I can't help but notice that this was done in django.
It was not. If the code suggests that, then it's just because I'm not a very good developer. All basic HTML/CSS/JS + Firebase.
Show HN: Kvak.io – Online Notepad
51–60 of 62 posts
Re: Show HN: Kvak.io – Online Notepad
#52Earlier quoted context omitted.
Ironic how you posted a note without a password so anyone immature enough (me) could just tamper with your example.
That breaks the visitor counter, since it relied on updating the underlying document to update the counts! I was going to go ahead and hide the lock button entirely to avoid this attack, but decided I would get some work done today instead. EDIT: after a bit more hacking, I removed the password and hid the lock button. Nothing that would stop a determined adversary :) (Also, I kept the Khajit change in your honor)
Great. Thanks!
Fix for this incoming. I don't want to limit HTML insertion in general, but I'll make sure scripts are not possible.
Re: Show HN: Kvak.io – Online Notepad
#53Earlier quoted context omitted.
I created https://markdownshare.com/ to allow anybody to create/share/render markdown. Unfortunately these kind of sites are an abuse magnet, so it is in the process of being retired. I think any sustainable site/service like this has to be self-hosted, or come with a subscription. Because otherwise dealing with all the bots, spam-submissions, and other abuse is just too depressing.
I know exactly what you mean. I made https://Write.wtf majority of it is just junk.
Neat. Have you implemented any anti-spam controls? How much does it cost to keep it running?
Re: Show HN: Kvak.io – Online Notepad
#54Earlier quoted context omitted.
Can you expand on the types of abuse you saw? Was it all just spam, or was some of it legitimately 'dodgy' ?
A combination of (bot) IP addresses making 20+ requests a second, to post SPAM. Half the abuse was people just making lots of requests in short spaces of time, the other half was just people submitting spam, more slowly. I added rate-limiting to deal with the worst offenders, but mostly they'd keep POSTing away, ignoring the error-codes I was sending. All submissions would get a random ID, something like this example…
What do people gain from spamming your service? Referring especially to the ones that kept going despite error codes being sent their way.
Re: Show HN: Kvak.io – Online Notepad
#55Will love to self host something like this. Would you be willing to open source it?
Re: Show HN: Kvak.io – Online Notepad
#56Earlier quoted context omitted.
A combination of (bot) IP addresses making 20+ requests a second, to post SPAM. Half the abuse was people just making lots of requests in short spaces of time, the other half was just people submitting spam, more slowly. I added rate-limiting to deal with the worst offenders, but mostly they'd keep POSTing away, ignoring the error-codes I was sending. All submissions would get a random ID, something like this example…
What do people gain from spamming your service? Referring especially to the ones that kept going despite error codes being sent their way.
Just bots spamming forms I guess, hoping to get indexed and ranked on google.
The same thing you see on random blogs, I don't think there's anything specific about my service in particular - just badly coded bots that don't have retry logic and blindly spam the same content to thousands of sites that accept comments, content, and pingbacks.
Re: Show HN: Kvak.io – Online Notepad
#57Re: Show HN: Kvak.io – Online Notepad
#58adding a QR code generator would make this super mobile friendly.
Re: Show HN: Kvak.io – Online Notepad
#59Earlier quoted context omitted.
What do people gain from spamming your service? Referring especially to the ones that kept going despite error codes being sent their way.
Just bots spamming forms I guess, hoping to get indexed and ranked on google. The same thing you see on random blogs, I don't think there's anything specific about my service in particular - just badly coded bots that don't have retry logic and blindly spam the same content to thousands of sites that accept comments, content, and pingbacks.
Ahhhh they are trying to collect backlinks. That makes sense.
Re: Show HN: Kvak.io – Online Notepad
#60This is a great way to quickly share text between my personal phone and my work machine :)
Not great for secrets tho