It's a nice idea, but I have mostly stopped using/installing any software that is not open-source a long time ago. So, please open-source it, especially if you want users to truly trust it.

Even then, I would recommend anyone to install (small to mid) browser extensions by cloning and inspecting the source and just then loading it yourself - if you don't know: any browser extension can read input/password fields across all site(s) you gave it access to (yeah, it's crazy but unfortunately true).

▲

smusamashah 5 hours ago | parent | next [-]

This could become/converted to a userscript making it easy to inspect and more cross compatible. It's very easy these days.

▲

imiric 4 hours ago | parent | next [-]

To be fair, the .xpi is just a .zip file, and the JS isn't minimized.

I vibe-converted it to a userscript[1], but it doesn't work for me in qutebrowser because it depends on profile data fetched from `https://hn-trustspark.com/alltrust.json`, which seems to be periodically updated by the author, and qutebrowser has limited userscript support. :(

It could probably be worked around by fetching the data externally, but I don't want to depend on hn-trustspark.com. It would be great if the profile updating tool could be published as well.

Anyway, hope it helps someone else :)

FWIW, after a quick review of the script, it looks safe to me. As long as you trust that the served profile data is correct, and don't mind leaking your IP to it.

Great idea and kudos to the author! We need more tools like this to help us deal with spam, and not just on HN, but everywhere.

[1]: https://gist.github.com/imiric/a5d1cd187e91eb0b725c4661250e5...

	▲	defrost 3 hours ago \| parent [-]
		It's a good idea, provided nothing sketchy goes on either now or in a future update ... I'm playing about with it but will likely unload it soon enough. One issue: New accounts with Zero submissions get a full green stack for "Submission Trust" (0 submissions in 0 days). That comes across as three flat red lines and a singl tall green stack - not sure if that's the right message. Submissions is an odd one ... those people that submit a story seen on the tech blogs once a day get bucketed together with habitual spammers of poor quality posts.

▲

5 hours ago | parent | prev [-]

[deleted]

▲

password4321 4 hours ago | parent | prev [-]

Wow "trust as in trust me bro", thanks for the heads-up. Only Y Combinator is allowed that level of access to HN karma metadata right now; what a gold mine.