News for hackers. Stuff that matters.
Re:Disqus comments adding third-party ad-tracking by ploggingdev on Tuesday September 26, 2017 @01:13AM (#15336369)
Shameless plug : As someone who was fed up with Disqus, I decided to build my own commenting platform ( https://hostedcomments.com/ ) with a focus on privacy : no ads, no tracking scripts. Having come across numerous instances of people complaining about Disqus and some even willing to pay for an alternative, I realized that this could potentially be turned into a SaaS. You can see the commenting system in action here : https://www.ploggingdev.com/2017/08/building-a-disqus-altern...

Any feedback is welcome.

Edit : If you're interested, you can register and add comments to your website. Currently there are no limitations on user accounts and there is no payment processing built in to the signup flow, so no CC required.

Re:Disqus comments adding third-party ad-tracking by Moru on Tuesday September 26, 2017 @02:26AM (#15336628)
Good idea!

Two things:

1. Please make sure you support all languages (utf-8).

2. Some public forums want anonymous posts that they can check and allow manually but still need to know who it came from (newspapers in Sweden does this a lot). Usually requires entering an email adress every time and a checkbox "I preffer to be anonymous".

Re:Disqus comments adding third-party ad-tracking by ploggingdev on Tuesday September 26, 2017 @02:48AM (#15336692)
> 1. Please make sure you support all languages (utf-8).

I'll need to cross check, but I think with the default settings, it's currently supported.

> 2. Some public forums want anonymous posts that they can check and allow manually but still need to know who it came from (newspapers in Sweden does this a lot). Usually requires entering an email adress every time and a checkbox "I prefer to be anonymous".

Good idea, I'll add support for anonymous posting with appropriate moderation policies to prevent spam/abuse.

Thanks for the feedback.

Re:Disqus comments adding third-party ad-tracking by le-mark on Tuesday September 26, 2017 @08:37AM (#15338061)
I almost did this, there are a couple around (remarkbox.com for example). What I contemplated, as a way to circumvent ad blocking, was to offer a "white label" service, so the user could configure "comments.mysite.com" with a CNAME to point to www.hostedcomments.com so the comments would appear to be hosted by the same domain.

I guess that would fool most ad blockers, and users would have to blacklist the "comments.mysite.com" on an individual basis. Seems kind of shady to me. Have you considered this?

Re:Disqus comments adding third-party ad-tracking by SomeStupidPoint on Tuesday September 26, 2017 @10:14AM (#15338798)
Two points:

There's nothing wrong with using the CNAME if you're only serving comments off that domain.

Also, I'm pretty sure you can regex adblocking DNS entries, so you could block on comments.. pretty easily with minimal casualties. You'd have to intentionally randomize it to bypass adblockers... Which will probably get your domain listed as a badhost by most peers.

(Smarter adblockers would check for CNAMEs and IP blocks, but let's not ecalate the arms race for no reason.)

Re:Disqus comments adding third-party ad-tracking by rambojazz on Tuesday September 26, 2017 @02:12AM (#15336571)
Is this open source and can be self-hosted? If not, it's just another Disqus.
Re:Disqus comments adding third-party ad-tracking by ploggingdev on Tuesday September 26, 2017 @02:39AM (#15336661)
It's closed source.

> it's just another Disqus.

The main difference is the privacy aspect since I don't track users or serve ads. Disqus' business model depends on collecting user data and monetizing it, unlike mine where I directly charge website owners to embed comments.

Re:Disqus comments adding third-party ad-tracking by unicornporn on Tuesday September 26, 2017 @06:56AM (#15337598)
> I don't track users or serve ads.

That's probably what Disqus would have said too if you asked them when they were in your phase. Privacy concerns aren't solved by promises, it's solved by infrastructural and technical decisions that make tracking impossible or/and simply not profitable.

Re:Disqus comments adding third-party ad-tracking by unicornporn on Tuesday September 26, 2017 @08:10AM (#15337896)
…and if I was looking for a hosted solution I'd probably go for https://www.discourse.org/ as it's open source and possible to self host if I'd like to migrate to that some day.
Re:Disqus comments adding third-party ad-tracking by tombrossman on Tuesday September 26, 2017 @04:23AM (#15337052)
Closed source means users unable to verify your marketing claims about tracking. Privacy conscious users like myself would prefer an open-source commenting platform, even one with tracking, since we could verify how it worked (and also take it a step further and circumvent tracking by examining the source).

Also, what's to prevent a provider from double-dipping? If you can sell the product plus your users data you can presumably generate even more income. For example, mobile phone carriers sell monthly plans to users and some sell users location and usage data (usually "anonymised") to advertisers.

I don't mean to imply that you are doing these things, or that you ever would, but without independent verification by a trusted third-party, all the users have to go on are your marketing claims. What's your plan for dealing with sceptical users?

Re:Disqus comments adding third-party ad-tracking by ploggingdev on Tuesday September 26, 2017 @04:42AM (#15337140)
I guess I'll have to earn trust the long, hard way :

* clear policies on how user data is handled

* explicit commitment to never sell user data to third parties

* transparency about any specific concerns users might have

* no dark patterns to trick users or website owners

* a track record of good decision making and staying true to the commitment to privacy

And for people who find me through forums (including HN) or via my blog, I think my privacy + no bullsh*t leanings are pretty clear.

Since I'm solo and bootstrapped, I don't know what options I have regarding independent verification of my claims, but if I get to a point where I can explore such options, I'm all for third party verification of my claims.

Re:Disqus comments adding third-party ad-tracking by anon335dtzbvc on Tuesday September 26, 2017 @04:53AM (#15337176)
Could you tell why you choose to make it closed source?
Re:Disqus comments adding third-party ad-tracking by reitanqild on Tuesday September 26, 2017 @06:24AM (#15337481)
Not op, but here is an obvious and valid one: Because it is easier to monetize that way.
Re:Disqus comments adding third-party ad-tracking by bigbugbag on Tuesday September 26, 2017 @08:24AM (#15337975)
To prevent people self-hosting and selling an overpriced service to people who do not know better and will be disappointed when the service closes or when they want to migrate their data to another service.
Re:Disqus comments adding third-party ad-tracking by gsich on Tuesday September 26, 2017 @08:19AM (#15337942)
You don't make money with open source unless you are big enough.
Re:Disqus comments adding third-party ad-tracking by tombrossman on Tuesday September 26, 2017 @04:57AM (#15337190)
Appreciate the quick response. That's a very good list, and I would only add "all user data will be deleted if service is sold to another company" to it.
Re:Disqus comments adding third-party ad-tracking by bigbugbag on Tuesday September 26, 2017 @08:26AM (#15337986)
What do you mean user data ? As in every commenter owns his comment or as in the paying customer owns the data from the commenters ?

This may make quite a legal difference when the justice system gets eventually involved.

Re:Disqus comments adding third-party ad-tracking by TeMPOraL on Tuesday September 26, 2017 @05:58AM (#15337401)
Most of those are not a problem with closed source per-se (closed source binaries you run yourself can still be inspected, monitored and even reversed). It's a problem with SaaS model. Even if you open-source everything, how can I know you're actually running the same code you've open-sourced? I can't. And since most SaaS businesses track users like there's no tomorrow, you get perfectly reasonable distrust by default.
Re:Disqus comments adding third-party ad-tracking by samholland00 on Wednesday September 27, 2017 @08:04PM (#15353456)
You have the ability to turn off data sharing in your admin settings. You can also opt for a paid plan to turn off ads or if you are small enough then you can use the service for free w/o ads. There are options.
Re:Disqus comments adding third-party ad-tracking by ascendantlogic on Tuesday September 26, 2017 @07:47AM (#15337801)
> The main difference is the privacy aspect since I don't track users or serve ads.

If history has shown us anything, it's that everyone has a price and if someone comes along with enough money you'll change your tune. No thanks.

Re:Disqus comments adding third-party ad-tracking by type0 on Tuesday September 26, 2017 @05:29AM (#15337292)
Closed source means there is no way to migrate from you as a provider and no way to keep the comments when your service eventually folds. That's a "no deal" proposition, thank you - but no thank you.
Re:Disqus comments adding third-party ad-tracking by bigbugbag on Tuesday September 26, 2017 @08:23AM (#15337960)
what do you mean privacy aspect ? Is there any encryption going on ? Who has the key ? How is the code audited ? What's your stance with law enforcement ? Is there zero knowledge ? Is it possible to export all data to migrate to another service ?

AFAIK I agree that this is another disqus, third party hosted, no privacy expectation, vendor lock-in, etc. also very expensive.

Re:Disqus comments adding third-party ad-tracking by gsich on Tuesday September 26, 2017 @02:23AM (#15336623)
>Just copy paste a little code snippet and we manage everything.

It's another Disqus.

Re:Disqus comments adding third-party ad-tracking by yuhong on Tuesday September 26, 2017 @02:32AM (#15336642)
This does not mean that ads are the only possible model, of course.
Re:Disqus comments adding third-party ad-tracking by franciscop on Tuesday September 26, 2017 @03:47AM (#15336913)
Following that logic any non-open-source comment platform would be another disqus.
Re:Disqus comments adding third-party ad-tracking by icebraining on Tuesday September 26, 2017 @04:48AM (#15337157)
Yes, that's exactly what it means.
Re:Disqus comments adding third-party ad-tracking by TeMPOraL on Tuesday September 26, 2017 @06:00AM (#15337409)
Still, I would say the problem isn't open source or not, it's the SaaS model. SaaS is the ultimate closed source, because you have no way (nor right) to tell what the service is doing with your data.
Re:Disqus comments adding third-party ad-tracking by franciscop on Tuesday September 26, 2017 @09:16AM (#15338329)
Are facebook comments "just another disqus" then?
Re:Disqus comments adding third-party ad-tracking by icebraining on Tuesday September 26, 2017 @01:25PM (#15340747)
In the sense that is under discussion, yes.
Re:Disqus comments adding third-party ad-tracking by bigbugbag on Tuesday September 26, 2017 @08:17AM (#15337931)
Will it survive sesta ?