9 ms·
Show HN: Markdown HN profiles at {user}.at.hn
Very opportunistic toy project as I saw the domain was up for grabs: 'at.hn' is a little site where people can have their own subdomains for whatever their HN username is (opt-in only by adding a slug to your bio). It doesn't really do much. Just shows your HN bio rendered as markdown plus meta stuff. I'm thinking of adding an aggregated user listing on the homepage so people can explore profiles. There's a bunch of interesting people on HN but discoverability is a bit longwinded. I'm wondering what other features people want. Otherwise shall likely leave it as-is. I remember hnbadges was a thing for a while, but can't remember what happened to it. Did people like that? Anyway, at.hn's on github if people want to contribute. - https://github.com/padolsey/at.hn https://github.com/padolsey/at.hn
- deleted 2y ago[deleted]
- 8organicbits 2y agoI'd love to do something similar that uses your HN favorites (I.E.: https://news.ycombinator.com/favorites?id=padolsey https://news.ycombinator.com/favorites?id=padolsey) and publishes it as a linkblog. Should expose an RSS feed as well. If you made a top-comment on a favorite it should use that as a description. Linkblogs are back in vogue: https://stormgrass.com/the-rebirth-of-the-linkblog/ https://stormgrass.com/the-rebirth-of-the-linkblog/
- ioc 2y agoLovely project! Unfortunately, I no longer seem to be able to update my bio on at.hn as I am yet to acquire even 5 karma. Maybe I'll check back in a few weeks/months :)
- serverlord 2y agoI enabled it as well but I have no clue how to gain Karma. Any feedback would help.
- udev4096 2y agoThis is awesome! How are you handling the addition of subdomains?
- INTPenis 2y agoI'm not the author but anything like this is likely done with a wildcard DNS entry. So basically *.at.hn points to a server app. This app can then see which domain was requested and do whatever it wants with this string, like treat it as a username.
- OptionOfT 2y agoIn Cloudflare (for example) you can put in: example.com -> 1.2.3.4 *.example.com -> CNAME example.com
- INTPenis 2y agoI'm getting Internal server error 34. Which is one I'd never seen before. ;)
- Draiken 2y agoSame here... HN kiss of death maybe? Too bad. Looks fun.
- FredPret 2y agoAll three of us have capital letters in our usernames and empty profiles, and an internal server error.
- JimWestergren 2y agoSame for me, also using capital letters ...
- yellow_lead 2y agoWhen I refresh I get > Internal Server Error 34 Cool idea though, will try again later.
- deleted 2y ago[deleted]
- mike-cardwell 2y agoThere seems to be some weird encoding issues and failure to convert URLs to links properly, for my profile - https://mike-cardwell.at.hn/ https://mike-cardwell.at.hn/ - Also, some of the indenting and white space is broken making the PGP signature invalid
- padolsey 2y agoWhoops. Yeh I'm working on the encoding thing atm. Thank you for flagging! EDIT: I'm relying on the 'marked' npm package for markdown and it is handling the linkification of URLs, sometimes badly. Shall work on it.
- diggan 2y agoSince marked doesn't do it for you, make sure you sanitize the user input (the text on the user profiles) before rendering it to visitors. Some libraries for doing that with good defaults: - https://github.com/cure53/DOMPurify https://github.com/cure53/DOMPurify - https://github.com/apostrophecms/sanitize-html https://github.com/apostrophecms/sanitize-html - https://github.com/bevacqua/insane https://github.com/bevacqua/insane (right now your site looks vulnerable to XSS)
- padolsey 2y agoYeh I'm sanitizing already thankfully. I've fixed the decoding issue, but I'm expecting some % of users to be borked for a whole other variety of quirky reasons.
- Black616Angel 2y agoDoes this not work with upper case letters? I only get "Internal Server Error 34".
- padolsey 2y agoYikes you're right. I need to come up with a way to solve that. Maybe a param or path to lock in the username like abc.at.hn/Abc ... I'll have a go. EDIT: for now I'm tired and off to bed but if someone has a graceful/simple way to handle the non-lowercase usernames, please come forward.
- diggan 2y ago> if someone has a graceful/simple way to handle the non-lowercase usernames, please come forward. Graceful? No. But simple? Yes. Scrape every single username on HN to some local storage (even a file on disk would be enough, HN is relatively tiny), then lowercase all of them into a second column in the file. Refresh this file once per day. Now you have a map of UserName <> username that you can use for lookups :)
- tracker1 2y agoHN seems to support using lowercased names for the /user?id=(lowercased-name) ... if you just need to translate for lookup. Not sure about things like underscores or other characters.
- IanCal 2y agoThat's a cool idea, I like it. Will check it out when it's up and running again. If this slips of the first page, I hope you get to resub when things are a little more stable.
- user_7832 2y agoNice project, just wanted to mention that Ducky looks like he has quite a personality! Btw what do you mean by > Note: Outgoing links are rel=nofollow unless you're >200 karma (anti spam)? I guess the links aren't hyperlinked or something?
- Retr0id 2y agonofollow is basically just a hint to search engines that site A doesn't necessarily endorse site B by linking to it
- latexr 2y agohttps://en.wikipedia.org/wiki/Nofollow https://en.wikipedia.org/wiki/Nofollow > nofollow is a setting on a web page hyperlink that directs search engines not to use the link for page ranking calculations.
- latexr 2y ago> opt-in only by adding a slug to your bio I really like this. It’s respectful of people’s wishes to not be added to any random site, and at the same time the way to give consent advertises the service. Ethical and effective business practice? Yes, please. If only all things posted to HN were like this. PS: It says something about my disillusionment with most software projects these days that I have nothing but praise to give to this one, yet all the while I can’t shake the feeling of “I hope I don’t regret those words”. Anyway, that’s a “me” problem. Congratulations on the launch, and best of luck.
- dylan604 2y ago> It says something about my disillusionment with most software projects My disillusionment is I don't trust any of you. My devices have so few apps, that it could almost be mistaken for a clean install. In coding, I use very few libraries because I don't trust anyone. I don't have time to read all of the code of the dependencies. Also, by using libraries, I don't learn how to do what is needed to be done. I hate black boxes. Between bad packages including malicious/bad dependencies in an otherwise acceptable package or flat out devs pushing something that looks useful for the sole purpose of pushing bad code, it's just not worth my time. Not sure if disillusionment is the right word though. It's close, but the lack of trust doesn't come through.
- deleted 2y ago[deleted]
- michaelteter 2y agoAnd are you prepared to respond to GDPR and other jurisdiction requirements of data collection and management?
- p-o 2y agoAren't you jumping the gun a little bit? While it's a valid question, it's very premature.
- Symbiote 2y agoIt's not premature; it's something to consider whenever sharing people's personal data on the internet. The GDPR does not apply "in the course of a purely personal or household activity and thus with no connection to a professional or commercial activity" [1]. However, that does not extend to generally sharing the information on the internet [2] as that's no longer purely personal. [1] https://gdpr-text.com/read/recital-18/ https://gdpr-text.com/read/recital-18/ [2] https://law.stackexchange.com/questions/92229/what-does-household-exception-to-the-gdpr-mean https://law.stackexchange.com/questions/92229/what-does-hous...
- dylan604 2y agoHow does the fact that the user opts-in for the service by manually adding the tag to their profile so that information they personally added could be shared get considered by the GDPR?
- d1sxeyes 2y agoNot sure and IANAL but the GDPR text is a bit weird on that. Article 9 has section e) which says that information 'manifestly made public' relating to 'special categories' is excluded. What's weird is there seems to be no such exclusion for personal information which does not relate to special categories. Having this 'opt-in' certainly seems to tick the box for consent. However, if reproducing information from a publicly available bio would fall foul of GDPR requirements, then I think there are bigger fish to fry than a hobby project made by a guy who at least seems to trying to respect people's preferences.
- jstanley 2y agoI updated my profile but I don't see any change on my at.hn page - how long does it cache for?
- padolsey 2y agoI don't see a change in your profile. See here: https://hn.algolia.com/api/v1/users/jstanley https://hn.algolia.com/api/v1/users/jstanley I can't see 'jstanley.at.hn' in there at all [..?]
- jstanley 2y agoThat doesn't seem to be necessary, https://jstanley.at.hn/ https://jstanley.at.hn/ works fine?
- gabrielsroka 2y agoIt's running the script tag from your profile. <script>alert(1)</script> Are you testing it?
- jstanley 2y agoYes, it's updated now.
- sccxy 2y agoYou failed at step 1 of instructions... > To opt-in, paste "{your username}.at.hn" anywhere in your profile's 'about' section.
- jstanley 2y agoOK, that doesn't actually appear to be necessary because mine works without opting in. "2. Go to https://{username}.at.hn?refresh https://{username}.at.hn?refresh." did the trick.
- longerd2 2y ago[click with mouse wheel](javascript:alert(2))
- mattigames 2y agoIt not working
- xyst 2y agoThe 2 letter domain must have been a premium. Cool project.
- padolsey 2y ago$100 but worth it for the fun!
- dylan604 2y agothat's a steal. I can spend that in a single night at the pub, so yeah, for what it is it is a no-brainer. the only hesitation is how stable is the 'hn' TLD? Edited for ID10T too early in the morning issue
- qingcharles 2y agoI think you mean "hn" tld?
- dylan604 2y agooops, yeah, but still, same question
- stickfigure 2y agoProbably not very: https://github.com/stickfigure/blog/wiki/Beware-cutesy-two-letter-TLDs-for-your-domain-name https://github.com/stickfigure/blog/wiki/Beware-cutesy-two-l... But probably sufficient for a project like this.
- slig 2y agoLooks like it's $64 on Regery.
- deleted 2y ago[deleted]
- xalava 2y agoFun idea! - The first bullet point does not seem to be recognised (on your profile and mine). - webp images do not work?
- padolsey 2y agoBullet point issue ~fixed just now. Thanks for flagging! Webp, hmm, looks visible here..
- deleted 2y ago[deleted]
- ecmascript 2y ago[flagged]
- pmx 2y agoBy attention he means it redirects to adult content.
- ecmascript 2y agoNot really, unless you have visited the site before. I guess you already have accepted the warning on their front page lol. Sad that you are a party pooper tho! I was being nice and warned you and here you are, removing the fun.
- pmx 2y agoIt's not fun when people end up with that domain in their history on corporate networks. Fun would be redirecting to a rickroll, what you did is malicious.
- ecmascript 2y agoC'mon mate, it's just a redirect to a nsfw website. Not the end of the world. I also did warn about it so if you work in such a crappy environment and click on a link with a warning you'll have to suit yourself.
- tomaytotomato 2y agoWell played, thankfully I know the keyboard shortcut to close a tab rapido!
- padolsey 2y agoWell I mean... I like the idea of you having autonomy over your own bio .. :P I kinda want to see how this xss vuln plays out.
- 2y ago
- ziml77 2y agoKinda minor thing, but the generated HTML isn't technically valid. The meta and style tags are supposed be inside the head tag (as supported by the MDN docs on the tags and the errors shown when you view source in Firefox).
- pietmichal 2y agoDon't worry, WebKit devs will update Quirks.cpp soon!
- already 2y ago[dead]
- willvarfar 2y agoso perhaps some kind of collaborative filtering or cohort graph or AI summary can be added on top of this? What other users often comment on the same kinds of stories? Who often replies etc? What kind of stories do they engage with? Etc.
- valtlfelipe 2y agoGreat idea! Love the simplicity.
- Brajeshwar 2y agoMan, that is a costly domain TLD to be playing around with. Nice 2-character domain you got. Best of luck and have fun.
- im_dario 2y agoI got a 3-character domain, rio.hn, just to spell my name as an e-mail (using the @ as 'a' :)
- padolsey 2y agoI'm chuffed as it was only $100 ! :p
- jonplackett 2y agoWhat’s the renewal cost?
- notpushkin 2y agoI've just checked yc.hn on a random registrar and it says 60 €/year. I think it's not as costly as it seems! https://tldes.com/hn https://tldes.com/hn https://tld-list.com/tld/hn https://tld-list.com/tld/hn
- abcd_f 2y ago.hn is a tld of Honduras. Renewal and registration fees seems to be the same, so it's not bad.
- hhh 2y ago.hn is an expensive tld, and none of the 2-character repeating domains are available either.
- EGreg 2y agoWatch out and take care!
- longerd2 2y agoUsernames in domains means, in many cases, the ISP learns peoples usernames.
- mcny 2y agoinstead of going to dang.at.hn directly, I am archiving it at https://archive.ph/wip/0acmv https://archive.ph/wip/0acmv so only me, and the fine folks at archive.today, and of course everyone on HN will have access to dang's username :D
- diggan 2y ago> so only me, and the fine folks at archive.today, and of course everyone on HN + the rest of the ~20 organizations/domains being called from that page: https://i.imgur.com/CYSDJp0.png https://i.imgur.com/CYSDJp0.png
- lofenfew 2y agomight be slightly easier to set up DoH with a service you trust as the provider. Most browsers have a setting for it.
- stevekemp 2y agoIt looks like dang has a page despite having no slug on his profile page: https://dang.at.hn/ https://dang.at.hn/ https://news.ycombinator.com/user?id=dang https://news.ycombinator.com/user?id=dang Unless of course he added it, and later removed it?
- deleted 2y ago[deleted]
- diggan 2y agoThe wording of: > To opt-in, paste "{your username}.at.hn" anywhere in your profile's 'about' section. Is slightly incorrect, I think. Everyone seems to visible by default, opted-in or not. However, the ?refresh thing is locked down so you need to opt-in before. But by default, every user page is accessible on at.hn, even if you don't have the link in your profile.
- geertj 2y agoMine is not visible, and I did not opt-in.
- jerbear4328 2y agoMine is visible, oddly. I didn't opt in, either.
- deleted 2y ago[deleted]
- flawn 2y agoi think the dev of at.hn just added him for testing reasons.
- jimbobthrowawy 2y agopg was added too, first one I tried. I had assumed it was a growth-strategy thing, but testing makes more sense. Surprised to see one of these kinds of sites be opt-in. Most things I see using HN data are real loosey goosey about it.
- ilaksh 2y agoHow hard is it to export all of the comments someone has written on HN? I have been thinking about converting my HN comment history into something like a blog. Each entry would show the title of the submission, link if applicable, and the comment and link to comment thread. Maybe you could provide that service for a small fee. https://github.com/runvnc/hncomments https://github.com/runvnc/hncomments
- deleted 2y ago[deleted]
- ttepasse 2y agoWrite an GDPR request … and wait.
- matsemann 2y agoAlso would be interesting to see my downvotes to upvotes ratio, compared with others.
- mikeqq2024 2y agoIs there notification mechanism for hn when someone comments after you or @you?
- koolala 2y agotoo hard? too easy? i dont know?
- opjjf 2y agoThe Hacker News BigQuery data makes this quite easy: select * from `bigquery-public-data.hacker_news.full` where `by` = 'ilaksh' and type = 'comment' order by timestamp desc EDIT: seems this is out of date
- hipadev23 2y agoClickhouse has an updated dataset: https://play.clickhouse.com/play?user=play#U0VMRUNUICogRlJPTSBoYWNrZXJuZXdzX2hpc3RvcnkgT1JERVIgQlkgdGltZSBERVNDIExJTUlUIDEwMA== https://play.clickhouse.com/play?user=play#U0VMRUNUICogRlJPT...
- splatzone 2y agoNice implementation!
- neilv 2y agoJust be a little careful, or the OnlyFans people might hear there's a new "social" where they can promote. (For example: LLM-assisted forum presence, combined with profiles with oh, hey there, I have an OF, lol, combined with tech industry disposable incomes... I'd guess would pick up a couple new whales worth the effort. Now that Reddit presumably has been picked clean.)
- deleted 2y ago[deleted]
- deadbabe 2y agoAround here I think you’d have better luck selling tiny cute looking computers with tiny screens and open source hardware.
- jpmattia 2y agoTastes around here definitely vary. I prefer curvy monitors with big CPUs.
- ht85 2y agoDoes your curvy monitor support touch?
- rrr_oh_man 2y agoIt also has 4 ports
- 8n4vidtmkvmk 2y agoMan oh man, do I have the CRT for you!
- deleted 2y ago[deleted]
- dcminter 2y agoUh ... do you have a link for this? Just (mostly) joking...
- max_ 2y agoMy username has an underscore, _ so it doesn't show up. Oooops ....
- Pr0ject217 2y agoInternal Server Error 34
- nanochess 2y agoReally nice! For a moment I thought it was official. Anyway I've edited my bio and have been waiting like 20 minutes for it to be updated in the site.
- SushiHippie 2y agoYou need to go to https://nanochess.at.hn?refresh I did so, and it updated your bio :)
- hunkins 2y agoLove it, great work!
- barbazoo 2y agoSo often I see people sharing something that seems driven mostly by the availability of some domain, instead of being idea first, then domain. I find that an interesting niche of human history.
- Brajeshwar 2y agoI own phone.wtf and I crafted my phone usage pattern into a message to fit within the domain narrative. ;-)