Live data from Hacker News

Show HN: Horizon – Private alternative to Imgur

horizon.pics

201–210 of 221 posts

Re: Show HN: Horizon – Private alternative to Imgur

#201
post #105
post #104

The attention to detail on the landing page is amazing. The Apple-style feature boxes, the animations, the subtle blur effect for content at the bottom, the button shadows... I love it. You've got an amazing career ahead of you.

Thank you. Apple was a big inspiration! Rens (info in footer) helped me out with the animations.

Please provide an easy way to disable all animations in the webpage. Those of us, who sometimes have to use remote browsers via RDP/VNC will greatly appreciate that.

Re: Show HN: Horizon – Private alternative to Imgur

#202
post #200
post #38

Earlier quoted context omitted.

Encryption at rest is disabled by default because many users do not want to keep track of all of their encryption keys, which are not stored by Horizon when that setting is enabled. There are also other security features, like end-to-end encryption for pastes, but like mentioned before, not everyone wants to lose the ability to preview their content in the dashboard. By giving the user a choice, I can cater to both c…

Have you done an Independent security review of these features? What's your CRS score? Do you have CVE fix SLA in place? All these features are good if this was. 2000 website but a single vulnerability in any one of the vendors of your tech stack will compromise your users

Server side encryption is handled using the Go standard library. A more detailed breakdown of the process can be found in the Help Center. TLDR: It's reputable, and best practices are followed through cryptographically secure generation, random IV, high entropy keys, memory hard hashing, etc.

Paste end to end encryption uses the native window crypto subtle API, widely used and reputable.

Re: Show HN: Horizon – Private alternative to Imgur

#203
post #193

Earlier quoted context omitted.

I've really liked Cloudflare's R2 for this usage myself. YMMV of course.

How do you upload content to R2? Someone else mentioned Dropshare, but it is iOS/macOS only. I need a cross-platform solution.

https://rclone.org/ works great

Re: Show HN: Horizon – Private alternative to Imgur

#204
post #153
post #21

Looks great, and clearly a lot of time and thought invested. Not news to you, I'm sure, but these sites typically only last for a while. Because nobody has really hit on a way to subsidize a reasonable free plan enough to pay for the bandwidth it collectively consumes, and to implement enough spam protection. Especially once it hits a certain adoption curve. So they either die or find a way to push ads, like imgur di…

The spam protection is worth repeating. I made one of these back in 2005 and it was inevitably gangloaded with questionable content like p*rn, malware, software license keys, copyrighted material, etc.

Just p*rn? You can consider yourself lucky. One week after publishing my own public instance of an IMGUR-like, I woke up with +150 emails from my host provider and a final one telling me that they had shutdown my server.

Someone had posted ~500 pictures of "naked kids", a Canadian bot had found them and notified my host provider, who automatically took action.

Everything happened in less than 30 minutes, between the first picture being uploaded and the server being shutdown.

First I tried to restart the server and clean it, but I received new notifications as soon as it was online. So I just restored the last backup before it all started. And I removed the ability for public users to upload pictures.

I will never ever publish a service allowing user to upload publicly any content.

Re: Show HN: Horizon – Private alternative to Imgur

#208
post #21

Looks great, and clearly a lot of time and thought invested. Not news to you, I'm sure, but these sites typically only last for a while. Because nobody has really hit on a way to subsidize a reasonable free plan enough to pay for the bandwidth it collectively consumes, and to implement enough spam protection. Especially once it hits a certain adoption curve. So they either die or find a way to push ads, like imgur di…

I found a way, pay me: https://imgz.org/

Now that is one finely worded site. More like these needed.
Post reply on HN