comntr

6 ms·

1.
by comntr 7y ago
That's what I'm trying to test. Last time I've got 800 mostly meaningless comments. The idea is to stop numerous zergs: you can't ban them one by one, but a little bump on their way can do the job. To avoid annoying more
2.
by comntr 7y ago
The captcha is basically a question to add two 2-digit numbers, e.g. 23+45. The question is returned as an SVG picture. The hypothesis is that the need to engage brain even for 3 seconds is enough to stop 99% of the spammers, so the quality
3.
Show HN: Comntr captchas – a stateless service to stop spammers(comntr.github.io)
5 points by comntr 7y ago|4 comments
4.
by comntr 7y ago
And just rendering to canvas may be very tricky if the captcha is animated with css, i.e. it moves a bit and different parts of it appear at different times.
5.
by comntr 7y ago
The catch is that the text will be represented as small geometric svg shapes, so the spammer will need to first render the svg to png and then run text recognition tools. But in that svg we can easily add some css animations that make sure
6.
by comntr 7y ago
That's true when we talk about 10M monthly pageviews, but I doubt that this little extension will reach such popularity levels. If this somehow happens, by that time there will be a way to enable 3rd party captchas for any page.
7.
by comntr 7y ago
Yes, this is how it works: comntr.github.io# http://foobar.com/
8.
by comntr 7y ago
I think, "comntr" is more like "integrated 3rd party" that can be run like a self hosted solution.
9.
by comntr 7y ago
Can you elaborate on those one word answer questions?
10.
by comntr 7y ago
That's right, I haven't. The puzzle will be sent as an SVG, obviously. Em.. "off-the-shelf OCR" sounds neat, but anyone who knows such words isn't an average spammer. The goal of basic SVG puzzles is to block 99% of
11.
by comntr 7y ago
Done: https://github.com/comntr/comntr.github.io/commit/af35
12.
by comntr 7y ago
You can git clone and launch your web client too.
13.
by comntr 7y ago
Or rather time-delay moderation, as it's easier to implement. Comments are added to the server as usual, but the web client shows them only after 1 hour.
14.
by comntr 7y ago
I think most of the spammers can be deterred by a simple puzzle, like 23+47. If we want to raise the bar, we make the puzzle more and more complex. Obviously, the puzzle is returned as an svg picture where the letters are "rendered&quo
15.
by comntr 7y ago
That's right. My first attempt was to use IPFS or DAT. Figured out it's not quite possible, but we can get very close to that, in theory. Imagine the extension or the iframe could run a ipfs.js or dat.js that would discover all th
16.
by comntr 7y ago
Yea, I missed the obvious one!
17.
by comntr 7y ago
Also, it's already possible to have your own comntr server: you just need to git clone the comntr/http-server repo, npm install & npm start it, and tell the iframe to use your server with ?srv= https://foobar.com:427
18.
by comntr 7y ago
My first post about the web extension idea got some interest (and almost 150 stars on github!), so I've made the next logical step: an <iframe> that renders the comntr.github.io page and effectively adds comments to your page. Th
19.
Show HN: Comntr – a widget that adds comments to your page(comntr.github.io)
84 points by comntr 7y ago|49 comments
20.
by comntr 7y ago
Easily. Open source merely means that the source can be seen by anyone. It doesn't mean that readers of the source have any say in how to run the browser.
21.
by comntr 7y ago
I'd expect some ML stuff, like training some models, etc. Such comments in raw form hardly have much value. What adtech usually pays for is data pinned to user ids.
22.
by comntr 7y ago
Comments can be seen like this: https://comntr.github.io#http://contoso.com/ The trick is that the #... part of the URL isn't sent to the server. This request downloads JS which computes SHA1 and gets comment
23.
by comntr 7y ago
The space of possible reasonable URLs is way too big to brute force. If your point is that someone can just grab the set of existing HN URLs and get their heashes, then I don't see what this achieves. Someone who knows the URLs can jus
24.
by comntr 7y ago
Looking at comments for example.com, I understand why they want human moderators.
25.
by comntr 7y ago
But if you click on it, it will have access to all your data? There is no in between: either no access until you click or full access when you click. This can be done already: javascript:location.href=' https://comntr.github.
26.
by comntr 7y ago
Ah, right, I forgot to add basic html escaping!
27.
by comntr 7y ago
Comments under example.com already give a good idea what it will look like when everyone will start posting comments in public places.
28.
by comntr 7y ago
Not right now. But I'm hoping to come up with an equivalent of captcha that doesn't need 3rd parties. That way any comment will need a few seconds of the commenter's time (not CPU time).
29.
by comntr 7y ago
Isn't bookmarklet just a script that runs on the context of the current page when you click on that bookmark? If so, the script has all the access to your data. It can steal your auth cookie or some keys from the local storage and se
30.
by comntr 7y ago
Yes, they can be.

More ›