Nice work! A small question: even though I'm a real person always logged in on Google, the recaptcha you've used makes me click few photos for free ... Is it a setting you control when you put that plugin in your website, or Google does everything itself?
Show HN: 1MB – Free and easy static website hosting and database
171–180 of 251 posts
Re: Show HN: 1MB – Free and easy static website hosting and database
#172What if one of your users gets lucky and traffic goes huge for one site? Everybody else gets 503's? Have you planned/designed for such scenario?
Re: Show HN: 1MB – Free and easy static website hosting and database
#173Nice work! A small question: even though I'm a real person always logged in on Google, the recaptcha you've used makes me click few photos for free ... Is it a setting you control when you put that plugin in your website, or Google does everything itself?
No, site owners do not control what challenge you receive from Recaptcha.
Re: Show HN: 1MB – Free and easy static website hosting and database
#174Nice work! A small question: even though I'm a real person always logged in on Google, the recaptcha you've used makes me click few photos for free ... Is it a setting you control when you put that plugin in your website, or Google does everything itself?
No, site owners do not control what challenge you receive from Recaptcha.
Yeah, my question was more about 'how many' than 'what'. There is no question Google doesn't think I'm not a real person, it still shows me two to three pages of image clicking making me its worker robot for free.
Re: Show HN: 1MB – Free and easy static website hosting and database
#175Earlier quoted context omitted.
Thank you for your kind words! In closing I can assure you that your creations will live forever on 1MB as long as you don’t delete your account and follow everything outlined on https://policy.1mb.site . Also pride ourselves in being more secure than your average free website host
Have you had a proper security review? I don't think you would have made that mistake with user-websites being able to log out the user if you had designed with security as an important objective. Like, it's OK that you didn't, but maybe you should check that your entire public API (all microservices, UI, etc) will really be secure. You will probably struggle to get a secure interface while user content is served fro…
>I don't think you would have made that mistake with user-websites being able to log out the user if you had designed with security as an important objective.
Really? In my experience not many people care about logout CSRF, it's the lowest of low risk vulns that infosec consultants write in a report when they don't have any real vulnerabilities. I'm not sure its presence really says much about the site overall.
Effort is much better spent elsewhere - strict Content-Security-Policy, for example. Or, if there are 'real' CSRF vulns that actually do damage
Re: Show HN: 1MB – Free and easy static website hosting and database
#176Dang, this is awesome. I love everything about this.
Re: Show HN: 1MB – Free and easy static website hosting and database
#177I love this service, and I have used it from the start. Whenever I see these free services offering freedom and creativity I see easy opportunity for abuse. I hate visiting a free service to see a note left behind from the developer - "sorry, we were flooded with spam and I had to wipe the database/shutdown the service". What plans do you have in place to prevent this from happening. All I can think of when I see free web hosting is "how long will this one last". Explain to me why I should place my trust in this not shutting down in the next couple of years :)
Re: Show HN: 1MB – Free and easy static website hosting and database
#178Nothing better than free. This platform looks very user friendly and great for an average user. Can't wait to try it
Re: Show HN: 1MB – Free and easy static website hosting and database
#179Earlier quoted context omitted.
Dude, if I just want to put a page online, the last thing I want to have to deal with is SSH... Have browser, will content.
SSH/SFTP is a standard protocol. Their API is not. Many more devices support sftp than their API. I don’t always have a browser, but I often have ssh.
but SSH/SFTP are a heavier burden for dev & ops than an HTTP API. WebDAV is a more suitable request in this case