News for hackers. Stuff that matters.
Re:Show HN: Like The Onion, But Real by sp332 on Thursday February 21, 2013 @05:30PM (#5260989)
Um, are you seriously hotlinking to resources hosted by theonion.com? That is a terrible, terrible idea.

  <link rel="stylesheet" href="http://www.theonion.com/static/CACHE/css/2903347c3113.css" type="text/css" media="all">
Re:Show HN: Like The Onion, But Real by pinoceros on Thursday February 21, 2013 @08:41PM (#5261987)
This adds another DNS lookup, which will slow down your page load times. Also, it is essentially leaching the bandwidth from theonion.com. However, if your users are already readers of theonion.com, the static files may be cached.
Re:Show HN: Like The Onion, But Real by marssaxman on Thursday February 21, 2013 @05:48PM (#5261128)
Why is it a terrible idea?
Re:Show HN: Like The Onion, But Real by taproot on Thursday February 21, 2013 @05:51PM (#5261154)
Because if the onion goes down, so does your site. Because the onion can take the link down just to mess with you. Because the onion gets owned, or feels like it, they can have "fun" with your users and your site.

Edit: its only a bad idea if you care about the integrity of your site, for something like this it probably doesn't matter.

Re:Show HN: Like The Onion, But Real by baby on Thursday February 21, 2013 @05:59PM (#5261198)
Also hotlinking has always been looked down upon.
Re:Show HN: Like The Onion, But Real by marssaxman on Thursday February 21, 2013 @08:03PM (#5261842)
Good reasons. Thanks for explaining.
Re:Show HN: Like The Onion, But Real by chc on Thursday February 21, 2013 @05:54PM (#5261168)
Besides what everyone else said, hotlinking other people's resources has been considered bad form since the early days of the Web, and its legality is questionable as well.
Re:Show HN: Like The Onion, But Real by marssaxman on Thursday February 21, 2013 @08:02PM (#5261837)
I've been around since the early days of the web and I never understood why other people decided it ought to be bad form. You put it out there to be downloaded, why shouldn't people download it?
Re:Show HN: Like The Onion, But Real by redthrowaway on Thursday February 21, 2013 @08:13PM (#5261882)
Because it means they pay to host and serve it, while you reap the benefits.
Re:Show HN: Like The Onion, But Real by chc on Thursday February 21, 2013 @08:15PM (#5261887)
Hotlinking is specifically in contrast to downloading.
Re:Show HN: Like The Onion, But Real by marssaxman on Thursday February 21, 2013 @08:26PM (#5261926)
And yet there is no technical difference. Browsing is downloading. It seems strange to make up non-technical rules about when downloading a piece of data is or is not OK. If The Onion has a problem with the amount of data they are serving, perhaps they should configure their server to reject those requests; putting the onus on the end user not to issue HTTP GET unless a certain non-technical context exists seems.... odd.

I understand that this idea has gained currency over the last decade, but I still don't understand or agree with it.

Re:Show HN: Like The Onion, But Real by chc on Thursday February 21, 2013 @08:44PM (#5261996)
There is a huge technical difference between downloading your own copy of a file that you then serve to your visitors and pointing all your traffic at somebody else's server. No engineer in the world would look at those two plans and say, "Eh, I can't tell any difference."

> If The Onion has a problem with the amount of data they are serving, perhaps they should configure their server to reject those requests; putting the onus on the end user not to issue HTTP GET unless a certain non-technical context exists seems.... odd.

No clue what you're talking about. For one, we're talking about website creators here rather than end users, and it's these website creators' failure to issue an HTTP GET that's considered bad manners.

Re:Show HN: Like The Onion, But Real by marssaxman on Thursday February 21, 2013 @09:25PM (#5262141)
Wait. What? Am I misunderstanding you, or are you seriously suggesting that someone wanting to direct people's web browsers to some interesting resource ought to copy the bits onto their own server, thereby potentially violating the creator's copyright, instead of simply pointing people at the original file?

I understand that other people have made up this idea that "hotlinking" is bad, but it never made any sense to me and I never got on board that train. People "hotlink" stuff off my blog all the time and I think that's great. I put the photos up there to be looked at; if people want to share them, I read that as a sign that I took a good photo. If I wanted to stop people from looking at my photos in certain ways - when the referer comes from a site other than my own, for example - then I would configure my web server not to serve out the bits under those conditions.

If the Onion doesn't want to serve out their CSS file under certain conditions, they should configure their server not to serve the bits under those conditions. If the Onion chooses instead to configure their web server to serve the bits to anyone who asks for them, people should feel free to ask for them.

Re:Show HN: Like The Onion, But Real by nitrogen on Thursday February 21, 2013 @10:09PM (#5262305)
If the Onion chooses instead to configure their web server to serve the bits to anyone who asks for them, people should feel free to ask for them.

But it's not "people" asking for them, it's one specific site causing browsers to ask for them unwittingly. Embedding images is less egregious if attributed correctly, but still discourteous and possibly a violation of copyright unless it is encouraged by the site.

However, hotlinking CSS is essentially copyright violation (for lifting the design wholesale, essentially creating a derivative work). There is simply no excuse for not writing and hosting your own CSS.

As the others have said, when hotlinking/embedding, you are profiting from another system's bandwidth and storage resources. Why don't I just hook up your water tap to my house? You should have put a lock on it if you didn't want it to be used for that purpose.

I must point out that hijacking resources from another server is in strong contrast to scraping for personal use, whitehat research, etc. It's one thing to send arbitrary HTTP requests to a server that will answer them. It's another entirely to cause others' browsers to do so without permission, especially in a way that is not explicitly announced and attributed, or accrues to your benefit at the other server's expense.

Re:Show HN: Like The Onion, But Real by marssaxman on Friday February 22, 2013 @12:07PM (#5265261)
It cannot be a violation of copyright, since no copy occurs. Site A tells browser B where to find a resource on Site C. Site A sends zero bytes of the actual resource to browser B. Site A does not have a copy of the resource. Instead, the resource continues to live on the server under the control of the copyright holder. Browser B then contacts site C, asks for the resource, and site C voluntarily sends those bits. There is no on server A, server A does not transmit a copy to browser B, and therefore there can be no copyright violation.

It doesn't make any sense to me to get all worked up about "rude behavior". The internet is full of people who want to break into your box and take over your system. If you have a server facing the internet you have to expect that people are going to be ruder than you ever dreamed possible, and they are going to do this all the time. Complaining about it won't change anything; just fix your server so it doesn't do things you don't want it to do. I understand that there's this whole big social thing about "hotlinking" which has grown up now, and I've heard all the reasons people use for it, I just look around at the state of the internet and think it's a trivial thing to worry about. Just fix your config and get on with life. Browbeating someone else for using resources which are advertised and provided to the public for free seems like an amazing waste of time.

Re:Show HN: Like The Onion, But Real by nitrogen on Friday February 22, 2013 @01:57PM (#5265929)
A complex society relies on people avoiding stepping on one anothers' toes. You can't always rely on the Refer[r]er header to block access to resources, either.

Just don't freaking do it. It pisses people off to no productive end (as opposed to personal scraping, whitehat access, etc., which also piss people off, but serve a useful purpose).

Also, copyright provides more rights to creators than just restricting copies and distribution. There are also public performance rights, which I would argue are violated by embedding another site's resources into your own site without permission.

Re:Show HN: Like The Onion, But Real by deelowe on Friday February 22, 2013 @12:40AM (#5262924)
Think of it this way. What would happen if Google, facebook, or twitter hotlinked to a large file on your site and you received no revenue from it? If that didn't make sense, the cliffs notes version is that you'll end up with a gigantic bill from your hosting provider and a DOS'ed site. That's why it's bad form to hot link without permission. It's a rule that's developed over time in response to stuff like this. Also, it's a two way street. Many sites will black list referrers from sites that do a lot of hotlinking as its a really common spam tactic.
Re:Show HN: Like The Onion, But Real by tingletech on Thursday February 21, 2013 @09:00PM (#5262057)
Copying the css to your own server could be considered a copyright violation.
Re:Show HN: Like The Onion, But Real by homosaur on Thursday February 21, 2013 @09:12PM (#5262098)
The day The Onion sues an obvious parody for copyright violation is the day I eat my shoe. Or write a very angry letter to the editor, one of the two.
Re:Show HN: Like The Onion, But Real by sp332 on Thursday February 21, 2013 @05:55PM (#5261178)
In addition to the other answers, I'd like to add that's it's not very friendly. Why should The Onion have to pay for the bandwidth to host your stylesheet? They pay for every time someone visits your site.
Re:Show HN: Like The Onion, But Real by slifty on Thursday February 21, 2013 @06:00PM (#5261211)
For the record this was an oversight in the rush to get this out ASAP -- I'm correcting it now (thanks for calling it out!)
Re:Show HN: Like The Onion, But Real by benwerd on Thursday February 21, 2013 @06:08PM (#5261249)
Ah, you should probably think about recreating the Onion's look and feel, rather than grabbing their resources and literally copying it.
Re:Show HN: Like The Onion, But Real by Cryode on Thursday February 21, 2013 @06:39PM (#5261417)
I'd hope you aren't correcting it by saving your own local copy of _their_ stylesheet...
Re:Show HN: Like The Onion, But Real by slifty on Thursday February 21, 2013 @06:41PM (#5261432)
Baby steps people baby steps!
Re:Show HN: Like The Onion, But Real by slifty on Thursday February 21, 2013 @07:18PM (#5261648)
Don't worry -- we're in their circles ;)

But regardless! As I mention in another place on this thread: The point of this project is the blunt comparison to The Onion -- the copying of the name, look, and feel of a well known and well recognized satirical publication is actually a vital part of the statement about our world and the media.

Re:Show HN: Like The Onion, But Real by csinchok on Thursday February 21, 2013 @07:54PM (#5261800)
Hi. I actually work as a developer at The Onion. Given the conversation we just had, I'd say that it seems like you're not in "our circles".

Honestly, I think this idea is pretty cool, but just ripping off our CSS and HTML seems a little scummy. Not only that, but the fact that you were initially hotlinking our static media makes it seems like this is a bit of a lazy effort (let it be noted: you're still hotlinking a lot of media—now it's just from other sites). I'm actually a little sad that you stopped hotlinking our css, because we were already working on another stylesheet to mess with you.

Beyond that, you're using our fonts. These are not free web fonts. They are fonts that we paid a good deal of money to be able to use legally on our site, and they are definitely not authorized for use on yours.

Bottom line: cool idea, not OK execution.

Re:Show HN: Like The Onion, But Real by slifty on Thursday February 21, 2013 @08:11PM (#5261872)
Oh snap!

Sorry I missed the boat on letting you have fun with the CSS (I'd be glad to point it back if you would enjoy it!) But yes, this was built in a few hours and most of that time was spent playing with caching and deployment. Not so much "lazy" as "rushed." (considering this is for the lulz, I'm OK with it being called rushed.)

So yes, to be clear, this was a "lets have quick fun and make a satirical mashup" not a "lets spend a week designing a web site that looks like The Onion." Not sure where scum comes into play given that fact, but I'm sorry if the project pissed anyone off over there. In my experience different people react to détournement in different ways when they are the ones being shifted around.

As for the circles, you're right about not us being in touch with the dev teams over there.

Regarding fonts, noted; I'll wait and see if there is a formal response from The Onion on these fronts but you clearly know the first-hand vibe -- if that's upsetting people I can remove them.

As for the other media we're aware of that and will be making a move soon, THERE ARE ONLY SO MANY FINGERS ON A HAND!

Re:Show HN: Like The Onion, But Real by csinchok on Thursday February 21, 2013 @09:30PM (#5262161)
I get that this was rushed, etc. But it's not like you did a soft launch to test this thing out, or that you're on some kind of deadline here. You built the site lazily and rudely (in my opinion), and then immediately began promotion of it.

Also, you state that you only spent a few hours, and that "most of that time was spent playing with caching and deployment". If you were spending time making sure that the site was cached and performant, it seems less like the hotlinking was an oversight, and more like it was something you just didn't care about.

If you would have taken another few hours, made sure that your ducks were in a row, and THEN began promoting it, you'd be in much better shape right now, and I wouldn't be commenting here.

As for the circles, if you don't know anyone on the dev team, why are you repeatedly claiming to have a tacit OK from us?

As to the fonts, I want to be clear: your current use of the fonts is infringement. We have paid to license those fonts for use on our site. You have not done this, and so you're now infringing--not against us, but against the owners of those fonts. We're not going to come after you, I'd bet that someone will (eventually).

To summarize my position again: I'm not at all a fan of how you went about doing this, but it's honestly not a huge deal—just a bit rude.

Re:Show HN: Like The Onion, But Real by slifty on Thursday February 21, 2013 @10:09PM (#5262307)
Well it sounds like at this point an apology is the best I can offer, as what is done is done -- Sorry! If you or anyone on your team is ever in Boston I'll gladly buy you a beer!
Re:Show HN: Like The Onion, But Real by deelowe on Friday February 22, 2013 @12:44AM (#5262937)
You might want to at least fix the font thing. Sounds like you could get in a lot of trouble.
Re:Show HN: Like The Onion, But Real by slifty on Friday February 22, 2013 @06:58AM (#5263819)
I'll be looking into it -- if it is copyright infringement I believe this is fair use (parody, non-profit, academic, etc.). If it isn't fair use than this is actually a really interesting part of copyright law (e.g. using a premium font will make it more difficult for others to perform satire on your work).
Re:Show HN: Like The Onion, But Real by deelowe on Friday February 22, 2013 @08:02AM (#5264020)
I'm not a lawyer but I think it only would be parody if you were parodying the font itself. As the onion guys said, they had to license it.
Re:Show HN: Like The Onion, But Real by slifty on Friday February 22, 2013 @01:48PM (#5265854)
It is totally possible! Anyway, fonts have been removed in the name of being on the safe side.
Re:Show HN: Like The Onion, But Real by 18pfsmt on Thursday February 21, 2013 @10:26PM (#5262384)
I'm sorry, but as an actual member of this community, I find your objections a bit ridiculous. I, personally, keep everything I do on my local network, but I like it when people do these "Show HN" pieces.

It's almost as if you are personally paying out for the extra bandwidth this little project has caused for The Onion. This is not a commercial project, and most of the HN community is just messing around with tech to see how it works. Sometimes, people have the balls to show others, and I appreciate it. What I don't really care for is people who sign up and bitch about the derivative products of others on the basis of Intellectual Property.

My advice: Just ignore HN

P.S. I will help to compensate you for any personal financial hit you take.

Re:Show HN: Like The Onion, But Real by sp332 on Thursday February 21, 2013 @09:23PM (#5262125)
Regarding fonts: it's not the Onion you really have to worry about, but the actual owner of the fonts. That's who is going to come after you for copyright infringement.
Re:Show HN: Like The Onion, But Real by unclebucknasty on Thursday February 21, 2013 @07:14PM (#5261624)
I hear you and I applaud just about anybody who builds just about anything.

But, it should never be a step (baby or otherwise) to completely take someone else's work. It's one thing to take cues from them. It's another thing to literally take their code without permission, even if it is "only CSS". That is really, really poor form from the start.

If you don't think so, then try asking The Onion if they mind. Then you can have a clear conscience.

But, if you are unwilling to even ask, well, then you really don't have to. You already know it's not cool.

BTW, good luck with it.

Re:Show HN: Like The Onion, But Real by slifty on Thursday February 21, 2013 @05:52PM (#5261157)
Well, the big concern is that those look like cache files, which means they could just go away at any second. In the rush to launch I didn't care, but I should be more careful / make the change before that link just dies.
Re:Show HN: Like The Onion, But Real by kansface on Thursday February 21, 2013 @09:44PM (#5262210)
They can trivially swap out that file for their choice of stuff you don't want on your website. They can do it for every 1/1000 requests so you don't know wtf is going on. They can use the host header to only do this to your website. They can simply delete it and your content is gone.
Re:Show HN: Like The Onion, But Real by slifty on Thursday February 21, 2013 @05:35PM (#5261026)
Can't argue with ya' there.