Show HN: Use Slack Emoji on GitHub

https://single-emoji.vercel.app

by schniz • 4 years ago

48 29 4 years ago

single-emoji.vercel.app

steventey• 4 years ago

This is absolutely brilliant.

Kikobeats• 4 years ago

It works like a charm, just :wow:

javivelasco• 4 years ago

Just beautiful

awinter-py3• 4 years ago

All you need is to have the Single Emoji browser extension, which connects to your Slack workspace and enables you to use your favorite Emoji on your favorite tools, by making the smallest patches possible to how these tools work. Nothing too fancy, nothing too suspicious.

all you need is to connect random javascript to a major channel for social engineering and then run it inside major channel for software supply chain risk

netsharc• 4 years ago

Back during the Yahoo and MSN chat days (remember Windows executables?), there were also "Download custom smiley packs" ads all over the Internet. I never tried them because they were probably malware. I have the same skepticism for this extension, or how easy extensions auto-updates can turn it into one.

Are the other responses in here non-ironic?

schniz3• 4 years ago

Hey there! I plan to open source this soon so the source will be available and you can read it. It is really doing nothing but adding the emoji to GitHub.

But I understand that the shadiest people say they are legit, so I’ll prioritize open sourcing the extension so others can review it :) sounds good?

TeMPOraL3• 4 years ago

FWIW, I suspect Telegram animated stickers (or whatever it's called these days) may be Turing-complete.

eyelidlessness2• 4 years ago

I mean, you’re not wrong, but I’d bet the Venn diagram of…

- people who use both a Web Extensions-supporting browser and Slack

- people who install extensions with permissions to run arbitrary JS on every page

- people who install or use Slack bots/etc with excessive access to Slack data

… is likely very nearly a circle. The emoji use case isn’t one for which I’d personally take that combination of risks. But I can imagine a wide variety of more appealing/risk worthy and likely even higher risk “use [CLOUD_SERVICE_FOO_RESOURCES] seamlessly in GitHub” use cases where I’d pause to at least consider it.

madeofpalk• 4 years ago

- people who use both a Web Extensions-supporting browser and Slack

This is just basically everyone using Slack, as Firefox, Chrome, and Safari support web extensions API

- people who install extensions with permissions to run arbitrary JS on every page

I would bet that most people who use Chrome or Firefox install extensions that can run arbitrary JS on every page, like ad blockers, full page screenshot, or “nifty” discount-coupon-code extensions.

layer8• 4 years ago

But it gives you custom emoji!

bakugo• 4 years ago

Millions of developers run random javascript on their computers on a daily basis. It's called npm. How is this any less trustworthy?

TeMPOraL3• 4 years ago

It isn't, but those millions of developers are why software supply chain security is a topic now (and why it causes me no ends of headaches, even though I do C++!).

vallanceroad• 4 years ago

Does this work for others not running the browser extension (or outside of your Slack organisation)? Also, Emoji has been part of Unicode for more than a decade...

schniz3• 4 years ago

Yes, your custom emojis will turn into images anyone can see. See: https://github.com/Schniz/fnm/issues/847#issuecomment-131372...

petepete• 4 years ago

Oh hi. Unrelated to this tool but I use fnm every day and it's fantastic.

First time I used it it ran so quickly I thought it wasn't working properly.

Thanks for your hard work.

keybored• 4 years ago

Just :pinched_fingers:

codetrotter• 4 years ago

Hey, if you make a similar extension for HN we could start using emojis in comments :pepe_dab:

It’ll be like BetterTTV but for HN :catjam: :meow_party:

3np2• 4 years ago

Given enough users, you'll have interesting statistics and metrics forming. What are you going to do with this? Might visitor IPs (viewers of Emoji inlined on GH, that is) be processed/retained?

andrenotgiant• 4 years ago

No, Github proxies and caches images through an intermediary (probably for privacy reasons amongst other things.)

3np2• 4 years ago

I stand corrected, you're right! So seems to be 0 privacy concerns for viewers, here.

GH also seems to use the data-canonical-src attribute to reference the original URI.

Show HN: Use Slack Emoji on GitHub

Related Stories