Hacker Newsnew | past | comments | ask | show | jobs | submit | ryu2k2's commentslogin

>syndicate elsewhere

That's almost a job in itself because you have to constantly make sure not to get shadowbanned. This is probably only an option for people who already use "social media" sites in the first place. Putting a link to your site in forum signatures was the way to go. Unfortunately, forums are 99% dead.


Why would you get shadow banned? You think the format or backlinks would trigger bot detection systems?


I made an account on twitter/x specifically to promote my site at some point. I was shadowbanned by default and had to follow other people, like and share their posts and comment on other's post just to get my own posts to show up on people's feeds. When I checked again at some later point I was shadowbanned again.

When I tried reddit I also noticed that I was shadowbanned by default and didn't even bother to do anything about because I assumed it would turn out the same way. Like I said you can use those sides to get the word out, but only if you're actively using them as a user to begin with.


The point of POSSE isn't just to blast every piece of crap you do everywhere with an automated system - those should be (shadow)banned

Think of it more like oldschool blog replies. Instead of replying with a 1000 word twitter message, post your answer on your blog and reply with a summary + link to your site instead.

But ALL social media sites downrank posts with links, that's why the "link in comments" shit is so common... They do not want you leaving their algorithmic feed to read stuff elsewhere.


Don't worry. The time when our computers will be locked down the same way will come in our life time.


I built mal for videogames too over 10 years ago. A friend also did individually. And I know at least 5 other sites that are "mal, but videogames" or have similar features.

Imo the concept is a waste of time until there are APIs for each console/store to fetch user data and automate libraries. Most users don't bother and the few that do already have accounts spread on like 10 different sites for this kind of thing. Personally these days I just keep csv files of my collection and play history and turn them to HTML via a ssg.Turns out that I don't need anything more than this.

But good luck!


Thanks! I understand where you're coming from, when we launched the first open beta we honestly didn't have any feature that we could use to argue "hey, you should use this instead!".

I personally think there's a overlap between people willing to manage their anime library, and people willing to manage their gaming library. Both have tons of options, and most will choose none.

But take MyAnimeList, for example: A mainly English-speaking audience, so we could assume most users are either using Crunchyroll/Netflix/Hulu, or the hundred possible options for piracy. But they still come back to update their profile in MAL every once in a while, despite all the options they have - and we have users which do exactly that too. We're trying our best to offer a solid management experience (e.g. mobile users may press and hold in any cover to manage a game, and desktop users have that directly at hover, and other QoL), and offer features on top of that. Our PSN and Steam integration are very recent, we only launched them ~8m in, and so is our mobile version. All of our users are basically early adopters, but they still log-in once or twice a week, and our only way of changing that is offering more reasons to stay online. That's why we're also building social-related stuff, like the Posts system, the reviews, and etc. We think users are way more likely to stay with us if they can interact with other people. This is kinda what Anilist is doing too.


The new layout, putting attached images and videos on the index, ruined Reddit forever. I recently went there to see what thoughts people on there had on a specific subject, only to find nothing but a stream of meme and social media posts. You really can't call it a forum anymore.


I only have an X account and got no censorship for #fucktrump


Honestly, I barely understand how Firefox's cookie protection works anymore. It used to have the simple option to block third party cookies that I had running all day and felt good with. That was until they started becoming necessary in certain scenarios (I can't even remember the details of what that was).

And then these days I have no idea if I can just accept a website's advertising cookies and expect Firefox to block them anyways, or if clicking on such a button would disable the browser's tracking protection.


IIUC the main difference is that third-party cookies are not blocked, but scoped to the top-level domain.

So if you visit games.example which loads tracker.example it can set cookies. However these cookies are only used while you are on games.example. If you start browsing comics.example which also loads tracker.example it will start with no cookies, but can set cookies that only affect comics.example.

This way cross-site cookies can still be used for auth, experiments, spam protection or whatever else. But you can't do cross-site tracking as each top-level site had a separate cookie jar.


For a long while, google drive on the web would simply refuse to do anything unless you had 3rd party cookies enabled. I'm sure on purpose.


You were on drive.google.com but any files you wanted to download were on googleusercontent.com which needed auth cookies. So downloads didn't work, and neither did playing videos.

You could dodge around that with 'open in new window' but it was a pain in the ass. I think they've fixed it recently.


For me at least the whole thing could be solved with a change to the cookie management panel. Let me mark cookies(domains) I want to keep, stuff where I do want to stay logged in, and then set it to clear all unmarked cookies at the end of the session.



The most common scenario I can think of is needing to login through a third-party gateway on a first-party site. This is now broken with mainstream browsers, and you need to find another way to do the same thing. I'm not sure what people are doing now, because you can't retain state.

I had my clients just enable it on the browser.


OAuth. You open the login page in a new window with a callback URL. The third party service adds a token to the callback URL, which authorizes you to retrieve the real auth token from that service.


I've never seen OAuth replace the scenario of a first-party site allowing user generated content that can embed a third-party site authentication flow. Are people using OAuth for that?

I've only ever seen it for explicitly supported authentication flows by the first-party site.


The flow is supported by the first party, but the login goes through a third party gateway which sends a token to the callback uri.

I think the previous poster was responding to this:

“I'm not sure what people are doing now, because you can't retain state.”

They do OAuth.


That's not what I'm talking about. I'm talking about scenarios where the authentication flow is not explicitly supported by the first party. It just exists through an iframe.

There is no replacement. It's just not possible anymore. OAuth doesn't address this.


Yes, that's right. You can't steal credentials from another site without their permission.


No... that's not how that mechanism was ever used. The authentication flow I'm describing was used by companies to embed login flows for functionality that was delivered by iframe as companion behavior next to the first-party site.


OAuth. If you take Google as example, You let them sign in with Google through OAuth and then query the user data through the APIs. On-behalf-of/authorization code grant flow.

You can’t do an iframe, but you can still get the data if it’s supported by their api and yours.

Which is the way it should be, imo.


A few years back SO used to be the common top result for my search queries regarding tech and development. I'm not sure when the shift started, but these days it's always a list of content farm links with maybe a link to SO somewhere in between.

The result for me was that I started to rely much more on documentation and writing down notes of stuff I found myself looking up a lot. I never used SO directly for looking up stuff, always relied on search engines, and as they declined in quality I just stopped visiting SO almost alltogether.

I imagine I'm not the only one with this story. Considering users also abandoned the site for LLM assistans and the strict moderation on there, I'm not surprised it is in heavy decline.


I think you just described the fall of Google, not anything to do with SO directly.


Sounds like you're proposing the Matrix. No thanks.


This is not new. People are getting cured from anxiety disorders using VR all the time. E.g. arachnophobia, fear of flying.


We did. As can be inferred from the title alone.


Sucking the carbondioxide out of the atmosphere doesn't seem to be a feasable plan, considering how vast earth's atmosphere is. My growing feeling is that we are long at the point where we need to start putting heavy restrictions in place to avoid desaster. Carbon capture technologies are already in development, but that alone isn't good enough to avert the coming crisis.


I don't disagree but what is the point of single countries putting restrictions in place while developing countries continue to rely on burning carbon? It would handicap the economies of some while others just carry on. As those countries develop they are going to burn more and more carbon. Those developing countries also have massive populations, they will not intentionally handicap their growth while others have already benefited.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: