Earlier quoted context omitted.
I second this. Here is a big list of websites to filter. http://pasted.co/b2dc3032
Wow, thanks, that's a long list. Will try to implement in the coming days... :)
Make it optional, some of us are quite fond of porn.
Show HN: UrlRoulette – Pass a URL to the next visitor
131–140 of 143 posts
Re: Show HN: UrlRoulette – Pass a URL to the next visitor
#132It's not safe to visit random URLs, especially URLs with parameters in them.
All URLs are parameters.
The only safe way to browse the web is simply not to.
Re: Show HN: UrlRoulette – Pass a URL to the next visitor
#133Earlier quoted context omitted.
Why? Drive by exploits get stomped out by browser makers. What could go wrong? A 0-day being wasted on a stranger?
More like tricking you into interacting with a website in an unintended way, not only through GET parameters but through clickjacking and other tricks. https://en.wikipedia.org/wiki/Clickjacking
There's no such thing as "GET parameters". I assume you are referring to the query string but that's not necessary for encoding resource specific content. You could use the path structure (which is the common way these days), the domain name itself (eg different sub domains for different content), the user agent string, referrer, IP location (eg GeoIP). This is only just scratching the surface too as I've not even began to cover the client side rules one can apply to create a targeted page. Essentially anything that runs like an application can be dynamically generated to be specific to the visitor and since websites can be executed both at the server side and client side (eg Javascript) you're blindly placing you're trust on any URL.
Frankly, these days you can't even trust the domain name itself since punycode and data inlining create easy vectors for spoofing, and DNS poisoning attacks are still widely possible.
Re: Show HN: UrlRoulette – Pass a URL to the next visitor
#134Earlier quoted context omitted.
You think they're keeping logs of what sites people visit on their network?
No, but I still want to respect their rules. And they're in the room with me.
Honest question, did you all have a conversation about no porn on their network or are you making an assumption that they wouldn't like it?
I'm curious what the "no porn" conversation would be like.
Re: Show HN: UrlRoulette – Pass a URL to the next visitor
#135Earlier quoted context omitted.
No, but I still want to respect their rules. And they're in the room with me.
Honest question, did you all have a conversation about no porn on their network or are you making an assumption that they wouldn't like it? I'm curious what the "no porn" conversation would be like.
We've never discussed it and I don't really have to ask. Yes I'm just making the assumption but it's with a high degree of confidence.
Re: Show HN: UrlRoulette – Pass a URL to the next visitor
#136Earlier quoted context omitted.
Yep. Just traded a link to a live stream of golden retriever puppies for someones kickstarter project and instantly thought "well I definitely should have expected that".
Would you care to share the link to that live stream? Sounds fun ;)
Re: Show HN: UrlRoulette – Pass a URL to the next visitor
#137It's not safe to visit random URLs, especially URLs with parameters in them.
All URLs are parameters. The only safe way to browse the web is simply not to.
laumars, you seem to be antagonizing my comments and downvoting regularly. There are people with different perspectives here in HN, but I do not see you replying to each one of them.
Your only recent activity has been exclusively on my threads, with a tone not allowed on the HN comments section (personal attacks), baiting for responses so you can downvote them, since you can only downvote a reply once and there's a minimum karma requirement for downvoting so it's unfeasible to do it with fake accounts.
We just had a pointless argument thread 20 levels deep a few days ago (which was not the first one), where neither of us conceded to the other's point of view. A waste of time, HN karma, and I still think you were wrong.
HN is not the Monty Python argument clinic: https://www.youtube.com/watch?v=kQFKtI6gn9Y
Re: Show HN: UrlRoulette – Pass a URL to the next visitor
#138Earlier quoted context omitted.
Thanks. Do you have a recommendation on how I should handle HEAD requests? Edit: I went with something like this [1] for now. It worked to solve this problem. I can adjust later as needed. [1] https://github.com/shurcooL/home/commit/b4a601ff7a3752feb291...
The general idea is to return all the same headers as a get, without the body, so that's likely correct. Unless there's code farther down that sends content length, etags, etc. You would want to send those too. Though I don't know that it really matters much.
Makes sense, thanks.
Good point about Content-Length and ETag headers. So it sounds like one needs to do exactly the same amount of work to respond to a HEAD request as a GET request. Meaning the body still needs to be rendered (to calculate its length and hash). Just not include it in the response.
Re: Show HN: UrlRoulette – Pass a URL to the next visitor
#139Earlier quoted context omitted.
All URLs are parameters. The only safe way to browse the web is simply not to.
laumars, you seem to be antagonizing my comments and downvoting regularly. There are people with different perspectives here in HN, but I do not see you replying to each one of them. Your only recent activity has been exclusively on my threads, with a tone not allowed on the HN comments section (personal attacks), baiting for responses so you can downvote them, since you can only downvote a reply once and there's a m…
[deleted]
Re: Show HN: UrlRoulette – Pass a URL to the next visitor
#140Earlier quoted context omitted.
All URLs are parameters. The only safe way to browse the web is simply not to.
laumars, you seem to be antagonizing my comments and downvoting regularly. There are people with different perspectives here in HN, but I do not see you replying to each one of them. Your only recent activity has been exclusively on my threads, with a tone not allowed on the HN comments section (personal attacks), baiting for responses so you can downvote them, since you can only downvote a reply once and there's a m…
You cannot down vote replies so it's not me who's been negative reping you. I also haven't been following you around HN nor posting personal attacks. I just said "all URLs are parameters" because your comment was weird and misleading (for reasons i elaborated in the other post i left yesterday).
HN is a technical discussion forum so there will be times when people will disagree with the technical points you raise; particularly when you continue to comment on technical topics you only partially understand (as seen here).
My advice to you would be to take a second to digest those counterarguments to check if they are informative rather than assuming every counterargument is a "personal attack". And if there's not enough data to understand their point then ask for clarification or an elaboration. I've learned a lot from the discussions on here just through reading those counterarguments and certainly am not too proud to admit when i have been wrong.