Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub Community Forum

github.community

Post reply on HN
Print view View original

41–46 of 46 posts

Re: GitHub Community Forum

#41

Post by Posibyte »

3pt14159 wrote: post #30
joefreeman wrote: post #16

Earlier quoted context omitted.

It's fairly common for companies to send automated e-mails from a separate domain to try to mitigate the impact of spam filters. ceo@company.com doesn't want her e-mails to be marked as spam just because some marketing e-mails are being sent from noreply@company.com.

And I take it using a separate subdomain wont work either? I.E. if you send mail from hi@marketing.example.com it will still hurt frank@example.com so they need to get a different domain?

It depends on how spam filters are configured, but yes, subdomains can harm root domain's reputations. However, it's generally seen as OK to use subdomains to mitigate reputations being spread to the main domain. As long as you have your records in order to show what's going on, using a subdomain is usually OK.[1]

[1]: http://www.magillreport.com/Spamhaus-Provides-Answers-Part-F...

Re: GitHub Community Forum

#42

Post by mseebach »

Sir_Cmpwn wrote: post #39
Double_a_92 wrote: post #38

Earlier quoted context omitted.

Who would win? The biggest "social network" for developers OR a platform by some random dude on the internet?

I wouldn't be so sure of GitHub if I were you. How long has it been the biggest player? It wasn't so long ago SourceForge was dominant and look what happened to it. GitHub is beholden to their investors, and it will make decisions that benefit them at the expense of their users. Services like Pinboard thrive as some random dude on the internet. I use a business model that doesn't have the same risks to longevity that…

Yeah, but SourceForge wasn't exactly supplanted by a random guy with a dodgy-looking domain.

Crucially, there's no imperative to leave a platform just because it might be slowly dying. If it does what you need it to do, and do it well, the effort to switch is unlikely to be worth it. SourceForge is still around, and still (strangely enough) servicing some projects -- it's not like anyone got left behind because they failed to see that SF was "slowly dying" in time.

Re: GitHub Community Forum

#43

Post by Sir_Cmpwn »

mseebach wrote: post #42
Sir_Cmpwn wrote: post #39

Earlier quoted context omitted.

I wouldn't be so sure of GitHub if I were you. How long has it been the biggest player? It wasn't so long ago SourceForge was dominant and look what happened to it. GitHub is beholden to their investors, and it will make decisions that benefit them at the expense of their users. Services like Pinboard thrive as some random dude on the internet. I use a business model that doesn't have the same risks to longevity that…

Yeah, but SourceForge wasn't exactly supplanted by a random guy with a dodgy-looking domain. Crucially, there's no imperative to leave a platform just because it might be slowly dying. If it does what you need it to do, and do it well, the effort to switch is unlikely to be worth it. SourceForge is still around, and still (strangely enough) servicing some projects -- it's not like anyone got left behind because they…

Well, I'm not exactly a random guy. I have a lot of involvement in open source out there plain to see, and sr.ht itself is open source so you can just run it yourself.

>Crucially, there's no imperative to leave a platform just because it might be slowly dying. If it does what you need it to do, and do it well, the effort to switch is unlikely to be worth it. SourceForge is still around, and still (strangely enough) servicing some projects -- it's not like anyone got left behind because they failed to see that SF was "slowly dying" in time.

SF has also been injecting adware into software hosted on it. You stay behind at the expense of everyone around you.

And honestly - it's a lot easier, at least for me, to trust a person whose name and email address I know than a faceless company with interests that don't align with mine.

Re: GitHub Community Forum

#44

Post by jon-wood »

chrismorgan wrote: post #25
kroltan wrote: post #23

Earlier quoted context omitted.

github.community isn't. It sends you to github.com regardless, since their login is there. github.com sees you're already logged in, and redirects back, passing auth.

That suggests it’s bypassing OAuth—with OAuth you’d get a “GitHub Community wants access to X, Y and Z” interstitial.

Most OAuth providers have a flag for first party clients which allows them to bypass the usual authorization dance and just bounce you straight back to the origin.

Re: GitHub Community Forum

#45

Post by jon-wood »

mseebach wrote: post #42
Sir_Cmpwn wrote: post #39

Earlier quoted context omitted.

I wouldn't be so sure of GitHub if I were you. How long has it been the biggest player? It wasn't so long ago SourceForge was dominant and look what happened to it. GitHub is beholden to their investors, and it will make decisions that benefit them at the expense of their users. Services like Pinboard thrive as some random dude on the internet. I use a business model that doesn't have the same risks to longevity that…

Yeah, but SourceForge wasn't exactly supplanted by a random guy with a dodgy-looking domain. Crucially, there's no imperative to leave a platform just because it might be slowly dying. If it does what you need it to do, and do it well, the effort to switch is unlikely to be worth it. SourceForge is still around, and still (strangely enough) servicing some projects -- it's not like anyone got left behind because they…

Back when it was taking off Github was a couple of guys who wanted a hosted Git service and thought others might as well.

Re: GitHub Community Forum

#46

Post by hdhzy »

wyldfire wrote: post #35
pronoiac wrote: post #28

Earlier quoted context omitted.

My immediate thought is that they did this for browser security reasons, like how they use github.io for Github Pages.

But isn't that governed by the same origin policy, which cares about specific hosts (so a subdomain would be equally effective)?

Subdomain can set a cookie for root domain [0] and that can lead to session fixation attacks. Cookies are not subject to CORS.

[0]: https://www.mxsasha.eu/blog/2014/03/04/definitive-guide-to-c...

Post reply on HN