Show HN: Use Slack Emoji on GitHub

[3np]

Given enough users, you'll have interesting statistics and metrics forming. What are you going to do with this? Might visitor IPs (viewers of Emoji inlined on GH, that is) be processed/retained?

[andrenotgiant]

No, Github proxies and caches images through an intermediary (probably for privacy reasons amongst other things.)

[vallanceroad]

Does this work for others not running the browser extension (or outside of your Slack organisation)? Also, Emoji has been part of Unicode for more than a decade...

[schniz]

Yes, your custom emojis will turn into images anyone can see. See: https://github.com/Schniz/fnm/issues/847#issuecomment-131372...

[codetrotter]

Hey, if you make a similar extension for HN we could start using emojis in comments :pepe_dab:

It’ll be like BetterTTV but for HN :catjam: :meow_party:

[Kikobeats]

It works like a charm, just :wow:

[steventey]

This is absolutely brilliant.

[keybored]

Just :pinched_fingers:

[awinter-py]

> All you need is to have the Single Emoji browser extension, which connects to your Slack workspace and enables you to use your favorite Emoji on your favorite tools, by making the smallest patches possible to how these tools work. Nothing too fancy, nothing too suspicious.

all you need is to connect random javascript to a major channel for social engineering and then run it inside major channel for software supply chain risk

[netsharc]

Back during the Yahoo and MSN chat days (remember Windows executables?), there were also "Download custom smiley packs" ads all over the Internet. I never tried them because they were probably malware. I have the same skepticism for this extension, or how easy extensions auto-updates can turn it into one.

Are the other responses in here non-ironic?

[layer8]

But it gives you custom emoji!

[eyelidlessness]

I mean, you’re not wrong, but I’d bet the Venn diagram of…

- people who use both a Web Extensions-supporting browser and Slack

- people who install extensions with permissions to run arbitrary JS on every page

- people who install or use Slack bots/etc with excessive access to Slack data

… is likely very nearly a circle. The emoji use case isn’t one for which I’d personally take that combination of risks. But I can imagine a wide variety of more appealing/risk worthy and likely even higher risk “use [CLOUD_SERVICE_FOO_RESOURCES] seamlessly in GitHub” use cases where I’d pause to at least consider it.

[bakugo]

Millions of developers run random javascript on their computers on a daily basis. It's called npm. How is this any less trustworthy?

[javivelasco]

Just beautiful