Live data from Hacker News

Surfly - Surf together on the web

surfly.com

31–40 of 43 posts

Re: Surfly - Surf together on the web

#32

Earlier quoted context omitted.

Also, because you are acting like a proxy AJAX based DOMs seem to cause errors?

We take this into account, we sandbox the website in such a way that AJAX request will work properly.

Sweet! I'm loving this site.

Re: Surfly - Surf together on the web

#36
post #6
post #5

Looks just like the open source togetherJS by mozilla. https://togetherjs.com/

The difference is that with TogetherJS you will not be able to handle websites that require login. Surfly can handle that in a secure way. Next, Surfly just works on any website - without the need to write a single line of code. For example, you can use it right now on GitHub. If you wanted to have such functionality with TogetherJS you would have to modify your website accordingly (i.e., by using a special version o…

TogetherJS works on any website too! Just grab a Firefox addon (https://togetherjs.com/togetherjs.xpi) or Chrome extension (https://chrome.google.com/webstore/detail/towtruckcrx/hpobkk...)

Re: Surfly - Surf together on the web

#38
post #36
post #6

Earlier quoted context omitted.

The difference is that with TogetherJS you will not be able to handle websites that require login. Surfly can handle that in a secure way. Next, Surfly just works on any website - without the need to write a single line of code. For example, you can use it right now on GitHub. If you wanted to have such functionality with TogetherJS you would have to modify your website accordingly (i.e., by using a special version o…

TogetherJS works on any website too! Just grab a Firefox addon ( https://togetherjs.com/togetherjs.xpi ) or Chrome extension ( https://chrome.google.com/webstore/detail/towtruckcrx/hpobkk... )

Yes, but you can't send your friend the surfly link. You have to ask your friend to also install the addon before you can collaborate on the same website. Extensions are cool, but not practical in the real world scenario.

Re: Surfly - Surf together on the web

#39
post #16

Earlier quoted context omitted.

I do not quite understand, sorry. I am concerned about security. Why am I allowed to login into say, Trello.com, while I am on surfly.com domain? Shouldn't my browser's cross-domain security policy prohibit this practice? Is it all being done through a proxy? If so, is it not true that a lot of sites don't work over proxy? [Edit] And if it is indeed proxy, doesn't that mean you can read my password(s) in clear text?

The proxy is needed to make sure that we can modify the content in such a way that it works correctly during the session. We sandbox the site so that everything keeps works correctly. I'll go deeper into this in a blog post soon. The connection to the proxy is encrypted and if the site you login also uses https, your password will never be send in clear text over the wire. Since form submissions are not actually repl…

[deleted]

Re: Surfly - Surf together on the web

#40
This reminds me of a blog post I wrote a year ago about proxy technology:

http://www.deanmao.com/2012/08/28/modify-a-site-you-dont-own...

I did it the same way -- parse & rewrite js code, and have a server that stores the same cookies that your browser would. The browser js code also contains the same js rewriter so that it can handle stuff like eval(). It also had to do lots of header manipulation since there are lots of headers that have domain-name based security, like CORS for example. The one I wrote works great with js-heavy sites like gmail or facebook.

Post reply on HN