Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Twitter is rejecting posts containing JSFiddle URLs

github.com

Post reply on HN
Print view View original

171–180 of 208 posts

Re: Twitter is rejecting posts containing JSFiddle URLs

#171

Post by code_duck »

WrtCdEvrydy wrote: post #154
chrisacky wrote: post #90

This is a little offtopic, although I suppose there's a tangential link to JSFiddle getting no response from Twitter.. I too have failed in getting a response from JSFiddle.. About 70 days ago, I accidentally posted an anonymous submission to JSFiddle. There was no excuse for this other than human error. I was working on development and production at the same time and copied a users personally identifiable from an em…

So, let me get this right... You, a software engineering professional copied a user'name, email and order reference ID, two of which are PII into an online service... on purpose.

Yes, and they admitted error and the issue they're describing is that it was very difficult to rectify the error.

Re: Twitter is rejecting posts containing JSFiddle URLs

#173

Post by paulddraper »

morpheuskafka wrote: post #155
vermontdevil wrote: post #4

It’s due to crypto scammers using it. From the founder’s post: At some point in the past crypto scammers used JSFiddle to host pages with a wallet code and posted links to that on Twitter. Due to the nature of JSFiddle, anyone can post anything, so wallet codes are ok – we did implemented a content filter to shadow-ban these. I asked Twitter if they they could help out and ban twitter accounts that were posting scam…

Couldn't you do the same thing with github.io, S3 Websites, Netlify, the list goes on? Why would they single out JSFiddle among numerous services where one can upload arbitrary code?

The laziness of scammers never ceases to amaze.

There's the theory that misspellings in a Nigerian email are meant to filter only the truly gullible, but IDK if that is true.

Re: Twitter is rejecting posts containing JSFiddle URLs

#174

Post by flattone »

paulddraper wrote: post #173
morpheuskafka wrote: post #155

Earlier quoted context omitted.

Couldn't you do the same thing with github.io, S3 Websites, Netlify, the list goes on? Why would they single out JSFiddle among numerous services where one can upload arbitrary code?

The laziness of scammers never ceases to amaze. There's the theory that misspellings in a Nigerian email are meant to filter only the truly gullible, but IDK if that is true.

in this case is laziness another word for efficiency?

Re: Twitter is rejecting posts containing JSFiddle URLs

#175

Post by themacguffinman »

vanderZwan wrote: post #161
themacguffinman wrote: post #150

Earlier quoted context omitted.

And it's Twitter's job to train them?

It's not about whether it's Twitter's job to "train" them, a warning page before continuing a link is hardly that. It's about whether they should trust their users and believe that the latter can take responsibility for their own choices, and figure these things out themselves.

> It's about whether they should trust their users and believe that the latter can take responsibility for their own choices, and figure these things out themselves.

You're just begging the question. Why should they do that?

Re: Twitter is rejecting posts containing JSFiddle URLs

#176

Post by dwild »

Beldin wrote: post #139
dwild wrote: post #123

Earlier quoted context omitted.

> their prerogative Thus any business decision isn't a problem? Whether it's their prerogative, it still a problem in tech. > to ban content deemed unsafe Like any links? Or even text itself? The only thing that makes JSFiddle "worst" is how easy it is, but even then almost anything else is just as easy. If there's money to be made too, unless you block everything that cost less than the money to be made, what you do…

> their prerogative Thus any business decision isn't a problem? Depends on your definition of "problem"... and thus your definition of who should care: - legally (government): any business devising that comply with law are not a problem - financially (investors): any decisions that increase profits are not a problem - morally/ethically (users): any business decisions that you personally are okay with are not a proble…

> Most links, however, are better attributable.

I strongly disagree on that. The fact that you have an account behind it doesn't make it attributable at all. There's nearly no verification on 99% of the internet. Some studies consider that 9 to 15% of Twitter accounts are litteraly fake [1]. TwitterAudit believe that 40-60% of Twitter accounts are fakes.

They aren't attributable to anyone except a username, which is worthless.

> You could make a car that any website that similarly allows anonymous code execution should have that warning or be blocked.

It was never about code execution but what they call "wallet code" which is what I did in another comment [2].

> Most links

You can easily register a domain anonymously. Most links are fine sure, most possible domains, aren't, which is my point. Show a warning (which they do on URL Shortener) instead of blocking a domain altogether on ALL links and use a white list (which would include MOST used domains) instead.

[1] https://aaai.org/ocs/index.php/ICWSM/ICWSM17/paper/view/1558...

[2] https://news.ycombinator.com/item?id=20124667

Re: Twitter is rejecting posts containing JSFiddle URLs

#177

Post by cma »

paulddraper wrote: post #173
morpheuskafka wrote: post #155

Earlier quoted context omitted.

Couldn't you do the same thing with github.io, S3 Websites, Netlify, the list goes on? Why would they single out JSFiddle among numerous services where one can upload arbitrary code?

The laziness of scammers never ceases to amaze. There's the theory that misspellings in a Nigerian email are meant to filter only the truly gullible, but IDK if that is true.

> There's the theory that misspellings in a Nigerian email are meant to filter only the truly gullible, but IDK if that is true.

I think the crazier misspellings with wild character substitutions only started after bayesian spam filtering.

Re: Twitter is rejecting posts containing JSFiddle URLs

#178

Post by themacguffinman »

elcomet wrote: post #160

I don't understand the difference with any other website. What prevents the scammers to post links to a website containing crypto miners, or any malware ?

It doesn't stop scammers in their tracks, it just makes it harder. With dedicated scam websites, there is an actual cost to procuring new site addresses to evade domain blacklists, and they can't piggyback off jsfiddle's domain credibility.

Re: Twitter is rejecting posts containing JSFiddle URLs

#179

Post by 27182818284 »

MasterScrat wrote: post #92
paulgb wrote: post #82

Earlier quoted context omitted.

I don’t think it’s mining code, I think it’s wallet addresses posted by scammers. Here’s an example of the scam I think this is intended to curb: https://s3.amazonaws.com/aws-website-staticfiles-25g9k/elon_...

I don't understand how someone could be tech-savvy enough to know about ETH and actually own some, while at the same time falling for such scams.

It is a numbers game. It is basically free and if you get 1 in a million than hey that's money. Same with Nigerian email spam I suppose.

Re: Twitter is rejecting posts containing JSFiddle URLs

#180

Post by nkrisc »

MasterScrat wrote: post #92
paulgb wrote: post #82

Earlier quoted context omitted.

I don’t think it’s mining code, I think it’s wallet addresses posted by scammers. Here’s an example of the scam I think this is intended to curb: https://s3.amazonaws.com/aws-website-staticfiles-25g9k/elon_...

I don't understand how someone could be tech-savvy enough to know about ETH and actually own some, while at the same time falling for such scams.

These are probably the people who jumped on the hype train and bought at the previous peak.
Post reply on HN