Tiddlywiki hosted on neocities: A New Tiddlywiki Saver

[Mohammad]

This is amazing to know Tiddlywiki can be hosted on neocities.org

The great work authored and published by @ValdiSS

Setting up is five simple steps

1. Go to neocities.org and create an accoung
2. Go to setting and create an API key
3. Download an empty.html from https://tiddlywiki-neocities-saver.neocities.org/
4. Goto $:/ControlPanel, Saving Tab, Neocities Save and enter your API key
5. Press the Save button

If you have your own wiki simply drag and drop Neocities Saver plugin from  https://tiddlywiki-neocities-saver.neocities.org/#TiddlyWiki%20Neocities%20Saver%20Plugin 

into your wiki!

That's all

Ref: https://github.com/Jermolene/TiddlyWiki5/issues/4182

Developer: https://github.com/ValdikSS

Thank you ValdikSS

[Mohammad]

This is a working website powered by Tiddlywiki 5.1.20

hosted on neocities.org

https://tw5.neocities.org/

--Mohammad

[Mohammad]

Note create one site and host as many as Tiddlywiki you like for free IF the storage size remain below 1GB.

On Wednesday, August 21, 2019 at 6:12:49 PM UTC+4:30, Mohammad wrote:

This is a working website powered by Tiddlywiki 5.1.20

hosted on neocities.org

https://neo-tiddlywiki.neocities.org/

--Mohammad

[Mark S.]

That's interesting. Someone should submit it as another TW saver.

I wonder if the servers are geographically situated? It took at least 20 seconds

to load the page. By contrast the pages from the web gallery came up in 2 or 3

seconds.

On Wednesday, August 21, 2019 at 6:42:49 AM UTC-7, Mohammad wrote:

This is a working website powered by Tiddlywiki 5.1.20

hosted on neocities.org

https://neo-tiddlywiki.neocities.org/

--Mohammad

[Mohammad]

Not sure where it is but whois shows it is in USA, Oregon

https://myip.ms/info/whois/198.51.233.100/k/728552107/website/neocities.org

[PMario]

Hi,

As ValdikSS (the author) pointed out at the github issue:

@kookma, due to third-party CORS proxy requirement and the fact that CORS proxy owner is able to capture API keys of Neocities sites, I don't think this plugin could be recommended to be used for all Neocities users.

 

I hope Neocities would add required CORS headers, but the request with the patch from 2015 was recently closed.

The API key goes through a 3rd party proxy server. ... So as long as you don't own the proxy, you can't trust the mechanism and you put yourself and others at risk!

have fun!

mario

[PMario]

Hi,

We do have github and gitlab savers since 5.1.20 those should be used, until neocities supports CORS.

gitlab supports unlimited free private repos. So you can use it for your "invisible" stuff too. If you don't trust them, you can host your own service.

-m

[David Gifford]

"Page not found."

[Mohammad]

@David

Which page

 this: https://tiddlywiki-neocities-saver.neocities.org/

 or this: https://tw5.neocities.org/


@Mario

That is quite true! By the way if your information are public you can use this free web hosting!

What is interesting for me is the feature to host such simply a bunch of Tiddlywiki on a hosting service!

I hope Valdi extent its plugin to some secure free hosting like Google Sites.

--Mohammad

[Mark S.]

According to a Jan 2019 article https://github.blog/2019-01-07-new-year-new-github/ ,
github also supports free unlimited private repositories.

Which is great, but, and I'd be happy to be wrong, you have to download the tw file
to your local system before you can use it when switching to a different browser or
different machine. That is, you can't just click on a link and have your tw file
loaded into a browser tab. If there's a way to do this (other than publishing
to github.io, which of course is public), I would be glad to know of it.

Thanks!

[Mark S.]

If someone captures the API keys, does that mean they could post as you?

Thanks!

[Mohammad]

Not sure! but seems having the API you can edit and save!

May be Mario or Valdi can explain this better!

--Mohammad

[Jed Carty]

You should be very careful about leaking api keys, as many horror stories involving aws show. (ex: https://wptavern.com/ryan-hellyers-aws-nightmare-leaked-access-keys-result-in-a-6000-bill-overnight)

[Mark S.]

Scary, but does it relate to the current situation, where the API keys are for a free resource? I haven't tried neocities -- do
they ask for a CC or something up front?

[Jeremy Ruston]

Hi Mark

> If someone captures the API keys, does that mean they could post as you?

Yes, it does mean exactly that, which in turn means that an attacker could target your readers with phishing attacks or malware etc.

Best wishes

Jeremy.

>
> Thanks!
>
> --
> You received this message because you are subscribed to the Google Groups "TiddlyWiki" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to tiddlywiki+...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/tiddlywiki/41f7b194-f2a0-4b27-b799-80e0fef92c5c%40googlegroups.com.

[ValdikSS ValdikSS]

On Thursday, August 22, 2019 at 7:27:10 PM UTC+3, Mark S. wrote:

If someone captures the API keys, does that mean they could post as you?

Thanks!

Yes. They can download your files and upload new files to your website.