4 ms·
https://news.ycombinator.com/item?id=11176894 https://news.ycombinator.com/item?id=11176894 > A version of HN's source code is included with the public release
by j_s 9y ago
https://news.ycombinator.com/item?id=11176894 https://news.ycombinator.com/item?id=11176894
> A version of HN's source code is included with the public release of Arc, but HN's algorithm has many extensions that aren't public.
https://news.ycombinator.com/item?id=13456306 https://news.ycombinator.com/item?id=13456306
> We're unlikely to publish all that because doing so would increase two bad things: attempts to game the site, and meta nitpicking.
Including at least at one time a Chrome extension for moderation:
https://news.ycombinator.com/item?id=11670071#11670562 https://news.ycombinator.com/item?id=11670071#11670562
- newsat13 9y ago> We're unlikely to publish all that because doing so would increase two bad things: attempts to game the site, and meta nitpicking. So security by obscurity helps at times.
- notatoad 9y agoof course it helps, i don't think anybody's ever denied that. It just shouldn't be relied on.
- CydeWeys 9y agoPasswords are security through obscurity too. Things would be a lot less secure if all passwords were publicly available.
- pdpi 9y agoSecurity by obscurity is precisely defined as security that relies on the algorithm/implementation itself being private to be able to function. Key material being private does not qualify for this. The alternative is that security through obscurity becomes such an all-encompassing term as to become meaningless
- kefka 9y agoIndeed. The difference between "Security by obscurity" versus login/passwords is really scale. Usually, some numbnut "programmer" sets a no-login and a simple password as a secret service account. It invariably is found, and badness ensues. Whereas login/password is a 1/password_space chance of getting it. It's the combination of a default hidden account and no way to know/change it.
- tlrobinson 9y agoIn that case, 256 bit encryption keys are security-through-obscurity too, they're just realllllly obscure.
- thejones 9y agoReddit has a similar approach if I'm not mistaken.
- flukus 9y agoIt's not about security, just content curation.
- Houshalter 9y agoSomeone once did an analysis on HN posts and their ranking relative to the time they were posted and votes. And they found posts with certain keywords were heavily penalized and sort of soft banned from the site. IIRC it included stuff like "NSA" and "HN" and posts from certain sites like reddit and youtube (but I could be remembering.) Having the full list of banned keywords, or even acknowledging there is a list, could cause drama. And it's easily evaded if people know about it, like when reddit banned "Tesla" posts got through by misspelling it "Telsa". There's also other stuff like a controversy filter, that detects articles with more comments than votes and penalizes them. I try to avoid commenting in articles that are getting close to the limit to avoid triggering it.
- dTal 9y agoIt's a shame that in closing the door to the pernicious "meta nitpicking", whatever that is, the possibility for constructive analysis of how HN's algorithms shape and mould the behaviour of its dedicated community has also been removed.
- obstinate 9y agoSufficient amounts of "constructive" analysis by uninvolved and under-informed third parties can be a net negative.
- rimliu 9y agoSo how about informing said parties?
- sebastianconcpt 9y agoThat would work for good willing people but not for people that is in a political war state of mind
- obstinate 9y agoEverything is tradeoffs. Time spent educating outsiders who may or may not be useful can be spent doing other things, like work that moves the ball forward.
- nailer 9y agoIt would be easier if they had a injectable function to handle moderation / anti gaming etc. Release the code publicly with a stub function, then run the real one in prod.