News for hackers. Stuff that matters.
Re:Show HN: Kvak.io – Online Notepad by stevekemp on Wednesday August 05, 2020 @04:40AM (#24058557)
I created https://markdownshare.com/ to allow anybody to create/share/render markdown.

Unfortunately these kind of sites are an abuse magnet, so it is in the process of being retired.

I think any sustainable site/service like this has to be self-hosted, or come with a subscription. Because otherwise dealing with all the bots, spam-submissions, and other abuse is just too depressing.

Re:Show HN: Kvak.io – Online Notepad by rozab on Wednesday August 05, 2020 @11:13AM (#24061703)
Have you seen clientside-encrypted pastebins like 0bin[0]? The idea is to absolve the host of legal responsibility, since they can't even access the data without the decryption key in the URL.

[0]: https://github.com/sametmax/0bin

Re:Show HN: Kvak.io – Online Notepad by tobeagram on Wednesday August 05, 2020 @07:08AM (#24059404)
MarkdownShare looks like a pretty neat service, I'm sorry to hear that people took advantage of it!

Interesting that you mention a subscription service would more sustainable. I'm actually building a markdown note-taking app [1], that is based around a note-card format. We are currently developing a way to share a markdown card with a secure link.

[1] https://supernotes.app

Re:Show HN: Kvak.io – Online Notepad by tealpod on Wednesday August 05, 2020 @07:35AM (#24059642)
I know exactly what you mean. I made https://Write.wtf majority of it is just junk.
Re:Show HN: Kvak.io – Online Notepad by abi on Wednesday August 05, 2020 @01:30PM (#24063298)
Neat. Have you implemented any anti-spam controls? How much does it cost to keep it running?
Re:Show HN: Kvak.io – Online Notepad by Jaruzel on Wednesday August 05, 2020 @11:42AM (#24062058)
Can you expand on the types of abuse you saw? Was it all just spam, or was some of it legitimately 'dodgy' ?
Re:Show HN: Kvak.io – Online Notepad by stevekemp on Wednesday August 05, 2020 @12:11PM (#24062406)
A combination of (bot) IP addresses making 20+ requests a second, to post SPAM. Half the abuse was people just making lots of requests in short spaces of time, the other half was just people submitting spam, more slowly. I added rate-limiting to deal with the worst offenders, but mostly they'd keep POSTing away, ignoring the error-codes I was sending.

All submissions would get a random ID, something like this example chosen at random:

https://markdownshare.com/view/b5abadcc-c0fb-473e-a34d-f27c0...

There were numerous bots who'd try to spider/probe the site collecting all the links. Handling millions of 404s a month wasn't much of a pain, because the service was pretty efficient, but it was just another source of annoyance.

Finally, and God only knows how, I'd get a ton of DCMA takedown notices for alleged copyright infringement. That's what pushed me over the edge into first of all making it read only, and secondly planning to kill it at the end of the year.

Re:Show HN: Kvak.io – Online Notepad by abi on Wednesday August 05, 2020 @01:32PM (#24063330)
What do people gain from spamming your service? Referring especially to the ones that kept going despite error codes being sent their way.
Re:Show HN: Kvak.io – Online Notepad by stevekemp on Wednesday August 05, 2020 @02:05PM (#24063681)
Just bots spamming forms I guess, hoping to get indexed and ranked on google.

The same thing you see on random blogs, I don't think there's anything specific about my service in particular - just badly coded bots that don't have retry logic and blindly spam the same content to thousands of sites that accept comments, content, and pingbacks.

Re:Show HN: Kvak.io – Online Notepad by abi on Wednesday August 05, 2020 @10:45PM (#24067692)
Ahhhh they are trying to collect backlinks. That makes sense.
Re:Show HN: Kvak.io – Online Notepad by Jaruzel on Wednesday August 05, 2020 @12:38PM (#24062746)
Wow thanks for that. Makes one stop and think before coding anything similar. :(
Re:Show HN: Kvak.io – Online Notepad by putsjoe on Wednesday August 05, 2020 @07:39AM (#24059679)
Would a captcha have helped?
Re:Show HN: Kvak.io – Online Notepad by stevekemp on Wednesday August 05, 2020 @08:04AM (#24059883)
I suspect it would have helped initially, but then it becomes an arms-race.