News for hackers. Stuff that matters.
Re:Show HN: Cardstock- Free TCG Proxy Manager for Magic, Yug... by adenta on Wednesday January 08, 2025 @01:37PM (#42637088)
If you want to play around with it, try account [email protected] with password hackernews!

I didn't add any restrictions on email registration because I hear you that actually creating an account can be a chore. Exposing web services to the public internet without auth seems scary, which is why I rarely do it.

Re:Show HN: Cardstock- Free TCG Proxy Manager for Magic, Yug... by nafey on Wednesday January 08, 2025 @02:23PM (#42637527)
Just adding a static website with screenshots of the product will be a great upgrade for users who are interested to learn more before signing in.
Re:Show HN: Cardstock- Free TCG Proxy Manager for Magic, Yug... by dgrove on Wednesday January 08, 2025 @03:30PM (#42638149)
Also login over a VPN unless you want your IP leaked to everyone else
Re:Show HN: Cardstock- Free TCG Proxy Manager for Magic, Yug... by cmg on Wednesday January 08, 2025 @03:03PM (#42637906)
For anyone else trying this, the password is hackernews - without an exclamation point. Tripped me up.

Thanks for setting this up adenta!

Re:Show HN: Cardstock- Free TCG Proxy Manager for Magic, Yug... by lxgr on Wednesday January 08, 2025 @01:41PM (#42637143)
> I didn't add any restrictions on email registration […] Exposing web services to the public internet without auth seems scary

Aren’t you still effectively doing that, though?

This seems like the combination of two downsides: Bots will be able to perform email verification if they want to; honest users will still be deterred.

Re:Show HN: Cardstock- Free TCG Proxy Manager for Magic, Yug... by adenta on Wednesday January 08, 2025 @01:44PM (#42637163)
great point-

bot protection is enabled in clerk, where email registration is not.

Re:Show HN: Cardstock- Free TCG Proxy Manager for Magic, Yug... by snapcaster on Wednesday January 08, 2025 @04:25PM (#42638610)
but also the chat function doesn't do anything unless you supply an email. Seriously without your post text here it's literally impossible to figure out what your site does exactly pre-account creation