Live data from Hacker News

Show HN: A Firefox extension to leave comments on any URL

github.com

191–200 of 247 posts

Re: Show HN: A Firefox extension to leave comments on any URL

#191

The example page seems to render HTML (and I bet JS) from comments, while hilarious does same thing happen in the extension as well?

The extension does two things: - It sends sha1 of the url to the data server to check the numebr of comments, but doesn't pull the comments. - It renders an to show the comments. Thus the extension has very little code and doesn't need much updates.

Re: Show HN: A Firefox extension to leave comments on any URL

#192

I like the idea. Third voice was fun for a while. Are the iframes opt-in per domain? If not, how do you deal with leaking internal DNS names (referers) from within companies and government organizations? I don't see a referer policy [1] Does your addon respect CSP policies? I assume the browser would enforce this, if iframes are not permitted. [1] - https://securityheaders.com/?q=https%3A%2F%2Fcomntr.github.i... The…

I guess my extension doesn't none of these. Will be fixed in v2.

Re: Show HN: A Firefox extension to leave comments on any URL

#193
post #42

Earlier quoted context omitted.

Does this extension give any party the power to unpublish not-legally-allowed content?

> give any party the power to unpublish not-legally-allowed content Like the party that published it?

Yep, it's possible in theory. Comments are signed with ed25519 and the author can sign a request to delete the comment.

Re: Show HN: A Firefox extension to leave comments on any URL

#194
post #45

Earlier quoted context omitted.

I have no idea. But I would assume they would comply with the law in order to not get sued?

One person made the extension. It wouldn't take much for a company to threaten a lawsuit to take the extension out of operation.

Yup. That's why I don't post my SSN everywhere. A single data server with all the comments without any moderation won't survive. But a group of data servers with different rules and many entry points via extensions or websites, can survive.

Re: Show HN: A Firefox extension to leave comments on any URL

#195

Earlier quoted context omitted.

I have this vague memory that Gab was associated with some alt-right/neo-nazi/something-or-other thing and I should stay far away. Their website refers to Blocking "Big Tech" (which smells like "Deep State" to me). Is this something I should be using/supporting? I'm not an overtly political person but I just don't want to be in bad company.

Just take a look at https://gab.com/popular and you can make your judgement in less than a minute.

If you want to use a "cotton wool" social media, clearly there is Twitter and Facebook. They'll happily organize your feed so that you only see pictures of kittens and agreeable posts. They invest tonnes of money into filtering in exchange for your personal information.

For those who want raw social media, there's Gab. Personally I want to be able to talk to people who I don't agree with and have a proper discussion. From my experience, strangers on the platform are much more willing to engage in a discussion and explain their ideas - and at least then I can begin to understand these people, even if I don't agree with them.

I would generally say that Gab is not always pleasant and by using it you accept that. Not every website/service/media needs to be made for everybody.

Re: Show HN: A Firefox extension to leave comments on any URL

#196
post #22
post #17

Earlier quoted context omitted.

Agreed, also while they can not be censored by the administrator of the website, they can still be censored (or moderated) by the Plugin Owner, right?

Yeah, perhaps a better solution would be for the comments to be stored in something like ipfs? Though if i understand ipfs right, it works like torrents, meaning that unpopular comments will disappear over time.

In fact, I seriously considered ipfs. Then I tried to patch its severe connectivity problems with webtorrent dht. I even considered dat. But internet consists of symmetric NATs, that make any such DHTs hardly possible. An extension based on js-ipfs, would need 1 GB of memory and would constantly hog CPU with some mysterious computations. It would have to keep tens of tcp connections open to maintain at least a resemblance of connectivity. Even then, if you published a comment via "ipfs add" on your laptop and tried to discover it via "ipfs get" on your phone, it would be completely unable to do so even after an hour. Yes, it is this bad. And even then, assuming ipfs add/get worked perfectly with negligible load on CPU and memory, you'd still to keep the list of comment hashes on some data server because in ipfs the key principle is immutability. No, ipns is not a solution. It does allow to change a single hash pointer, but you need to use a private key to do so. This won't scale beyond a single data server. I had big hopes on ipfs, but it really isn't there and given the fundamental problem - inability to implement fast DHT in the world of Symmetric NATs - I don't see how it can become better.

Re: Show HN: A Firefox extension to leave comments on any URL

#197

Earlier quoted context omitted.

Just take a look at https://gab.com/popular and you can make your judgement in less than a minute.

That was... ugly. And I've seen it before. It seems worse now. I stopped reading when I got to "our race replaced by violent low-iq brown" . (in case anyone wanted to dispute the existence: https://gab.com/HankRearden/posts/MHdqTE1hWDFDTTVTR3Biak1vel... ) That's enough bull for today. Fair warning to anyone else who decides to indulge curiosity.

Rather than pointing at these people from a distance, sign up and talk to them. There is certainly a right-wing bias, sign up and change that?

Also, one of the comments below:

> Hank here is the only person on the Planet that can turn

> Sarcasm into HILARITY........

I don't find it funny or condone it, but perhaps this is some sort of sarcasm. Looking at the account of "hank", they appear to right-wing and politically engaged.

Re: Show HN: A Firefox extension to leave comments on any URL

#198

Earlier quoted context omitted.

That exactly what it means

No it's not. I am in no way required to provide you a platform to talk through or to allow you to continue using a platform you've been using. All it means is that the government, key word, is not allowed to stop you from using a platform you are allowed by it's owners to use.

Yes it is

Re: Show HN: A Firefox extension to leave comments on any URL

#199

Technically the thing is nothing new, the really important questions are those related to real life operation, and I don't see them answered. * Position in regard to censorship, and technical tools to do, or counter it. * Viability/resilience of the server which keeps comments. * Under which jurisdiction it is hosted? * If it depends on a domain name who owns it? * Can a commenter be traced, and by whom? * Can anybod…

(1) The author of this extension shouldn't have any powers to moderate comments. At the moment I can, but this will be fixed. I believe in a fragmented network with different rules about how to moderate content, or don't moderate it at all. (2) No resilience as of today. But it should be a federated network of data servers that exchange with comments. (3) US, if you're asking about this particular server. But it's just a demo. (4) I own it. But again, there should be a network of such servers and it should be possible to add your own that would have access to all the comments and would be able to serve them. (5) Commenters get assigned random ed25518 keypairs, but you can delete yours and another one will be generated. Technically, the data server knows your IP address, but you can change the data server in the config. (6) Since comment are signed, it's possible to allow the author to edit his comments. They can't be just edited by someone else because comments are signed. At the moment signatures aren't verified, but there will be a verufy button per comment/

Re: Show HN: A Firefox extension to leave comments on any URL

#200
post #191

The example page seems to render HTML (and I bet JS) from comments, while hilarious does same thing happen in the extension as well?

The extension does two things: - It sends sha1 of the url to the data server to check the numebr of comments, but doesn't pull the comments. - It renders an to show the comments. Thus the extension has very little code and doesn't need much updates.

So answer is yes. The database does not sanitize user input and the extension just renders the tags as actual HTML. That doesn't seem super safe. I mean just check the example page from the github. It already has embedded Youtube videos and gifs.
Post reply on HN