Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Thoughts.page: hosting a small webpage for your thoughts

thoughts.page

Post reply on HN
Print view View original

61–70 of 111 posts

Re: Thoughts.page: hosting a small webpage for your thoughts

#61

Post by mxuribe »

qwerty456127 wrote: post #46
rovr138 wrote: post #40

Earlier quoted context omitted.

A blog?

A microblog. But without strict length limits. Also without post titles. Without comments, responses and mentions. Without personal branding. Easy to discover together with many others. Easy to subscribe. Quick to read. Controversial thoughts allowed but guarded both against attacks by those who disagree/dislike and against abuse by bots/propaganda/marketing. Monetization/promotion not allowed.

I think that can be accomplished with wordpress (or a similar blogging platform)...i suppose it would simply take tweaking the template/site settings to not expose features like comments, post titles, etc. Maybe wordpress might be overkill, but i think what you desire is achievable with an existing blogging platform out there.

Re: Thoughts.page: hosting a small webpage for your thoughts

#63

Post by psychometry »

wesleyac wrote: post #50
An0n1m1ty wrote: post #29

This site is subject to severe XSS via the post mechanism. Just entering alert(1) works. So be careful when going to links. See https://hacker.thoughts.page for a demo

Hey! I'm the person who made this — I don't believe there's an actual problem here, since login cookies are set on the top-level domain (and thus are inaccessible to content on subdomains), and are HTTPOnly as well. I do notice that Stripe sets a tracking cookie (which only happens for people who pay for the service, since I don't load the Stripe JS elsewhere), so you could track pageviews with that or something. Tha…

>allowing people to use arbitrary HTML and JS was an intentional choice

Oh, you'll be reversing this choice VERY quickly if your product gets any traction, I assure you...

Re: Thoughts.page: hosting a small webpage for your thoughts

#64

Post by qwerty456127 »

mxuribe wrote: post #61
qwerty456127 wrote: post #46

Earlier quoted context omitted.

A microblog. But without strict length limits. Also without post titles. Without comments, responses and mentions. Without personal branding. Easy to discover together with many others. Easy to subscribe. Quick to read. Controversial thoughts allowed but guarded both against attacks by those who disagree/dislike and against abuse by bots/propaganda/marketing. Monetization/promotion not allowed.

I think that can be accomplished with wordpress (or a similar blogging platform)...i suppose it would simply take tweaking the template/site settings to not expose features like comments, post titles, etc. Maybe wordpress might be overkill, but i think what you desire is achievable with an existing blogging platform out there.

But it would still be hard to discover.

As a reader I imagine going to a specific website, choosing a topic and immediately seeing a stream of genuine thoughts of many different people on it.

As a writer I would rather go to GitHub pages with a tweaked theme. WordPress is a huge overkill with a huge pile of problems.

Re: Thoughts.page: hosting a small webpage for your thoughts

#65

Post by edoceo »

wesleyac wrote: post #50
An0n1m1ty wrote: post #29

This site is subject to severe XSS via the post mechanism. Just entering alert(1) works. So be careful when going to links. See https://hacker.thoughts.page for a demo

Hey! I'm the person who made this — I don't believe there's an actual problem here, since login cookies are set on the top-level domain (and thus are inaccessible to content on subdomains), and are HTTPOnly as well. I do notice that Stripe sets a tracking cookie (which only happens for people who pay for the service, since I don't load the Stripe JS elsewhere), so you could track pageviews with that or something. Tha…

You become a pastebin of malicious JS.

Re: Thoughts.page: hosting a small webpage for your thoughts

#66

Post by rodolphoarruda »

tinyprojects wrote: post #12

I'm a big fan of these tiny minimal websites. I've built something similar lets your create an online blog from your paper journal. I use it daily to write down my thoughts and I'm weirdly very consistent with writing knowing others are reading my stuff. Wondering if OP has noticed the same thing. https://paperwebsite.com

This is really nice. I have always thought that the simplest way to publish a note was just throw a txt file into a folder that is synced to a website. I actually do that with keybase.io; now, this photo-to-publish idea is nice. Almost frictionless.

Re: Thoughts.page: hosting a small webpage for your thoughts

#67

Post by ramino »

> i can appreciate the self loathing of someone who says they work on "merkle trees" instead of blockchain tbh

> like, yeah bro we all get what you're saying but i'm glad you at least realize you should be ashamed of it [1]

Thank god thoughts like these can finally be shared in a better way… cute project but by someone who apparently doesn’t appreciate what other people work on.

[1]: https://wesleyac.thoughts.page/#1631439916

Re: Thoughts.page: hosting a small webpage for your thoughts

#70

Post by junon »

wesleyac wrote: post #50
An0n1m1ty wrote: post #29

This site is subject to severe XSS via the post mechanism. Just entering alert(1) works. So be careful when going to links. See https://hacker.thoughts.page for a demo

Hey! I'm the person who made this — I don't believe there's an actual problem here, since login cookies are set on the top-level domain (and thus are inaccessible to content on subdomains), and are HTTPOnly as well. I do notice that Stripe sets a tracking cookie (which only happens for people who pay for the service, since I don't load the Stripe JS elsewhere), so you could track pageviews with that or something. Tha…

https://nsfw-attack-demo.thoughts.page/

(not actually NSFW, just there to serve a point)

Post reply on HN