Show HN: A stupid simple note app · shard-db HN Explorer

Just created http://www.txtbox.co/default

What could go wrong?

How long until an enterprising scumbag tries to use this to communicate with their botnet?

It's already been done with Twitter/Tumblr[1] -- anyone know if it's been done with pastebin or any other login-free online note app not protected by a decent CAPTCHA? I'm genuinely curious!

[1]http://ddos.arbornetworks.com/2009/08/twitter-based-botnet-c...

skylarsch 13y ago ↗

I hadn't really thought about it. Threw this together in an evening.

Right now I'm not concerned just because it's not very popular. May have to think about adding some kind of check in the future.

crowdis 13y ago ↗

I guess you could use a CAPTCHA in lieu of a login when someone first creates a note.

skylarsch 13y ago ↗

Not really a fan of CAPTCHA. May have some kind of "How many kittens are in the picture"

Wingman4l7 13y ago ↗

That would be http://research.microsoft.com/en-us/um/redmond/projects/asir...

There is also one where you assemble a puzzle: https://www.keycaptcha.com/

They have varying levels of handicapped accessibility though.

skylarsch 13y ago ↗

Thanks. Honestly I'm not that concerned about it. If there is a sudden mysterious spike in traffic I may look into it.

Wingman4l7 13y ago ↗

Oh I doubt you'll have to worry about it, it just got me thinking. Botnet operators will likely only experiment with bigger note-app websites that have been around for a while and which have legit traffic to hide their activities.

Wingman4l7 13y ago ↗

Looks like pastebin has been abused in such a manner, just Google "pastebin botnet".

crowdis 13y ago ↗

Interestingly enough, Macgasm just posted something similar to TXTBox.co http://www.macgasm.net/2013/01/29/tip-turn-browser-tab-into-...

crowdis 13y ago ↗

Handy in-browser text box...but it's not as nice to use. You know better than me how it works differently.

Show HN: A stupid simple note app (txtbox.co)

12 comments