iHeartRadio web has exposed all its source code

https://github.com/Gh0styTongue/iHeart-Frontend-Source-Code

20•GhostyTongue•2mo ago

Comments

4ggr0•2mo ago

Immediately had to think about the Apple Web Store which seemed to have the same "issue" two weeks ago[0]

I guess the same thing[1] applies here.

> This is not "exposing" their source code. While yes, it may not be minified and it's slightly more human readable, it's not exposing any additional logic. Remember, obfuscation is not security.

[0]https://news.ycombinator.com/item?id=45804664

[1]https://www.reddit.com/r/webdev/comments/1onnzlj/comment/nmy...

shortrounddev2•2mo ago

People have gone to jail for less than this lol

graemep•2mo ago

A fairly minor breach of copyright?

shortrounddev2•2mo ago

Or, if you take the view of the court in the case of Andrew Auernheimer (weev), it exceeds authorized access and exfiltrated trade secrets

graemep•2mo ago

That is somewhat different as it required brute forcing IDs and his conviction was overturned (although the reasons do not establish a clear precedent).

isodev•2mo ago

It’s not exposed, it’s how web stuff works

lbourdages•2mo ago

Well, to play devil's advocate, typically only the minified version is exposed.

However I agree that in the end outside of making it more readable, it's not making a huge difference.

isodev•2mo ago

The reason for minification is not hiding the source code (which is impossible), but to reduce the payload size served to clients. Web pages (even web apps) are documents fully available to clients where users can choose to view, inspect and even modify their source code.

ceejayoz•2mo ago

Wait until you find out about "View source".

This is front-end code, that gets deliberately sent to the browser. With enough work, someone can deobfuscate such code manually.

TheAceOfHearts•2mo ago

Honestly, I think including source maps for your frontend code should be the standard. Maybe web apps will get better if people can actually start studying existing frontend sourcemaps to learn good patterns which are being used in production by companies with lots of experienced engineers. Tons of people love to complaint about terrible web apps, but finding high quality web app examples to study and learn from is actually really difficult! Let's not pretend that the trivial todo-apps are where you're gonna go to learn anything about how a real-world app is organized.

I think this title is misleading, it makes it seem like more than just the unobfuscated code has been exposed.

cxr•2mo ago

Yes, the repo creator's tone is obnoxious.

> Remember: Always disable sourcemaps in production!

Or don't. There is a non-zero possibility that this wasn't even an accident.

One has serious doubts that the person who wrote this even understands (and can articulate the reasons) why they have this position.

In any case, GitHub isn't an unredactable, append-only ledger. "Archiving" this on a site that is no less subject to DMCA takedowns than any other site but that differs from other sites in having exceptionally fast response times to takedowns is not an especially well-thought-out move.

forks•2mo ago

> Remember: Always disable sourcemaps in production!

I wish I could downvote this comment from the README.

Minification to reduce bandwidth is noble. But to obfuscate? Why?

recursivedoubts•2mo ago

yeah man, wait till you hear about the view source affordance

https://htmx.org/essays/right-click-view-source/

the web is an open platform, sorry

The Genus Amanita

We have broken SHA-1 in practice

Ask HN: Was my first management job bad, or is this what management is like?

Ask HN: How to Reduce Time Spent Crimping?

KV Cache Transform Coding for Compact Storage in LLM Inference

A quantitative, multimodal wearable bioelectronic device for stress assessment

Why Big Tech Is Throwing Cash into India in Quest for AI Supremacy

How to shoot yourself in the foot – 2026 edition

Eight More Months of Agents

From Human Thought to Machine Coordination

The new X API pricing must be a joke

Show HN: RMA Dashboard fast SAST results for monorepos (SARIF and triage)

Show HN: Source code graphRAG for Java/Kotlin development based on jQAssistant

Python Only Has One Real Competitor

Tmux to Zellij (and Back)

Ask HN: How are you using specialized agents to accelerate your work?

Passing user_id through 6 services? OTel Baggage fixes this

DavMail Pop/IMAP/SMTP/Caldav/Carddav/LDAP Exchange Gateway

Visual data modelling in the browser (open source)

Show HN: Tharos – CLI to find and autofix security bugs using local LLMs

Oddly Simple GUI Programs

The New Playbook for Leaders [pdf]

Interactive Unboxing of J Dilla's Donuts

OneCourt helps blind and low-vision fans to track Super Bowl live

Rudolf Vrba

Autism Incidence in Girls and Boys May Be Nearly Equal, Study Suggests

Wellness Hotels Discovery Application

NASA delays moon rocket launch by a month after fuel leaks during test

Sebastian Galiani on the Marginal Revolution

Ask HN: Are we at the point where software can improve itself?