Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Hacker Spring – Instant blog by email, no signup required

hackerspring.com

Post reply on HN
Print view View original

31–40 of 68 posts

Re: Show HN: Hacker Spring – Instant blog by email, no signup required

#31

Post by pmachinery »

AnonC wrote: post #21

As pointed out by samstave in a comment at https://news.ycombinator.com/item?id=23209348 : You send an email to this service to post a blog entry, and this service exposes your name and email address (as obtained from the email headers) to everyone! That’s a huge privacy disconnect in a world where exposed emails can cause a lot of problems, and more so for non-technical people, which this service intends to make thi…

And while happily displaying the sender email publicly, it gives no indication that someone has embedded (potentially malicious) javascript in a post (why that is even allowed is another question), or that some expected 'blog posts' are actually unexpected redirects to external sites that can contain even more malicious/illegal content.

Leaving aside that a site like this is so wide open for abuse of all kinds it won't last five minutes, I don't even see the advantage of submitting a form at an email provider over simply submitting a form directly on the site.

Re: Show HN: Hacker Spring – Instant blog by email, no signup required

#36

Post by hacker256 »

pmachinery wrote: post #31
AnonC wrote: post #21

As pointed out by samstave in a comment at https://news.ycombinator.com/item?id=23209348 : You send an email to this service to post a blog entry, and this service exposes your name and email address (as obtained from the email headers) to everyone! That’s a huge privacy disconnect in a world where exposed emails can cause a lot of problems, and more so for non-technical people, which this service intends to make thi…

And while happily displaying the sender email publicly, it gives no indication that someone has embedded (potentially malicious) javascript in a post (why that is even allowed is another question), or that some expected 'blog posts' are actually unexpected redirects to external sites that can contain even more malicious/illegal content. Leaving aside that a site like this is so wide open for abuse of all kinds it won…

This is silly. Does google tell you if a site is using JS? Does HN?

What "abuse" is available? Also, it's been more than 5 minutes. Looks like you are wrong.

Re: Show HN: Hacker Spring – Instant blog by email, no signup required

#37

Post by hacker256 »

plibither8 wrote: post #23
hacker256 wrote: post #7

Earlier quoted context omitted.

Thank you! The animation site was actually just to show that you could attach a javascript file and embed it in your e-mail! https://hackerspring.com/p/protonmail.com/hackerspring/5ec06... Is an example without the javascript!

But... why? Giving a user complete control over JS code that will run directly off the site is inherently an unsafe idea, for you and for the user.

Tell that to every webhost/webserv in the world. You don't seem to understand how the web works.

Re: Show HN: Hacker Spring – Instant blog by email, no signup required

#39

Post by hacker256 »

rubatuga wrote: post #26

This is a repost of a banned submission: https://news.ycombinator.com/submitted?id=podestapizza https://news.ycombinator.com/threads?id=podestapizza

> This is a repost of a banned submission:

Wrong. It's a repost of a flagged submission that was flagged due to the nature of its name and reposted. The real hacker community loved the podesta pizza name. HN not so much so I renamed it to Hacker Spring!

Good find though! Keep it up Sherlock! :)

Post reply on HN