Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Launching Posterous Groups: Smart email lists made easy

blog.posterous.com

Post reply on HN
Print view View original

41–50 of 57 posts

Re: Launching Posterous Groups: Smart email lists made easy

#41

Post by revorad »

a4agarwal wrote: post #36
revorad wrote: post #23

Earlier quoted context omitted.

Can a Posterous group autopost to a Facebook Group?

we don't autopost to facebook groups right now but we might add that in the future. You can also autopost to a facebook profile or page

That's great, thanks. I didn't realise until this announcement that you guys are competing with facebook in some respects (at least in terms of where people spend time online). The way you guys are going, I won't be surprised you will be one of the biggest players on the internet in a few years.

Re: Launching Posterous Groups: Smart email lists made easy

#42

Post by mike-cardwell »

I love the way you've made this work. However, it does not behave well with PGP signed emails. When a message is MIME/PGP signed, the attachment is stripped and dropped. When a message is signed inline, posterous corrupts the message leaving the header in place, but dropping the signature. If this is fixed, I am likely to use this service for some technical lists.

Re: Launching Posterous Groups: Smart email lists made easy

#44

Post by mike-cardwell »

mike-cardwell wrote: post #43

You have a tracking image embedded in the emails. It points at a redirector script which does no validation of the destination url. This is highly abusable. Example: http://r.posterous.com/track/?redirect=http%3A%2F%2Fgoogle.c...

Ouch. It looks like you've done this on purpose. If I send an email with a link to the list, the link in the email I get back bounces through r.posterous.com.

This will be abused by spammers...

Re: Launching Posterous Groups: Smart email lists made easy

#45

Post by mike-cardwell »

If I send a HTML email to a group which contains an iframe, an img tag, and an input field of type "image", all referencing a remote URL, the process of viewing the email in the posterous interface automatically causes the browser to fetch each of those resources.

This is a privacy leak. You should remove references to these remote resources when displaying a message in the posterous web interface. You should then provide an option to "Load Remote Images". Much like most email clients do.

Re: Launching Posterous Groups: Smart email lists made easy

#46

Post by mike-cardwell »

mike-cardwell wrote: post #44
mike-cardwell wrote: post #43

You have a tracking image embedded in the emails. It points at a redirector script which does no validation of the destination url. This is highly abusable. Example: http://r.posterous.com/track/?redirect=http%3A%2F%2Fgoogle.c...

Ouch. It looks like you've done this on purpose. If I send an email with a link to the list, the link in the email I get back bounces through r.posterous.com. This will be abused by spammers...

Ok. You have yet another open redirector here: http://posterous.com/logout?jumpto=

Not good...

Re: Launching Posterous Groups: Smart email lists made easy

#47

Post by a4agarwal »

mike-cardwell wrote: post #46
mike-cardwell wrote: post #44

Earlier quoted context omitted.

Ouch. It looks like you've done this on purpose. If I send an email with a link to the list, the link in the email I get back bounces through r.posterous.com. This will be abused by spammers...

Ok. You have yet another open redirector here: http://posterous.com/logout?jumpto= Not good...

Thanks, Mike. We're fixing this up right now.

Re: Launching Posterous Groups: Smart email lists made easy

#48

Post by steveklabnik »

sbisker wrote: post #31
revorad wrote: post #26

Earlier quoted context omitted.

They've now got a solid product and userbase. The business model could be any of advertising, affiliate marketing, lead generation, premium features, ecommerce.

Totally agreed. But which is it? The decision on any of those models, if not properly considered, could have impacts that reverberate through their product and userbase. Advertising, done wrong, could break their clean aesthetic. Affiliate marketing, done wrong, could hurt people's trust. You get the idea. The business model is a part of the design, in that it works in concert with it - and people are eager to see th…

They also grab links and redirect them to affiliates, secretly.

Or did they stop doing that?

Post reply on HN