4 ms·

PRIVACY WARNING: Every name/text entered into this site is publicly listed on the "latest" leaderboard which seems to paginate endlessly.

dofm 4mo ago
And will thus potentially end up in the effing weights.
cocoa19 4mo ago
Ugh too fucking late. What a privacy nightmare.
Crowberry 4mo ago
That sucks… shame on me I guess
1over137 4mo ago
Wouldn't thinking so be the default for the HN crowd? I'd have thought any hacker would assume any text you type in a random website would be used however the website administrator wanted. (Not that the general public would think so.)
bluefirebrand 4mo ago
This was the first thing I thought too. Even if this thing wasn't publicly displaying the names, I would assume they would be collecting them for something. Can't trust anything like this online.
- ronbenton 4mo ago
  Can’t trust anything online
turtlesoup 4mo ago
Just deployed a fix for this; removed latest and capped pagination.
- bdieterm 4mo ago
  It is still possible to download all entries via the api and sort them by the timestamp. Removing the cursor data would be one way to mitigate this. Currently there are a bit more than 43000 entries. As far as I have seen, only the results are stored. When I entered a random name, only a similar name was found, and that similar name result was stored, but not the original input.
- bdieterm 4mo ago
  update to my previous comment: All the data is still public. There are more than 104000 entries now. The original name, that was searched, is also stored in the data (in another field; somehow I missed that before). @tourtlesoup: Why don't you restrict the access and why don't you put a warning on your page?
rdtsc 4mo ago
That's the first thing I looked to see HN-ers real names :-) and thought "hey, that's a pretty clever to get everyones' names". Apparently it's fixed now. Surely you'll trust a random website...

dofm 4mo ago

And will thus potentially end up in the effing weights.

cocoa19 4mo ago

Ugh too fucking late. What a privacy nightmare.

Crowberry 4mo ago

That sucks… shame on me I guess

1over137 4mo ago

Wouldn't thinking so be the default for the HN crowd? I'd have thought any hacker would assume any text you type in a random website would be used however the website administrator wanted. (Not that the general public would think so.)

bluefirebrand 4mo ago

This was the first thing I thought too. Even if this thing wasn't publicly displaying the names, I would assume they would be collecting them for something. Can't trust anything like this online.

ronbenton 4mo ago
Can’t trust anything online

turtlesoup 4mo ago

Just deployed a fix for this; removed latest and capped pagination.

bdieterm 4mo ago
It is still possible to download all entries via the api and sort them by the timestamp. Removing the cursor data would be one way to mitigate this. Currently there are a bit more than 43000 entries. As far as I have seen, only the results are stored. When I entered a random name, only a similar name was found, and that similar name result was stored, but not the original input.
bdieterm 4mo ago
update to my previous comment: All the data is still public. There are more than 104000 entries now. The original name, that was searched, is also stored in the data (in another field; somehow I missed that before). @tourtlesoup: Why don't you restrict the access and why don't you put a warning on your page?

rdtsc 4mo ago

That's the first thing I looked to see HN-ers real names :-) and thought "hey, that's a pretty clever to get everyones' names". Apparently it's fixed now. Surely you'll trust a random website...