Show HN: Hoist – Zapier for Developers (scripting done in Node.js) • Hacker News Board

Show HN: Hoist – Zapier for Developers (scripting done in Node.js)

#1

Post by mejamiewilson » Mon, Oct 12, 2015, 5:15 PM UTC

Show HN: Hoist – Zapier for Developers (scripting done in Node.js)
hoist.io

Re: Show HN: Hoist – Zapier for Developers (scripting done in Node.js)

#2

Post by charlieegan3 » Mon, Oct 12, 2015, 7:22 PM UTC

I added Twitter, clicking the expand arrow to the right of twitter in 'Your Connectors' opens a new blank tab. (Firefox)

This looks cool though.

Re: Show HN: Hoist – Zapier for Developers (scripting done in Node.js)

#3

Post by mejamiewilson » Mon, Oct 12, 2015, 7:30 PM UTC

charlieegan3 wrote: post #2

I added Twitter, clicking the expand arrow to the right of twitter in 'Your Connectors' opens a new blank tab. (Firefox) This looks cool though.

Thanks for the feedback! I'll check it out now.

Re: Show HN: Hoist – Zapier for Developers (scripting done in Node.js)

#4

Post by meturtle » Mon, Oct 12, 2015, 9:07 PM UTC

It wiped my database clean?? WHY?? WHY??

Re: Show HN: Hoist – Zapier for Developers (scripting done in Node.js)

#5

Post by nikolay » Mon, Oct 12, 2015, 9:36 PM UTC

Why do you autopick user slug to be ""?!

Re: Show HN: Hoist – Zapier for Developers (scripting done in Node.js)

#6

Post by buildmaster » Mon, Oct 12, 2015, 9:49 PM UTC

nikolay wrote: post #5

Why do you autopick user slug to be " "?!

it's not user id but actually just a random number. it's unrelated to your ID (which are actually more complex than just integers). The random number is there just to ensure we don't get collisions on slugs.

Re: Show HN: Hoist – Zapier for Developers (scripting done in Node.js)

#7

Post by buildmaster » Mon, Oct 12, 2015, 9:50 PM UTC

meturtle wrote: post #4

It wiped my database clean?? WHY?? WHY??

I'm not sure what you mean by "your database" and what was wiped clean?

Re: Show HN: Hoist – Zapier for Developers (scripting done in Node.js)

#8

Post by buildmaster » Mon, Oct 12, 2015, 9:54 PM UTC

meturtle wrote: post #4

It wiped my database clean?? WHY?? WHY??

also you can get hold of us in app using the intercom speech bubble in the bottom right of the app. That way we can track back to your user account and see what's up.

Re: Show HN: Hoist – Zapier for Developers (scripting done in Node.js)

#9

Post by nikolay » Mon, Oct 12, 2015, 11:18 PM UTC

buildmaster wrote: post #6

nikolay wrote: post #5

Why do you autopick user slug to be " "?!

it's not user id but actually just a random number. it's unrelated to your ID (which are actually more complex than just integers). The random number is there just to ensure we don't get collisions on slugs.

This is a pretty bad practice. You should use hashids [0] for this, instead!

[0] http://hashids.org/

Re: Show HN: Hoist – Zapier for Developers (scripting done in Node.js)

#10

Post by buildmaster » Tue, Oct 13, 2015, 12:57 AM UTC

nikolay wrote: post #9

buildmaster wrote: post #6

Earlier quoted context omitted.

it's not user id but actually just a random number. it's unrelated to your ID (which are actually more complex than just integers). The random number is there just to ensure we don't get collisions on slugs.

This is a pretty bad practice. You should use hashids [0] for this, instead! [0] http://hashids.org/

thanks for the link, I agree it's bad practice if there's any kind of lookup/security based on the slug. We have a few other mitigations against looking up anything security wise from the slug itself. but will take it into consideration as I agree it increases guess-ability of the slugs and could leave us open in future.