How would this be different than a Twitter account with replies disabled?
Thoughts.page: hosting a small webpage for your thoughts
101–110 of 111 posts
Re: Thoughts.page: hosting a small webpage for your thoughts
#102Earlier quoted context omitted.
How are they isolated if you can inject JS that downloads resources from anywhere else? I mean, just to start: - You have no CSP header that I can see. - You do expose the server version in the headers, though. - The site is available at a non-SSL-secured domain. - There's no X-Frame-Options, X-Permitted-Cross-Domain-Policies, etc.
My point is, the service simply hosts HTML, ostensibly this is the same as any consumer web host. So whatever attack vector you can think of exists on Dreamhost or Godaddy pages, for instance.
I understand, but you can't have it both ways: You can either build a minimal Twitter clone that limits user-submitted content and not worry too much about security/abuse, or you can build a web host. The latter entails a comparatively enormous amount of responsibility you don't seem keen to take on.
Re: Thoughts.page: hosting a small webpage for your thoughts
#103I also like .plan files and finger
Re: Thoughts.page: hosting a small webpage for your thoughts
#104Earlier quoted context omitted.
From the pricing page: it obviously isn't perfect — there are people making more than $40,000/year for whom $5/month is an undue burden, and there are people making less than $40,000/year who can easily afford $5/month. but it's not like i'm checking, it's basically pay-what-you-want with $40,000 as a suggested cutoff for paying.
This is very reasonable. I wish all small software shops acted like this. Reminds me of REAPER program which also has a reasonable pricing model like this giving you unlimited time to try and buy it once it's useful to you.
If there was an option to pay or not pay, most people would probably opt to not pay, and you as a software developer or shop probably want to pay bills, so wishing that all shops acted like this is not logical to me at all.
Re: Thoughts.page: hosting a small webpage for your thoughts
#105Earlier quoted context omitted.
Yeah it's an interesting model. I'm guessing it works on an honour system as income isn't easily verifiable
In Norway, everyone's income is public information. Other countries could do the same to make things more transparent.
That is very interesting. It seems to me that the Norwegian society treats personal wealth information like what could happen with cryptos and blockchains.
Makes me want to dig deeper and understand the WHYs and HOWs it's been accomplished.
As someone born in a war-torn country, interpersonal trust is very hardly imaginable outside blood-linked relatives. Overall, in such a society there is a high degree of mistrust between individuals from different social classes or regions. Publicly displaying resources like yearly income is the last thing that would come to anyone's mind. As an adult, I have no concrete idea how much a sibling/parent makes per month. We've become so used to being vague while uncomfortably sharing our earnings.
A place like Norway seems like utopia to me. Does the government intervene by sharing citizen's reported income? Who gets to verify, record and archive such info? Is there a kind of punishment for liars/cheaters/abusers? Is the disclosure of personal income a strict legal obligation or a non-binding local tradition? I'm fairly puzzled.
Re: Thoughts.page: hosting a small webpage for your thoughts
#106This site is subject to severe XSS via the post mechanism. Just entering alert(1) works. So be careful when going to links. See https://hacker.thoughts.page for a demo
What's the output for alert(document.domain)? https://liveoverflow.com/do-not-use-alert-1-in-xss/
The output is hacker.thoughts.page
Re: Thoughts.page: hosting a small webpage for your thoughts
#107This site is subject to severe XSS via the post mechanism. Just entering alert(1) works. So be careful when going to links. See https://hacker.thoughts.page for a demo
Have you reported this to the creator? Their email is in a couple of places.
Yes I have. And as they have noted in one of the comments above, they are currently looking for ways in which this could cause a threat
Re: Thoughts.page: hosting a small webpage for your thoughts
#108Re: Thoughts.page: hosting a small webpage for your thoughts
#109Earlier quoted context omitted.
True, but GitHub Pages requires more time to set up your website: Create a new GitHub account (If you don't have one already), create a repo for your website, create your website, push that website to your repo, and then even that, you still have to set up your website for blogging, which is going to take you from a few minutes to a few days depends on what you use to create the website and how lazy you are.
I just set this blog up in under a minute: https://bachmeil.github.io/blogdemo/ I can edit in the browser using VS Code. I clicked two buttons to set up Jekyll.
How do you edit it in the browser?
Re: Thoughts.page: hosting a small webpage for your thoughts
#110Earlier quoted context omitted.
This is very reasonable. I wish all small software shops acted like this. Reminds me of REAPER program which also has a reasonable pricing model like this giving you unlimited time to try and buy it once it's useful to you.
If there was an option to pay or not pay, most people would probably opt to not pay, and you as a software developer or shop probably want to pay bills, so wishing that all shops acted like this is not logical to me at all.
What you're missing is convenience is a very valuable feature. This is exactly why I decided to give my $60 to the aforementioned program.