carlbordum
Joined 8 years ago
Joined 8 years ago
It's an open-source comment system federated on the Matrix (https://matrix.org/) network. This means you can use your Matrix identity to comment on any site that uses Cactus, without the tracking of something like disqus. Works well with static site generators too.
It's available at https://webster.bordum.dk/ if anyone is interested.
The real issue is if attackers can trick the autofill to fill in a password for a different site. I did a pentest for a password manager a few years ago, and if I remember correctly this type of exploit had been successful against multiple of the big password managers.
Making Cactus Comments work without javascript would require a backend server. Right now, the frontend is actually just a special-purpose Matrix client that interacts directly with Matrix homeservers.
This is a hobby project that we're launching in three weeks. If you are interested, come talk to us on matrix (https://matrix.to/#/#cactus:bordum.dk) or keep an eye on our (for now dummy-) landing page: https://cactus.chat/, https://gitlab.com/cactus-comments