Live data from Hacker News

Twitter is using its embedded JavaScript to hide tweets that have been deleted

kevinmarks.com

51–60 of 254 posts

Re: Twitter is using its embedded JavaScript to hide tweets that have been deleted

#51

Earlier quoted context omitted.

Non-standard doesn't mean improper. It's still valid English. Just because some people are too lazy to type or comprehend an apostrophe in the word "it's" to signify "it is" doesn't mean that the rest of us have to follow their lazy example.

The problem isn't the use of "it's" to mean "it is". The problem is the use of "it's" to mean "its", a different word with a different meaning.

Yeah, I took up a cause that I was passionate about a little too quickly there, and realized that I was fighting for the wrong "it's". It's past my bedtime here...

Re: Twitter is using its embedded JavaScript to hide tweets that have been deleted

#52
post #26

Functionality aside embedding random scripts from twitter seems like a big risk for security and privacy. At a minimum, it should probably be embedded in a sandboxed iframe. Just taking a screenshot, and linking to the tweet, seems like a more robust solution, that won't randomly stop working, and doesn't have the same privacy issues.

There should be an HTML tag or something that downloads and embeds HTML from a remote site without scripting

Don't [i]frames solve this problem? They can use scripts, sure, but those scripts are contained and cannot reach outside their box.

Re: Twitter is using its embedded JavaScript to hide tweets that have been deleted

#54
post #38
post #33

Why not just copy paste or screenshot the Tweet? It's bizarre to reference a script from twitter.com directly in your site's source code and then complain that the script is doing exactly what it is supposed to.

Aesthetics and familiarity? It's a lot nicer to link the user's name directly to their profile, and the date directly to their tweet on Twitter as opposed to having a separately link or whatnot. For many, especially your average Joe/Jane, will expect the aforementioned behaviour.

Posting the screenshot of the tweet as a link to the tweet doesn't seem like an awful solution to me. Additionally if the tweet gets deleted or the user gets banned there is still some record of it and the page doesn't have a weird gap where a tweet should be.

Re: Twitter is using its embedded JavaScript to hide tweets that have been deleted

#55

Functionality aside embedding random scripts from twitter seems like a big risk for security and privacy. At a minimum, it should probably be embedded in a sandboxed iframe. Just taking a screenshot, and linking to the tweet, seems like a more robust solution, that won't randomly stop working, and doesn't have the same privacy issues.

"Functionality aside embedding random scripts from twitter seems like a big risk for security and privacy."

When I started blogging again, I wanted to render my Twitter feed on the homepage, as a sort of bitesize alternative to the regular content, but I too have a deep aversion to allowing external scripts on my websites. So I added some code to my Hugo theme that pulls the tweets from my profile via the Twitter API and renders them statically.

Re: Twitter is using its embedded JavaScript to hide tweets that have been deleted

#56
post #21
post #7

fix the title please An apostrophe as a possessive marker in its is nonstandard: https://en.m.wiktionary.org/wiki/it%27s#Etymology_2

Curious if there’s any reason this is of particular importance. E.g. is it bad for screen readers?

his, hers, theirs, ours, yours,... it's? It is just egregiously wrong.

Re: Twitter is using its embedded JavaScript to hide tweets that have been deleted

#57

I've never understood why people even wanted to use this. For the styling? So you can just copy some random stuff from Twitter and it looks like Twitter but is also interactive? Just with the Facebook like-Button, you're exposing your visitors to the tracking of Twitter. For what? Just so you can quickly copy one snippet and be done with it, instead of manually copying author name, content and link and spending 10 se…

Worse, it seems like most of the time you'd want a screenshot to preserve the original text. Which takes less styling to look right.

Re: Twitter is using its embedded JavaScript to hide tweets that have been deleted

#58
Well, any third-party script that you embed on your website can edit your site and do many other nefarious things (key logging, credential stealing, ...). I never got how people can just copy/paste some random JS into their own websites (often without even using integrity tags). Social embeds in particular have turned the web into a surveillance machine for large corporations, as every FB/Twitter/Instagram/... embed tracks users across every web property that has such an embed, and until very recently almost every major website had such embeds.

Luckily GDPR seems to have a chilling effect on recklessly embedding such stuff without thinking about privacy or security implications. Personally I hope that in a few years third-party embeds will mostly be a thing of the past.

Re: Twitter is using its embedded JavaScript to hide tweets that have been deleted

#59
Isn't this the way the internet is supposed to work? If I link to a page and the page is removed, it'll not show, right? Same thing if I were to add that page as an iframe on my site.

So, IMHO, the title and the post doesn't make any sense. Twitter isn't editing anyone's site. You have chosen to embed some content of Twitter on yours and it is perfectly fine if they chose to remove it.

Re: Twitter is using its embedded JavaScript to hide tweets that have been deleted

#60

Functionality aside embedding random scripts from twitter seems like a big risk for security and privacy. At a minimum, it should probably be embedded in a sandboxed iframe. Just taking a screenshot, and linking to the tweet, seems like a more robust solution, that won't randomly stop working, and doesn't have the same privacy issues.

also this is why you use those sha integrity hashes.. so other sites dont randomly update their script to do evil things
Post reply on HN