No API? Sigh. It could be a nice backing host for a through-the-browser CMS – a little OAuth, a little CORS, and it could work pretty nicely.
NeoCities
51–60 of 222 posts
Re: NeoCities
#52Don't use this for anything you view as important. I just checked and there is no collision detection for usernames. You can signup for an account using any name and your account will seemingly just replace the previous created account. That is a big enough and obvious enough flaw that it also makes we wonder if this is just a phishing expedition or a way to mine email addresses.
I just fixed it. It was a change I did last night to fix a save bug. My apologies about that, it wasn't a good bug, but hopefully it's the last security-related one. Probably goes without saying, but this is definitely a beta project. I'm doing a lot of other things to protect this kind of attack (filename scrubbing, bcrypt passwords), so I'm pretty red in the face about how dumb this one was.
If you find any other bad bugs, please let me know (@kyledrake on Twitter) instead of, you know, trashing other people's work. I'm finding the duplicate sites right now and taking care of it. Thanks, and again my apologies.
This is not an email phishing expedition. I don't even require you to enter your email address to make a site.
Re: NeoCities
#53How do you plan on keeping out spam?
Through the captcha on the registration page?
Recaptcha might not be enough in the long run, but it will be enough in the short run.
Re: NeoCities
#54There are 61054 web site spaces remaining. After that, we need your help to get another server. Does that mean he's running 61k sites on a single server? Even if each site gets one single visitor per day, that 61k visitors for the Server. There is no way the server can manage that traffic. Sorry, but do you really want a static site? Just pay for a good one.
Nginx can handle 61k views/day easily. Now if each of those sites get 61k views each...
Re: NeoCities
#55What's with all the FBI seizure images?
Re: NeoCities
#56stevejobs.neocities.org
Re: NeoCities
#57Don't use this for anything you view as important. I just checked and there is no collision detection for usernames. You can signup for an account using any name and your account will seemingly just replace the previous created account. That is a big enough and obvious enough flaw that it also makes we wonder if this is just a phishing expedition or a way to mine email addresses.
I'm logged in as "www" right now.
Ah, that explains why my password stopped working ;)
Re: NeoCities
#58I think its a nice website, don't be discouraged by the comments you get here. HN can be awful with this, but if you parse through all the bad mouthers you may find some gold :)
Re: NeoCities
#59Don't use this for anything you view as important. I just checked and there is no collision detection for usernames. You can signup for an account using any name and your account will seemingly just replace the previous created account. That is a big enough and obvious enough flaw that it also makes we wonder if this is just a phishing expedition or a way to mine email addresses.
I just fixed it. It was a change I did last night to fix a save bug. My apologies about that, it wasn't a good bug, but hopefully it's the last security-related one. Probably goes without saying, but this is definitely a beta project. I'm doing a lot of other things to protect this kind of attack (filename scrubbing, bcrypt passwords), so I'm pretty red in the face about how dumb this one was. If you find any other b…
Not only does this trigger GeoCities nostalgia, it calls back to the days when betas were really betas.
Re: NeoCities
#60Has anyone actually had success maintaining a business with the donation model?
Hi,
You may be interested to learn about non-profits organizations, many of which have donations as their primary source of income.