This site was borne of the discussion here: https://news.ycombinator.com/item?id=17068138 (Specifically this part of the thread: https://news.ycombinator.com/item?id=17071224 ) I spun up an instance of phpBB (trying to keep costs down) and customized a ThemeForest theme to make it not ugly. I'll post a thread today that lists all of my notes from the setup process of the site for anyone interested. I'm a huge fan of…
that is a throwback, starting a phpBB forum was one of my first forays into the web back in 2001.
Show HN: HackerForums.co, a forum for the crowd that hangs out on HN
91–100 of 140 posts
Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN
#92also +1 to shaving that banner height by 50%
but good on you for shipping a thing
Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN
#93After registering: [phpBB Debug] PHP Warning: in file [ROOT]/includes/functions_messenger.php on line 506: count(): Parameter must be an array or an object that implements Countable
Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN
#94I like this idea because HN mods (reasonably) discourage certain types of discussions as off-topic. But I'm actually interested to know what HNers think about various topics that may be deemed off-topic by mods. Looking forward to joining your community!
Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN
#95Is it possible to do this in discord? I think it would be much more successful than phpbb.
Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN
#96Earlier quoted context omitted.
Passwords should be hashed client-side anyway, so the real issue there is how to encode the password hash in a way that satisfies the legacy system. But this is usually plausible, e.g. by base64 or hex encoding the hash to avoid disallowed characters and then appending specific characters that satisfy the set of required characters.
You don’t need to hash a password over the client so long as it’s sent over an encrypted network. The goal of submitting a password is that it’s not sent in open plaintext. Otherwise even if you hash it on the client, the plaintext hash can still be intercepted and used, exactly as-is, as the plaintext password.
e.g. password + client_salt => hash => send to server => (hash+server_salt)^hash2 => compare to db
By doing this you'd protect a user when their password might be accidentally logged (e.g. Twitter recently). Then if you compromise the hash you don't immediately reveal the password itself, just the text needed to authenticate, which can be changed. If you simply change the salt used client side you may not even need to have the user change their password (although obviously better if they did).
That said, I don't think this is required, but there is actually a case for it. Also obviously you should never log the password, but mistakes are made. This helps mitigate the risk of that password being exposed.
Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN
#97I like this idea because HN mods (reasonably) discourage certain types of discussions as off-topic. But I'm actually interested to know what HNers think about various topics that may be deemed off-topic by mods. Looking forward to joining your community!
I agree, particularly when it comes to political discourse. HN is one of the most intelligent places on the internet and I think it'd be very enlightening to hear what such great minds have to say about political topics.
Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN
#98UX nitpick: The form entry links (lounge, etc) have hover states for the entire row, implying they're clickable, but in reality only the name within the row is clickable. Best to make the whole row clickable for maximum ease. also +1 to shaving that banner height by 50% but good on you for shipping a thing
Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN
#99Re: Show HN: HackerForums.co, a forum for the crowd that hangs out on HN
#100Well, I just signed up. Not sure if I'll be active here, but I always like to support forums over social media sites and other corporate silos. That said, if I can give you a bit of advice: Change that captcha on the registration page. It's really annoying to decipher, and likely doesn't do all that much to stop bots. Instead, get a few questions and answers set up, and make them forum specific. Like, what startup ag…
Thanks for signing up and thanks for the feedback! I agree that that captcha sucks, but it's the default so I left it for now. I'll add all this to my todo list!