Show HN my holiday project: thingsand.me, simple image blogging

And terms and conditions which deal with your rights and your users rights, and which explicitly deal with copyrighted data concerns.

http://thingsand.me/media/images/image_228.html

Your uploader is blindly trusting the file extension for an image being uploaded. It's possible to upload valid images that contain HTML or other content within them.

Deletions are also done via a GET request, which makes them vulnerable to a CSRF attack. An attacker can figure out the URL for a deletion based on the content of the post: once they've done that, all they have to do is trick the user into visiting a site controlled by the attacker.

What's a big negative to me is the design of my feed. It's actually what's preventing me from sharing this with my friends who are fellow designes/creatives. Specifically too much real estate for the sort option on the right, dropshadows are little bit distracting, and do you need "Thing from?" Just by having the URL, I can tell that's the source.

I think what makes more sense is if the tags run across the top horizontally (above the images), and there is an add button. The reason is so that the grid remains completely full width across your container and so more results are per row.

This would also help put the name of the person above the image results instead of to the right.