HackerFollow: Follow HN Users
hackerfollow.com
hackerfollow.com
Message: MySQL Query fail: SELECT * FROM follow WHERE user_id = MySQL Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1 Date: Wednesday, October 6, 2010 at 8:53:41 AM Script: /index.php Referer: http://hackerfollow.com/
Great idea, though!
Clicked from the news item here, entered a pass phrase (it's a secret, I'm not telling you!) and clicked the sign in button.
Screen cap: http://i.imgur.com/rBx5l.png
Since we have all had years to figure out how to manage logins across many different sites that do not coordinate, we've all solved this problem in one way or another, but the solutions are based on finding efficient ways to manage userid's and passwords.
Mine for example is that I use a set of three userid/pwd pairs. Pair 1 is simple userid/simple pwd, for throwaway accounts I don't care about. Pair 2 is moderately complex userid/pwd for sites I use frequently but could afford to lose/be hacked/whatever. And Pair 3 is highly complex userid/pwd for online banking and other secure things that need the highest penetration barrier.
Since I can easily keep three in memory and apply each one based on how I categorize the website in question, I never forget my logins to any websites, no matter how frequent or infrequent I use them. Nor do I ever have to write down or otherwise record my login info, anywhere, since it's easy to remember just three. Further, if one my lower level userid/pwd pairs is cracked, it doesn't compromise the critical one.
For your site I would have simply use Pair 1 or 2, problem solved. However, your pass phrase method presents a problem - I can use one of my passwords in plain text, which I'm obviously not going to do, or I can think up some pass phrase that is unique to your site, not part of my system, and hence easily forgettable.
I have no idea what other systems people use to manage their logins across the tons of websites in use these days, but I'd suggest relying on your users (especially since they're 100% savy HN users) to have already solved this login problem. Leverage their solutions by using the norm. Or use OpenID, which is another solution to this problem.
The "come up with a secret phrase" thing is a nice idea, but I must've sat for 10 seconds trying to work out what was actually being asked for, and then I had no idea what phrase I could use that I wouldn't forget, but that nobody else would have chosen.
Yes, if you do it right the chances are slim. And perhaps it doesn't matter because there isn't any sensitive data.
Or are there smaller chances of that happening if you separate the login data into two different parts, like username and password?
Is it just a psychological difference, or is there something more there?
That being said, if you were to enforce that the first half (or some undisclosed portion) of the secret phrase couldn't be taken, then you'd be closer to comparing apples to apples.
The larger the password and the more obscure the password means that chances grow smaller of someone else choosing it but that doesn't mean everyone uses large and obscure passwords.
Make it easy to add users from the stream page.
I'm usually in an 'open' mindset when I think of hacker news. HackerFollow enforces a 'closed' mindset; I only see stuff from those I follow. Can you leaven the stream with suggestions like somebody else asked on this thread?
I could see myself using this.
In addition, an aggregate RSS feed of higher ranked HN'ers would be neat.
And clicking on the following without specifying a user to follow first ("logging in") doesn't work: http://hackerfollow.com/?filter=devmonk but as soon as a specify a user ("log in") it works. It should just work if it is essentially public, imo.
the "follow" page lists most followed users. How about adding a section to show who, outside of the top 10-15, has gained the most new followers over the last week or so? (Obviously this is more meaningful once the service has been running for longer than a week.)
This would give us a way to be introduced to up-and-coming users.
EDIT: also, the "most followed" page currently has a user (osuburger) who has 1 karma, 0 posts, and 0 submissions. Already being gamed?
Read insightful comment › Click username to profile › Click HackerFollow link
Alternatively, the best solution (though much more time-consuming to implement) for in-context following would be a browser extension that adds an HF link next to everyone's name.
/threads is not polite to robots.txt, so discussion.rb is deprecated.
Not that there are any annoying people on this site.
Gorgeous implementation!
Just followed a user who doesn't exist.
Deleted comment
See this posting: http://news.ycombinator.com/item?id=1764815
-probably secret phrase should not be clear text in the entry box..