#indiewebcamp 2014-05-24

2014-05-24 UTC
#
KartikPrabhu
kylewm: oh can't bleack remove the whole script tag?
#
KartikPrabhu
s/bleack/bleach
#
Loqi
KartikPrabhu meant to say: kylewm: oh can't bleach remove the whole script tag?
#
kylewm
KartikPrabhu: heh, i see what it's doing... i would use bleach to clean up short entries, but when the content is pretty long, i convert it to flat text and truncate to 200 characters.
#
kylewm
(since I can't reasonably truncate html)
#
KartikPrabhu
you could bleach it and then truncate
#
kylewm
hmm, maybe. by default it just html encodes the bad stuff...
#
kylewm
>>> bleach.clean("<script>alert('hi')</script>")
#
kylewm
"&lt;script&gt;alert('hi')&lt;/script&gt;"
#
KartikPrabhu
kylewm: you can strip the tag but not remove it it would seem
#
kylewm
i wasn't that excited to work around bad wordpress.com markup anyway, but if there's a strong use case for it, might be worth figuring out
#
KartikPrabhu
yeah! edge case... I wouldn't bother
whaity, bnvk, brianloveswords, snarfed, luxagraf, jjuran and john3213 joined the channel
#
KartikPrabhu
is a rel=webmention on an <a> tag widely supported?
luxagraf, bnvk, jjuran, jedahan, krendil, nloadholtes and paulcp joined the channel
#
snarfed
KartikPrabhu: probably not widely yet
#
snarfed
bridgy supports it, and i think known and pfefferle's wordpress plugins plan to (or do already)
#
KartikPrabhu
well switched to that anyway! I wanted the webmention endpoint only on post pages, so I put it on the "Learn more" in the webmention form itself: https://kartikprabhu.com/notes/IWC-2014
luxagraf joined the channel
#
KartikPrabhu
!tell snarfed: does bridgy publish pick up the p-summary of a very long note to tweet?
#
Loqi
Ok, I'll tell them that when I see them next
luxagraf and snarfed joined the channel
#
Loqi
snarfed: KartikPrabhu left you a message 48 minutes ago: does bridgy publish pick up the p-summary of a very long note to tweet?
#
snarfed
KartikPrabhu: hmm no, but that's a good feature request. feel free to file it in github!
#
KartikPrabhu
snarfed: scratch that...
#
KartikPrabhu
i don't think notes should have markup in them just plain-text. bridgy should just use the first few lines as a syndication prompt
#
KartikPrabhu
but I reserve the right to change my mind about this ;)
nloadholtes joined the channel
#
KartikPrabhu
just keeping it simple, for myself and for bridgy. I don't want to write code to add p-summary markup to notes and all that :P
#
aaronpk
has anybody made any progress on an h-entry to RSS proxy?
#
aaronpk
er, h-feed to RSS
#
aaronparecki.com
edited /archive (+18) "see also [[wiki/backup]]"
(view diff)
#
KartikPrabhu
aaronpk: I am curious about that as well. I ran into a stupid error because I forgot to update my db-to-RSS code
#
aaronparecki.com
edited /2012/Demos (+23) "/* Beeminder for the IndieWeb */ sp"
(view diff)
#
aaronpk
KartikPrabhu: yeah totally
#
aaronpk
i've accidentally broken my rss feed a few times
#
KartikPrabhu
unbeknowst to me my RSS/Atom was down for a couple of weeks
#
aaronpk
in this case tho I'm wondering specifically because it would be nice to be able to create RSS feeds from wiki pages or categories
#
KartikPrabhu
aaronpk: on another note, is there a micropub client where I can test my endpoint?
#
aaronpk
although in practice i'm not sure if it'll be that simple
#
aaronpk
KartikPrabhu: ownyourgram.com is probably your best bet since it includes a lot of debugging/step-by-step stuff
#
aaronpk
but also barnaby's http://waterpigs.co.uk/notes/new will work
#
KartikPrabhu
but I don't have instagram :(
#
aaronpk
oh! hm
#
aaronpk
yeah I should make a really simple note interface
#
aaronpk
with all the debugging steps of ownyourgram
#
KartikPrabhu
also about barnaby's client have you used that? I tried loggin in but after logging in it redirects me to the indeauth page
#
aaronpk
odd... it works fine for me. but it doesn't handle error cases super well yet.
#
KartikPrabhu
you just log in using his little login form at the bottom right?
#
aaronpk
hm I wonder how fast I can build this by copying most of ownyourgram.com
#
aaronpk
that seems worthwhile at this point
#
KartikPrabhu
yeah I should just bother barnaby about his clinet
#
aaronpk
honestly it's probably more work for him to add debugging info than for me to just do this
luxagraf joined the channel
#
KartikPrabhu
he should fix it nonetheless :) but if you manage to put up yours I'll use yours to test. right now just seeing if the authorization endpoint and all are working not really posting through micropub... #babysteps
#
aaronpk
the hardest part will be picking a name
#
aaronpk
and a domain
#
aaronpk
or subdomain
#
aaronparecki.com
edited /webhook (+305) "headers for examples, add beeminder with link to 2012 demo"
(view diff)
#
KartikPrabhu
names are always hard
#
aaronpk
how about indiepost
#
KartikPrabhu
aaronpk: the indieauth does have a redirect_url=http://waterpigs.co.uk but it doesn't redirect me there for some reason
#
aaronpk
oh strange, I get a server error trying to sign in now
#
aaronpk
well if you don't plan on actually posting anything, try signing in to ownyourgram.com
GWG joined the channel
#
KartikPrabhu
aaronpk: that worked! successfully logged in and authorized to post! w00t! thanks :)
#
KartikPrabhu
now for token validation... for that I'll need to attempt posting :)
#
aaronpk
you can always use curl!
#
aaronpk
there should be examples on the micropub page
#
aaronpk
what is micropub?
#
Loqi
Micropub is an API spec that is used to create h-entry or h-event posts on one's own domain using third-party clients http://indiewebcamp.com/micropub
#
aaronpk
methinks there should be a !wiki command for that so it looks less silly
#
KartikPrabhu
I did test using curl. but wanted to do some wild-testing to be sure... thans to ownyourgram debug info I can now also login into waterpigs :)
#
aaronpk
awesome!
#
KartikPrabhu
sweet! test posintg toally worked without actually posting... man this is awesome!
#
KartikPrabhu
micropub++
#
Loqi
micropub has 1 karma
#
Loqi
does a happy dance!
#
aaronpk
ok it's super super basic and ugly but it works
#
KartikPrabhu
is thinking about having a /itch on his own website to document itches
#
KartikPrabhu
POSSW = Post on Own Site Syndicate to Wiki
#
KartikPrabhu
not a cool name
#
aaronpk
wiki counts as elsewhere
#
KartikPrabhu
once I can do micropub from barnabywalter's client, I'll work towards making my own so we have atleast 3 clients
#
aaronpk
cool. mine is almost done.
#
aaronpk
it's not super great but it works
#
KartikPrabhu
If I finish all of this in a month, I' have something to show off at IWC-East! :D
#
aaronpk
i'll launch it tomrorow. too much overhead junk to launch tongiht. (nginx config, ssl config, etc)
#
KartikPrabhu
is it aaronpareci.com/indiepost?
#
KartikPrabhu
alright I'll wait for it...
#
KartikPrabhu
goes back to tinkering
#
aaronpk
you're like 2 hours later than west coast right? it's super late there!
#
aaronpk
oh! i got micropub.net
#
aaronpk
I could put it at post.micropub.net
#
aaronpk
or indiepost.micropub.net
#
aaronpk
ok that'll happen tomorrow
#
KartikPrabhu
It is pretty late here but I am getting in a groove. good for doing not good for sleeping
#
KartikPrabhu
aaronpk: https://tokens.indieauth.com/#verify seems to say I should get access token in a header called Authorization but barnaby's client sends it as a POST parameter 'access_token'
#
KartikPrabhu
aah do this tomorrow... I'm out!
#
KartikPrabhu
goodnight Loqi
#
Loqi
sleep tight!
paulcp, luxagraf, bear, tpinto and eschnou joined the channel
nloadholtes, luxagraf, paulcp, tpinto, whaity, eschnou, glennjones, erikmaarten, tgbrun, ttepasse, netweb and jonnybarnes joined the channel
#
@whaity
Doesn't seem much in the #indieweb way for ghost or not that I can find. Will need to get a to do list together for the long weekend.
(twitter.com/_/status/470178286107377664)
paulcp, barnabywalters, gRegor`, eschnou, tgbrun, BjornW and luxagraf joined the channel
paulcp, jonnybarnes, tgbrun, grantmacken, eschnou and brianloveswords joined the channel
#
jonnybarnes.net
edited /https (+98) "/* Level 4 security */"
(view diff)
#
jonnybarnes
its amazing how quickly an edit on the wiki is posted here by Loqi
#
Loqi
is done
luxagraf, bnvk, tpinto, grantmacken, tgbrun_, squeakytoy, paulcp, snarfed and tgbrun joined the channel
chrissaad, barnabywalters, paulcp, whaity, snarfed, eschnou, rektide, netweb, brianloveswords, aaronpk and grantmacken joined the channel
#
bret
aaronpk my project stalled out when i found barnaby
#
bret
s h-entry to atom tool
snarfed joined the channel
#
aaronpk
oh yeah
#
aaronpk
i'm cleaning up the quick micropub client I made last night
#
bret
aaronpk are you turning p3k into a micropub account?
#
aaronpk
not exactly
#
aaronpk
I copied ownyourgram and am turning it into a client that posts just plaintext notes
#
aaronpk
cause it has all the debugging walkthrough stuff before you sign in
emmak joined the channel
#
bret
rad!
dybskiy and lzangrando joined the channel
#
lzangrando
Hi all. I was at Brighton last October. I want to help make indieweb accessible to non tech people like me
#
aaronpk
welcome lzangrando!
ttepasse joined the channel
#
lzangrando
Cool. It wasn't there yet and then I disappeared :[]
#
aaronpk
yep! that page came about after indiewebcamp sf
#
lzangrando
I'll read it carefully
#
lzangrando
Done quickly.
#
lzangrando
Apparently I share the same level as Lynn of the post quoted in level 3.
#
lzangrando
But I dont share the conclusions
#
lzangrando
I am willing to be the guinea pig to experiment how to make things simpler
#
aaronpk
great! we're still mostly introducing gen 2 people right now
#
aaronpk
so it would be great to start thinking about bridging the next generation soon
#
lzangrando
Not sure if im gen 2 or 3 have to read carefully :)
#
lzangrando
Truth im not able to posse yet
#
aaronpk
I'm curious what conclusions you disagree with from Lynne's post
tpinto joined the channel
#
lzangrando
She doesn't seem to be willing to try go beyond. I am!
erikmaarten joined the channel
#
aaronpk
well that's great to hear!
#
lzangrando
I compleyed level 1 and I'm stuck at point 1 of level 2.
#
aaronpk
so do you have your own website?
#
aaronpk
step 2 of indiewebify.me?
#
lzangrando
I see several things that have been done like Bridgy but I'm not sure what comes first and if there is a pre packaged way to include eg microformats
#
aaronpk
well it depends on your website. do you use wordpress?
#
lzangrando
I realise it's just a matter of language
#
lzangrando
No I publish static content with ... dont remember the name, pretty famous...
#
lzangrando
My website is lionzan.me
#
lzangrando
Guess you can tell from the source
dybskiy joined the channel
#
aaronpk
great! well at the very least you should be able to sign in to the wiki and add yourself to http://indiewebcamp.com/irc-people !
#
lzangrando
Yes of course! I completed level 1!
#
lzangrando
And edited the wiki eg for my profile for brighton.
#
aaronpk
ah great!
#
lzangrando
I'll edit the irc page soon
#
lzangrando
For microformats I know im conceptually close but I need some help fot the mental leap :)
lionzan joined the channel
#
lionzan
Bye
#
lionzan
No idea why my id changed from lzangrando to lionzan. Long way to go :)
lionzan joined the channel
#
KartikPrabhu
aaronpk: you around?
grantmacken, Kopfstein, tgbrun, ttepasse and paulcp joined the channel
#
aaronpk
KartikPrabhu: now I am!
snarfed and eschnou joined the channel
#
KartikPrabhu
hi aaronpk: was a little confused about https://tokens.indieauth.com/#verify the "Bearer" in the Authorization field is not some name right?
#
aaronpk
"Authorization: Bearer _____" is from OAuth 2.0
#
aaronpk
specifically the bearer token usage http://tools.ietf.org/html/rfc6750
#
aaronpk
and about your earlier question, barnaby's interface sends the access token in a form field because it's literally a form! the browser can't send that authorization header
#
KartikPrabhu
so I should be checking both headers and form fields... gotcha
#
KartikPrabhu
if i understand the Bearer thing right, the if my token is "abc" then I should have the authorization header a "Bearer abc"
#
aaronpk
maybe I should make this new test client randomly choose to send the access token in the header or post body lol
#
aaronpk
KartikPrabhu: yes
#
KartikPrabhu
cool! thanks
lionzan, ttepasse, iangreenleaf and dybskiy joined the channel
#
KartikPrabhu
kylewm: you around?
#
@kevinmarks
#indieweb @t: earlier today in Dusseldorf there was a session on IndieMark - I want to talk about improving http://indiewebcamp.com/indiemark
(twitter.com/_/status/470297702933475328)
#
@macfarlandian
because i don't have enough distractions, i've decided to evangelize for the #indieweb. OWN YOUR DATA! i'm at Level 1 http://indiewebify.me
(twitter.com/_/status/470298668088573953)
#
aaronparecki.com
edited /micropub (+265) "/* Clients */ add IndiePost"
(view diff)
lionzan joined the channel
#
@SimonCoopey
Wrote half a webmention client. Returned to finish it five weeks on. No idea what anything does. Have to restart. Comment your code, kids.
(twitter.com/_/status/470302971302273025)
#
aaronparecki.com
edited /git (+17) "add dfn tag"
(view diff)
bnvk, lionzan, netweb and dybskiy joined the channel
#
kylewm
KartikPrabhu: still looking for me?
#
KartikPrabhu
yeah sure... do you know how to handle form-encoded responses in python example: https://tokens.indieauth.com/#verify see the token verification response
#
kylewm
urllib.parse.parse_qs
#
kylewm
just sec, lemme look up the 2.7 equivalent
#
kylewm
oh duh, it's just urlparse.parse_qs
#
@SEOSEM
RT @kevinmarks: URL based payment protocol for Bitcoin http://t.co/Fp3OXrRiDA… #indieweb
(twitter.com/_/status/470322121634484224)
#
kylewm
KartikPrabhu: also I found another case where html5lib fails. it does not find the u-photo on https://kartikprabhu.com/about
#
KartikPrabhu
hmmm thanks will look at that
#
aaronpk
I literally just launched this app and snarfed has already tried logging in
#
aaronpk
within seconds
#
KartikPrabhu
kylewm: seems that html5lib disregards anything that is inside a <noscript>
#
kylewm
KartikPrabhu: ya, I think it might have html encoded the things inside <noscript>
#
KartikPrabhu
hmm.. annoying.
krendil, snarfed and snarfed1 joined the channel
#
snarfed1
aaronpk: :P
#
snarfed1
from my phone no less
chrissaad joined the channel
#
snarfed1
lucky timing, just happened to check my feed reader right then
#
aaronpk
which feed did you see it in? github?
#
snarfed1
yeah
snarfed joined the channel
#
kylewm
snarfed: do you happen to know off the top of your head whether the facebook API treats usernames and user ids interchangeably? i'm trying to POSSE tagged people
#
snarfed
kylewm: in most places yes it does
#
snarfed
definitely when you use them in api urls
#
kylewm
snarfed: that's excellent, thanks :)
#
aaronpk
alright KartikPrabhu feel free to switch to testing with https://indiepost.micropub.net/ !
#
KartikPrabhu
neat! thanks :)
#
aaronpk
took longer than I wanted it to take, but I spent a while on some very small details
#
rascul
Once you've signed in, you'll see an interface like the below which you can use to write a post. Clicking "post" will make a Micropub request to your endpoint.
#
rascul
"like the below" might not be right! https://indiepost.micropub.net/docs
#
aaronpk
oops I moved it to the right
#
rascul
oh well i also meant maybe you need a "one" between "the" and "below"
#
rascul
and yeah it's not really below either
#
aaronpk
fixed thanks
tantek joined the channel
#
KartikPrabhu
aaronpk: I am getting a SSLError while trying to verify tokens from IndieAuth it says "hostname 'tokens.indieauth.com' doesn't match either of 'mail.indieweb.org', 'indieweb.org'" this does not seem to be an SNI issue since the domains are completely different
#
aaronpk
that actually sounds exactly like an SNI issue
#
aaronpk
what http client?
#
KartikPrabhu
this is the python requests library... not sure what it uses
#
KartikPrabhu
kylewm: do you know how to deal with python's SNI issue
#
kylewm
KartikPrabhu: noo, I haven't encountered that
#
KartikPrabhu
i suppose it is fixed in py3! :|
#
aaronpk
it may also be because of an old openssl underlying library
#
kylewm
you should upgrade to py3, join me in its glory
#
Loqi
I agree
#
aaronpk
chances are the python library just uses the core openssl underneath anyway
#
aaronpk
so if you can update your system packages it may fix itself
#
kylewm
tantek.com is down?
#
aaronpk
that looks bad
#
aaronpk
tantek: ^^^
#
kylewm
KartikPrabhu: I didn't use tokens.indieauth.net
#
kylewm
more likely that than a py2/3 thing
#
aaronpk
"This support has not been back ported to Python2."
#
aaronpk
ok yeah wow, python2 doesn't support SNI at all
#
KartikPrabhu
yeah. there are some "hacks" to fix that...
#
KartikPrabhu
is now conflicted between 'get micropub working' or 'port to py3' and avoid all the pain..
#
tantek
bandwidth exceeded apparently
#
tantek
and here we go again I have to track it down
#
KartikPrabhu
your are getting too famous for your own good
#
aaronpk
yikes. you might consider switching to a host that has a larger bandwidth limit.
#
tantek
clearly I don't know how to post content efficiently or something :P
#
aaronpk
I have 15TB/mo bandwidth at Linode for example
#
aaronpk
I would be impressed if you had more than 15TB/mo traffic
#
kylewm
KartikPrabhu: get micropub working :) python 3 is a rabbit hole you might not want to go down right now
#
kylewm
aaronpk: out of curiosity, how do you mark up mentions of people like in http://aaronparecki.com/articles/2013/09/15/1/indieauth-now-supports-openid-delegation
snarfed joined the channel
#
KartikPrabhu
kylewm: yeah I am not even able to install those SNI-fix packages on my host! <grumble grumble>
#
kylewm
I was thinking about swiping the wiki markup and doing something like [[Aaron Parecki|Aaron]]
#
aaronpk
kylewm: you mean what does my source look like?
#
kylewm
aaronpk: yes, that could have been clearer
#
tantek
I guess I'm trying to make things work with a "cheap" VPS hosting account as part of the challenge of making the indieweb economically accessible?
#
aaronpk
I type @peat and it adds everything automatically from the mapping of usernames to profile info I store
#
aaronpk
tantek: no idea what you're paying, but dreamhost is certainly a cheap-ish shared host that is probably roughly equivalent to your current one
#
tantek
$10/mo.
#
aaronpk
dreamhost is about the same. $9/mo if you pre-pay a bunch
#
aaronpk
unlimited storage and bandwidth tho which is nice
#
tantek
how's their support turnaround?
#
aaronpk
reasonable, iirc. I haven't had to contact them recently though
#
tantek
I like my current host as when bad things happened (i.e. security compromise) they were EXTREMELY responseive.
#
tantek
(way more than any phone company that's for sure)
#
rascul
digitalocean is $5/mo for the cheapy one
#
aaronpk
dreamhost is certainly proactive about getting people to update their wordpress installs
#
aaronpk
and I can understand not wanting to go the full VPS route especially if all you've got is a small php site
#
rascul
heroku and openshift can be good too
#
rascul
if you don't want/need the full vps type thing i mean
#
tantek
I'm curious what caused the bandwidth exceeding (last time the culprit was Atom feed)
#
tantek
I can't access my stats or anything until they reactivate my site.
#
KartikPrabhu
can verify tokens now! :D
#
tantek
Anyway, it's at least important to document these kinds of problems so we can capture at least the challenges with web hosting service(s)
#
aaronpk
KartikPrabhu: congrats! what'd you do?
#
KartikPrabhu
I made set it to nor verify the SSL bit temporarily...
#
aaronpk
ah yeah
#
KartikPrabhu
not optimal but hoping it'll go away if/when I port to py3
#
aaronpk
anybody have old screenshots of twitter when they showed which app was used to post the tweet?
#
aaronpk
it was on the timestamp line
paulcp_ joined the channel
#
KartikPrabhu
that's neat... tantek does something similar with BBEdit right?
#
aaronpk
goes to check tantek.com
#
aaronpk
realizes it's still down
#
aaronpk
"11:34 on 2014-03-16 using BBEdit"
#
aaronpk
hm i'm not sure I want to give that much weight to it on my site
#
KartikPrabhu
you are thinking of this for micropub?
#
aaronpk
well the micropub request already includes the client_id
#
aaronpk
I'm thinking about where to display that on my site now
#
KartikPrabhu
footer of posts is the only place I can think of
#
aaronpk
well I have a sidebar with some other stuff like the tags and syndication links
#
KartikPrabhu
aaronpk: does indiepost send token in the header?
#
KartikPrabhu
nice! SO now I can implement that too :D
#
aaronpk
but i might make it have a 50/50 chance of sending in the post body
#
aaronpk
just to throw you off
#
KartikPrabhu
could you keep it at headers for a while so I can implement it :D
#
aaronpk
i won't touch it for a while :)
#
KartikPrabhu
aaronpk: should I be testing that the Authorization header has the exact word "Bearer" in it?
#
aaronpk
probably yeah, although you likely will never get any other values
#
aaronpk
HTTP basic auth uses the word "Basic"
dybskiy joined the channel
#
aaronpk
e.g. Authorization: Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==
#
KartikPrabhu
hmm... so I shouldn't be strict about it?
#
aaronpk
well you should check for Bearer, because if you got "Basic" then you'd need to do something completely different with it
#
KartikPrabhu
oh ok cool
snarfed1 and snarfed joined the channel
#
rascul
ooo i just discovered this http://validator.w3.org/feed/
#
bret
yeah I used the hell out of that when writing my feed
snarfed1, snarfed and tantek joined the channel
#
tantek
looks like the culprits were bots :(
#
tantek
#1 source of hits were from something claiming to be Mozilla/4.0 (compatible
#
tantek
MSIE 5.5
#
tantek
Windows NT 5.0)
#
tantek
#2 source of hits were from Mozilla/5.0 (compatible
#
tantek
Pimonster
#
tantek
www.pricepi.com)
#
tantek
both of which were 10x the next UA
snarfed joined the channel
#
tantek
is tempted to just block IE5.5 as nearly no human is using that any more - got to be a lying bot
#
tantek
#3 is *also* a bot: Mozilla/5.0 (compatible
#
tantek
EasouSpider
bnvk joined the channel