News for hackers. Stuff that matters.
Re:Show HN: A Chrome extension for getting to the HN thread ... by mcrittenden on Tuesday September 06, 2011 @03:51PM (#2966988)
Re:Show HN: A Chrome extension for getting to the HN thread ... by michaelfairley on Tuesday September 06, 2011 @04:00PM (#2967043)
There are some security and privacy issues with that extension. It requires permission to run javascript in the context of every page, so the author could auto-update the plugin to inject malicious code in your banking session.

It also sends every url you visit to HNSearch, which a lot of people were unhappy with from a privacy perspective. My extension sends MD5(url), which makes it nearly impossible for me to track someones browsing behavior.

Re:Show HN: A Chrome extension for getting to the HN thread ... by rwolf on Tuesday September 06, 2011 @08:07PM (#2967793)
"My extension sends MD5(url), which makes it nearly impossible for me to track someones browsing behavior."

You're kidding, right? In order to tell if there is a HN thread about the page, you also MD5(url) all HN threads. If you find a match, you send the thread to the user. Therefore, you know the user is visiting the url the HN thread is about!

Let's not even talk about how cheap it is to test for MD5 collisions against popular urls, or the how easy it is to determine if the user has visited an arbitrary url.

Re:Show HN: A Chrome extension for getting to the HN thread ... by mwhooker on Tuesday September 06, 2011 @04:12PM (#2967088)
very nice. This is something I'm very interested in. I even wrote something like it which uses a bookmarklet, though I believe browser extensions are the way to go.

http://omnigeist.com/ https://github.com/mwhooker/omnigeist.js

It was mostly a vehicle for me to learn coffeescript & node.js, so it's got some rough edges.