News for hackers. Stuff that matters.

A comment on PSA: Always use a separate domain for user content. Parent comment

Re:PSA: Always use a separate domain for user content by neon_erosion on Friday October 10, 2025 @05:00PM (#45543728)
This is the kind of thing that customers rely on you to do _before_ it causes an incident.
[ Parent | on HN ]
Re:PSA: Always use a separate domain for user content by ericselin on Friday October 10, 2025 @06:27PM (#45544561)
The thing is, for users, having a separate domain wouldn't have made any difference without the PSL. And you cannot get on there before you're big enough - which I'd say is roughly at the same time as you start grabbing the attention of scammers.
[ Parent | on HN ]