Hacker News Reader

Comment by sravfeyn | Hacker News Reader

I was impressed with the idea in the video, I have signed up, and tried to clip a picture on Quora with Chrome plug-in. I selected rectangular area. Alas, my clip is empty on Clipboard.com :(. You lost a user.

View on HN

I'm sure they have bugs still to work out and that they have plenty of users who find enough value out of what they're building as to not be so easily deterred.

Although you were impressed, clearly you don't actually value the service highly (as I don't think there is a similar service that performs better) so I don't think they lost much.

For me it was the fact that it did not work without third party cookies.

Hi - you can add an exception just for clipboard.com, not for all sites, which is what I did.

Here's the thing ... we don't actually need 3rd party cookies. However, in most browsers you need to have 3rd party cookies enabled in order to read client local storage (not a cookie!) within an iframe that's in a different domain. We so this to digitally sign the API calls so that malicious 3rd party sites can neither spoof nor read the shared secret used for the digital signature.

So the irony is that we make our API calls digitally signed (more secure) but to do so from the context of a bookmarklet you have to enable 3rd party cookies because browsers bundle that switch to the capability that we really need (i.e., there is no "enable loading of cross domain iframes that can read client local storage securely" option because its unfortunately pairs with 3rd party cookies).

Reply on news.ycombinator.com