❌

Normal view

Extensão gratuita para Safari mostra posts do X em um popup, sem cookies

9 September 2026 at 13:15

Se você ainda tem o hábito de abrir links do X (antigo Twitter) para ler um post isolado, sabe como a experiência costuma ser irritante: ou o site pede login, ou carrega um monte de coisas que você não quer ver, ou simplesmente trava. Foi pensando nisso que Zhenyi Tan, desenvolvedor do site And a Dinosaur, criou o Litterbox.

O Litterbox é uma extensão para Safari (iOS, iPadOS e macOS) que abre links do x.com em um popup, permitindo ler aquele post específico sem sair da página em que você está — e sem precisar visitar o X de fato. A ideia, nas palavras do próprio desenvolvedor, é simples: abrir, dar uma olhada e fechar em seguida.

Extensão Litterbox para o Safari no iPhone

Alguns detalhes de funcionamento que valem a pena destacar:

  • A extensão usa a mesma API que o X utiliza para os embeds oficiais do site, então não depende de gambiarras que podem parar de funcionar a qualquer momento.
  • Nenhum cookie seu é enviado quando o popup é aberto — ou seja, o Litterbox não usa sua sessão logada no X para exibir o conteúdo.
  • Links que podem ser abertos dessa forma ganham uma pequena marcação ao lado (um pontinho), já que nem todo link do x.com pode ser incorporado dessa maneira — perfis de usuário, por exemplo, ficam de fora.

O Litterbox é gratuito na App Store, sem assinaturas, compras no app, anúncios ou rastreamento, e exige o iOS 18/macOS 15 ou superior.

via Daring Fireball

Twitter Shuts Down Nitter

26 August 2026 at 20:19

Richard Speed (Hacker News 3):

XCancel’s home page now contains some minimal text stating: “On Monday 24th August at 8 PM EST, we received at [sic] letter from X Corp. asking to cease and desist the service XCancel.”

It says the service has been halted “until further notice.”

[…]

Nitter provided a way for users to read posts on X without requiring an account. There was no JavaScript or ads, a user’s IP could not be tracked, and it was generally a good deal snappier than the official X client, just read-only. It was the service behind platforms such as XCancel.

The only thing surprising about this is how long it took.

Nick Heer:

Companies like X and Meta are very happy to scrape the web at unprecedented scale and without permission, but have zero tolerance for the same to be done to them by, in effect, individual users. That is not because they are protective of the creative works users have contributed to these platforms. It is simply because users are not trusted to use the platforms. X does not permit third-party readers, and neither does Instagram, because their value does not come from us using these services as we wish, but from how they dictate we must.

Previously:

Update (2026-09-07): There are currently twelve working Nitter instances (Hacker News).

zedeus (Hacker News):

Following legal advice, the Nitter project will continue.

Update (2026-09-16): XCancel (via John Gruber, Hacker News):

Unfortunately, due to a new development in the ongoing legal proceedings, we are required to suspend this service again until further notice. We can’t share more details.

xsukax (via Brent Simmons):

xsukax X RSS Generator fetches publicly accessible X profile HTML, extracts posts and media, stores them locally, and exposes the results as standards-compatible RSS feeds that can be consumed by RSS readers, automation platforms, monitoring systems, and other feed-aware applications.

Telegram Temporarily Removed for CSAM

5 August 2026 at 22:10

Hartley Charlton (The Verge):

Apple briefly removed Telegram from the App Store on Monday night after a review found content that violated its guidelines against child sexual abuse material (CSAM), but restored the app a short while later, according to Reuters.

It seems like this was a symbolic gesture. Removing the app didn’t affect any of the customers who had already downloaded it. Probably none of them saw the image. And restoring the app doesn’t mean that it’s completely free from CSAM—probably none of the major platforms is. It just means that Telegram did the obvious thing after the violation was reported, which presumably they would have done, anyway.

Jeff Johnson:

They removed an entire app for ONE app user???

And before even contacting the developer? Telegram banning the account is what actually prevented users from potentially seeing the CSAM. Apple’s action seems like either a mistake or trying to send them a message.

I would note, by the way, that the Telegram app was apparently never removed from the Mac App Store. Which goes to show how little Apple cares about the Mac App Store.

Telegram:

I’m sure this stance will be applied equally to all other apps in the store, in the future right? @Apple

Pavel Durov (Telegram, MacRumors):

Because Telegram quickly removes illegal content from public groups using all kinds of moderation tools, the attacker had to resort to a technical trick. He inserted AI-modified illegal content by editing an old message in an active group chat. As a result the content was effectively hidden from the group’s members, preventing them from seeing/reporting it.

The attacker was a takedown extortionist: someone who demands ransom from group owners in exchange for not targeting their communities. These extortionists use automated accounts to plant illegal content in public groups and then report it directly to Apple, attempting to trigger the removal of legitimate communities whose owners refused to pay them.

[…]

Extortionists have found a way to manipulate Apple into overreacting. Apple removed Telegram from the App Store before contacting us. This creates a potential systemic risk for every mobile app that hosts user-generated content. If an app used by more than a billion people can be removed from the App Store without prior warning, any app can be.

Marcus Mendes:

During the time the app was unavailable, many speculated that the move was politically motivated, or perhaps in response to the recent discovery that Telegram has allegedly been using an obfuscated private UIKit API to animate its emoji picker.

It’s sad but kind of hilarious that both of these so disparate theories were considered possible. Durov really does have political enemies, and Apple really does seem to have it out for Telegram. But, also, using private API to animate emojis totally seems like something that Telegram would do and that Apple would overreact to.

Previously:

Update (2026-08-06): Matt Burgess (Hacker News):

Over the last nine months, Mark Zuckerberg’s Meta has run dozens of paid ads that include explicit AI-generated child sexual abuse material (CSAM) and images of minors alongside sexually suggestive statements, according to details of the ads shared with WIRED. The ads, which in some cases reached several thousand accounts, were targeted at people living in the United States, United Kingdom, and more than a dozen European countries.

This is much worse than what happened with Telegram, yet Apple didn’t overreact.

There’s also the Twitter/Grok case.

Previously:

❌