Live data from Hacker News

Thoughts.page: hosting a small webpage for your thoughts

thoughts.page

71–80 of 111 posts

Re: Thoughts.page: hosting a small webpage for your thoughts

#72
post #70

Earlier quoted context omitted.

Hey! I'm the person who made this — I don't believe there's an actual problem here, since login cookies are set on the top-level domain (and thus are inaccessible to content on subdomains), and are HTTPOnly as well. I do notice that Stripe sets a tracking cookie (which only happens for people who pay for the service, since I don't load the Stripe JS elsewhere), so you could track pageviews with that or something. Tha…

https://nsfw-attack-demo.thoughts.page/ (not actually NSFW, just there to serve a point)

[deleted]

Re: Thoughts.page: hosting a small webpage for your thoughts

#73

is it just me, or is tweeting into the void kinda sad?

> ...is tweeting into the void kinda sad?

No, I think it's brilliant. I think we'd see more interesting writing on the internet if it didn't always start with the goal of acquiring and maintaining an audience.

Re: Thoughts.page: hosting a small webpage for your thoughts

#76

Earlier quoted context omitted.

Hey! I'm the person who made this — I don't believe there's an actual problem here, since login cookies are set on the top-level domain (and thus are inaccessible to content on subdomains), and are HTTPOnly as well. I do notice that Stripe sets a tracking cookie (which only happens for people who pay for the service, since I don't load the Stripe JS elsewhere), so you could track pageviews with that or something. Tha…

>allowing people to use arbitrary HTML and JS was an intentional choice Oh, you'll be reversing this choice VERY quickly if your product gets any traction, I assure you...

I don't actually see a problem. It goes against my gut reaction but given the pages that are published are entirely isolated there is no more of a threat than someone publishing whatever they want on another web host. There is no user information to hijack, no cookies, no login buttons, no local storage, no auth etc.

Yes, the pages can publish illegal information, be set up as phishing hubs, but none of that is as a result of JS being executable. Web hosts all have exactly the same risks to deal with, their users can also host anything they wish.

The owner's challenge is with the content they are opening up to hosting, and it will become an overhead to police that. If they decide to add buttons like "report content" then those will be able to be hijacked by the publisher and become useless.

Re: Thoughts.page: hosting a small webpage for your thoughts

#77
post #67

> i can appreciate the self loathing of someone who says they work on "merkle trees" instead of blockchain tbh > like, yeah bro we all get what you're saying but i'm glad you at least realize you should be ashamed of it [1] Thank god thoughts like these can finally be shared in a better way… cute project but by someone who apparently doesn’t appreciate what other people work on. [1]: https://wesleyac.thoughts.page/#1…

It's a joke.

Re: Thoughts.page: hosting a small webpage for your thoughts

#79

is it just me, or is tweeting into the void kinda sad?

> ...is tweeting into the void kinda sad? No, I think it's brilliant. I think we'd see more interesting writing on the internet if it didn't always start with the goal of acquiring and maintaining an audience.

Really? I don't know many authors who are motivated to write interesting content and then hide it / have zero idea if anyone is reading it.

Re: Thoughts.page: hosting a small webpage for your thoughts

#80
post #9

Earlier quoted context omitted.

Yeah it's an interesting model. I'm guessing it works on an honour system as income isn't easily verifiable

In Norway, everyone's income is public information. Other countries could do the same to make things more transparent.

It's funny seeing different attitudes on that. I live in the Netherlands, so really not far away, and income is very private, almost taboo information here - something you'd only discuss with your best friends, if that. People would be horrified to have their income be public information!

(please don't use my comment as a soapbox to start a labor rights debate)

Post reply on HN