#indiewebcamp 2014-07-24

2014-07-24 UTC
chrissaad, basal and wolftune joined the channel
#
kylewm
so to the rel-me question, my understanding is that the backlink is an extra sanity check to prevent me from putting the wrong rel-me url on my homepage?
#
snarfed
kind of
wolftune joined the channel
#
snarfed
kylewm: sounds like it was more important for non-interactive-
#
tantek
yes and yes
#
tantek
also makes it one step harder for an attacker
#
snarfed
defenseinlayers++
#
Loqi
defenseinlayers has 1 karma
#
tantek
which I feel like is a goodidea(™) for anything identity related
#
kylewm
to me feels like a feel-good layer that doesn't add any actual protection...
#
tantek
I mean, it may only "slow them down", but in practice, slowing down an attack is *exceptionally* useful
#
kylewm
if they have control of my site and can change my rel=me to point to their twitter account
#
kylewm
then changing their twitter profile to point to my site is trivial
#
tantek
in many attack scenarios, you learn something is going wrong, and if you have a wider window of time to react and defend / counterattack, then you can defeat an attacker
#
tantek
kylewm: you're making the typical dev error of assuming "trivial" in terms of number of steps is trivial in terms of time and thus how it effects anything in progress
#
kylewm
but it is trivial in time
#
kylewm
it takes 2 seconds...
#
tantek
longer
#
tantek
especially if it doesn't "just work" when they try only one step
#
kylewm
it *would* prevent someone from taking over a bunch of sites and pointing them all to one twitter acct
#
tantek
you're also underestimating how "dumb" attackers can be
#
tantek
and how "clumsy" they can be
#
tantek
in practice, every little step like that makes a difference
#
tantek
true!
#
kylewm
ok like, OAuth1 has a ton of random complexity in it, sign this with that using this nonce
#
kylewm
and OAuth2 just got rid of all that right?
#
kylewm
this feels like that to me
#
tantek
security in practice tends to be more about discouragement and barriers / slowing down than actual outright foolproof prevention
#
kylewm
but I accept the explanation, it makes sense
#
tantek
except this isn't random - it's an independent building block that's useful outside of relmeauth
#
tantek
so the analogy to oauth is false
#
kylewm
"useful outside of relmeauth" -- definitely
#
tantek
whereas that "random complexity" in Oauth1 was all madeup stuff just for oauth1
#
tantek
one can also build a relme library without any auth
#
aaronpk
well, not entirely made up, it was based on what a few providers were doing at the time (Flickr, etc)
#
johncash
aaronpk: oauth is completely made up
#
johncash
:)
#
tantek
johncash - I too recall OAuth following a lot of the design from Flickr's Auth methods
#
aaronpk
so more like Flickr made stuff up for Flickr, Google made stuff up for Google, then it was all merged together
#
johncash
I was talking tongue-in-cheek
#
tantek
aaronpk - any news about PDX HWC 2014-07-30?
#
tantek
venue in particular
#
johncash
tantek++
#
Loqi
tantek has 54 karma
#
aaronpk
esripdx is ok for venue!
#
kylewm
(tantek thanks for talking that through with me)
#
johncash
Yay right next door to me
#
aaronpk
I have been meaning to write up a little thing for the pdx dev week site
#
tantek
has to beg for indie events since he can't yet post his own. :?
#
johncash
I RSVPed to the wiki page
#
johncash
but it doesn't show webmentions
#
johncash
heh
#
aaronpk
takes sooo long for me to post an event to my site :( really need to fix that
#
johncash
switch to known? ;)
#
aaronpk
you know, if Known had started using MySQL instead of MongoDB I probably would have been a major contributor to it and used it on my site long long ago
#
johncash
yeah the mongo part is perplexing
#
pdurbin
what's wrong with mongo?
#
johncash
you heard of newSql?
#
aaronpk
so many things
#
tantek
johncash webmentions to indiewebcamp.com URLs show up here
#
johncash
the newest trend is to learn from the mistakes of oldSql
#
tantek
so apparently you didn't ;)
#
tantek
aaronpk - oh no - I like watching all the advances in p3k!
#
tantek
besides, p3k does *a bunch* of stuff Known doesn't
#
tantek
e.g. much nicer reply-context
#
pdurbin
s/any/and/
#
Loqi
pdurbin meant to say: and mysql is perfect? ;) http://grimoire.ca/mysql/choose-something-else
#
aaronpk
oh I never said mysql was perfect
#
tantek
p3k++
#
Loqi
p3k has 1 karma
#
pdurbin
mongo is web scale ;)
#
aaronpk
we are so not having this conversation
#
pdurbin
oh cool, there's a transcript: http://www.mongodb-is-web-scale.com
scor joined the channel
#
tantek
wow that's hilarious pdurbin
#
tantek
lolololol
#
pdurbin
in all seriousness, we use postgres at work but some are suggesting mongo. I dunno, I haven't tried it yet. I'm happy enough with postgres.
#
johncash
We use mongo in production
#
johncash
don't do it
#
johncash
:)
#
johncash
postgres is probably the best general database
#
tantek
gets some trail mix (instead of popcorn)
#
johncash
What if your database is an html document store?
emmak joined the channel
#
KartikPrabhu
then it would be a file-storage
#
johncash
technically all databases are file storage
#
johncash
even redis writes to disk
#
KartikPrabhu
eh... sure
#
johncash
"When displaying the most recent N posts, Falcon looks for YYYY/B.html"
#
johncash
I kinda like that paradigm
addal joined the channel
#
snarfed
johncash: file and disk aren't always the same
#
snarfed
many dbs bypass the filesystem and just use disks as block devices
#
snarfed
immediately regrets joining the conversation
#
johncash
This is why we don't talk about mongo
#
kylewm
!someoneiswrongontheinternet
#
snarfed
kylewm++
#
tantek
xkcd.com/386
#
Loqi
kylewm has 33 karma
#
kylewm
that was Loqi fast, tantek
#
Loqi
dude
#
johncash
I know I was gonna paste but he beat me
#
johncash
tantek: what is the point of bimonths? I get what they are conceptually, but not how they are useful
#
johncash
if a month is just half a bimonth isn't it essentially the same sort of deal? I'm not getting why dealing with chunks of 60 is better than dealing with chunks of 30
#
tantek
6 chunks is easier for humans than 12 chunks
#
johncash
for indieweb storage it kinda makes sense because you get more data for a given file
#
tantek
and that's why I chose it for that
#
tantek
also avoiding the cognitive dissonance of having things named like Gregorian month numbers (01.html … 12.html) but having them be new months instead
#
tantek
also new months don't take new sundays into account whereas bims do
#
johncash
ah thats the part i was missing the new sundays are bound to the bim unit
#
KartikPrabhu
also a day in a bimonth is one char in base60 ;)
#
tantek
KartikPrabhu: I don't think I've actually made use of that - and that's only almost true, since a bim has 61 days
#
tantek
you'd need to use newbase64
#
tantek
has too many things he wants to build. ;(
#
johncash
I think most nerds worth their salt have that problem
#
tantek
at some point I realized I would very likely never build everything I thought of / wanted to and just decided to start sharing it all publicly in the hopes that if someone else found something useful they would build it.
#
tantek
or build upon the stuff I had built.
#
tantek
johncash I had difficulty figuring out how much salt an average human has per pound of flesh. If you know, we could perhaps compute such worth.
#
kylewm
well that idiom is super gruesome now
cuibonobo and androtest joined the channel
#
cuibonobo
tantek: i was just reading your spec for NewBase64 and the mnemonic of number of strokes for _ + * is brilliant
#
cuibonobo
- + *, rather
#
tantek
thanks much cuibonobo!
KartikPrabhu joined the channel
#
tantek
cuibonobo: also $ IIRC
#
cuibonobo
yeah. the regex mnemonic for $ is very useful as well
#
cuibonobo
anyway, i liked it so much i forked an existing NewBase60 module to NewBase64: https://github.com/jenmontes/python-nb64
#
tantek
ooh nice!
#
tantek
do you have any particular use-case in mind for NewBase64?
#
cuibonobo
post ids, mostly
#
tantek
interesting, why not just use NewBase60 for that?
#
tantek
(more implementations etc., better tested in the wild etc.)
#
tantek
(fewer possible numbers that look like line-noise - less punctuation)
#
cuibonobo
bigger numbers with less digits is my only justification at the moment.
#
cuibonobo
i'm actually on the fence about a bunch of stuff
#
tantek
I can see that. I guess at the time I decided that that marginal benefit was not worth the risk of the potential more line-noise-like cost, since these would be exposed in perma(short)links.
brianloveswords joined the channel
#
tantek
but that was a "gut" instinctive assessment on my part - nothing scientific per se - so I can understand if you came to a different conclusion
#
cuibonobo
these past few days i've just been testing the reasoning for things. i can't really say i've come to any conclusions.
#
cuibonobo
i'm still in an idea-appreciation stage
#
androtest
base 1000000 is where it's at
#
androtest
emoji characters as numbers
#
cuibonobo
androtest: your favorite number could be a bird
#
androtest
a little bird? hahaahaha
#
tantek
androtest, and here I thought you were writing in binary and thus confirming that base64 is where it's at ;)
#
androtest
I need to impose a no irc after whisky rule
#
tantek
androtest, have you met tommorris? and may I invite you to #indiechat as well
#
androtest
I have heard of him seems like a nice enough bloke
androte82 joined the channel
#
wolftune
videos from the Indie Tech Summit are up: https://ind.ie/summit/videos/
KartikPrabhu, fmarier and androtest joined the channel
#
cuibonobo
turns out that the kinds of large numbers i was thinking of (timestamps and such) have the same amount of digits in NB60 vs NB64. hah
#
addal
wolftune, thanks for the heads up!
snarfed, KartikPrabhu, gRegor`, brianloveswords and tantek joined the channel
#
tantek.com
edited /events/2014-07-16-homebrew-website-club (+109) "/* Photos */ add photo from benwerd"
(view diff)
snarfed joined the channel
#
tantek.com
edited /Events (+159) "/* Recent */ note indieweb hack session with link to photo from benwerd"
(view diff)
chrissaad joined the channel
cweiske, tantek, mlncn, chrissaad, KartikPrabhu and arlen joined the channel
#
@tommorris
RT @chloeweil: Your high school's yearbook club just graduated and knows HTML: http://indiewebcamp.com/2014#East_Photos
(twitter.com/_/status/492192681897259008)
fmarier joined the channel
friedcell, jsilvestre, fmarier_, mlncn, petermolnar, squeakytoy, Sebastien-L, krendil, adactio, barnabywalters and pfefferle joined the channel
BjornW, Acidnerd and PierreO joined the channel
pfefferle, brianloveswords and jsilvestre joined the channel
#
@blaine
@voxpelli @fraserspeirs @ade_oshineye our approach on @poetica will support @indiewebcamp's RelMeAuth [in email address form].
(twitter.com/_/status/492278879382675457)
pfefferle, glennjones, mlncn, scor, Sebastien-L, cweiske, bnvk, bitraten, cuibonobo, pbeaulieu and ben_thatmustbeme joined the channel
#
ben_thatmustbeme
good morning indiewebcamp
#
barnabywalters
morning ben_thatmustbeme
#
cuibonobo
good morning!
#
ben_thatmustbeme
how is everyone today?
#
cweiske
still waiting for a 2nd microformats parser imlementation in php
#
barnabywalters
cweiske: hopefully that’s out of a political/idealogical desire for diversity of implementations rather than practical blocking?
#
cweiske
i'm blocking myself with that
#
cweiske
nobody else
#
cweiske
diversity is the key thought here, yes
#
barnabywalters
cweiske: cool, I would love to see more implementations in PHP too — it would make the development of an easy to use cross-parser test suite even more useful
#
barnabywalters
but if there’s some technical problem in php-mf2 which is blocking I’d rather know about it and fix it than wait for another implementation which might fix it
#
cweiske
I hav no current problems with php-mf2.
#
barnabywalters
cweiske: good to hear :)
snarfed, wolftune and pfefferle joined the channel
#
tantek.com
edited /Twitter (+1016) "/* Features */ signup, login, mute, block, report as spam, profile page configuration, SMS client"
(view diff)
mlncn and gRegor` joined the channel
#
tantek.com
edited /Twitter (+439) "/* Features */ 2FA, note IndieWeb signup/login equivalents, TBI multi-factor IndieAuth, link-preview / Twitter Cards"
(view diff)
tilgovi, chrissaad and androte84 joined the channel
#
tantek.com
created /autolink (+1028) "stub with dfn, IndieWeb Examples, Open Source, Silo Examples"
(view diff)
#
tantek.com
created /auto-link (+21) "r"
(view diff)
#
tantek.com
edited /autolink (+40) "note WP article uses term "autolink""
(view diff)
#
tantek.com
created /AutoLink (+22) "r"
(view diff)
#
tantek.com
created /Auto-Link (+22) "r"
(view diff)
brainTrain_ joined the channel
#
tantek.com
edited /autolink (+16) "URLs, @-names"
(view diff)
npdoty joined the channel
#
gregorlove.com
edited /IndieAuth (-1) "/* More FAQ */ Fix FAQ link"
(view diff)
brianloveswords, KartikPrabhu and androtest joined the channel
#
gregorlove.com
edited /RelMeAuth (+525) "/* See Also */ Added FAQ"
(view diff)
#
gRegor`
!tell tantek, kylewm For your review, from yesterday: http://indiewebcamp.com/RelMeAuth#FAQ
#
Loqi
Ok, I'll tell them that when I see them next
brainTrain_ joined the channel
#
kylewm
very nice summary, gRegor`
#
Loqi
kylewm: gRegor` left you a message 2 minutes ago: For your review, from yesterday: http://indiewebcamp.com/RelMeAuth#FAQ
#
gRegor`
Might oughta go on http://microformats.org/wiki/relmeauth, too
#
kylewm
semi-related, should I be able to auth on http://tantek.com/relmeauth/
#
gRegor`
Heh, I got "Looks like I can't do anything with the webpage you suggested. Looks like I can't do anything with the webpage you suggested. Looks like I can't do anything with the webpage you suggested. None of your providers are supported. Tried https://github.com/gRegorLove, https://twitter.com/gRegorLove."
#
gRegor`
I wonder if it can do anything with the webpage I suggested...
#
kylewm
same here
#
gRegor`
I think it did work for me at some point, last year when I was first setting it up.
#
tantek.com
created /autoembed (+1372) "stub with dfn, indieweb examples with citations, open source, silo examples"
(view diff)
#
tantek.com
created /auto-embed (+23) "r"
(view diff)
#
tantek.com
edited /Twitter (+1) "/* Features */ typo"
(view diff)
#
@superfeedr
We're investigating a general networking issue that's affecting all of our feed processing.
(twitter.com/_/status/492334244060868608)
#
@pierreozoux
http://indiewebcamp.com/ The next idea to redecentralise the web! Don't wait federated social web, take back control right now!
(twitter.com/_/status/492338686164754433)
brianloveswords joined the channel
#
kylewm
gRegor`: it looks like it's broken since twitter replaced the rel=me with a t.co link... makes me wonder how tantek logs into Falcon
androte29, johncash, pfefferle, barnabywalters and paulcp joined the channel
#
gRegor`
kylewm: I thought it was just a demo, not actual auth. Probably indieauth?
#
gRegor`
Or not. http://tantek.com/falcon/ fails for me as well.
#
gRegor`
::shrug::
adactio joined the channel
#
voxpelli
gRegor`: kylewm: I think tantek mentioned a while ago that the RelMeAuth code being currently broken
Acidnerd, brianloveswords, johncash and brianlov_ joined the channel
#
kodfabrik.se
edited /payment (+1947) "Extended Implementations section and added info about Flattr"
(view diff)
paulcp, braintrain, barnabywalters, jschweinsberg, brianloveswords and scor joined the channel
#
aaronpk
good morning indiewebcamp!
#
ben_thatmustbeme
good morning
benwerd joined the channel
#
Loqi
benwerd: androte38 left you a message 1 day, 2 hours ago: @names link to a profile page 404 on werd.Io
#
Loqi
benwerd: johncash left you a message on 7/23 at 2:24pm: your site looks down
#
benwerd
androte38 / androte29: fixed in code. Thanks for the spot!
#
benwerd
johncash: it was ;) thanks, squid.
brianloveswords and Sebastien-L joined the channel
#
@PhilKer
RT @luclegay: Merci aux participants du dernier #MousseParis et rendez-vous le 22 juillet 2021 https://www.facebook.com/events/686358418098700 #indieweb http://t.c…
(twitter.com/_/status/492372619770228736)
barnabywalters, paulcp, snarfed and scor joined the channel
#
gRegor`
Quiet IWC day
#
barnabywalters
gRegor`: good to have a rest sometimes. often, really
#
gRegor`
Yep
paulcp, tilgovi, snarfed, dariusdunlap, androtest, wolftune, scor, KartikPrabhu, ShaneHudson and brianloveswords joined the channel
#
benwerd
Has this been discussed at all?
#
benwerd
"This represents just another step towards validating the Indie Web, where consumers are king." http://www.ogilvydo.com/topics/tech-innovation/the-indie-web-friend-or-foe/
#
benwerd
Interesting view of the indie web through a brand lens.
KartikPrabhu, grantmacken, johncash and androte40 joined the channel
#
aaronpk
whoa, haven't seen that post yet
indie-visitor joined the channel
#
Loqi
Welcome, indie-visitor! Set your nickname by typing /nick yourname
#
sam_benne
hello all
#
aaronpk
hello sam_benne!
tilgovi joined the channel
#
aaronparecki.com
edited /Posts_about_the_IndieWeb (+132) "add ogilvy article"
(view diff)
#
sam_benne
Anyone here worked with PHP and MongoDB?
#
aaronpk
lots of PHP here
#
cuibonobo
i believe Known is PHP / Mongo, if i remember correctly
#
aaronpk
known used to be mongo, switched to mysql
#
sam_benne
Been killing myself the today and yesterday over it
#
sam_benne
I switched the other way
#
sam_benne
Been having exception after exception and nothing ever made sense
paulcp, snarfed, tilgovi and brianloveswords joined the channel
#
pdurbin
sam_benne: exceptions before the switch or after?
squeakytoy2 joined the channel
#
sam_benne
after
#
pdurbin
you gonna switch back?
#
sam_benne
No
#
sam_benne
When it works it is great
#
sam_benne
Just too much data and there
#
sam_benne
was a bug
#
@gazoombo
@heidiann360 @avsm @mindypreston I'm thinking that catching up with the #indieweb stuff @t is bringing into W3C might be a good exercise.
(twitter.com/_/status/492404762663337985)
pauloppenheim and krendil joined the channel
#
@gazoombo
@t I seem to recall seeing some kind of automated #indieweb site-validator, but I can't find it now... @heidiann360 @avsm @mindypreston
(twitter.com/_/status/492409378545213440)
tilgovi_ joined the channel
brianloveswords and ShaneHudson joined the channel
#
braintrain
hot damn, looks like twitter suspended this poor guys twitter account :( http://futurestack.com/blog/2014/07/23/a-little-backstory/
#
@ArcadeHighMusic
Hey @newrelic remember that time you stole someone's name on Twitter and then got them suspended? Good times. @futurestack
(twitter.com/_/status/492390399743651840)
barnabywalters_ and snarfed joined the channel
#
aaronpk
wow that's crazy. and new relic is like 1 block away from me.
tilgovi joined the channel
#
gRegor`
Crazy, though he admits he was impersonating the conference at the end, which is probably what led to the suspending. On reddit he said the impersonating was ill-advised.
#
gRegor`
I think if he handles it well with @Support, he could still keep his twitter
#
braintrain
yeah I feel like twitter and potentially offended parties should work with someone like this though to try and quell his anger first
#
braintrain
I know legally/terms wise dude's probably doesn't have any leverage, but he wasn't really arguing that
KevinMarks joined the channel
#
braintrain
but I'm maybe a bit crazy in thinking that people ranting on the internet, and finding creative ways to strike back against the big guy is commendable :p
brianloveswords joined the channel
#
gRegor`
I'm just commenting on the part that's getting the most attention, "BigCo steals twitter name" which does not seem correct at all.
#
gRegor`
Good case for indieweb, though. :)
#
aaronpk
yeah I was following him up until he started impersonating the conference
#
braintrain
yeah that's an act of frustration, it'd be best if he just tried to ignore it but I feel like he's warranted in being frustrated. I wouldn't impersonate if I was in his position but I would definitely troll
fmarier joined the channel
#
gRegor`
Sure, I'd be frustrated.
#
aaronpk
did he ever try to contact them? I forgot
#
snarfed
honestly, he comes off kinda entitled to me. namespace collisions happen. names aren't unique. deal with it.
#
gRegor`
Not clear if there was more than just tweets, aaronpk
#
snarfed
he forgets "never attribute to malice what can adequately explained by stupidity/ignorance/just being busy"
#
gRegor`
Good points, snarfed
#
snarfed
90% of the time, when someone big steps on you, they didn't intend to. they just didn't see you there (and often still won't afterward)
#
gRegor`
He should have turned it to his advantage. Shown up to play/speak/be the VIP at the conference, haha
#
gRegor`
"It's got my name all over it"
#
braintrain
"My latest strategy was to pretend to be them on twitter to get some of their followers, then hopefully use that to raise publicity for this post, but they beat me to it! They got my twitter account suspended!"
#
braintrain
looks like he was gearing up but got shut down
#
braintrain
hard to tell how else he tried to impersonate when the account's suspended though :p
brianloveswords joined the channel
#
bear
would #indiechat be a better place for this conversation?
#
gRegor`
Probably
#
braintrain
I dunno if that's a copy or an imitation.
tilgovi, lukebrooker and scor joined the channel
#
gRegor`
aaronpk: I'm looking through your p3k-core code on Github. Is class Mf2Page something of yours that's unreleased, or is it third party?
#
aaronpk
it's mine, not broken out as a separate thing yet
#
aaronpk
I may not do that because in theory barnaby's is better
snarfed joined the channel
#
aaronpk
I don't think his existed yet when I started writing my code
#
gRegor`
Ok. Yeah, I'm using that currently. Your code looked more concise than mine, so I was going through seeing how I could improve mine. :) I may not be taking full advantage of his mf-cleaner though.
#
aaronpk
ah cool. no promises on backwards-compatibility tho until it's broken out as its own module ;)
#
aaronpk
the good news for you is that I use that everywhere so it would take a lot of work for me to actually change the interface
dariusdunlap joined the channel
#
gRegor`
I like that yours is OO, and methods like $targetData->hentry->property() seem handy. Currently I'm checking array keys and it just gets verbose. e.g. $entry['properties']['in-reply-to']
#
aaronpk
checking array keys is annoying
#
aaronpk
tho now with php 5.4 syntax I actually kind of prefer syntax like $entry->value(['properties','in-reply-to']) where it checks for properties before checkign for in-reply-to
#
gRegor`
Ah, mf-cleaner has function hasProp(). Yeah, I'm not using that lib as well as I could, clearly
tantek joined the channel
#
Loqi
tantek: gRegor` left you a message 8 hours, 6 minutes ago: For your review, from yesterday: http://indiewebcamp.com/RelMeAuth#FAQ
#
tantek
good afternoon #indiewebcamp!