Live data from Hacker News

Node.js used to mirror DOM across browsers

screentoaster.com

31–40 of 53 posts

Re: Node.js used to mirror DOM across browsers

#32
post #19

I am not prone to melodramatic statements, but seeing this I had the same feeling I had the first time I started using GMail. It's not necessarily the DOM sharing, which is cool enough. I just think that the emergence of sockets in new browsers is going to bring in the "next level", whatever that ends up being. Seriously incredible, especially considering the development timeframe.

It's fun, yes, but at the same time, it's nostalgic. We've had such technology for decades. There have been desktop sharing apps for years, in Java applets etc. So whilst it's cool that the browser wars are generating a ton of improvements, none of them so far are really things that will blow users minds. HTML5 is just catching up to where other platforms were 10 years ago.

What's even great is that all these technologies are more or less platform agnostic. What is developed on a PC will work instantly on a Mac/iPhone/tablet/what not!

Re: Node.js used to mirror DOM across browsers

#33
post #7

Earlier quoted context omitted.

Suppose I send you a link to a page I own. I start this thing on said page and track what you do with the rest of the session on the off-chance that you do something sensitive with it. It's like a single-tab key/screenlogger. Combine this with traditional phishing methods (which already work) and you might get valuable data. It's going to be at least as effective as current phishing methods, with the added advantage…

You understand this works by proxying webpages, right? The URL bar is going to show the URL of the proxy, not my bank. If you consider this to be dangerous that's a flaw in every web browser ever, not this piece of software. This kind of thing was possible 10 years ago too.

That's how every phishing plot works, no? And still they get data. This makes it a step smoother.

Re: Node.js used to mirror DOM across browsers

#34
post #18

This is a cool demo; props to the guys who made it. I have done a few demos like this, and it turns out to be surprisingly hard to turn it into a product. For instance, just because you can send over changes to the DOM, you can't necessarily reproduce the javascript side-effects, exactly. You can't just poll the state of the DOM because it doesn't reflect all of the state that lives in javascript closures that you ca…

[deleted]

Re: Node.js used to mirror DOM across browsers

#36
post #17

Earlier quoted context omitted.

It's done via proxy, node.js, and websockets =) No iFraming. Since we're proxying, we can dynamically hijack the links and insert JS.

What are you using for server side dom manipulation? jsdom? apricot? node-xml? libxmljs? I spent a lot of the weekend working on a webcrawler, but couldn't find a xml parser that didn't choke on the internet-at-large. Any chance you'd consider open-sourcing?

Do you have any examples of the kinds of things that libxmljs choked on?

Re: Node.js used to mirror DOM across browsers

#37

I'd love to be able to just add a script tag to my website, and then log into some web based service which shows me a list of the current sessions on my website allowing me to click on one of those sessions and monitor their progress through the site using this dom mirroring technique. There must be money to be made in this sort of service?

That's definitely one of our ideas for pushing this further!

Re: Node.js used to mirror DOM across browsers

#39

I'd love to be able to just add a script tag to my website, and then log into some web based service which shows me a list of the current sessions on my website allowing me to click on one of those sessions and monitor their progress through the site using this dom mirroring technique. There must be money to be made in this sort of service?

http://www.clicktale.com
Post reply on HN