Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Twitter is rejecting posts containing JSFiddle URLs

github.com

Post reply on HN
Print view View original

61–70 of 208 posts

Re: Twitter is rejecting posts containing JSFiddle URLs

#61

Post by wongarsu »

vfc1 wrote: post #7

Given the nature of the product, there is no way for the maintainers of Js fiddle to prevent it from being used to run arbitrary code, because that is what it's meant to do. It's also impossible for both jsfiddle or twitter to scan the code of each fiddle and determine if it's legitimate or an attack, so this looks like a good measure from Twitter. What is surprising is how this was even allowed so far and still is i…

By the nature of the product JsFiddle also can't do anything more than what any website set up by an attacker could do. The only thing making JsFiddle unique is that it is lower friction. Any attacker could also set up a github pages link, or use any free webhoster, or rent webspace for $5/year under a false name.

Re: Twitter is rejecting posts containing JSFiddle URLs

#62

Post by Errancer »

diveanon wrote: post #22

At what point is the tech community going to abandon twitter? From my perspective it is just bots, "influencers", and propaganda. I see very little social utility for using the network, especially when compared to the damage it is causing through the spread of misinformation and outright lies.

Those are only things that get media attention, Twitter is much more than bots and propaganda.

Re: Twitter is rejecting posts containing JSFiddle URLs

#63

Post by aquova »

Out of curiosity, I went onto Twitter and tried to post a link with one of the similar sites as JSFiddle. It seems that CodePen URLs are still allowed. This seems very strange to me, as unless I'm missing something, CodePen has the same inherent faults as JSFiddle.

Twitter clearly has taken the easy way out here, and instead of addressing the problem and tried to tackle it, just blanket banned JSFiddle with no regard to their users, or to the variety of similar services that provide the exact same functionality. If I was a crypto miner, I would simply copy paste into CodePen and continue on my way.

Re: Twitter is rejecting posts containing JSFiddle URLs

#64

Post by DarkWiiPlayer »

FreeHugs wrote: post #19
tomglynch wrote: post #17

Earlier quoted context omitted.

I assume they mean a mining script - so that the person running the jsfiddle would be mining cryptocurrencies, and the proceeds would go to the scammers wallet address.

If that is true, Twitter should also block every newspaper out there. Their bloated websites max out my CPU too.

Get uMatrix and block scripts.

Re: Twitter is rejecting posts containing JSFiddle URLs

#65

Post by aquova »

reitanqild wrote: post #57
FreeHugs wrote: post #21

Earlier quoted context omitted.

The problem is: I have yet to find a person in the fediverse that interests me. I like to read tweets from accomplished people. Successful startup founders for example. Is there anybody out there? Any links to people of significance in the fediverse?

Drew DeWalt is there and a number of others, especially the creators of the fediverse like Eugene and others ;-) FWIW you can also use an account on i.e. Mastodon to follow twitter users. I suddenly realized because I was following a twitter users through a gateway, probably because someone had boosted a tweet from that account sometime and I had followed based on that. That should take care of following at least.

I didn't realize this was a feature, and I haven't been able to find any information on how to follow Twitter users in this way. How do you go about doing it? If I can follow select Twitter users on Mastodon, that would really incentivize me to use it further.

Re: Twitter is rejecting posts containing JSFiddle URLs

#66

Post by megous »

aquova wrote: post #63

Out of curiosity, I went onto Twitter and tried to post a link with one of the similar sites as JSFiddle. It seems that CodePen URLs are still allowed. This seems very strange to me, as unless I'm missing something, CodePen has the same inherent faults as JSFiddle. Twitter clearly has taken the easy way out here, and instead of addressing the problem and tried to tackle it, just blanket banned JSFiddle with no regard…

Any website can have a miner, outside of some safe content only sites. It may as well be, that in some distant future, users of social sites will be able to link only to other pre-approved major social sites.

You can't even link on most of these websites without going through some intermediary URL forwarder.

Re: Twitter is rejecting posts containing JSFiddle URLs

#67

Post by tveita »

> Due to the nature of JSFiddle, anyone can post anything, so wallet codes are ok – we did implemented a content filter to shadow-ban these.

> I asked Twitter if they they could help out and ban twitter accounts that were posting scam tweets that included links to the rouge fiddles.

So they basically sent a message to Twitter saying "We're knowingly hosting malware and we don't intend to remove it, here are some examples"?

Re: Twitter is rejecting posts containing JSFiddle URLs

#68

Post by tannhaeuser »

codedokode wrote: post #11
vermontdevil wrote: post #4

It’s due to crypto scammers using it. From the founder’s post: At some point in the past crypto scammers used JSFiddle to host pages with a wallet code and posted links to that on Twitter. Due to the nature of JSFiddle, anyone can post anything, so wallet codes are ok – we did implemented a content filter to shadow-ban these. I asked Twitter if they they could help out and ban twitter accounts that were posting scam…

I don't understand how posting a "wallet code" is dangerous. Is it mining coins while you are browsing the code? Then it just a minor annoyance. Also, browsers should block cryptominers when they are in the background tab.

Blocking cryptominers or other script isn't possible because of JavaScript's nature as Turing-complete language, much less with new shiny WebWorkers/PWAs. It's also not just a minor annoyance when miners, trackers, and all kinds of other nefarious or just plain garbage scripts drain your batteries and consume power/bandwidth for no other reason than browser vendors being busy to develop webapp platforms and world domination schemes rather than declarative and privacy-focussed content consumption/authoring ... browsers.

Re: Twitter is rejecting posts containing JSFiddle URLs

#69

Post by IggleSniggle »

banachtarski wrote: post #53
Timucin wrote: post #18

> Twitter just went the easy route and blocked all jsfiddle.net links instead of blocking spammer accounts on their platform. This is a huge problem with all the tech giants that needs to be addressed. I don't expect them to be perfect but I expect them to be open to communications on any level. I also think Twitter is the Twitter today just because of the bots and fake accounts they have since those accounts were cr…

I just don't agree with this sentiment. I don't work for twitter or any social media company, but it strikes me as their prerogative to ban content deemed unsafe if they don't have the means or wherewithal to properly police the content. From an engineering standpoint, how exactly do you propose to scan fiddles for objectionable content. With an image link, you could throw a neural net at it and at least tag it as ns…

Ok, but they’re not blocking CodePen etc. And furthermore, you don’t even need a JSFiddle/CodePen whatever, you can run it on any website that you can edit code on! Is github.io next to be blocked? How about any unrecognized website? That JSFiddle has been targeted by this action is absurdity.

Re: Twitter is rejecting posts containing JSFiddle URLs

#70

Post by Hendrikto »

onion2k wrote: post #40
vfc1 wrote: post #7

Given the nature of the product, there is no way for the maintainers of Js fiddle to prevent it from being used to run arbitrary code, because that is what it's meant to do. It's also impossible for both jsfiddle or twitter to scan the code of each fiddle and determine if it's legitimate or an attack, so this looks like a good measure from Twitter. What is surprising is how this was even allowed so far and still is i…

Given the nature of the product, there is no way for the maintainers of Js fiddle to prevent it from being used to run arbitrary code, because that is what it's meant to do. There are things they could do though - such as limiting the execution time of a fiddle to a couple of minutes, or limiting the size of the code, or blocking certain calls, and so on. Users are running code that's been saved to the JSFiddle serve…

> Users are running code that's been saved to the JSFiddle server, so it's not unreasonable to suggest JSFiddle have some responsibility to their visitors.

I do not think so. If I insult another user on Hackernews, how is Ycombinator resposinble for that? I don‘t think platforms should be responsible for what their users do. That is a very slippery slope, leading to the horrendous way YouTube deals with copyright claims, Article 13, and similar censoring tools.

Post reply on HN