5 ms·

Show HN: Use Slack Emoji on GitHub

48 points by schniz 4y ago

3np 4y ago
Given enough users, you'll have interesting statistics and metrics forming. What are you going to do with this? Might visitor IPs (viewers of Emoji inlined on GH, that is) be processed/retained?
- andrenotgiant 4y ago
  No, Github proxies and caches images through an intermediary (probably for privacy reasons amongst other things.)
  - 3np 4y ago
    I stand corrected, you're right! So seems to be 0 privacy concerns for viewers, here. GH also seems to use the data-canonical-src attribute to reference the original URI.
steventey 4y ago
This is absolutely brilliant.
Kikobeats 4y ago
It works like a charm, just :wow:
javivelasco 4y ago
Just beautiful
awinter-py 4y ago
> All you need is to have the Single Emoji browser extension, which connects to your Slack workspace and enables you to use your favorite Emoji on your favorite tools, by making the smallest patches possible to how these tools work. Nothing too fancy, nothing too suspicious. all you need is to connect random javascript to a major channel for social engineering and then run it inside major channel for software supply chain risk
- netsharc 4y ago
  Back during the Yahoo and MSN chat days (remember Windows executables?), there were also "Download custom smiley packs" ads all over the Internet. I never tried them because they were probably malware. I have the same skepticism for this extension, or how easy extensions auto-updates can turn it into one. Are the other responses in here non-ironic?
  - schniz 4y ago
    Hey there! I plan to open source this soon so the source will be available and you can read it. It is really doing nothing but adding the emoji to GitHub. But I understand that the shadiest people say they are legit, so I’ll prioritize open sourcing the extension so others can review it :) sounds good?
    - jrockway 4y ago
      That is a nice thing to do, but I think people will still be hesitant because there is no way to know whether that code you open-sourced is actually what's in the Chrome Store, or that the Chrome Store listing won't change ownership in the future. (Chrome extensions auto-update, so it's easy to ship users code that does something "new and exciting", and when dealing with software supply chain risk, "new and exciting" is something many people don't want.) I get that you just wanted to make something cool, and it is very cool, but people are also right to be paranoid here. Compare the value between having a certain tiny image in your PRs versus being able to check code into any organization's Git repo as a trusted engineer at that organization, and how much someone would pay you on the black market for either of those things.
      - hirsin 4y ago
        Not to mention that even the data being requested and stored is also organizationally sensitivite if leaked. Everyone's got some problem customer emoji or frustration with their cloud provider in there, which maybe wouldn't look great externally.
  - 4y ago
deleted 4y ago
[deleted]
vallanceroad 4y ago
Does this work for others not running the browser extension (or outside of your Slack organisation)? Also, Emoji has been part of Unicode for more than a decade...
- schniz 4y ago
  Yes, your custom emojis will turn into images anyone can see. See: https://github.com/Schniz/fnm/issues/847#issuecomment-1313724397 https://github.com/Schniz/fnm/issues/847#issuecomment-131372...
  - petepete 4y ago
    Oh hi. Unrelated to this tool but I use fnm every day and it's fantastic. First time I used it it ran so quickly I thought it wasn't working properly. Thanks for your hard work.
    - Raed667 4y ago
      second this, it pains me when people install `nvm` not knowing `fnm` exists and is sooooo fast
      - schniz 4y ago
        thank you! happy that you find it useful
keybored 4y ago
Just :pinched_fingers:
codetrotter 4y ago
Hey, if you make a similar extension for HN we could start using emojis in comments :pepe_dab: It’ll be like BetterTTV but for HN :catjam: :meow_party:

48 points by schniz 4y ago

3np 4y ago

Given enough users, you'll have interesting statistics and metrics forming. What are you going to do with this? Might visitor IPs (viewers of Emoji inlined on GH, that is) be processed/retained?

andrenotgiant 4y ago
No, Github proxies and caches images through an intermediary (probably for privacy reasons amongst other things.)
- 3np 4y ago
  I stand corrected, you're right! So seems to be 0 privacy concerns for viewers, here. GH also seems to use the data-canonical-src attribute to reference the original URI.

steventey 4y ago

This is absolutely brilliant.

Kikobeats 4y ago

It works like a charm, just :wow:

javivelasco 4y ago

Just beautiful

awinter-py 4y ago

> All you need is to have the Single Emoji browser extension, which connects to your Slack workspace and enables you to use your favorite Emoji on your favorite tools, by making the smallest patches possible to how these tools work. Nothing too fancy, nothing too suspicious. all you need is to connect random javascript to a major channel for social engineering and then run it inside major channel for software supply chain risk

netsharc 4y ago
Back during the Yahoo and MSN chat days (remember Windows executables?), there were also "Download custom smiley packs" ads all over the Internet. I never tried them because they were probably malware. I have the same skepticism for this extension, or how easy extensions auto-updates can turn it into one. Are the other responses in here non-ironic?
- schniz 4y ago
  Hey there! I plan to open source this soon so the source will be available and you can read it. It is really doing nothing but adding the emoji to GitHub. But I understand that the shadiest people say they are legit, so I’ll prioritize open sourcing the extension so others can review it :) sounds good?
  - jrockway 4y ago
    That is a nice thing to do, but I think people will still be hesitant because there is no way to know whether that code you open-sourced is actually what's in the Chrome Store, or that the Chrome Store listing won't change ownership in the future. (Chrome extensions auto-update, so it's easy to ship users code that does something "new and exciting", and when dealing with software supply chain risk, "new and exciting" is something many people don't want.) I get that you just wanted to make something cool, and it is very cool, but people are also right to be paranoid here. Compare the value between having a certain tiny image in your PRs versus being able to check code into any organization's Git repo as a trusted engineer at that organization, and how much someone would pay you on the black market for either of those things.
    - hirsin 4y ago
      Not to mention that even the data being requested and stored is also organizationally sensitivite if leaked. Everyone's got some problem customer emoji or frustration with their cloud provider in there, which maybe wouldn't look great externally.
- 4y ago

deleted 4y ago

[deleted]

vallanceroad 4y ago

Does this work for others not running the browser extension (or outside of your Slack organisation)? Also, Emoji has been part of Unicode for more than a decade...

schniz 4y ago
Yes, your custom emojis will turn into images anyone can see. See: https://github.com/Schniz/fnm/issues/847#issuecomment-1313724397 https://github.com/Schniz/fnm/issues/847#issuecomment-131372...
- petepete 4y ago
  Oh hi. Unrelated to this tool but I use fnm every day and it's fantastic. First time I used it it ran so quickly I thought it wasn't working properly. Thanks for your hard work.
  - Raed667 4y ago
    second this, it pains me when people install `nvm` not knowing `fnm` exists and is sooooo fast
    - schniz 4y ago
      thank you! happy that you find it useful

keybored 4y ago

Just :pinched_fingers:

codetrotter 4y ago

Hey, if you make a similar extension for HN we could start using emojis in comments :pepe_dab: It’ll be like BetterTTV but for HN :catjam: :meow_party: