News for hackers. Stuff that matters.
Re:Show HN: Like The Onion, But Real by nitrogen on Thursday February 21, 2013 @10:09PM (#5262305)
If the Onion chooses instead to configure their web server to serve the bits to anyone who asks for them, people should feel free to ask for them.

But it's not "people" asking for them, it's one specific site causing browsers to ask for them unwittingly. Embedding images is less egregious if attributed correctly, but still discourteous and possibly a violation of copyright unless it is encouraged by the site.

However, hotlinking CSS is essentially copyright violation (for lifting the design wholesale, essentially creating a derivative work). There is simply no excuse for not writing and hosting your own CSS.

As the others have said, when hotlinking/embedding, you are profiting from another system's bandwidth and storage resources. Why don't I just hook up your water tap to my house? You should have put a lock on it if you didn't want it to be used for that purpose.

I must point out that hijacking resources from another server is in strong contrast to scraping for personal use, whitehat research, etc. It's one thing to send arbitrary HTTP requests to a server that will answer them. It's another entirely to cause others' browsers to do so without permission, especially in a way that is not explicitly announced and attributed, or accrues to your benefit at the other server's expense.

Re:Show HN: Like The Onion, But Real by marssaxman on Friday February 22, 2013 @12:07PM (#5265261)
It cannot be a violation of copyright, since no copy occurs. Site A tells browser B where to find a resource on Site C. Site A sends zero bytes of the actual resource to browser B. Site A does not have a copy of the resource. Instead, the resource continues to live on the server under the control of the copyright holder. Browser B then contacts site C, asks for the resource, and site C voluntarily sends those bits. There is no on server A, server A does not transmit a copy to browser B, and therefore there can be no copyright violation.

It doesn't make any sense to me to get all worked up about "rude behavior". The internet is full of people who want to break into your box and take over your system. If you have a server facing the internet you have to expect that people are going to be ruder than you ever dreamed possible, and they are going to do this all the time. Complaining about it won't change anything; just fix your server so it doesn't do things you don't want it to do. I understand that there's this whole big social thing about "hotlinking" which has grown up now, and I've heard all the reasons people use for it, I just look around at the state of the internet and think it's a trivial thing to worry about. Just fix your config and get on with life. Browbeating someone else for using resources which are advertised and provided to the public for free seems like an amazing waste of time.

Re:Show HN: Like The Onion, But Real by nitrogen on Friday February 22, 2013 @01:57PM (#5265929)
A complex society relies on people avoiding stepping on one anothers' toes. You can't always rely on the Refer[r]er header to block access to resources, either.

Just don't freaking do it. It pisses people off to no productive end (as opposed to personal scraping, whitehat access, etc., which also piss people off, but serve a useful purpose).

Also, copyright provides more rights to creators than just restricting copies and distribution. There are also public performance rights, which I would argue are violated by embedding another site's resources into your own site without permission.