoted context omitted.

That's odd. UrlRoulette does some sanity checking on the content of the URL. Thank you for this bug report!

https://cryptowat.ch fails too. seems to fail at very basic URL parsing.

it fails at a lot of other basic things: I was unable to post anything because my firefox 52 is not supported to get a recaptcha challenge.

  Please upgrade to a supported browser to get a reCAPTCHA challenge.

  Alternatively if you think you are getting this page in   
  error, please check your internet connection and reload.
I could reload to infinity, this would not fix this broken website or change the useless error message.

Re: Show HN: UrlRoulette – Pass a URL to the next visitor

#103

Post by bigbugbag »

ptr_void wrote: post #32
chromagnon wrote: post #24

Potential for XSS attacks is fairly large. Be careful out there.

Having uMatrix and NoScript addons on firefox may reduce some risks, also in general web browsing

With noscript urlroulette is useless because it requires cloudflare, ajax.googleapis, google, gstatic and a few others for no valid reason apart supporting google surveillance and helping google for free with what their algorithm cant do (yet).

Once you've enabled cloudflare, anything can happen.

Re: Show HN: UrlRoulette – Pass a URL to the next visitor

#104

Post by bigbugbag »

buzz27 wrote: post #57

I really struggled with your captcha. I had to solve 10 screens of images, it was very time-consuming and tedious.

Agreed this is a very annoying feature and IMHO unnecessary. But the good news is that the captcha didn't work and told me to get supported browser because firefox 52 apparently is not. I suppose urlroulette is trying to be smart and fails, because recaptcha works on every other site in the same browser, though I still hate it with a passion.

Re: Show HN: UrlRoulette – Pass a URL to the next visitor

#106

Post by bigbugbag »

gnarfish wrote: post #66
mmathias wrote: post #28

Earlier quoted context omitted.

They get removed.

No, you put them in a database. Don't lie to us.

Of course the author is collecting everything submitted and does whatever he wants with it. Haven't you read the terms of service and privacy policy ? Probably because there are none which usually means you can safely assume that everything is collected, stored and exploited (or will be later).

Re: Show HN: UrlRoulette – Pass a URL to the next visitor

#109

Post by bigbugbag »

morgante wrote: post #100
throwaway5752 wrote: post #72

Is this some sort of infosec performance art? This seems extremely inadvisable for users or the person running the site. What if someone posts something illegal in the jurisdiction of the viewer or a link to a site with an embedded exploit?

It's no more dangerous than clicking on any shortened URL.

People click on shortened URLs ? Why would you do that ?

Re: Show HN: UrlRoulette – Pass a URL to the next visitor

#110

Post by bigbugbag »

Retr0spectrum wrote: post #61

It probably goes without saying, but you should definitely use some kind of sandboxed browser/session if you want to try this. One annoying URL someone could submit is superlogout.com, which uses logout CSRF to log you out of a whole ton of websites at once. However, I couldn't get it to work in a private tab, because apparently the invisible captcha fails.

Ah! this is a fun one, thanks for sharing.

Luckily I'm immune to this as I don't have an account on any of these websites but one and I only log there once every 2 years for about 5 minutes.

Post reply on HN