Tell HN: Somebody implemented something I wrote a blog about • Hacker News Board

Re: Tell HN: Somebody implemented something I wrote a blog about

#101

Post by kevincox » Tue, Sep 20, 2022, 8:14 PM UTC

sagebird wrote: post #71

Also, if someone logs in with correct username and password and -does not- attempt to try the 2FA, I also want to know about it.

Yeah, it should basically be a timeout. If within a few minutes of entering the correct password a correct second factor is not provided then it should notify the user.

I think you can probably skip notifying on a single failed OTP code to avoid spamming the user when they make a typo (or are a bit too slow for TOTP) but if you were very paranoid you could also send in this situation.

Re: Tell HN: Somebody implemented something I wrote a blog about

#102

Post by teekert » Tue, Sep 20, 2022, 8:14 PM UTC

coenhyde wrote: post #75

When Apple released the very first iPod, I wrote to Steve Jobs to tell him that I would buy it if it was a phone too, as i don't want to carry two devices. I doubt I was the only one who had this thought, but I like to think i influenced the development of the iPhone. I never received a response from Steve.

Ah but you didn’t add that you wanted it to be an internet communicator as well!

Only would you have been able to claim some credits ;)

Re: Tell HN: Somebody implemented something I wrote a blog about

#103

Post by whatsdoom » Tue, Sep 20, 2022, 8:14 PM UTC

AlwaysRock wrote: post #54

I havnt done this in many years but for a while I was making creative content that was published online. Once in a while someone would contact me saying they liked what I did. I started doing the same. If I read an article I liked a lot I would contact the person and tell them I liked it and why. About half the time they responded with Thanks. I didnt do this with NYT writers or anything. Just people who clearly dont…

I have a little blog that occasionally gets hits when the SEO winds blow my way and twice people have reached out thanking me for a post. It's made my whole month! And encourages me to keep posting stuff. So I really appreciate that you do that, I should make an effort to do the same.

I write the blog as more of documentation for myself than something to share, but knowing that I've helped someone else is icing on the cake.

Re: Tell HN: Somebody implemented something I wrote a blog about

#104

Post by kevincox » Tue, Sep 20, 2022, 8:15 PM UTC

bilekas wrote: post #59

We implemented something that avoids the original articles, 2FA notification. After your password is approved before 2FA you get an email. So even if someone is somehow using the right 2FA you are aware. Our thinking was the mosly likely outcome was someone would hit 2FA, not have the code and so close the request without even entering a bad code. Apart from that though, it is always nice to get recognition for the s…

If you are going to send login notifications anyways this makes sense. Since the user will either want to know about the login or the failed 2FA. However if the user doesn't enable login notifications I think it makes sense to give a short timeout to wait and see if the authentication is successful. If the auth is successful you can skip the alert.

Re: Tell HN: Somebody implemented something I wrote a blog about

#105

Post by unsafecast » Tue, Sep 20, 2022, 8:16 PM UTC

wallfacer wrote: post #89

If any Spotify devs are here, please let me explore and add songs, artists and albums to my library without “hearting” it. I often just want to follow up later by “adding to my library,” and it feels weird to “LOVE” it before ever hearing it. I really feel pain when I hear something terrible that I’ve already “liked” and consider the impacts to my algorithm. Please distinguish between “like” and “save.” A simple “plu…

Another thing that bothers me, in Spotify and pretty much everything else: you can't add playlists to other playlists. Like union directories. The most important thing is that it's a link, so every list updates whenever I update the included one.

If there's a program with this type of functionality, lmk.

Re: Tell HN: Somebody implemented something I wrote a blog about

#106

Post by motoxpro » Tue, Sep 20, 2022, 8:18 PM UTC

wallfacer wrote: post #89

If any Spotify devs are here, please let me explore and add songs, artists and albums to my library without “hearting” it. I often just want to follow up later by “adding to my library,” and it feels weird to “LOVE” it before ever hearing it. I really feel pain when I hear something terrible that I’ve already “liked” and consider the impacts to my algorithm. Please distinguish between “like” and “save.” A simple “plu…

Valid. One way around it would be to create a "Follow Up" or "In The Queue" playlist that you add it to. Obviously not as easy as just a + button though.

Re: Tell HN: Somebody implemented something I wrote a blog about

#107

Post by theappanalyst » Tue, Sep 20, 2022, 8:22 PM UTC

I enjoyed when a french hacker used information from my blog to set off all the alarms of Bird scooters in Lyon France for an evening.

I had written about (what I considered as) a vulnerability that allowed remote triggering of Bird Scooter alarms (Bird disagreed of course) on my blog [1]. I then saw this github repo linked in the comments for setting off alarms of Bird scooters [2] and reached out to the author.

The author let me know that they had used the info in my blog to script a tool for setting off Bird Scooters en masse. They then targeted the script at all the scooters in Lyon and subsequently fell asleep. When they woke up the noticed the end point was disabled... Bird had taken the action to disable the API endpoint in response of course.

Probably would've been easier to fix before someone scripted it out but it made for a fun story.

[1] https://theappanalyst.com/bird.html [2] https://github.com/pcouy/bird-whisperer

Re: Tell HN: Somebody implemented something I wrote a blog about

#108

Post by iscrewyou » Tue, Sep 20, 2022, 8:22 PM UTC

wallfacer wrote: post #89

If any Spotify devs are here, please let me explore and add songs, artists and albums to my library without “hearting” it. I often just want to follow up later by “adding to my library,” and it feels weird to “LOVE” it before ever hearing it. I really feel pain when I hear something terrible that I’ve already “liked” and consider the impacts to my algorithm. Please distinguish between “like” and “save.” A simple “plu…

I like how Instagram has solved this. You can like a post but you can also save it for later viewing or showing to someone else.

Spotify should totally have a save to library function but also a heart function that trains their personalized mixes for me. I’ve just stopped looking at my library for my music catalog. Every album I like goes into a “favorite albums” folder. It shooldn’t have to be this way.

Re: Tell HN: Somebody implemented something I wrote a blog about

#109

Post by motoxpro » Tue, Sep 20, 2022, 8:22 PM UTC

unsafecast wrote: post #105

wallfacer wrote: post #89

If any Spotify devs are here, please let me explore and add songs, artists and albums to my library without “hearting” it. I often just want to follow up later by “adding to my library,” and it feels weird to “LOVE” it before ever hearing it. I really feel pain when I hear something terrible that I’ve already “liked” and consider the impacts to my algorithm. Please distinguish between “like” and “save.” A simple “plu…

Another thing that bothers me, in Spotify and pretty much everything else: you can't add playlists to other playlists. Like union directories. The most important thing is that it's a link, so every list updates whenever I update the included one. If there's a program with this type of functionality, lmk.

I don't really understand how that is useful but if you need to do it manually you can just shift click all the songs and add them all to a playlist on the desktop app

Re: Tell HN: Somebody implemented something I wrote a blog about

#110

Post by spiderice » Tue, Sep 20, 2022, 8:24 PM UTC

wallfacer wrote: post #89

If any Spotify devs are here, please let me explore and add songs, artists and albums to my library without “hearting” it. I often just want to follow up later by “adding to my library,” and it feels weird to “LOVE” it before ever hearing it. I really feel pain when I hear something terrible that I’ve already “liked” and consider the impacts to my algorithm. Please distinguish between “like” and “save.” A simple “plu…

I'm confused. I thought I missed something in the article. Why are we talking about Spotify in this thread? I'm all for your suggestions, I'm just confused how we got here. Haha. What did I miss?