Pillowfort Is Closing

Posted by BrenBarn 1 day ago

Counter61Comment36OpenOriginal

Comments

Comment by tdeck 1 day ago

Seems kind of cool actually. Unfortunate that this is the way I heard about it.

Comment by trueno 1 day ago

i encountered it once. it felt like tumblr though i kept running into weird furry cartoon porn.

im sure this site has a lot of valuable media on it, woulda been cool if they just handed a backup over to internet archives.

Comment by bitwize 1 day ago

> it felt like tumblr though i kept running into weird furry cartoon porn.

so... tumblr at its peak?

Comment by nkrisc 1 day ago

Yeah that’s the problem with sites like these. They just turn into furry porn and drive everyone else away.

Comment by MelonArmiger 1 day ago

Too many people who can't pick up on how uncomfortable they're making everyone, not enough moderation.

It's a serious problem - the cost is stupendous for anyone without big business money, and if you don't get it right early... It's like the tide.

Comment by LoganDark 1 day ago

I think the problem is it being shown to people who don't want it, not it existing on the platform at all.

Comment by iamnothere 1 day ago

The problem is that some people go searching for content that they disapprove of, then complain loudly for engagement. They find it even if the “algorithm” doesn’t show them the content that they want. This then creates trolls who farm their own engagement off of the offended.

This particular site was doomed because it tried to control those people while failing to explicitly identify the problem. They mistook it for a one-sided political issue, then they found themselves with a bunch of politically aligned people who were (shock) still arguing about what content was “appropriate,” and still provoking each other to farm engagement.

Comment by wormius 16 hours ago

"There is a market for everything, man There is a market for pet psychologists, n** There is a market for twisted shit fetish videos For nipple rings, for river dancing, for chocolate covered roaches But you can't find one for (furry porn)?"

-Immortal Technique (paraphrased)

Comment by BizarroLand 19 hours ago

I feel like furry porn is just the bright coloration used to drive off predators.

Once you get past that it's always just a bunch of weirdos hanging out trying to make each other laugh.

Comment by VCFundedGenYer 1 day ago

Tumblr died when they banned NSFW content.

Comment by whateveracct 19 hours ago

tumblr is very much alive lol

Comment by F3nd0 1 day ago

At first I thought this was a Fediverse instance, but it seems like it was its own isolated thing? Shame.

Comment by ninalanyon 1 day ago

Pillowfort sounds like it would have been worth a look but this is the first time I've heard of it.

Is there a directory of social media sites? I feel that a lot of people would benefit from being able to more easily find one that suited them better than Facebook, et al.

Comment by BrenBarn 1 day ago

Another lo-fi site trying to create friendly community without corporate greed bites the dust, in this case apparently due to burnout on the part of the main person running it. I hadn't used Pillowfort much but did browse and explore some blogs on there and it seemed like a positive community. Always sad to see stuff like this happen.

Comment by solomonb 1 day ago

what is a 'lo-fi site'?

Comment by red-iron-pine 1 day ago

old school. not quite geocities but harkening back to an older age

Comment by 949495958 1 day ago

[dead]

Comment by andrewstuart 1 day ago

What is pillow fort?

Comment by emaro 1 day ago

You find the information on their homepage under "what is pillowfort"?

> Pillowfort.social is a multipurpose blogging platform. You can use Pillowfort to connect with other fans of your favorite books or tv shows, show off artwork or writing, get tips and advice on your hobbies, and much more. We're independently funded by our users and we strive to protect user privacy, give our users maximum control over the reach of their content, and protect our users from bigotry & harassment.

Comment by tanseydavid 22 hours ago

Cannot help but think of the Dogfort image meme.

https://knowyourmeme.com/photos/88320-dog-fort

Comment by altmanaltman 1 day ago

https://www.vice.com/en/article/buzzy-new-social-media-site-...

It was like AI slop pre AI. Great traction with the nsfw stuff but failed to capitalize on it.

Comment by solyin 1 day ago

Lol which sota AI in 2026 doesn't know what XSS is and would write code that bad?

Comment by neuroticnews25 1 day ago

There's actually no proof or claim of XSS vulnerability in this bizarre article. Username url confused with special url is a common bug, I've seen it "exploited" on facebook.

Comment by solyin 20 hours ago

The exploit I read in the vice.com article is the attackers username or a post could contain "<img src=/signout>" and be unescaped and automatically sign users that loaded that page out. If you don't want to call that an XSS, what would you like to call that?

Comment by neuroticnews25 6 hours ago

The claim regarding username is 'i can make my username "signout" and it signs people out when they click my profile', not that it can contain <img src=/signout>, so no html injection here.

Visiting https://superlogout.com/ logs you out of gmail with a cross-site GET request and it's not considered a vulnerability by google [0]

Posts could contain a safe subset of html (no scripting) including <img> as a feature - that used to be an acceptable design choice. In connection with the /signout it did allow for some unfortunate shenanigans - the kind of bug you just add additional sanitization for and move on, nothing indicative of a below average code quality.

>If you don't want to call that an XSS, what would you like to call that?

I would call the version you described a HTML injection to CSRF, but as Dylan16807 noted apparently it does fit OWASP's wide definition of XSS: "Since then, the term has widened to include injection of basically any content." [1] But that's not what happened, there was no HTML in usernames and HTML in posts was intended.

[0] https://bughunters.google.com/learn/invalid-reports/web-plat...

[1] https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Sc...

Comment by Dylan16807 20 hours ago

> OWASP considers the term cross-site scripting to be a misnomer. It initially was an attack that was used for breaching data across sites, but gradually started to include other forms of data injection attacks.[2]

Oh.

Comment by maeln 1 day ago

it was in 2021

Comment by quietbritishjim 1 day ago

They were referring to the comment they were replying to, which claimed that the original code was written (by humans) as poorly as AI does today. But AI today wouldn't write bugs that basic.

Comment by DiabloD3 1 day ago

I wonder if why people rejected the site is because there seems to be no way tos scroll the page?

Comment by LeoPanthera 1 day ago

You have to accept the cookie notice. If your user agent hides the notice there's probably no way to do that.

Comment by 1 day ago

Comment by bhaney 1 day ago

[dead]

Comment by Philpax 1 day ago

And may we all be blessed with the compassion required to not say something like this about someone's potential lifework.

Comment by dabinat 1 day ago

It can be very difficult to walk away from things you’ve poured time, money and hard work into for a decade, irrespective of how many users you have.

Comment by BrenBarn 1 day ago

"Small" as in tens of thousands of users on a site that has existed for 10 years. I don't think most people in their lives wind up making a decision that has as broad an impact as that.

Comment by zipotm 1 day ago

leave the past bring the future

Comment by n0tquitehere 1 day ago

But they're not closing a hobby project. They're shutting down a business, laying off staff and ending a service that people were paying for. That should always be a hard decision.

Comment by JacobAsmuth 1 day ago

What's pillowfort?

Comment by egypturnash 1 day ago

Tumblr clone.