Spyke

Replies

Comment on

The Spy Pixel problem

Reply in thread

You actually can prevent this easily with CSP (content security policy). That header tells your browser which adresses it is allowed to load additional data from when visiting your site. It is an important tool to prevent cross-site scripting attacks, your browser should not load data from random sources when it is on your site.
Of course you would have to funnel all inline images through a site-local proxy that the browser is allowed to load data from.

This also has not only security implications, but also with the GDPR. Some jurisdiction consider ip addresses as personal data. Sending them to e.g. the US without user consent would be a violation. I know it is stupid to consider ip addresses as personal data and it is stupid to consider a browser loading data as sending that personal data somewhere on the sites' behalf. But there is a reason why a lot of websites for example only embed tweets after you explicitely allow it.

Comment on

*Permanently Deleted*

Reply in thread

There is no guarantee that the delete request reaches all other instances as there is no kind of synchronisation protocol. If that delete request never reaches the other instance for whatever reason, the post stays online.

Comment on

How come there is very little Kbin SEO for individual posts? Also, what are tags/badges?

Reply in thread

🤷‍♂️
It is just a decision that every instance owner can make for themselves (if they are aware of it).

It will be a huge headache for search engines anyways, all posts are basically replicated across all instances and look local to a search engine. So for a single post it will have hundreds of copies in its database and probably outputting all of them as results (for now).

You reached the end