3 ms·
@Visurox Didn't work for me (wrong secret), but I like the idea. I was thinking about a variant of this, but I am somewhat concerned about abuse of such a serv
by bArray 4y ago
@Visurox Didn't work for me (wrong secret), but I like the idea.
I was thinking about a variant of this, but I am somewhat concerned about abuse of such a service. Being 1kB you aren't going to get much in the way of image media, which is a major concern. Objectionable text I care less for. The concern I have is malicious JS (but I couldn't see how you handle this).
A few things you would definitely need:
1. The ability to handle takedowns (i.e. somebody adds doxxing information, or uses it to launch some attack script).
2. The ability to edit content. My solution to this was that a key would be generated and this could be used to edit.
3. Some protection against creation abuse. You better believe somebody would create 1 billion 1kB pages, just because they can. I would maybe have it so that the user puts in an email and a page edit code is sent to that email address after some artificial delay. It's not fool-proof but might slow them down. Maybe you also do some additional checks, like keywords, entropy, etc.
Anyway, all of these problems are precisely why I never decided to go through with this.
Another idea was to provide an ultra-minimal VM web server, where you run some lightweight byte code to process requests. Maybe there are some exciting possibilities with this, but similar concerns are still there.
- Visurox 4y agoI posted before, that the script is in maintenance to fix this and that. 1.: Theres an email on the buttom. ;) 2.: I thought of it, but that would make everything more complicated. So, no, not for now. 3.: In the new beta is an temp secret word. Not the best captcha, but yeah, it works. And I think about a localhost entry if the user made a website before. May in mix with the edit function. If someone would spam, they will do, no matter if I save the IP or did hundred checks. Thats the net. :)
- bArray 4y ago> 1.: Theres an email on the buttom. ;) I saw this, but if it was to for some reason to get even remotely popular or abused, this would not scale. > 2.: I thought of it, but that would make everything more complicated. So, no, not for now. Sure, but it also allows for the right to delete content, etc. I don't think it has to be complicated. > 3.: In the new beta is an temp secret word. Not the best captcha, but yeah, it works. And I think about a localhost entry if the user made a website before. May in mix with the edit function. If someone would spam, they will do, no matter if I save the IP or did hundred checks. Thats the net. :) I don't think it needs to be fool-proof, just add enough resistance that it's not worth it. It is just 1kB after all, if the barrier is significant enough people just won't bother.