2014-06-20 UTC
fmarier, gRegor` and KartikPrabhu joined the channel
# 00:58 ShaneHudson snarfed: Hey, have you considered allowing brid.gy to use permashortcitations as webmentions?
# 01:01 kylewm ShaneHudson: if you publish rel=syndication (or u-syndication) links on your site, then Bridgy can find the relationship from the other direction
# 01:01 aaronpk ShaneHudson: if you include the rel=syndication link from your post to the tweet bridgy will find it even if the tweet doesn't ahve a link
scor joined the channel
# 01:02 ShaneHudson I've been fiddling around with Sebastian's plugin and it is a great start. And now the book is done I have some time to care for my site :)
# 01:02 snarfed (ShaneHudson: bridgy has also supported PSCs pretty much since the beginning. but rel-syndication is the new hotness!)
# 01:03 ShaneHudson True, I don't have a short domain so thought putting in [ ] could be nice.
# 01:04 kylewm i'm not sure if that's something we thought about, that would be another good way to do it, concatenate the user's URL with an even shorter citation
# 01:04 aaronpk that seems even more obscure to someone looking at it
# 01:04 snarfed now that we have rel-syndication, PSCs (and friends) now seem like a pretty gross hack that can die
# 01:05 ShaneHudson Yeah I agree, I didn't know about rel-syndication (or at least, didn't realise its power)
# 01:06 ShaneHudson Right it is 2am so I best be off to bed, but thanks :) Looking forward to finally enabling posse! Need to find a way to use Tweetdeck still though, but through my site instead of twitter.
# 01:07 aaronpk i miss the days when you could point twitter clients at arbitrary endpoints
# 01:08 snarfed somehow i'm generating a unix timestamp that's 13k *digits* long
# 01:09 Loqi Now: 2014-06-19 18:09:40 PDT Unixtime: 1403226580 NewCal: 2014-3-49, New Saturday, the 49th day of the third bim
KartikPrabhu, chrissaad1 and dybskiy joined the channel
j12t joined the channel
# 02:08 GWG KartikPrabhu: Didn't I tell you some of mine already?
# 02:09 KartikPrabhu aaronpk: yup! that is why I am a little sceptical of the /homepage ideas where the homepage is more like your profile page
# 02:09 KartikPrabhu GWG: no that i recall... you sjould write them down so you can link it easily
# 02:09 GWG aaronpk: I like parts of your design.
# 02:09 GWG aaronpk: I should give you points for keeping track of your website development that way though
# 02:12 aaronpk something I pressed made chrome close all windows :(
# 02:15 rascul aaronpk what is happening to cause me to keep breaking indieauth?
# 02:15 rascul sometimes when i hit rescan it works, others i get ssl error
# 02:15 rascul oh have i been spamming you with indieauth breaking?
# 02:16 rascul when i sign it, it says it was signed with the wrong private key
# 02:17 rascul i've tried various ways of signing it and it doesn't work
# 02:17 aaronpk i'm seeing it in my dev copy. i'll take a look in a sec.
# 02:18 rascul it's also same key that keybase has, i've tried using keybase to sign it and gpg but it doesn't take
# 02:19 rascul i did fix my g+ thing from earlier though, i didn't have my rascul.io link in the right place on my profile
nikol and nikol1 joined the channel
# 02:28 KartikPrabhu aaronpk: quill is still doing the "not send anything" on clicking Post unless I log in again. Can't seem to figure out what it is. no errors in the console
emmak joined the channel
# 02:36 GWG KartikPrabhu: Another East signup....
# 02:36 GWG KartikPrabhu: So, what is our secret quality weapon?
# 02:39 GWG KartikPrabhu: What about me? What do I do to destroy those westerners?
dybskiy joined the channel
# 02:41 KartikPrabhu I am just working on something I wanted to make for a long time and will be visible on the site instead of 'plumbing' like a file storage database or something
# 02:44 GWG KartikPrabhu: I have many dreams.
# 02:45 GWG KartikPrabhu: I want to make the Indieweb easier
# 02:45 GWG Not just for me, but for all interested parties
# 02:46 KartikPrabhu GWG: very good goal indeed. Anything particular that could be done for that?
# 02:46 rascul i don't see my software helping with that though heh
# 02:46 rascul it's probably going to be too many pieces with too complex a setup for the newbies!
# 02:46 Loqi rascul meant to say: it's probably going to be too many pieces with too complex a setup for the anybody but me!
# 02:47 KartikPrabhu rascul: not all indieweb implementations need to do that. Some can be for experiments at the bleeding edge
# 02:47 GWG KartikPrabhu: I use Wordpress, so all my plans are based on that
# 02:48 KartikPrabhu GWG: Wordpress is a good space for that goal IMO. but i think you should choose one specific task that you could show at IWC and say "see this little thing makes indieweb a bit easier for newbies"
# 02:49 KartikPrabhu GWG: or not. IWC is not restricted to showing off. which is a good thing :P
# 02:49 GWG KartikPrabhu: All of my pieces are gradually coming together.
# 02:52 GWG KartikPrabhu: tantek will be in the room. If anyone will respond with constructive feedback, it is him, from what I see
# 02:53 aaronpk man I really wanna do this mobile qr-code based key login
# 02:54 aaronpk in this case the qr code is just a convenient encoding mechanism
# 02:54 aaronpk it could technically be some other code like the clef code, but the ios sdk has a qr code reader built in now
# 02:54 KartikPrabhu in my experience, people seem to have some guttural disdain for qr codes... almost irrational
# 02:55 aaronpk but people use them to set up two-factor auth all the time
# 02:55 GWG KartikPrabhu: tantek-proof sounds negative.
# 02:55 aaronpk in certain contexts they're useful. printing them on a sign and expecting people to scan it to go to a website is not one of those contexts
# 02:56 aaronpk unfortunately that is now what most people think of as a use for a qr code
# 02:57 GWG aaronpk: The problem with the QR code is that it can be difficult.
# 03:01 aaronpk rascul: found the problem with the mismatched keys. fixing it now...
snarfed joined the channel
# 03:04 GWG aaronpk: When you see a sign, you want to scan the code quickly.
# 03:04 GWG aaronpk: However, QR codes aren't prevalent enough to have your QR scanner up front
KevinMarks joined the channel
# 03:07 GWG aaronpk: I was just explaining why I don't use them.
# 03:08 aaronpk but they are useful in specific contexts. like setting up two-factor-auth where you need to quickly get a large key from your computer to your phone
# 03:15 aaronpk my favorite error messages to write: "this should never happen"
dybskiy joined the channel
# 03:22 rascul aaronpk i may have found another issue, but it may also be related to the ssl thing that comes up sometimes
# 03:23 rascul and doesn't seem to load, but it appears to be only when rescanning gives ssl error
# 03:23 rascul me and indieauth haven't been getting along well lately :(
# 03:24 aaronpk i severely dislike things that do different things at different times with the same inputs
KevinMarks joined the channel
# 03:25 KartikPrabhu rascul: better you find these bugs than someone who can't/won't help debug them
# 03:25 rascul i've never worked with ssl as a developer only as a user
# 03:26 KartikPrabhu actually I have. I struggled with python2 lack of SNI support and then stopped checking for SSLs and gave up
dybskiy_ joined the channel
# 03:34 rascul i told tantek i would make /dokku today but i forgot so i stubbed it until i get to it tomorrow
v0 joined the channel
# 03:54 aaronpk rascul: try again! fixed the mismatched key error
npdoty, sparverius, dybskiy and gRegor` joined the channel
# 04:22 gRegor` Majorly hacked. "In summary, most of our data, backups, machine configurations and offsite backups were either partially or completely deleted."
# 04:26 KartikPrabhu someone more knowledgeable needs to document how to avoid such things on the indieweb
# 04:27 aaronpk it sounds like they may have considered backups in alternate regions "off-site"
# 04:27 aaronpk from that explanation it sounds like the hacker only had access to the AWS account
# 04:28 gRegor` KartikPrabhu: It's all on their site.
# 04:28 gRegor` This isn't just a big oops, it's the end of codespaces apparently.
# 04:28 aaronpk i don't see any description of codespaces on their site, it's just a description of the incident
# 04:28 KartikPrabhu gregor`: I meant what functionality did codespaces provide to customers
# 04:28 gRegor` Oh, sorry. Misread you.
# 04:29 gRegor` code repos, from what I can tell. I was not familiar before today
# 04:29 aaronpk "We offer Rock Solid, Secure and Affordable Svn Hosting, Git Hosting and Project Management."
# 04:29 KartikPrabhu for instance what motivation did a "hacker" have to attack them apart from pure-malice
# 04:30 gRegor` Watch the world burn, probably.
# 04:30 aaronpk this is obviously purely speculation, but likely something personal
# 04:30 KartikPrabhu if/when this hits the news this might mean more people standing behind large silos
# 04:30 gRegor` I think "rock solid" is in question too :)
# 04:31 aaronpk also not good for enterprise customers trusting startups
# 04:31 gRegor` 404 error on that link
# 04:32 gRegor` So, uh, let's be sure we have our code backed up and not just in repos. :)
# 04:33 gRegor` copyright 2007-2013 so, not new kids on the block...
# 04:34 KartikPrabhu someone needs to write this up so this does not happen to people here for whatever reason
# 04:35 KartikPrabhu maybe a talking point for IWC too. took screenshot of codespaces.com page for posterity ...
KevinMarks joined the channel
# 04:41 aaronpk one good thing about the situation is that despite the hacker gaining access to their AWS account, they were not able to actually access any machines, so they couldn't steal customer data or anything. this is because the AWS control panel is completely separate from actual SSH or console access to the servers.
# 04:42 aaronpk KartikPrabhu: "have" just means you're willing to lead the session
wolftune and dybskiy joined the channel
KevinMarks joined the channel
# 04:53 KartikPrabhu I want to reply to a G+ post, but G+ does not give a URL for comments! Will bridgy pickup follow up comments anyway somehow?
wolftune joined the channel
# 04:56 snarfed KartikPrabhu: so, you want to posse a comment on that post?
# 04:57 snarfed yeah, bridgy doesn't backfeed responses to comments at all, g+ or otherwise
# 04:57 snarfed it does on twitter because "comments" (ie @ replies) are full fledged tweets
# 04:58 KartikPrabhu snarfed: yes that's what I guessed. I'll posse it anyway and document this stupidity for G+ thanks :)
# 05:01 snarfed if you really want to, go for it…but you may eventually hit diminishing returns
# 05:01 snarfed it's ok to not posse 100% of everything everywhere
# 05:05 KartikPrabhu snarfed: I'll posse the comments and only manually backfeed the "important replies" whihc G+ will tnotify me anyway... certainly won't keep track of all replies forever
# 05:06 aaronpk ok that was a good push on indieauth.com! goodnight!
# 05:08 snarfed KartikPrabhu: glad to hear it! all kylewm's great work
wolftune, dybskiy, brianloveswords, edge226, snarfed, chrissaad, glennjones and pfefferle joined the channel
# 06:47 Loqi pfefferle: GWG left you a message on 6/19 at 6:44am: Put some notes on the Development page about filter placement. Not sure if you want to add anything
v0 and aaronpk joined the channel
Loqi joined the channel
# 13:10 Loqi barnabywalters: aaronpk left you a message on 6/19 at 2:11pm: I already invalidated your screencast, sorry :-/ try signing in to indieauth.com again!
chloeweil joined the channel
# 13:12 barnabywalters !tell aaronpk nice work on the indieauth PGP UI, having the challenge in the textbox is a big improvement! only request now is for faster challenge generation, it takes a couple of seconds for some reason
# 13:12 Loqi Ok, I'll tell them that when I see them next
chloeweil_, dybskiy, brianloveswords, chrissaad and eschnou joined the channel
# 13:48 bnvk ok, so IWC Berlin is shaping up better than expect
# 13:48 Loqi bnvk meant to say: ok, so IWC Berlin is shaping up better than expected
# 13:49 bnvk we have a nice place secured with good internet and a projector
# 13:49 bnvk it's going to be a smaller meetup, but am updating the wiki now
# 13:51 barnabywalters bnvk: if it’s in sync with the US ones, i.e. late evening there’s a small chance I could get a train into Berlin for the duration
# 13:51 GWG barnabywalters: They have trains from Iceland to Germany?
# 13:52 GWG I didn't think my geographical knowledge was that bad
# 13:53 bnvk barnabywalters: ok, i'm thinking of it starting at 2:00 PM here, which is -1 hr from when NYC starts up
# 13:54 barnabywalters bnvk: cool, when I get to Hösseringen I’ll figure out if it’s feasible to visit for an evening
# 13:55 bnvk the space it's at is so friggin cool- one of the neatest coworking places I've ever been to- lots of nature
# 13:56 barnabywalters bnvk: given that you have a space and some people attending, probably put it at the top
# 13:57 GWG bnvk: Far East might be confusing.
# 13:57 GWG bnvk: That usually is a term for Asia.
# 14:03 GWG bnvk: You could try Osten, isn't that German for East?
dybskiy joined the channel
snarfed and vanderwal joined the channel
pfefferle and ab9 joined the channel
ttepasse, pfefferle and phil80 joined the channel
phil80, tantek, vanderwal, pbeaulieu and dybskiy joined the channel
# 15:17 bnvk What is the best place to link to the WebMention protocol? webmention.org used to be a really nice site, now it forwards to a GH repo
# 15:19 bnvk rascul: the .io site is a service, not the protocol though
gRegor` and scor joined the channel
# 15:53 kylewm re: the future of wordpress, i'm a little surprised there isn't already a super stripped down "blog-only" fork of wordpress
# 15:54 kylewm but i guess it's always surprising how few people are really core developers of even such a widely used product
vanderwal joined the channel
ab9 and wolftune joined the channel
# 16:01 tantek bnvk - you got space in Berlin for IWC2014?!? Wow that's awesome!!!
# 16:03 tantek bnvk - do you know the hood.ie folks? They are in Berlin and I heard they are interested in IndieWeb as well.
# 16:08 bnvk tantek: yah, I randomly bumped into Jan while eating burritos last week
# 16:09 bnvk hopefully he and others will be interested in coming
# 16:09 tantek btw - as folks here use a lot of microformats - today is microformats.org's 9th bday
# 16:11 dysfun it's also x windows' 30th birthday
j12t joined the channel
dybskiy, paulcp and phil80 joined the channel
# 16:22 Loqi aaronpk: barnabywalters left you a message 3 hours, 10 minutes ago: nice work on the indieauth PGP UI, having the challenge in the textbox is a big improvement! only request now is for faster challenge generation, it takes a couple of seconds for some reason
iangreenleaf and iangreenleaf1 joined the channel
# 16:24 aaronpk barnabywalters: thanks! Yeah it takes a second. I think it goes out and checks your site to make sure it's requesting to generate the challenge with the proper key.
iangreenleaf joined the channel
# 16:25 aaronpk I suppose after you do it once I could pre-generate the challenge and embed it in the page when you load up the initial auth screen so then at least subsequent visits would show the challenge instantly
KevinMarks joined the channel
# 16:26 tantek I plan to post it on my own site in about 1-2 hours and then manually POSSE to microformats.org (just as barnabywalters did with his previous post).
# 16:29 aaronpk also tantek it's probably time to start thinking about schedule coordination between PDX / NYC
# 16:29 tantek going to be even more interesting with Berlin!
# 16:30 tantek maybe we can do join NYC morning / Berlin afternoon sessions (only 6 hours difference)
# 16:30 Loqi tantek meant to say: maybe we can do joint NYC morning / Berlin afternoon sessions (only 6 hours difference)
# 16:30 tantek and then joint NYC afternoon / PDX morning sessions
# 16:31 barnabywalters goal for next year: inhabit ALL THE TIMEZONES and keep a rolling indiewebcamp going for a week :)
KevinMarks2 joined the channel
# 16:31 tantek all we need is Australia (where's mnot?) and we could keep it rolling the whole weekend!
# 16:31 bnvk tantek: that would be absolutely great!
paulcp joined the channel
snarfed and benwerd joined the channel
# 16:45 aaronpk barnabywalters: ask and ye shall receive! try signing in again ;)
# 16:46 barnabywalters aaronpk: wonderful! now the biggest bottleneck is on mouse clicking time and time taken to sign!
# 16:46 aaronpk i should make a keyboard shortcut to submit the form. it auto-focuses in the challenge text so you don't need to click there
# 16:47 aaronpk actually yeah you don't need to use the mouse at all!
# 16:47 barnabywalters for some reason the default one for sign is command-shift-r, which of course refreshes firefox
# 16:48 aaronpk it's usually the last in the list, so first press "k" to select the last element, then enter which brings up the challenge. then command-a to select all, then your keyboard shortcut for signing (mine is command-alt-s) then tab space to submit
# 16:48 benwerd tantek: Thank you! I've been pushing the NY journalists we've been meeting to go attend IWC at the NYT. Hopefully they will do that.
# 16:49 tantek we don't have a POSSE event for that on FB though - so I'm not sure how they will (unless they do sign-in with their own site on the wiki)
# 16:50 tantek that would make the most sense, that way you would get FB RSVPs via bridgy to your Indie Event.
# 16:51 tantek pretty sure snarfed deployed that Bridgy functionality a few weeks ago
# 16:51 tantek I think I've seen it work on benwerd's indie events that he POSSEs to FB
# 16:51 aaronpk yeah i've got a bunch of other indie events with FB rsvp's
# 16:52 tantek benwerd - want to help out and maybe reach more journalists by posting an Indie Event for NYC and POSSEing that to FB?
caseorganic joined the channel
# 16:52 benwerd tantek - will definitely do that, but later today. I may have broken my event plugin ... *shifty eyes*
# 16:52 tantek (somehow it makes more sense to do separate indie events with their own POSSE FB copies for each location)
# 16:53 tantek wonders if bnvk has gotten indie event posts and RSVP webmention receiving working in Social Igniter...
friedcell, emmak, dybskiy, lupinedev, tantek, dybskiy_, vanderwal, wolftune and benwerd joined the channel
caseorganic joined the channel
# 18:07 tantek rascul - neat! I wonder how well that works with multiple clients (e.g. laptop, iPod etc.)
# 18:07 rascul you can connect as many clients as you want to it
# 18:08 rascul at any given time i'll have up to 4 conencted
# 18:09 rascul can be configured to replay x number of lines of scrollback when your client connects which is pretty nice
# 18:10 rascul also if you can setup your reverse dns for tantek.com to point to tantek.com, then run znc on tantek.com, you'll be tantek@tantek.com when someone would /whois you
dybskiy joined the channel
# 18:11 tantek I can't setup reverse dns unfortunately on my shared setup
# 18:16 bnvk snarfed: have you for a moment considered making Bridgy handle Diaspora activity?
# 18:17 aaronpk rascul: do you see my reverse dns as mail.pin13.net?
# 18:17 snarfed bnvk: i'd happily merge a PR that adds it though!
# 18:17 tantek bnvk - do you know anyone personally that uses diaspora on their own domain?
# 18:17 bnvk I'm getting some activity on my manually POSSE post about IWC there
# 18:18 snarfed tantek: and a test user. i'm guessing you ask because it's hard to set up a test user…?
# 18:18 bnvk tantek: it's a more a larger commuity site here
# 18:18 tantek snarfed, was genuinely curious how you'd set up testing a platform that appears to be waning.
# 18:18 bnvk but independently run and a bit more private than big blue
# 18:19 snarfed tantek: ah. eh, waning doesn't mattter for manual testing, as long it's runnable at all. for adoption, yes, waning matters :P
# 18:19 bnvk tantek: not like MediaWiki, but rather a FB replacement
# 18:19 snarfed bnvk: longer answer, it's not a personal itch for me, so i wouldn't implement it myself, but i'd be happy to work with you or anyone else who wants to do it!
# 18:19 bnvk i'm very hesitant to refer to that as a silo
# 18:20 bnvk snarfed: cool, well. Perhaps I'll mention it as a task to add webmention / bridgy support if any hackers come here
# 18:21 snarfed bnvk: sure! feel free to file a github issue for it as a feature request. there are similar issues for flickr, linkedin, app.net
# 18:23 rascul i feel like there's too many stubs on the wiki
# 18:26 bnvk tantek: here's some decent stats about current Disapora pods in use http://podupti.me/ notice the exceptionally high amount of pods in DE
tilgovi joined the channel
dybskiy_ joined the channel
benwerd joined the channel
# 18:33 tantek bnvk - nice! good to see that there's folks iterating on it
# 18:34 rascul bnvk now i kind of want to see the supposed absolutely gorgeous design of the uterus
# 18:34 tantek bnvk - and especially good of you to reach out to build a bridge between communities.
# 18:34 bnvk ideally we can convince someone in their community to add webmention support
dybskiy joined the channel
# 18:37 tantek bnvk - that screenshot is quite a nice clean look
wolftune joined the channel
friedcell joined the channel
eschnou joined the channel
# 18:41 aaronpk how come I can't sign in using an existing identity?
# 18:41 bnvk dunno, maybe no one in their community is aware of the genius of IndieAuth...
# 18:43 kylewm I so wanted pump.io to federate with indieweb too
# 18:43 tantek thanks for the links and info bnvk - tried to capture it on the IWC wiki accordingly
# 18:43 bnvk I think between Pump, Disapora, POSSE, and WebMention- WE ARE SO CLOSE
# 18:44 tantek kylewm - are there posts on pump.io sites with posts you want to comment on?
# 18:44 kylewm tantek: yes! i follow mlinksva and evan, among others there
# 18:45 rascul.io edited /dokku (+947) "describe dokku with some possible deployment options and provide a place for indieweb examples as they become known" (
view diff )
# 18:48 aaronpk do you feel like it accurately represents Disqus?
# 18:48 gRegor` Whoa, cweiske delivers application/xhtml+xml. Hardcore.
# 18:48 rascul i don't know enough about disqus to determine that, i was just clicking on random stub pages and disqus is the longest stub i've found so far
# 18:49 gRegor` There's longer stubs, heh
# 18:49 rascul yeah i know, i can't recall them though and i haven't randomly clicked on them yet :)
paulcp joined the channel
# 18:50 gRegor` The criteria is pretty subjective. I mentioned it in chat a while back and I think the idea was not having "stub" might discourage people from editing.
# 18:50 gRegor` I think it was tantek that said that, but I might be wrong. I might also be paraphrasing poorly. :)
# 18:52 gRegor` I view it primarily as a way to invite people to edit the page, which is why I added the "expanding it" link directly to it.
# 18:53 rascul i can't explain why, i guess i just don't like seeing stub pages all over the place
# 18:54 gRegor` Well I was looking for the convo that led to that update of /stub
# 18:55 gRegor` That's how I felt initially, too, rascul
# 18:55 gRegor` I think I was wanting to categorize them more like "this page has one sentence" or "this is a pretty complete page"
# 18:56 gRegor` But I don't think there's been problems around that, really
# 18:59 rascul i wonder if there's any cases to show that the stub leads to more people editting the page
# 18:59 gRegor` It came up because I made the mistake of copying wikipedia templates for various types of stubs.
# 19:00 rascul # 15:30 <tantek> aaronpk - I'm not sure we have a good idea of *when* an article is "filled out"
# 19:01 tantek gRegor`: better to be lazy and only copy/create stubs when needed.
# 19:01 rascul although on pages where i'm the primary editor, i'll happily remove stub when i feel it's "filled out"
# 19:01 gRegor` Any suggestions for progress indicators, rascul?
# 19:01 rascul the talk page could be useful, but i haven't seen it used yet
# 19:01 tantek in practice I don't see a reason for talk pages
# 19:02 tantek I'd rather actually capture multiple points of view on the pages themselves
# 19:02 gRegor` I used one once, rascul. Got no response :)
# 19:02 rascul i mean useful just to keep track of page progress indicators to remove stub
# 19:02 gRegor` But I think it was captured later in IRC
# 19:03 gRegor` Yeah, wikipedia does that. Projects track page progress on the talk pages, using different criteria
# 19:03 rascul with irc, the talk page doesn't seem very useful though for most cases
# 19:03 rascul but for tracking page progress, it seems to fit i think
# 19:03 rascul can't really think up any other case where we could make better use of it than we could with irc
phil80 joined the channel
# 19:05 rascul if a page has something in its talk page, is there an indication of that anywhere without actually viewing the talk page?
bnvk1 joined the channel
# 19:05 tantek rascul - there isn't, hence the problem. it's too out of the way. like invisible metadata
bnvk2, bnvk, vanderwal, KartikPrabhu, Kopfstein, nloadholtes, wolftune, awolf, benwerd and eschnou joined the channel
# 19:55 aaronpk that just seems like a terrible idea :P at least use something a little more powerful!
# 19:59 KartikPrabhu people seem to be doing things just for coolness-factor under the name of #ownyourdata
dybskiy joined the channel
benwerd joined the channel
# 20:45 aaronpk so this Clef thing is pretty cool, but is basically an identity silo. Would anyone be interested in seeing it as a login option on indieauth.com? https://getclef.com/
dybskiy joined the channel
# 20:58 snarfed …but i'm not convinced. if this replaces your password with your phone, and you use an app or text msg as the 2nd factor (like most people), someone with your phone has both parts
# 21:01 tantek snarfed, now that major phone carriers all have web UIs to access SMS/txt messages, phones are no longer a "2nd factor"
# 21:01 tantek where by "2nd factor" it means something other than web
# 21:02 snarfed two distinct passwords is technically 2 factor (though not recommended)
# 21:02 snarfed the big security boost is when you use two of (something you know, something you have, something you are) instead of just one
# 21:03 snarfed more to your point, it's an argument for using an auth app instead of text msg as the common 2nd factor
# 21:03 aaronpk agreed. people often call things "two-factor auth" when really they just mean you can use your phone to sign in
# 21:04 GWG aaronpk: How would indieauth use your phone?
# 21:05 aaronpk please note that nothing on indieauth.com is two-factor
# 21:05 aaronpk you can sign in from your phone by entering a challenge code sent to your SMS number, or by installing the google authenticator app and entering a code
# 21:05 aaronpk but in both cases this is just one factor, just happens that it could be your phone
# 21:06 snarfed aaronpk: it's a tangent, but you could easily add 2 factor to indieauth.com by letting people opt into requiring two auth providers per login
# 21:06 aaronpk it would need to be built into the protocol, not just the service
# 21:07 aaronpk from what I can tell, nobody has explored two-factor auth in OAuth or OpenID Connect
# 21:08 GWG I switched after Google closed-sources Authenticator.
# 21:08 aaronpk I say google authenticator because that's what people recognize. usually nobody knows wtf i'm talking about if I say "use your TOTP app..."
# 21:10 snarfed we all called it OTP inside google when we first 2-factored our internal logins, years before open sourcing the app
# 21:11 GWG aaronpk: I don't see anything about SMS/OTP in the indieauth site. Am I missing it?
# 21:12 aaronpk although I haven't updated my pebble to 2.0 yet so I don't know which pebble-authenticator fork is best for 2.0
# 21:13 GWG aaronpk: I'm not going to use the Pebble. I just like the geekiness of it
pfefferle joined the channel
# 21:15 GWG aaronpk: Only because the battery life hasn't been reliable lately.
# 21:19 GWG I'm wondering if there is a secure way for the phone to keep the generator as well
pauloppenheim, scor and chloeweil joined the channel
# 21:38 bnvk you guys, and girls, I think IWC Berlin might set a record for youngest attendee
# 21:45 bnvk KartikPrabhu: I'll post a picture / video day of ;)
# 21:46 KartikPrabhu bnvk: why does the Berlin Guest List have 5 attendees but only 2 actual people listed?
gRegor` joined the channel
# 21:47 bnvk KartikPrabhu: because I'm waiting to get headshot from the two ppl I am mentoring
# 21:47 bnvk and I'm counting a person is problem not going to get a site up to IndieMark
paulcp joined the channel
# 21:58 aaronpk hmm someone tried signing in using my app.net account
# 21:59 aaronpk feature request for indieauth.com: show me a list of successful and unsuccessful login attempts for my account
vanderwal joined the channel
KartikPrabhu joined the channel
# 22:37 GWG !tell pfefferle Saw the pull request, had actually fixed those and forgot to push.
# 22:37 Loqi Ok, I'll tell them that when I see them next
# 22:37 Loqi Ok, I'll tell them that when I see them next
# 22:39 aaronpk so... no interest in Clef as an auth mechanism then?
iangreenleaf joined the channel
# 22:39 aaronpk maybe hold off on it until proper 2fa is part of indieauth?
# 22:40 aaronpk well I still have to fix up proper authorization_endpoint handling :)
# 22:42 aaronpk it is kind of strange that SMS can no longer be guaranteed to be a second factor for 2fa
scor joined the channel
# 22:45 bnvk aaronpk: how is PGP integration coming?
# 22:46 aaronpk super fast and actually doesn't require any mouse clicks if you have a keyboard shortcut for signing the selected text :)
gRegor` joined the channel
# 22:56 aaronpk hm it was supposed to trap that error. try it again, I think you probably copied partial text from the challenge text
# 22:56 bnvk yep, I think I had the wrong thing selected in my clipboard
# 22:56 aaronpk that's odd, there's definitely a begin/rescue block there
# 23:01 bnvk wait, so next time through it shouldn't ask for the signing step right?
# 23:02 aaronpk it'll still ask you to sign, but the challenge will be pre-loaded
# 23:02 aaronpk so you won't have to wait a second on the "loading..." part
# 23:03 bnvk very cool, was just showing it to team dudes, and our security advisor Dymaxion who's here
# 23:07 bnvk she says hi back, said she met you ages ago
KevinMarks2 joined the channel
# 23:14 aaronpk well that's odd, I can't reproduce the error you got bnvk
# 23:15 bnvk I believe I signed the URL of the page
# 23:15 aaronpk i signed some junk text and it properly caught the error and told me
# 23:15 bnvk as I think in CMD + TAB I accidentally had the URL bar selected
# 23:18 aaronpk thanks! that is still super weird that my first attempt at catching that error didn't work
# 23:19 bear once I realized you wanted ascii-armored text it was easy
# 23:19 bear a signature doesn't have to start end with the ---- markers
# 23:20 aaronpk i'm just passing it into the gpgme library to verify the signature
# 23:20 bear a "normal" signature is a binary output
# 23:20 aaronpk oh yeah..that doesn't seem like it would work very well over http :)
# 23:21 gRegor` POST 0110100...
caseorga_ joined the channel
benwerd and tilgovi joined the channel
# 23:50 aaronpk bear: know of a good ios library for gpg signing?