Hacker News Reader

I have the same philosophy. I have, over the last couple of years, stripped Javascript and other external assets from my site. First I removed Disqus from my blog, because Internet comments are a cesspit anyway. Then I removed Google Analytics because the tracking outweighs the benefits. Then I removed an externally-loaded font. I finally figured out the last thing, a little bit of JS that Cloudflare was injecting to obfuscate my email address. I contemplated just getting rid of Cloudflare because fucking with my webpage content is pretty bad, but instead opted to disable the functionality.

I kind of miss analytics but I don't want to force my readers to run Javascript just to satisfy my curiosity. I can go through my logs if I want to see how many people read a page.

My old wordpress blog got so few legitimate comments that I never bother to add a commenting system into my new software. Even when a post got hundreds of reads due to being linked on slashdot or whatever, very few people left comments directly. Perhaps I just have nothing interesting to say.

If you add Disqus then you are just effectively letting other people make money off your content and if anyone makes money off my writing it should be me. I figure if anyone wants to tell me something about my posts they can contact me in many other ways.

Plus, even if I loved Disqus (and it is pretty sweet if you want that functionality), who knows if they are going to be operating in 5 years time? They could go under or get bought out by someone who plasters ads everywhere. Then it is bye-bye to years worth of content in the comments.

Much better, I think, to be responsible for hosting everything your users will see, even if it means forgoing some of the nice functionality third-parties can provide.The cost-benefit ratio just isn't favorable.

I considered obfuscating my email address but I couldn't remember the last time spam actually hit my gmail inbox.

> I kind of miss analytics

If you have access to your webserver's access log:

http://www.awstats.org/

http://www.webalizer.org/

> I kind of miss analytics

piwik.org is free software, can be self-hosted.

"I went a step further and designed my blog (https://sheep.horse/) not to use any third-party resources at all. This was easy for me because I am never going to make money from my ramblings about Rogue One or the last book I read."

We (Oh By)[1] did this as well - the difference being that there is probably a fair amount of money we will miss out on in the coming decade by making this decision.

It's an attack vector, it's user hostile, it's slow, it's fragile and it supports an industry that has only degraded the promise of the Internet.

It makes me happy to run a service that doesn't touch it at all.

[1] https://0x.co

> New version of that CDN'ed Javascript library does something you don't expect? Your fault.

That's what the "integrity" field is for. If the CDN tries to change the file surreptitiously, it'll have a different checksum and the browser won't run it.

True, that is a step in the right direction. Ideally that would work for any resource - fonts, images, etc.

> When you serve a page to a user, you are responsible (morally and legally) for what happens on the user's computer. Ad network serves up malicious code? Your fault.

Morally, absolutely, but has it been tested legally? I can see sites weaselling out by saying that they trusted their ad networks to do good, etc, etc, and nobody learning from it.

As far as I know, it has not been tested legally but I would hate to be the defendant as the plaintive's lawyer displayed a screenshot of the page that damaged their client's computers with my URL displayed at the top.