Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Why I Actively Discourage Online Tooling like jwt.io and Online JSON Validators

jvt.me

Post reply on HN
Print view View original

161–170 of 170 posts

Re: Why I Actively Discourage Online Tooling like jwt.io and Online JSON Validators

#161

Post by YetAnotherNick »

jdmichal wrote: post #36

Completely unsurprised that this is coming from someone working at a bank. I saw a lot of the same working at another very large bank. Banks are extremely risk adverse in certain areas, such as using externally-hosted tooling. Certain areas of my employer, including where I worked, couldn't even use public cloud services. (And my area was additionally PCI, meaning that we also couldn't use our internal cloud services…

And yet I find that their security model is just backwards. They have myriads of rules like you can't email outside org and when people need to send something to others, they inadvertently find solutions which are less secure than email. My friend interned at a top bank as software developer and he got the response due to access requirement they can't give him any project.

Re: Why I Actively Discourage Online Tooling like jwt.io and Online JSON Validators

#162

Post by YetAnotherNick »

wingi wrote: post #124
colinclerk wrote: post #20

http://jsonprettyprint.net/ ranks high for "json pretty print" in Google and is an example where data hits their server.

Server-side-rending is sure not privat. More on http://jsonprettyprint.net/privacy - well formated.

Pretty print privacy.

Re: Why I Actively Discourage Online Tooling like jwt.io and Online JSON Validators

#163

Post by bonkabonka »

prophesi wrote: post #119
jordache wrote: post #17

Earlier quoted context omitted.

i hate how when I'm copying + pasting a url to a test or internal environment, to the browser address bar - I may have a typo in there, or an extra space. Bam! The URL just became a google search

(firstly you should set a different default search engine) It's been nice to use the Firefox setting to have a separate search bar. Your address bar will show more results from your history, which is often what I actually need. Then you can just hit the down arrow to select "Search with x" options. My only minor quip is that your default search engine will be last in the list.

So the latest Firefox broke that for me. It seems to front-run my URLs as I type them and if the result is a 404 it sends me over to DDG with my URL as the search. :/ Really, really obnoxious but I haven't taken the time yet to paw through about:config to see if I can turn it off.

Re: Why I Actively Discourage Online Tooling like jwt.io and Online JSON Validators

#164

Post by Traster »

It's always seemed to me that if someone at Google were to look at the terms entered into chrome from my company it would probably have a shocking amount of proprietary information - plans, costs, passwords etc. It's not exactly the same online tooling that the author is talking about, but anything going into your browser is probably going somewhere you can't truly trust.

Re: Why I Actively Discourage Online Tooling like jwt.io and Online JSON Validators

#165

Post by agumonkey »

BiteCode_dev wrote: post #134
agumonkey wrote: post #111

Earlier quoted context omitted.

normal users unless you're up to talk about dmca requests too :)

Dmca + pedo + dox reports are about a dozen a year. Pastes are a niche.

aight thanks for the info, how much hassle it is to you then ? is it simply deleting the content or do you have to fill forms and be inspected ?

Re: Why I Actively Discourage Online Tooling like jwt.io and Online JSON Validators

#166

Post by BiteCode_dev »

agumonkey wrote: post #165
BiteCode_dev wrote: post #134

Earlier quoted context omitted.

Dmca + pedo + dox reports are about a dozen a year. Pastes are a niche.

aight thanks for the info, how much hassle it is to you then ? is it simply deleting the content or do you have to fill forms and be inspected ?

Up to now we just delete it. We coded an admin for that. It takes time because we have to read the claim and assess the legitimity of it, not for the deletion.

Assessing said legitimity is tricky. Not because people lie, up to now they have been pretty decent, but because you really don't want to be tracked while following potentially child pron links, so it may take time.

Scaling moderation could become a problem if 0bin becomes more mainstream, but with so few reports, it's not a problem right now.

Re: Why I Actively Discourage Online Tooling like jwt.io and Online JSON Validators

#167

Post by BiteCode_dev »

devanon wrote: post #154
BiteCode_dev wrote: post #88

Earlier quoted context omitted.

And a good one too. I'm currently maintaining https://0bin.net , and because we encrypt everything client side, people feel like they can post anything they want. We get some pretty personnal stuff. They really should not. It's a can of worms. We can get compromised. Bought. Receive a court order (we comply with dmca). Or they could be on the wrong URL (typo squatting, phishing...). Don't trust random online services…

Very nice service. Added to https://privacytoolslist.com/

Thanks, I didn't even know this list existed.

Re: Why I Actively Discourage Online Tooling like jwt.io and Online JSON Validators

#168

Post by pwinnski »

pwinnski wrote: post #71

I am now motivated to set up local tooling that is as easy to use as online tooling. I've been nervous at times about pasting data, and usually triple-check first, but that itself takes time, and one day I might be in such a hurry I don't take it. Better to establish good habits now.

Yesterday, I created a python script to reproduce jwt.io, so thanks for the motivation!
Post reply on HN