News for hackers. Stuff that matters.
Re:Hacker News evading criticism by selectively adding noref... by zamadatix on Wednesday June 07, 2023 @02:53PM (#36231660)
It's probably good to not allow redirects or targeted content to users, and those are valid complaints. I totally shouldn't get link redirected, sent to a shady site, or displayed offensive content, different than what the submitter might have seen since they didn't have a referrer, because the other side of the link is hostile to users here. That said, I think a "banned link" list for submissions might serve this purpose better and more neutrally, if you're wanting to please both sides. I don't think you were out to "go after" anybody at all though, I think you were just blindsided by something you didn't think as deeply about as some of the folks on the other side expected. From that perspective, I feel for ya and don't blame you for getting stuck in the spot you ended up in at all.

From the above though, I'd say an opt-in (either via moderator here or site owner request) ban-list on top of a general all-link "noreferrer" policy would be my preferred solution as a users. Heck, an "ultra technical" answer would be let robots.txt filter a HN bot agent which checks when the submission is polled, way less manual. Others may disagree, and it does come with the downside sites won't be able to tell where the sudden burst of traffic originates, but that's my 2 cents.

Re:Hacker News evading criticism by selectively adding noref... by josephcsible on Wednesday June 07, 2023 @03:19PM (#36232053)
You're missing the point. Site owners shouldn't be allowed to say "people aren't allowed to talk about my site on Hacker News".
Re:Hacker News evading criticism by selectively adding noref... by zamadatix on Wednesday June 07, 2023 @03:28PM (#36232187)
People shouldn't post bad comments on HN either, but HN still needs to ban users and handle spam anyways. The point is about what can realistically be done, not each of us lamenting a different "how the world should be".
Re:Hacker News evading criticism by selectively adding noref... by josephcsible on Wednesday June 07, 2023 @03:42PM (#36232395)
The analogy isn't being able to ban users and handle spam. It'd be more like adding a feature with the sole purpose of making it easier to post bad comments.
Re:Hacker News evading criticism by selectively adding noref... by zamadatix on Wednesday June 07, 2023 @03:47PM (#36232477)
A clearer relation to how preventing hairy-ball responses, like JWZ has, is like making it easier to post bad comments would be appreciated, I'm having trouble following the relation.

Note: sites can still detect HN users and modify content without the referer. E.g., using the CSS styling for if "news.ycombinator.com" is a visited link. If not visited, content hidden. If visited, content shown. Based on the status the site can also trigger a redirect via JS at that point. My comment was that it seems better to let the site just opt out directly, not about what site operators should or shouldn't be doing.

Re:Hacker News evading criticism by selectively adding noref... by josephcsible on Wednesday June 07, 2023 @03:50PM (#36232522)
> Based on the status the site can also trigger a redirect via JS at that point.

Thankfully no it can't, because browser vendors already know about that vulnerability and have fixed it. Visited link styling can only affect color now, and isn't reflected in getComputedStyle, exactly to prevent that kind of thing.

Re:Hacker News evading criticism by selectively adding noref... by zamadatix on Wednesday June 07, 2023 @04:09PM (#36232807)
Shows how up to date I am on the web :). Did this change prevent all custom messages from being displayable or just triggered actions such as the redirect?
Re:Hacker News evading criticism by selectively adding noref... by josephcsible on Wednesday June 07, 2023 @04:11PM (#36232848)
You can display custom messages still, by making the unvisited and visited colors different, and then making the background color the same as the unvisited color, but you can't do anything more elaborate than that.