8 ms·

Your website has the worst permalinks ever.

• natefox 3y ago
  Agreed. Went to share the link and it was such a wall of text I deleted it.
  • paulusthe 3y ago
    Did the same thing. I guess it's fine if he doesn't want anybody to share his website, but in that case ... Why have a website
    • o0banky0o 3y ago
      The secret 3rd option
• i_am_jl 3y ago
  Apparently the post data is encoded in the URL. I'm not saying you're wrong. You're right, but at least it's for an interesting reason.
• NGRhodes 3y ago
  > This blog is now STATELESS. The entire post is contained in the URL that you are visiting now. All my "blog" is now is a hard-coded main page that contains links to posts I claim authorship of. Of course the entire post is contained in each of these links. https://joshcsimmons.com/post/H4sIAAAAAAAA%2F3xV227cRgx911cQMQLbgFe%2BtjDytnXtZNF1EmSdAEEQIJTE3WE9GqozlGX56wuOZCMtiu7LXmbEc%2BEhdw9WCpxgcKjA9rEsiveiQA8UR3UcdrCCIbKSXdtKnE4A%2B4Yp1FS%2BHEuAFsMIKh3X6Q0o1S6Il914BHXvtY90BFcuclLGwDoeASmgL4viE9USavaGpo4SQcOpw4hKczlIBkt%2BBM8ta4L2ZwpLBXWcoBMOegQauULPqTXKScBhbBYDR2qAgwosW4pcY3imBWrq1RFsI7ZGQrYggeytHYFSwjGZvuxSyzunUBFgAA5B6l76NNGEimppydiGhMoS0IO6KP3OQUVW2RCogWq0yrXErk8ZTR1F6PrKcz0DlkVxZ6IqLzsTEmSAzd3y7np9vdmUcOcIKChHgk5SbmItQZFDlpnlfP60nrSN0gNGggdOrEYjyFDC0ntj8coQXj1DcAKcHKuloQZa5AAd7maXZowEnsO9yc7oCVZQe%2BQWsFcnMTnuQLYlfNhCLX1M9vT%2F8yWsnTkx9T9XL4tiGeYQWrsqgh0Fslg04ChSCV%2BlNwDfWCwDOKs8Sh9BhjA5l1n3iXJkBqqSZRVNZKTQUKQIvM0GRULvRxgwWH2V0mYj9V0n0QKH8b6RIZRFsdr33shM7fIjRPKEyWi2ln%2Fx5ssz1YnG509ry6KEElYTnOFM9xSSYjRQwujHLG1%2FnsmdUI5eb1wX6mjhRJqyKE5LuKNHhS37HNRnU20YlUIJn1Of9SDcztTz3SOo%2BikQk28qmq9F6iIlCjpnsUHFxVZii5rML6VHLYuzEm4MkBO8feKuo6Y4L%2BE3TPTrBThMuYV2MvFqsaFp5tAcWFCYQpU0mlsHSWzpDBLvM0a%2BdFhclLCZLnQea2oAt0oRfpjE4x8WFgu2bOFPSa5O3LYSUllLWxR7e3DDobFnP%2BZcDqwOriya1CyWL%2BEsiuu8xrJrOSKrl4a8tPU%2FEg2eHyjBvC6%2BRRGdQmubhpW%2BHzjVLr05Pv43t8OXxtsgRsJMEv%2FBwOEDTag2EwoDew9e5B4839O843BH5SxOttCH%2B2Ct%2FYllroLwreE01YrPfFWyBvtoZb4fHGdL312k1XJ%2BvT67OV%2Ff%2FnX59HFz%2BmX1xK%2FPbt5vvrxbba4e1182u4eRh25Tn979cRtW65uvMl5d9id0ezU%2F%2B%2Frs5vL35dvIdH7i7bfDMjdlbVs7b8RUFNY9T2GnroRbfMzdnL5bb69clDYn7Ozk8hxqhxFrpZhgAWcnv1zMaTAnU1%2BpHWZFjeRVhaGBKL3mf6ZGwr6COQQU8hbGSnoFJwPU0lriE9tizwlUmcYsqRWxO9nxFrt8ZhOwmHnaDLFCImrzWWXLLQPYXyRCchJ1WuRl8TcAAAD%2F%2FwMA1onjg2UHAAA%3D https://joshcsimmons.com/post/H4sIAAAAAAAA%2F3xV227cRgx911cQ...
  • molo 3y ago
    If you're going to do that, you should at least generate shortened URLs as well.
    • hk__2 3y ago
      But then it’s not stateless anymore.
      • Dylan16807 3y ago
        It's not stateless at all because of the main page, so this is more of a weird anti-optimization.
  • Quarrelsome 3y ago
    doesn't this mean I could embed salacious material into a link and fool people into thinking the person who owned this website wrote it?
    • bravetraveler 3y ago
      XSS as a feature, neat
    • deleted 3y ago
      [deleted]
      • deleted 3y ago
        [deleted]
    • generalizations 3y ago
      > Anything can be generated here. You could even host your own blog that uses my website as a renderer if you really wanted to. It supports markdown. > Every post that I want to publicly claim authorship of lives at the root of this site. If you are reading a post that I have claimed it will look like this page. Posts of unknown authorship have a disclaimer at the top of the page. https://joshcsimmons.com/post/H4sIAAAAAAAA%2F3xV227cRgx911cQMQLbgFe%2BtjDytnXtZNF1EmSdAEEQIJTE3WE9GqozlGX56wuOZCMtiu7LXmbEc%2BEhdw9WCpxgcKjA9rEsiveiQA8UR3UcdrCCIbKSXdtKnE4A%2B4Yp1FS%2BHEuAFsMIKh3X6Q0o1S6Il914BHXvtY90BFcuclLGwDoeASmgL4viE9USavaGpo4SQcOpw4hKczlIBkt%2BBM8ta4L2ZwpLBXWcoBMOegQauULPqTXKScBhbBYDR2qAgwosW4pcY3imBWrq1RFsI7ZGQrYggeytHYFSwjGZvuxSyzunUBFgAA5B6l76NNGEimppydiGhMoS0IO6KP3OQUVW2RCogWq0yrXErk8ZTR1F6PrKcz0DlkVxZ6IqLzsTEmSAzd3y7np9vdmUcOcIKChHgk5SbmItQZFDlpnlfP60nrSN0gNGggdOrEYjyFDC0ntj8coQXj1DcAKcHKuloQZa5AAd7maXZowEnsO9yc7oCVZQe%2BQWsFcnMTnuQLYlfNhCLX1M9vT%2F8yWsnTkx9T9XL4tiGeYQWrsqgh0Fslg04ChSCV%2BlNwDfWCwDOKs8Sh9BhjA5l1n3iXJkBqqSZRVNZKTQUKQIvM0GRULvRxgwWH2V0mYj9V0n0QKH8b6RIZRFsdr33shM7fIjRPKEyWi2ln%2Fx5ssz1YnG509ry6KEElYTnOFM9xSSYjRQwujHLG1%2FnsmdUI5eb1wX6mjhRJqyKE5LuKNHhS37HNRnU20YlUIJn1Of9SDcztTz3SOo%2BikQk28qmq9F6iIlCjpnsUHFxVZii5rML6VHLYuzEm4MkBO8feKuo6Y4L%2BE3TPTrBThMuYV2MvFqsaFp5tAcWFCYQpU0mlsHSWzpDBLvM0a%2BdFhclLCZLnQea2oAt0oRfpjE4x8WFgu2bOFPSa5O3LYSUllLWxR7e3DDobFnP%2BZcDqwOriya1CyWL%2BEsiuu8xrJrOSKrl4a8tPU%2FEg2eHyjBvC6%2BRRGdQmubhpW%2BHzjVLr05Pv43t8OXxtsgRsJMEv%2FBwOEDTag2EwoDew9e5B4839O843BH5SxOttCH%2B2Ct%2FYllroLwreE01YrPfFWyBvtoZb4fHGdL312k1XJ%2BvT67OV%2Ff%2FnX59HFz%2BmX1xK%2FPbt5vvrxbba4e1182u4eRh25Tn979cRtW65uvMl5d9id0ezU%2F%2B%2Frs5vL35dvIdH7i7bfDMjdlbVs7b8RUFNY9T2GnroRbfMzdnL5bb69clDYn7Ozk8hxqhxFrpZhgAWcnv1zMaTAnU1%2BpHWZFjeRVhaGBKL3mf6ZGwr6COQQU8hbGSnoFJwPU0lriE9tizwlUmcYsqRWxO9nxFrt8ZhOwmHnaDLFCImrzWWXLLQPYXyRCchJ1WuRl8TcAAAD%2F%2FwMA1onjg2UHAAA%3D https://joshcsimmons.com/post/H4sIAAAAAAAA%2F3xV227cRgx911cQ... (His permalinks are horrible, lol)
• gregsadetsky 3y ago
  oh no -- it's actually vulnerable to xss...!!! https://joshcsimmons.com/post/eNpTVlaoKC5WSEnNzefisilOLsosKLFLzEktKtFQz0jNyclX17TRhwoDAD6MDrY= https://joshcsimmons.com/post/eNpTVlaoKC5WSEnNzefisilOLsosKL... (this just injects a <script> alert but.... that's bad) just tried contacting the author via linkedin (since I don't see an email address on their site) @joshcsimmons are you around?
  • hiatus 3y ago
    The author is aware. > Every post that I want to publicly claim authorship of lives at the root of this site. If you are reading a post that I have claimed it will look like this page. Posts of unknown authorship have a disclaimer at the top of the page. https://joshcsimmons.com/post/H4sIAAAAAAAA%2F3xV227cRgx911cQMQLbgFe%2BtjDytnXtZNF1EmSdAEEQIJTE3WE9GqozlGX56wuOZCMtiu7LXmbEc%2BEhdw9WCpxgcKjA9rEsiveiQA8UR3UcdrCCIbKSXdtKnE4A%2B4Yp1FS%2BHEuAFsMIKh3X6Q0o1S6Il914BHXvtY90BFcuclLGwDoeASmgL4viE9USavaGpo4SQcOpw4hKczlIBkt%2BBM8ta4L2ZwpLBXWcoBMOegQauULPqTXKScBhbBYDR2qAgwosW4pcY3imBWrq1RFsI7ZGQrYggeytHYFSwjGZvuxSyzunUBFgAA5B6l76NNGEimppydiGhMoS0IO6KP3OQUVW2RCogWq0yrXErk8ZTR1F6PrKcz0DlkVxZ6IqLzsTEmSAzd3y7np9vdmUcOcIKChHgk5SbmItQZFDlpnlfP60nrSN0gNGggdOrEYjyFDC0ntj8coQXj1DcAKcHKuloQZa5AAd7maXZowEnsO9yc7oCVZQe%2BQWsFcnMTnuQLYlfNhCLX1M9vT%2F8yWsnTkx9T9XL4tiGeYQWrsqgh0Fslg04ChSCV%2BlNwDfWCwDOKs8Sh9BhjA5l1n3iXJkBqqSZRVNZKTQUKQIvM0GRULvRxgwWH2V0mYj9V0n0QKH8b6RIZRFsdr33shM7fIjRPKEyWi2ln%2Fx5ssz1YnG509ry6KEElYTnOFM9xSSYjRQwujHLG1%2FnsmdUI5eb1wX6mjhRJqyKE5LuKNHhS37HNRnU20YlUIJn1Of9SDcztTz3SOo%2BikQk28qmq9F6iIlCjpnsUHFxVZii5rML6VHLYuzEm4MkBO8feKuo6Y4L%2BE3TPTrBThMuYV2MvFqsaFp5tAcWFCYQpU0mlsHSWzpDBLvM0a%2BdFhclLCZLnQea2oAt0oRfpjE4x8WFgu2bOFPSa5O3LYSUllLWxR7e3DDobFnP%2BZcDqwOriya1CyWL%2BEsiuu8xrJrOSKrl4a8tPU%2FEg2eHyjBvC6%2BRRGdQmubhpW%2BHzjVLr05Pv43t8OXxtsgRsJMEv%2FBwOEDTag2EwoDew9e5B4839O843BH5SxOttCH%2B2Ct%2FYllroLwreE01YrPfFWyBvtoZb4fHGdL312k1XJ%2BvT67OV%2Ff%2FnX59HFz%2BmX1xK%2FPbt5vvrxbba4e1182u4eRh25Tn979cRtW65uvMl5d9id0ezU%2F%2B%2Frs5vL35dvIdH7i7bfDMjdlbVs7b8RUFNY9T2GnroRbfMzdnL5bb69clDYn7Ozk8hxqhxFrpZhgAWcnv1zMaTAnU1%2BpHWZFjeRVhaGBKL3mf6ZGwr6COQQU8hbGSnoFJwPU0lriE9tizwlUmcYsqRWxO9nxFrt8ZhOwmHnaDLFCImrzWWXLLQPYXyRCchJ1WuRl8TcAAAD%2F%2FwMA1onjg2UHAAA%3D https://joshcsimmons.com/post/H4sIAAAAAAAA%2F3xV227cRgx911cQ...
    • gregsadetsky 3y ago
      for sure, there's awareness and then there's disregard of any basic web security. the second they start hosting any application/backend/cookie-enabled thing on this domain name, anyone could inject a script via their /post/ gzip-base64 scheme, and do bad things...? I don't think html sanitization would go against the principle of this idea. just... at the very least strip the tags! :-)
• xd1936 3y ago
  Similar idea to itty.bitty.site, smolsite.zip, or parameter.page