Hacker News new | ask | show | jobs
by bArray 1234 days ago
@Visurox Didn't work for me (wrong secret), but I like the idea.

I was thinking about a variant of this, but I am somewhat concerned about abuse of such a service. Being 1kB you aren't going to get much in the way of image media, which is a major concern. Objectionable text I care less for. The concern I have is malicious JS (but I couldn't see how you handle this).

A few things you would definitely need:

1. The ability to handle takedowns (i.e. somebody adds doxxing information, or uses it to launch some attack script).

2. The ability to edit content. My solution to this was that a key would be generated and this could be used to edit.

3. Some protection against creation abuse. You better believe somebody would create 1 billion 1kB pages, just because they can. I would maybe have it so that the user puts in an email and a page edit code is sent to that email address after some artificial delay. It's not fool-proof but might slow them down. Maybe you also do some additional checks, like keywords, entropy, etc.

Anyway, all of these problems are precisely why I never decided to go through with this.

Another idea was to provide an ultra-minimal VM web server, where you run some lightweight byte code to process requests. Maybe there are some exciting possibilities with this, but similar concerns are still there.

1 comments

I posted before, that the script is in maintenance to fix this and that.

1.: Theres an email on the buttom. ;) 2.: I thought of it, but that would make everything more complicated. So, no, not for now. 3.: In the new beta is an temp secret word. Not the best captcha, but yeah, it works. And I think about a localhost entry if the user made a website before. May in mix with the edit function. If someone would spam, they will do, no matter if I save the IP or did hundred checks. Thats the net. :)

> 1.: Theres an email on the buttom. ;)

I saw this, but if it was to for some reason to get even remotely popular or abused, this would not scale.

> 2.: I thought of it, but that would make everything more complicated. So, no, not for now.

Sure, but it also allows for the right to delete content, etc. I don't think it has to be complicated.

> 3.: In the new beta is an temp secret word. Not the best captcha, but yeah, it works. And I think about a localhost entry if the user made a website before. May in mix with the edit function. If someone would spam, they will do, no matter if I save the IP or did hundred checks. Thats the net. :)

I don't think it needs to be fool-proof, just add enough resistance that it's not worth it. It is just 1kB after all, if the barrier is significant enough people just won't bother.