Surfly - Surf together on the web
31–40 of 43 posts
Re: Surfly - Surf together on the web
#32Re: Surfly - Surf together on the web
#33Re: Surfly - Surf together on the web
#34Re: Surfly - Surf together on the web
#35Re: Surfly - Surf together on the web
#36Looks just like the open source togetherJS by mozilla. https://togetherjs.com/
The difference is that with TogetherJS you will not be able to handle websites that require login. Surfly can handle that in a secure way. Next, Surfly just works on any website - without the need to write a single line of code. For example, you can use it right now on GitHub. If you wanted to have such functionality with TogetherJS you would have to modify your website accordingly (i.e., by using a special version o…
Re: Surfly - Surf together on the web
#37Re: Surfly - Surf together on the web
#38Earlier quoted context omitted.
The difference is that with TogetherJS you will not be able to handle websites that require login. Surfly can handle that in a secure way. Next, Surfly just works on any website - without the need to write a single line of code. For example, you can use it right now on GitHub. If you wanted to have such functionality with TogetherJS you would have to modify your website accordingly (i.e., by using a special version o…
TogetherJS works on any website too! Just grab a Firefox addon ( https://togetherjs.com/togetherjs.xpi ) or Chrome extension ( https://chrome.google.com/webstore/detail/towtruckcrx/hpobkk... )
Re: Surfly - Surf together on the web
#39Earlier quoted context omitted.
I do not quite understand, sorry. I am concerned about security. Why am I allowed to login into say, Trello.com, while I am on surfly.com domain? Shouldn't my browser's cross-domain security policy prohibit this practice? Is it all being done through a proxy? If so, is it not true that a lot of sites don't work over proxy? [Edit] And if it is indeed proxy, doesn't that mean you can read my password(s) in clear text?
The proxy is needed to make sure that we can modify the content in such a way that it works correctly during the session. We sandbox the site so that everything keeps works correctly. I'll go deeper into this in a blog post soon. The connection to the proxy is encrypted and if the site you login also uses https, your password will never be send in clear text over the wire. Since form submissions are not actually repl…
Re: Surfly - Surf together on the web
#40http://www.deanmao.com/2012/08/28/modify-a-site-you-dont-own...
I did it the same way -- parse & rewrite js code, and have a server that stores the same cookies that your browser would. The browser js code also contains the same js rewriter so that it can handle stuff like eval(). It also had to do lots of header manipulation since there are lots of headers that have domain-name based security, like CORS for example. The one I wrote works great with js-heavy sites like gmail or facebook.