Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Use Slack Emoji on GitHub

single-emoji.vercel.app

Post reply on HN
Print view View original

1–10 of 32 posts

Re: Show HN: Use Slack Emoji on GitHub

#5

Post by awinter-py »

> All you need is to have the Single Emoji browser extension, which connects to your Slack workspace and enables you to use your favorite Emoji on your favorite tools, by making the smallest patches possible to how these tools work. Nothing too fancy, nothing too suspicious.

all you need is to connect random javascript to a major channel for social engineering and then run it inside major channel for software supply chain risk

Re: Show HN: Use Slack Emoji on GitHub

#6

Post by netsharc »

awinter-py wrote: post #5

> All you need is to have the Single Emoji browser extension, which connects to your Slack workspace and enables you to use your favorite Emoji on your favorite tools, by making the smallest patches possible to how these tools work. Nothing too fancy, nothing too suspicious. all you need is to connect random javascript to a major channel for social engineering and then run it inside major channel for software supply…

Back during the Yahoo and MSN chat days (remember Windows executables?), there were also "Download custom smiley packs" ads all over the Internet. I never tried them because they were probably malware. I have the same skepticism for this extension, or how easy extensions auto-updates can turn it into one.

Are the other responses in here non-ironic?

Re: Show HN: Use Slack Emoji on GitHub

#8

Post by schniz »

netsharc wrote: post #6
awinter-py wrote: post #5

> All you need is to have the Single Emoji browser extension, which connects to your Slack workspace and enables you to use your favorite Emoji on your favorite tools, by making the smallest patches possible to how these tools work. Nothing too fancy, nothing too suspicious. all you need is to connect random javascript to a major channel for social engineering and then run it inside major channel for software supply…

Back during the Yahoo and MSN chat days (remember Windows executables?), there were also "Download custom smiley packs" ads all over the Internet. I never tried them because they were probably malware. I have the same skepticism for this extension, or how easy extensions auto-updates can turn it into one. Are the other responses in here non-ironic?

Hey there! I plan to open source this soon so the source will be available and you can read it. It is really doing nothing but adding the emoji to GitHub.

But I understand that the shadiest people say they are legit, so I’ll prioritize open sourcing the extension so others can review it :) sounds good?

Re: Show HN: Use Slack Emoji on GitHub

#9

Post by eyelidlessness »

awinter-py wrote: post #5

> All you need is to have the Single Emoji browser extension, which connects to your Slack workspace and enables you to use your favorite Emoji on your favorite tools, by making the smallest patches possible to how these tools work. Nothing too fancy, nothing too suspicious. all you need is to connect random javascript to a major channel for social engineering and then run it inside major channel for software supply…

I mean, you’re not wrong, but I’d bet the Venn diagram of…

- people who use both a Web Extensions-supporting browser and Slack

- people who install extensions with permissions to run arbitrary JS on every page

- people who install or use Slack bots/etc with excessive access to Slack data

… is likely very nearly a circle. The emoji use case isn’t one for which I’d personally take that combination of risks. But I can imagine a wide variety of more appealing/risk worthy and likely even higher risk “use [CLOUD_SERVICE_FOO_RESOURCES] seamlessly in GitHub” use cases where I’d pause to at least consider it.

Post reply on HN