Show HN: Profile.io - Profiles for Developers

http://profile.io

by dannyr • 15 years ago

41 48 15 years ago

profile.io

dannyr7• 15 years ago

Hello fellow HNers:

We built Profile.io as part of StartupBus.

It is currently private beta but I have invites.

You can create an account using this link:

http://profile.io/invite/HACKERNEWS

Site is pretty barebones but we will be adding more features and fixing bugs in the next few days.

Hopefully, we'll be selected as finalists for StartupBus and get to demo it on Monday at SxSW.

Thanks!

akkartik• 15 years ago

Anybody else getting anything besides "Email is not valid or empty." when they put emails in? I tried a few test ones, and nothing's getting through.

dannyr7• 15 years ago

Sorry. forgot 'not' when checking is_email_valid.

It is now fixed. Try again.

dustball5• 15 years ago

My take (dannyr and I built this) -- this is like an "about.me" but for developers. You add your GitHub account, add your programming languages, etc. And (my favorite) you add all the projects you are building -- for example when you add an Android app, it automatically links to the Android Market, pulls in the app icon, etc.

This is meant for developers to have a decent place to showcase their geek. (And the domain is cool, no?)

Thanks, love you all!

Brian and Danny @ SXSW

PS: This app was built on StartBus -- the entire site was made on a moving bus from SF->Austin :)

kmfrk4• 15 years ago

How exactly is this different from flavors.me?

forrst.me also has more traction, and they are both formidable competitors, so I'd love some great selling points.

What would make your service very, very interesting is to focus entirely on creating a presentable mix of a personal homepage and a resumé - GitHub, Stack Overflow, Codelesson badges(!), and such. LinkedIn isn't that interesting in many regards, and it'd be great if you found the key to a good resumé and used that to build your foundation on.

forrst.me is more of a social web discoverability tool, while flavors.me creates easy-to-make web presences.

phlux• 15 years ago

>...so I'd love some great selling points.

They built it while riding the bus, what more could one ask for?

m0nastic• 15 years ago

That was my first impression as well, having recently set up a flavors.me page (which includes github, and visually looks identical to their site).

I'm all for competitors in the space though, so good luck to them.

dorkitude• 15 years ago

i like it. you guys are definitely one to watch out for on #StartupBus.

hroman• 15 years ago

Tried to register but got this http://pastie.org/1661494.

dustball5• 15 years ago

Thanks for the report! We're actively coding now at SXSW :)

Bug should be fixed now :)

gm• 15 years ago

this is great... But the link to the SO user profile is broken, at least for me... Methinks a SO username is not enough to construct a link to the profile

Great work!

dannyr7• 15 years ago

yeah. you need an id at least (e.g. stackoverflow.com/user/1234)

agentultra• 15 years ago

I got a weird validation error from your form. Apparently the text field isn't supposed to accept multi-line fields?

I'm curious about the site and if it will offer any benefits over my own personal site.

Cheers

dustball5• 15 years ago

Unrelated: look who we're sitting next to :) http://i.imgur.com/RNSK5.jpg

(Angry birds just got $45m yesterday!)

mychacho• 15 years ago

Dude, I want one of these sweatshirts :)

d0m• 15 years ago

Traceback (most recent call last): File "/base/python_runtime/python_lib/versions/1/google/appengine/ext/webapp/__init__.py", line 517, in __call__ handler.post(*groups) File "/base/data/home/apps/profileioweb/1.348935554744823342/main.py", line 60, in post app = Application(email=self.request.get('email'),desc=self.request.get('desc')) File "/base/python_runtime/python_lib/versions/1/google/appengine/ext/db/__init__.py", line 815, in __init__ prop.__set__(self, value) File "/base/python_runtime/python_lib/versions/1/google/appengine/ext/db/__init__.py", line 544, in __set__ value = self.validate(value) File "/base/python_runtime/python_lib/versions/1/google/appengine/ext/db/__init__.py", line 2437, in validate raise BadValueError('Property %s is not multi-line' % self.name) BadValueError: Property desc is not multi-line

dannyr7• 15 years ago

We are using StringProperty. We need to use TextProperty.

We are going to try to fix this soon.

jessedhillon2• 15 years ago

I think the bigger issue is that your tracebacks are publicly visible.

dustball5• 15 years ago

Thanks for the bug report! We fixed the issue.

StavrosK4• 15 years ago

"Favorite cloud provider?" God, can we at least not make it easy for people to stereotype us? The only non-silly answer is "water vapour".

hallmark2• 15 years ago

Please explain why "Amazon Web Services" would be a silly answer.

StavrosK4• 15 years ago

Because "cloud" means nothing.

robeastham• 15 years ago

This is a little similar to my new app/startup:

http://www.mightycv.com

Mighty CV is a little more free form and geared towards producing a hacker centric traditional style résumé and so not quite the same as profile.io.

Just signed up for a beta account at profile.io and it looks promising. Perhaps we could provide integration to each others services.

techietim• 15 years ago

I hope you don't plan on keeping the current URL for the developer listing, as humorous as it is:

http://profile.io/developers/developers/developers/developer...

ks• 15 years ago

It seems that someone has inserted javascript code in their profile. That page is full of javascript message boxes saying "xss1", "xss2" etc.

Raphael• 15 years ago

The thumbnails also seem like overkill.

BoppreH• 15 years ago

Apparently there's someone called "<script>alert(1)</script>". Please sanitize this person's name before displaying it. Thank you.

Xk4• 15 years ago

Yeah, that's me -- I can't change my name, but if I could I would. I didn't realize there was the developer list and thought I would have an isolated test page.

jkkramer• 15 years ago

Neat idea. Minor nits:

- Would be nice if custom background images tiled

- Not clear whether to enter usernames or URLs for accounts

- "Add an Technology" typo

- No cancel buttons on the forms

- Popup forms feel a little sluggish to open. Any way to have their HTML preloaded?

- List of tech, etc could use some typography/color to make it more readable

elvirs• 15 years ago

looks a lot like turkish kimdir.com

Xk4• 15 years ago

Escape < and > (and everything else), and check the site for XSS. I don't mean to be rude, and I realize you two coded this up in a really short amount of time -- but before this site goes live it would be best to have it secure.

Demo: http://profile.io/foobar

[EDIT] As someone else pointed out, viewing the list-of-developers page puts up the XSS, which is even worse. I didn't know that page existed.

[EDIT2] It turns out I broke a lot more than I tried to. I also own the account 'xss' which has an unclosed '<' inside of its name, and that destroys half the page. I'm really sorry, please delete that account.

[EDIT3] I broke that account even more in order to fix it. I had an unclosed script tag, so I closed it off in my 'location'. If you fix the xss in just the profile information, then the page will get messed up again.

[EDIT4] The 'test' account was deleted, but the XSS's haven't been fixed? Updated to point to a different page I had made.

dannyr7• 15 years ago

Fixed. Let me know if we missed anything.

I wish we could use Django's autoescape filter but App Engine's SDK ships with just 0.96 by default.

We can only upgrade to a later version of Django in Prod and not locally.

Xk4• 15 years ago

Usernames aren't sanitized yet. (As is visible with the '<asdf' in the 'foobar' link above.)

EG: http://profile.io/xss2

StavrosK4• 15 years ago

You really need to use Django-nonrel, it's at 1.3b and awesome. I use it for http://www.yourpane.com and it works fantastically well.

ddemchuk• 15 years ago

http://www.youtube.com/watch?v=hzVJFv9GyJg

Seriously though, I hope you realized that the best thing to do when someone has XSS issues is to just tell them rather than EXPLOIT them.

Xk4• 15 years ago

Upvoted because that's a valid point, but I did consider it before just doing that.

I knew the developers of the site were looking here. I knew there was nothing critical running on this site. They were asking for feedback. Given that, it is much easier to demonstrate the places where it should be fixed than to give instructions on how to recreate each attack.

Locke1689• 15 years ago

Testing for exploits usually requires you to actually try an exploit.

Edit: just to be clear, this is for black box testing.

shiftb• 15 years ago

Congrats guys! Was awesome watching you build it.

Show HN: Profile.io - Profiles for Developers

Related Stories