Live data from Hacker News

Show HN: Markdown HN profiles at {user}.at.hn

at.hn

61–70 of 169 posts

Re: Show HN: Markdown HN profiles at {user}.at.hn

#61
post #44

Earlier quoted context omitted.

By attention he means it redirects to adult content.

Not really, unless you have visited the site before. I guess you already have accepted the warning on their front page lol. Sad that you are a party pooper tho! I was being nice and warned you and here you are, removing the fun.

It's not fun when people end up with that domain in their history on corporate networks. Fun would be redirecting to a rickroll, what you did is malicious.

Re: Show HN: Markdown HN profiles at {user}.at.hn

#62

There seems to be some weird encoding issues and failure to convert URLs to links properly, for my profile - https://mike-cardwell.at.hn/ - Also, some of the indenting and white space is broken making the PGP signature invalid

The link to your public key is missing the colon after the https

Good catch. Thanks

Re: Show HN: Markdown HN profiles at {user}.at.hn

#63

Earlier quoted context omitted.

Well I mean... I like the idea of you having autonomy over your own bio .. :P I kinda want to see how this xss vuln plays out.

Haha yeah, I realized he fixed the obvious one with javascript injection but since markdown doesn't convert html I figured a normal html redirect would work and it did!

Cheeky. Fixed lol

Re: Show HN: Markdown HN profiles at {user}.at.hn

#64

Earlier quoted context omitted.

Well I mean... I like the idea of you having autonomy over your own bio .. :P I kinda want to see how this xss vuln plays out.

Haha yeah, I realized he fixed the obvious one with javascript injection but since markdown doesn't convert html I figured a normal html redirect would work and it did!

Has this already been cleaned up? I opened the link and it did not redirect. I viewed source and I do not see "(Using Firefox)

EDIT: nvm I see my sibling comment just now.

Re: Show HN: Markdown HN profiles at {user}.at.hn

#66

Earlier quoted context omitted.

$100 but worth it for the fun!

that's a steal. I can spend that in a single night at the pub, so yeah, for what it is it is a no-brainer. the only hesitation is how stable is the 'hn' TLD? Edited for ID10T too early in the morning issue

I think you mean "hn" tld?

Re: Show HN: Markdown HN profiles at {user}.at.hn

#67

Earlier quoted context omitted.

It's not premature; it's something to consider whenever sharing people's personal data on the internet. The GDPR does not apply "in the course of a purely personal or household activity and thus with no connection to a professional or commercial activity" [1]. However, that does not extend to generally sharing the information on the internet [2] as that's no longer purely personal. [1] https://gdpr-text.com/read/reci…

How does the fact that the user opts-in for the service by manually adding the tag to their profile so that information they personally added could be shared get considered by the GDPR?

Not sure and IANAL but the GDPR text is a bit weird on that. Article 9 has section e) which says that information 'manifestly made public' relating to 'special categories' is excluded.

What's weird is there seems to be no such exclusion for personal information which does not relate to special categories.

Having this 'opt-in' certainly seems to tick the box for consent.

However, if reproducing information from a publicly available bio would fall foul of GDPR requirements, then I think there are bigger fish to fry than a hobby project made by a guy who at least seems to trying to respect people's preferences.

Re: Show HN: Markdown HN profiles at {user}.at.hn

#68

Earlier quoted context omitted.

How does the fact that the user opts-in for the service by manually adding the tag to their profile so that information they personally added could be shared get considered by the GDPR?

Not sure and IANAL but the GDPR text is a bit weird on that. Article 9 has section e) which says that information 'manifestly made public' relating to 'special categories' is excluded. What's weird is there seems to be no such exclusion for personal information which does not relate to special categories. Having this 'opt-in' certainly seems to tick the box for consent. However, if reproducing information from a publ…

Although I wrote "it's something to consider", from what I can see the developer has already considered this sufficiently for the scale of the project.
Post reply on HN