Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Jsonstore.io – Store your data for free without signing up

jsonstore.io

Post reply on HN
Print view View original

31–40 of 55 posts

Re: Jsonstore.io – Store your data for free without signing up

#31

Post by sehrope »

Hashing a value from Math.random() with a cryptographic hash (i.e. SHA256) doesn't make it cryptographically random[1].

If you want a random string get one directly via crypto.randomBytes(...)[2]:

    const id = crypto.randomBytes(32).toString('hex');
[1]: https://github.com/bluzi/jsonstore/blob/87af0d3ef6bf11222b98...

[2]: https://nodejs.org/api/crypto.html#crypto_crypto_randombytes...

Re: Jsonstore.io – Store your data for free without signing up

#32

Post by bluzi »

sehrope wrote: post #31

Hashing a value from Math.random() with a cryptographic hash (i.e. SHA256) doesn't make it cryptographically random[1]. If you want a random string get one directly via crypto.randomBytes(...)[2]: const id = crypto.randomBytes(32).toString('hex'); [1]: https://github.com/bluzi/jsonstore/blob/87af0d3ef6bf11222b98... [2]: https://nodejs.org/api/crypto.html#crypto_crypto_randombytes...

Thanks, feel free to create a pull request.

Re: Jsonstore.io – Store your data for free without signing up

#33

Post by kodablah »

bluzi wrote: post #25
tallanvor wrote: post #20

So there's no actual security on this? That is, given the knowledge of an endpoint, anyone can issue requests against it? How do you plan on responding to requests regarding GDPR requirements from EU residents? What happens when someone starts uploading content that could be covered under the DMCA? Following the links, should we assume that https://www.forter.com is the responsible company?

Not at all, it has nothing to do with Forter. It's my own personal project.

I hope you've learned a lesson about creating things that may help people on the modern, legislated internet. Next time, be prepared to handle all complaints first or stop providing services to people and let the bigger companies do it that can absorb the administrative costs that come with worldwide legal conformance.

Re: Jsonstore.io – Store your data for free without signing up

#34

Post by brazzledazzle »

tallanvor wrote: post #30
bluzi wrote: post #25

Earlier quoted context omitted.

Not at all, it has nothing to do with Forter. It's my own personal project.

Ok, that's fine, but it doesn't explain how you'll ensure that GDPR requirements will be handled.

Based on this I think there’s no obligation: “...a non-EU company with a website accessible to people in the EU is not, on its own, sufficient to require the company to oblige with the GDPR.” From: http://emerging-europe.com/voices/preparing-for-gdpr/

Re: Jsonstore.io – Store your data for free without signing up

#35

Post by jsondata »

sowbug wrote: post #23
toomuchtodo wrote: post #9

Earlier quoted context omitted.

What's your take on developers not putting the effort forth to use their own object store (ie S3) for this? I'm not against developer velocity (disclaimer: not a dev), but this seems to be a cycle where hosted tool comes out, people rely on it, tool becomes too expensive to run, neglected, etc, and then tool goes dark one day. Would time be better spent on client libraries that ease the difficulties of using existing…

I believe your question is equivalent to the question of solving the tragedy of the commons, which suggests it's indeed a tricky problem. As a strawman proposal, we could take some of Elinor Ostrom's suggestions for a non-governmental solution ( https://en.wikipedia.org/wiki/Tragedy_of_the_commons#Non-gov... ) and apply them: 1. Introduce the concept of an API key to allow users to voluntarily segregate the traffic i…

I built essentially what you describe a while back (jsondata.io if you're interested, though the certificate has expired and I've turned off the actual service for now). The idea was to make an infinitely scalable (within reason) solution that works well as a pastebin-style, no-setup-required data store for hacking on projects, but also as something that can scale with the needs of a business.

The architecture is built on AWS Lambda and DynamoDB, along with a small Ruby Sinatra service to handle payments and access control.

After running it for a while and getting some limited feedback from potential users/customers, I ultimately abandoned the project due to an apparent lack of interest. For hobby projects, it's fairly easy to spin up a self-hosted data store for low volume needs (or use one of the other free services). For anything more than that, a business is probably going to spend the necessary time/money to maintain a full DBMS or use something like Firebase.

I might be missing an opportunity (I've had thoughts about resurrecting the project), but for the time being, I'm just not convinced there is enough demand on the paying side.

Re: Jsonstore.io – Store your data for free without signing up

#36

Post by mercer »

mr_ali3n wrote: post #6
ktpsns wrote: post #4

So this is the same what Pastebins are for unstructured texts and image hoster for pictures. At one point, at least everybody realizes that JSON can host arbitrary data -- such as unstructured text -- and pictures as containers, can do as well. I wonder how the operators of these free services act in terms of durability. https://jsonbin.io/ proudly reports: "21838 bins created". That probably does not need much stora…

JSONbin.io developer here. Tracked the thread using GA after unusual spike in the traffic. Good point. We cannot trust any random service. It takes some amount of investment, dev time & server costs to keep the service up and running. The reason I developed this service is to ease the storage process for the developers developing mobile or small scale apps, so that they can focus on the app rather than spending time…

So, my first thought is that I'd set up a service like yours primarily because I'd be fascinated by the data provided. While that might not result in malicious use of said data (it'd not be my intention), it's quite possible the resulting data might provide interesting opportunities.

Now, I'd consider it unlikely that I'd setup such a service without being a peeping Tom, so if something interesting were to come my way, I'd probably notice it.

How do you deal with this? A firm resolve not to, at the very least, check out shady avenues of information? Giving in to that urge but not using it for profit?

The reason I'm wondering about this is that I'm part of multiple IRC channels where with some regularity people will link to a service such as yours with code that exposes private keys, and while usually the people helping out in those channels will be quick to point out the privacy leakage, it struck me that all of it is still available to the hoster. And in fact, switft removal of said code my ping the hoster that this might be interesting data.

Re: Jsonstore.io – Store your data for free without signing up

#39

Post by always_good »

brazzledazzle wrote: post #34
tallanvor wrote: post #30

Earlier quoted context omitted.

Ok, that's fine, but it doesn't explain how you'll ensure that GDPR requirements will be handled.

Based on this I think there’s no obligation: “...a non-EU company with a website accessible to people in the EU is not, on its own, sufficient to require the company to oblige with the GDPR.” From: http://emerging-europe.com/voices/preparing-for-gdpr/

The number of people invoking GDPR on HN indicates that a lot of people are going to be let down very soon.

Re: Jsonstore.io – Store your data for free without signing up

#40

Post by cobookman »

sehrope wrote: post #31

Hashing a value from Math.random() with a cryptographic hash (i.e. SHA256) doesn't make it cryptographically random[1]. If you want a random string get one directly via crypto.randomBytes(...)[2]: const id = crypto.randomBytes(32).toString('hex'); [1]: https://github.com/bluzi/jsonstore/blob/87af0d3ef6bf11222b98... [2]: https://nodejs.org/api/crypto.html#crypto_crypto_randombytes...

Why not use uuids?
Post reply on HN