Top all-time · #5944
5snb.club
Personal blog · 5snb.club/postsprogrammingsecurity
5snb.club is a personal blog at 5snb.club about programming and security. Since 2020, 13 different Hacker News readers have linked it 13 times, most often “RFC 35140: HTTP Do-Not-Stab (2023)”. It is still writing: the last post was on 2026-05-27, and you can follow it by feed.
Too few sampled comments (7) to say how often HN recommends it.?
Why HN links it
HN commenters cite this blog's post on the Do-Not-Stab proposal (RFC 35140), a header under which user agents must not enable the setting by default. Other links point to a Firefox meme page and a contentless HTML experiment.
Summarised by Claude from a sample of 7 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- RFC 35140: HTTP Do-Not-Stab (2023)7 people · 7 mentions · first linked 2024-11-25
- Contentlesshtml – An HTML page served entire in HTTP headers2 people · 2 mentions · first linked 2024-11-25
What Hacker News says?
The first thing i can think of is this: https://www.5snb.club/posts/2023/do-not-stab/ I never had Alexa and imagine I go now and buy one device, the first thing I can expect from it is to record me? Because I never opted out?
Comment linking /posts/2023/do-not-stab/
on “The Alexa feature "do not send voice recordings" you enabled no longer available”Submitted RFC 35140: HTTP Do-Not-Stab (2023) as a story · 815 points
HN discussionOnly works in Firefox, sadly. But you can do some really weird stuff with it, like https://www.5snb.club/pages/contentlesshtml/ ( https://news.ycombinator.com/item?id=42234837 )
Comment linking /pages/contentlesshtml/
on “Show HN: Live-updating version of the 'What a week, huh?' meme”Submitted Making Your Connection Bad as a story · 112 points
HN discussion> IE did enable it by default, which got them good press but ultimately killed the feature since everyone stopped respecting it. That's why RFC 35140 "Do-Not-Stab" specifies that the user agent MUST NOT enable it by default. https://www.5snb.club/posts/2023/do-not-stab/
Comment linking /posts/2023/do-not-stab/
on “Firefox removes "do not track" feature support”Submitted Contentlesshtml – An HTML page served entire in HTTP headers as a story · 42 points
HN discussion> why not throw a CDN in front of your site [...] Because this is how the open web dies - one website at a time. It's already near-dead on the client side - web browsers are not really "user" agents, but agents of oligopolist corporations, that have a stake in abusing you[1]. It's been attempted before with WAP[2], then AMP. But effectively, we're almost there. [1]: https://www.5snb.club/posts/2023/do-not-stab/ [2]:…
Comment linking /posts/2023/do-not-stab/
on “Feed readers which don't take "no" for an answer”Submitted C# Puzzles as a story · 9 points
HN discussionRelevant: RFC 35140: The Do-Not-Stab flag in the HTTP Header https://www.5snb.club/posts/2023/do-not-stab/
Comment linking /posts/2023/do-not-stab/
on “Google Analytics Opt-Out Browser Add-On”Submitted Bad Apple but it's SSH keys as a story · 2 points
HN discussionDon’t you mean RFC-35140? https://www.5snb.club/posts/2023/do-not-stab/
Comment linking /posts/2023/do-not-stab/
on “Google Analytics Opt-Out Browser Add-On”Submitted Custom Literals in Rust as a story · 1 points
HN discussionFinally, a better alternative to the do-not-stab header https://www.5snb.club/posts/2023/do-not-stab/
Comment linking /posts/2023/do-not-stab/
on “Browser spec to eventually replace GDPR and cookie banners”
