Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Profile.io - Profiles for Developers

profile.io

Post reply on HN
Print view View original

31–40 of 53 posts

Re: Show HN: Profile.io - Profiles for Developers

#31

Post by dannyr »

Xk wrote: post #27

Escape (and everything else), and check the site for XSS. I don't mean to be rude, and I realize you two coded this up in a really short amount of time -- but before this site goes live it would be best to have it secure. Demo: http://profile.io/foobar [EDIT] As someone else pointed out, viewing the list-of-developers page puts up the XSS, which is even worse. I didn't know that page existed. [EDIT2] It turns out I b…

Fixed. Let me know if we missed anything.

I wish we could use Django's autoescape filter but App Engine's SDK ships with just 0.96 by default.

We can only upgrade to a later version of Django in Prod and not locally.

Re: Show HN: Profile.io - Profiles for Developers

#32

Post by m0nastic »

kmfrk wrote: post #11
dustball wrote: post #3

My take (dannyr and I built this) -- this is like an "about.me" but for developers. You add your GitHub account, add your programming languages, etc. And (my favorite) you add all the projects you are building -- for example when you add an Android app, it automatically links to the Android Market, pulls in the app icon, etc. This is meant for developers to have a decent place to showcase their geek. (And the domain…

How exactly is this different from flavors.me? forrst.me also has more traction, and they are both formidable competitors, so I'd love some great selling points. What would make your service very, very interesting is to focus entirely on creating a presentable mix of a personal homepage and a resumé - GitHub, Stack Overflow, Codelesson badges(!), and such. LinkedIn isn't that interesting in many regards, and it'd be…

That was my first impression as well, having recently set up a flavors.me page (which includes github, and visually looks identical to their site).

I'm all for competitors in the space though, so good luck to them.

Re: Show HN: Profile.io - Profiles for Developers

#33

Post by ddemchuk »

Xk wrote: post #27

Escape (and everything else), and check the site for XSS. I don't mean to be rude, and I realize you two coded this up in a really short amount of time -- but before this site goes live it would be best to have it secure. Demo: http://profile.io/foobar [EDIT] As someone else pointed out, viewing the list-of-developers page puts up the XSS, which is even worse. I didn't know that page existed. [EDIT2] It turns out I b…

http://www.youtube.com/watch?v=hzVJFv9GyJg

Seriously though, I hope you realized that the best thing to do when someone has XSS issues is to just tell them rather than EXPLOIT them.

Re: Show HN: Profile.io - Profiles for Developers

#34

Post by dannyr »

kmfrk wrote: post #30
phlux wrote: post #22

Earlier quoted context omitted.

>...so I'd love some great selling points. They built it while riding the bus, what more could one ask for?

That makes it a good story, not a good service. :)

It's the niche.

Flavors.Me != Profile.io in the same way StackOverflow != Quora.

Re: Show HN: Profile.io - Profiles for Developers

#35

Post by Xk »

dannyr wrote: post #31
Xk wrote: post #27

Escape (and everything else), and check the site for XSS. I don't mean to be rude, and I realize you two coded this up in a really short amount of time -- but before this site goes live it would be best to have it secure. Demo: http://profile.io/foobar [EDIT] As someone else pointed out, viewing the list-of-developers page puts up the XSS, which is even worse. I didn't know that page existed. [EDIT2] It turns out I b…

Fixed. Let me know if we missed anything. I wish we could use Django's autoescape filter but App Engine's SDK ships with just 0.96 by default. We can only upgrade to a later version of Django in Prod and not locally.

Usernames aren't sanitized yet. (As is visible with the 'EG: http://profile.io/xss2

Re: Show HN: Profile.io - Profiles for Developers

#36

Post by Xk »

ddemchuk wrote: post #33
Xk wrote: post #27

Escape (and everything else), and check the site for XSS. I don't mean to be rude, and I realize you two coded this up in a really short amount of time -- but before this site goes live it would be best to have it secure. Demo: http://profile.io/foobar [EDIT] As someone else pointed out, viewing the list-of-developers page puts up the XSS, which is even worse. I didn't know that page existed. [EDIT2] It turns out I b…

http://www.youtube.com/watch?v=hzVJFv9GyJg Seriously though, I hope you realized that the best thing to do when someone has XSS issues is to just tell them rather than EXPLOIT them.

Upvoted because that's a valid point, but I did consider it before just doing that.

I knew the developers of the site were looking here. I knew there was nothing critical running on this site. They were asking for feedback. Given that, it is much easier to demonstrate the places where it should be fixed than to give instructions on how to recreate each attack.

Re: Show HN: Profile.io - Profiles for Developers

#37

Post by kmfrk »

dannyr wrote: post #34
kmfrk wrote: post #30

Earlier quoted context omitted.

That makes it a good story, not a good service. :)

It's the niche. Flavors.Me != Profile.io in the same way StackOverflow != Quora.

I don't see the niche argument applying to a service that basically isn't a community; there is no in-service exchange between the users.

flavors.me has a better design and presumably offers more service hooks than profile.io.

Saying that profile.io is a niche product in the light of flavors.me just seems like PR-ish for "less appeal". :) If it's vertical, it can't be the same as a service with a wide appeal.

From what profile.io looks like to me now, it's just flavors.me with poorer design and less traction. You can try to beat flavors.me in design (good luck with that), or you can try defining your own project and set it apart from the competition.

Information on profile.io is very scant, so I know very little about the project. I'm outlining a gap I'd like to see someone figure out and fill. I hope the project wasn't inspired by AOL's acquisition of about.me, because people in the Valley still can't wrap their brain about that. :)

Re: Show HN: Profile.io - Profiles for Developers

#38

Post by akkartik »

dannyr wrote: post #2

Hello fellow HNers: We built Profile.io as part of StartupBus. It is currently private beta but I have invites. You can create an account using this link: http://profile.io/invite/HACKERNEWS Site is pretty barebones but we will be adding more features and fixing bugs in the next few days. Hopefully, we'll be selected as finalists for StartupBus and get to demo it on Monday at SxSW. Thanks!

Anybody else getting anything besides "Email is not valid or empty." when they put emails in? I tried a few test ones, and nothing's getting through.

Re: Show HN: Profile.io - Profiles for Developers

#39

Post by dannyr »

akkartik wrote: post #38
dannyr wrote: post #2

Hello fellow HNers: We built Profile.io as part of StartupBus. It is currently private beta but I have invites. You can create an account using this link: http://profile.io/invite/HACKERNEWS Site is pretty barebones but we will be adding more features and fixing bugs in the next few days. Hopefully, we'll be selected as finalists for StartupBus and get to demo it on Monday at SxSW. Thanks!

Anybody else getting anything besides "Email is not valid or empty." when they put emails in? I tried a few test ones, and nothing's getting through.

Sorry. forgot 'not' when checking is_email_valid.

It is now fixed. Try again.

Re: Show HN: Profile.io - Profiles for Developers

#40

Post by dannyr »

kmfrk wrote: post #37
dannyr wrote: post #34

Earlier quoted context omitted.

It's the niche. Flavors.Me != Profile.io in the same way StackOverflow != Quora.

I don't see the niche argument applying to a service that basically isn't a community; there is no in-service exchange between the users. flavors.me has a better design and presumably offers more service hooks than profile.io. Saying that profile.io is a niche product in the light of flavors.me just seems like PR-ish for "less appeal". :) If it's vertical, it can't be the same as a service with a wide appeal. From wh…

You are comparing a 3-day version of Profile.io to a 2+ year-old site. We have plans that would differentiate ourselves from the other services out there but we can't build all of them in a matter of days.

It is not entirely inspired by About.me but we got some inspiration from it mainly with the design.

If you look at my previous HN submissions, Profile.io is a byproduct of my previous project - Launchset. It's just a much simpler version.

Seriously though, why the negativity? As somebody who loves to build apps, I never judge other people's app in its initial version. All ideas/apps evolve.

Post reply on HN