Show HN: Hoist – Zapier for Developers (scripting done in Node.js)(hoist.io)
hoist.io
Show HN: Hoist – Zapier for Developers (scripting done in Node.js)
http://hoist.io/
11 comments
Thanks for the feedback! I'll check it out now.
Why do you autopick user slug to be "<first-name><last-name><user-id>"?!
it's not user id but actually just a random number. it's unrelated to your ID (which are actually more complex than just integers). The random number is there just to ensure we don't get collisions on slugs.
This is a pretty bad practice. You should use hashids [0] for this, instead!
[0] http://hashids.org/
[0] http://hashids.org/
thanks for the link, I agree it's bad practice if there's any kind of lookup/security based on the slug. We have a few other mitigations against looking up anything security wise from the slug itself. but will take it into consideration as I agree it increases guess-ability of the slugs and could leave us open in future.
It's just an eyesore. If I see some random ID, I won't be bothered, but to see my name with some suffix to it - it's ugly and not a common practice anyway. There are better ways to generate unique IDs and hashids make them pretty short as well (shorter than their numerical counterparts, I mean).
I should also add that we don't use the URL for any kind of security/lookup. we rely on other information for that. as such the aim is to give readable canonical urls to your application, much like most apps use a /{username} slug
It wiped my database clean?? WHY?? WHY??
I'm not sure what you mean by "your database" and what was wiped clean?
also you can get hold of us in app using the intercom speech bubble in the bottom right of the app. That way we can track back to your user account and see what's up.
This looks cool though.