It’s certainly an interesting project, and addresses an important concern (link rot). But the security implications of archiving arbitrary sites/js and then running that on your own domain are rather horrifying to me (especially if this would be used for any user supplied links).
Personally, I’d rather have a service that automatically submits any external links to an existing archiver (archive.org) and then falls back to that source when the original 404s, rather than serving those pages/videos locally.
Yeah I thought about the security cases, but decided it wasn’t a problem for my situation since I was only archiving links that I’m selecting. If I were to open this to us, yeah that’s a real risk. I should probably add something about this in the docs.
The suggestion of pointing to archive.org was floated to me by someone on Mastodon actually, and I think I’ll probably add that option as well. Just not right now. I’m tired 😆
It’s certainly an interesting project, and addresses an important concern (link rot). But the security implications of archiving arbitrary sites/js and then running that on your own domain are rather horrifying to me (especially if this would be used for any user supplied links).
Personally, I’d rather have a service that automatically submits any external links to an existing archiver (archive.org) and then falls back to that source when the original 404s, rather than serving those pages/videos locally.
Yeah I thought about the security cases, but decided it wasn’t a problem for my situation since I was only archiving links that I’m selecting. If I were to open this to us, yeah that’s a real risk. I should probably add something about this in the docs.
The suggestion of pointing to archive.org was floated to me by someone on Mastodon actually, and I think I’ll probably add that option as well. Just not right now. I’m tired 😆