logoalt Hacker News

smusamashahtoday at 10:09 AM2 repliesview on HN

This could become/converted to a userscript making it easy to inspect and more cross compatible. It's very easy these days.


Replies

imirictoday at 11:10 AM

To be fair, the .xpi is just a .zip file, and the JS isn't minimized.

I vibe-converted it to a userscript[1], but it doesn't work for me in qutebrowser because it depends on profile data fetched from `https://hn-trustspark.com/alltrust.json`, which seems to be periodically updated by the author, and qutebrowser has limited userscript support. :(

It could probably be worked around by fetching the data externally, but I don't want to depend on hn-trustspark.com. It would be great if the profile updating tool could be published as well.

Anyway, hope it helps someone else :)

FWIW, after a quick review of the script, it looks safe to me. As long as you trust that the served profile data is correct, and don't mind leaking your IP to it.

Great idea and kudos to the author! We need more tools like this to help us deal with spam, and not just on HN, but everywhere.

[1]: https://gist.github.com/imiric/a5d1cd187e91eb0b725c4661250e5...

show 2 replies