[HN Gopher] Show HN: Use Slack Emoji on GitHub
___________________________________________________________________
Show HN: Use Slack Emoji on GitHub
Author : schniz
Score : 22 points
Date : 2022-11-14 21:18 UTC (1 hours ago)
(HTM) web link (single-emoji.vercel.app)
(TXT) w3m dump (single-emoji.vercel.app)
| codetrotter wrote:
| Hey, if you make a similar extension for HN we could start using
| emojis in comments :pepe_dab:
|
| It'll be like BetterTTV but for HN :catjam: :meow_party:
| steventey wrote:
| This is absolutely brilliant.
| awinter-py wrote:
| > All you need is to have the Single Emoji browser extension,
| which connects to your Slack workspace and enables you to use
| your favorite Emoji on your favorite tools, by making the
| smallest patches possible to how these tools work. Nothing too
| fancy, nothing too suspicious.
|
| all you need is to connect random javascript to a major channel
| for social engineering and then run it inside major channel for
| software supply chain risk
| eyelidlessness wrote:
| I mean, you're not wrong, but I'd bet the Venn diagram of...
|
| - people who use both a Web Extensions-supporting browser and
| Slack
|
| - people who install extensions with permissions to run
| arbitrary JS on every page
|
| - people who install or use Slack bots/etc with excessive
| access to Slack data
|
| ... is likely very nearly a circle. The emoji use case isn't
| one for which _I'd personally_ take that combination of risks.
| But I can imagine a wide variety of more appealing /risk worthy
| and likely even higher risk "use [CLOUD_SERVICE_FOO_RESOURCES]
| seamlessly in GitHub" use cases where I'd pause to at least
| consider it.
| madeofpalk wrote:
| > - people who use both a Web Extensions-supporting browser
| and Slack
|
| This is just basically everyone using Slack, as Firefox,
| Chrome, and Safari support web extensions API
|
| > - people who install extensions with permissions to run
| arbitrary JS on every page
|
| I would bet that most people who use Chrome or Firefox
| install extensions that can run arbitrary JS on every page,
| like ad blockers, full page screenshot, or "nifty" discount-
| coupon-code extensions.
| awinter-py wrote:
| yes -- browser permission model needs to be much more
| granular
|
| would be great if something like ublock is only able to
| disable dom elements, not insert them, for example, and has
| strong guarantees about not doing IO
|
| users are much more able to audit permissions than to audit
| changing code
|
| but permissions need to be 'shaped like' APIs or else they
| are too broad to provide power + safety together
| netsharc wrote:
| Back during the Yahoo and MSN chat days (remember Windows
| executables?), there were also "Download custom smiley packs"
| ads all over the Internet. I never tried them because they were
| probably malware. I have the same skepticism for this
| extension, or how easy extensions auto-updates can turn it into
| one.
|
| Are the other responses in here non-ironic?
| schniz wrote:
| Hey there! I plan to open source this soon so the source will
| be available and you can read it. It is really doing nothing
| but adding the emoji to GitHub.
|
| But I understand that the shadiest people say they are legit,
| so I'll prioritize open sourcing the extension so others can
| review it :) sounds good?
| layer8 wrote:
| But it gives you custom emoji!
| vallanceroad wrote:
| Does this work for others not running the browser extension (or
| outside of your Slack organisation)? Also, Emoji has been part of
| Unicode for more than a decade...
| schniz wrote:
| Yes, your custom emojis will turn into images anyone can see.
| See:
| https://github.com/Schniz/fnm/issues/847#issuecomment-131372...
| Kikobeats wrote:
| It works like a charm, just :wow:
| keybored wrote:
| Just :pinched_fingers:
| javivelasco wrote:
| Just beautiful
| [deleted]
___________________________________________________________________
(page generated 2022-11-14 23:00 UTC)