2016-03-22 UTC
# 00:04 aaronpk just got an email from dreamhost saying they renewed my letsencrypt cert :D
timweston and tantek joined the channel
link0__ joined the channel
rMdes_, timweston, snarfed1, benborges, snarfed, lukebrooker, mdik_, pl_, miklb and tantek joined the channel
# 02:32 bear cool - would love to interact with dewitt clinton again
# 02:39 GWG bear: Ask him about the Erie Canal?
# 02:43 GWG Wasn't he instrumental in building the Erie Canal?
# 02:44 GWG They named my father's high school after him.
pl_ joined the channel
# 02:50 bear (at least according to the google blurb that shows up for his name)
# 02:50 GWG They called the Erie Canal Dewitt's Ditch.
lukebrooker, gRegorLove and snarfed joined the channel
# 03:57 gRegorLove Welp, the honeypot local comment field wasn't enough to stop all spam. I've received a handful of spam comments in the first 24 hours.
# 03:59 gRegorLove It did block quite a few though, so leaving that in. I added Akismet back in and am logging what it reports as spam -- no moderation.
# 03:59 gRegorLove honeypot is a second input name="website2" that's hidden. If anything is submitted in that field, it returns 403
# 04:00 aaronpk no reason to tell the spammers they did something wrong
# 04:01 aaronpk i've always done it with 200. make it look like it worked as far as they can tell
# 04:01 gRegorLove I'll try it. I doubt the bots are bothering with the return code, though.
# 04:02 aaronpk if you don't mind requiring JS to have people comment, i've also had good luck with changing the value of a hidden form field with some JS code
# 04:04 gRegorLove I haven't had any failed CSRF yet, interestingly, so they're definitely hitting the site.
# 04:11 snarfed aaronpk++ for using JS. i do that, stops probably 99% of spam cold. that plus akismet gets me pretty much zero false negatives and false positives
wolftune joined the channel
# 05:42 acegiak KevinMarks: looks like your markup works much better with my parser now!
# 05:44 Loqi [Ashton McAllan] Well I’ve merged the latest version of the semantic linkbacks plugin and my salmentions supporting code. Here’s hoping it just works. #indieweb...
snarfed joined the channel
# 06:04 KevinMarks so known would need ot see that you have the reply in your post, and propagate it to me, and then to you?
# 06:04 KevinMarks so the chain gets broken if only one of you is supporting it, which I suppose makes sense
# 06:06 acegiak but kylewm and I had a couple of conversations where the tree went pretty deep
# 06:08 acegiak well I'm happy to help if people want to implement salmentions in known
# 06:08 acegiak wait, does that mean I'm the only one supporting them?
# 06:16 acegiak why is a person tag a u-category and not just a h-card? does u-category denote it as something specific?
# 06:17 KevinMarks otherwise it would just be a child like known was doing wrong
# 06:20 acegiak Ok I need to work out how to recieve homepage webmentions on wordpress
# 06:21 KevinMarks presumably you'll get them if the webmention link is on the homepage
gRegorLove joined the channel
# 06:27 acegiak I don't know where I'd store a person-tag in wordpress
loic_m and lukebrooker joined the channel
# 06:41 acegiak yeah, but what post object do you attach the comment to for storage?
# 06:45 KevinMarks I don't know the db well enough. Do they have numeric IDs or paths or what?
# 06:52 acegiak I'm gonna create a page and use that as the default for comments on the home url
# 07:06 Loqi [indieweb] "I've been hacking around the indieweb for a while and had this plugin, which works well, for quite a while.
# 07:08 KevinMarks as the default post id is 0 in the comment table you may well find a lot of glitched ones
# 07:10 KevinMarks if you do it via twitter you need to wait for the bridgy task to run
cweiske joined the channel
# 07:18 acegiak yeah the webmention from original code isn't working. I'm having a look now
# 07:43 acegiak So you recieved a person tag from me, kevin marks?
j12t joined the channel
jihaisse joined the channel
# 08:24 acegiak like I said, I haven't 100% tested the whole flow. there might be some weird salmon stuff
# 08:24 Loqi acegiak meant to say: like I said, I haven't 100% tested the whole flow. there might be some weird salmention stuff
# 08:27 acegiak gonna submit this PR to GWG and have some celebratory pre-dinner chocolate
j12t and Pierre-O joined the channel
j12t, Pierre-O, adactio and wolftune joined the channel
# 09:59 petermolnar browsing the web with lynx/links/links2 is an interesting experience
j4y_funabashi, Pierre-O, lukebrooker, adactio, cweiske, friedcell and barnabywalters joined the channel
# 11:23 Loqi [Barnaby Walters] Event: Tanzimpro/Balfolk Workshop in Múltà KúltÃ
nitot_ joined the channel
lukebrooker joined the channel
# 12:21 Jeena Btw. this week I can't host the IWC in GOT because I'm away with work
hs0ucy joined the channel
# 12:30 acegiak Ah damnit. Still sometimes getting 503s when sending myself webmentions. I thought I managed to make WhisperFollow not do that by switching to easycurl
pl_ joined the channel
# 12:50 myfreeweb there's also a more complete h-card in children
# 12:51 myfreeweb microformats are a bit too hard on the consuming side >_<
j12t joined the channel
# 12:59 acegiak !tell benthatmustbeme hey, do you think that specifying your pronouns as "his lordship" might be read as making fun of people for whom pronouns are a serious issue?
# 12:59 Loqi Ok, I'll tell them that when I see them next
# 13:00 myfreeweb acegiak++ yeah that's totally weird
# 13:00 myfreeweb my website actually displays pronouns btw
nitot joined the channel
# 13:08 acegiak That's rad. 😊. I need to sleep now though. If you see me on later can you remind me to sub to you in WhisperFollow?
# 13:08 myfreeweb oh time zones
# 13:08 myfreeweb let's test salmentions later
# 13:09 myfreeweb i think i've implemented them
mxuribe, Garbee, tantek, danlyke, snarfed and mlncn joined the channel
# 14:06 myfreeweb lolwtf, i have an access_token stored in all my posts from woodwind
# 14:09 myfreeweb so it sends the token both in the Authorization header and the micropub POST form
# 14:11 myfreeweb i'll filter this out, but wow that was unexpected
# 14:12 myfreeweb damn, this is in the micropub spec o_0
tantek and friedcell joined the channel
# 14:40 Loqi Ok, I'll tell them that when I see them next
j12t joined the channel
# 14:50 tantek Twitter iOS "Mobile notifications" for "Mentions and photo tags" are useless for me
# 14:51 tantek obviously the latter is totally useless for me ( twitter.com/search/@t if you're curious)
# 14:52 tantek so I've tried "Tailored for you" and every mention notification they've sent me has been a false positive, specifically, a totally predictable one that has occured due to *Twitter*-truncating someone's tweet that had an @-mention starting with @ t...
# 14:52 tantek "Tailored for you" is a cop-out and anti-pattern IMO
# 14:52 tantek it's unpredictable as a user, makes a user feel not in control
# 14:53 tantek and sorry to say but no "algorithm" is smart enough to get "Tailored for you" right enough to be useful
# 14:53 tantek for for anyone consider such AI / nonsense, don't
# 14:57 aaronpk ben_thatmustbeme: did you see myfreeweb's note about your markup?
# 14:58 aaronpk myfreeweb: you shouldn't need to check "children" for the in-reply-to object, I've never seen that before. most peoples' website include the h-cite object as the value of the in-reply-to item
# 15:02 aaronpk in-reply-to is a URL, and the actual h-cite is in the children
# 15:03 petermolnar tantek do a twitter bot for search @t, filter it to get rid of truncated @mentions and sell it to Twitter
# 15:03 tantek you should not need to check children for in-reply-to
# 15:05 tantek hmm - I thought we solved this with class="u-in-reply-to h-cite"
# 15:05 tantek and the "u-" value coming from the URL of the embedded (not child) object
# 15:06 myfreeweb yeah .u-in-reply-to.h-cite is what everyone expects now
# 15:06 tantek they've had multi account support for a while
# 15:06 myfreeweb ben_thatmustbeme: also did you see acegiak's note about pronouns?
# 15:07 ben_thatmustbeme "yeah .u-in-reply-to.h-cite is what everyone expects now" not sure thats true? i only look for a url anyway
# 15:08 tantek ben_thatmustbeme: my replies have had h-cite for a while, so for your code to work (it does) with reading my replies, it has to be parsing for that
# 15:11 myfreeweb it's "fine" but not good
# 15:11 myfreeweb i guess no one has code that looks up that url in the children array
# 15:11 myfreeweb so it displays just as a url
# 15:11 aaronpk myfreeweb: the other option you have is to go fetch the URL and find microformats there
# 15:11 ben_thatmustbeme for comments it may be quite useful, certainly, but since i'm the only one who does full context history (as far as i know) i don't see any use case for it
# 15:12 aaronpk that way you can also show something nicer when you only have the URL available
# 15:12 myfreeweb but you have the h-cite already
# 15:12 myfreeweb just not in the right place
# 15:13 aaronpk you technically can't trust it since it's making a claim about content at a different domain
# 15:13 myfreeweb aaronpk: oh, right
shiflett joined the channel
# 15:19 myfreeweb i guess i should refetch comments propagated via salmention too then
singpolyma joined the channel
# 15:28 tantek right, you can use the h-cite as hints / prefetch cache kind of thing
# 15:29 Loqi Ok, I'll tell them that when I see them next
# 15:29 tantek !tell acegiak how are you POSSEing person-tags to Twitter?
# 15:30 Loqi Ok, I'll tell them that when I see them next
# 15:32 tantek and who is going to attempt a SWAT0 demo with acegiak ?
# 15:33 kylewm hmm, re: fetching the original for salmention, i'm not convicned it's worth it. if someone wants to spoof a comment from another URL, they can do it easily without salmentions
# 15:34 tantek kylewm: I think the point is unintended spoofing like from a bug
# 15:34 tantek like a bug that results in the wrong name/icon etc.
# 15:35 myfreeweb i'm not sure how it's easy without salmention
# 15:36 myfreeweb yeah you'll spoof a comment w/o salmention, but salmention will automatically propagate it if it doesn't refetch
# 15:37 kylewm oh that's right, the other issue with that is bridgy
# 15:38 kylewm most people set the u-url as twitter.com/... and when you fetch it you won't get mf2 markup
# 15:38 myfreeweb but you should have a special twitter-to-mf2 parser
# 15:38 kylewm aaronpk: right but it's problematic for salmentions if you try to do the "fetch original permalink" version
# 15:43 aaronpk wow, the instagram push notifications even tell you which account they're from. Twitter never figured that out
# 15:45 tantek Twitter has additional problems with push notifications :( (as noted earlier today - see logs)
# 15:48 tantek more bad news, IG "reader" view is switching to some sort of algorithm rather than just showing raw recent posts :(
# 15:58 tommorris one issue I've been having with instagram recently is that people keep at-mentioning me even though they mean someone like "tommorris_" or something. the autocomplete for at-mentions doesn't seem to prioritise your friends over random people. so I keep getting tagged in all these rando photos by this group of teenagers
tantek joined the channel
# 16:16 ben_thatmustbeme its not meant to offend at all, but if i just use he/him/his i will not be able to identify when, if ever, it gets pulled in
wolftune joined the channel
snarfed and snarfed1 joined the channel
# 16:42 aaronpk the more i think about it, the more i'm liking the idea of having a separate media endpoint for handling file uploads in micropub
# 16:44 myfreeweb i looked into some wysiwyg editors, they expect an upload endpoint
# 16:49 myfreeweb aaronpk: another micropub thing: the spec now says you MUST accept the access token in the form body. i totally did not expect that
# 16:49 myfreeweb i just parsed the whole form into an h-entry, and got an access token written to the entry on the disk
snarfed joined the channel
# 16:50 myfreeweb i guess PHP inspired you to do this, because $_POST everywhere :) but in other backend tools, the POST body might be handled at a different level than URL+headers
# 16:50 myfreeweb woodwind did that
# 16:50 myfreeweb it sends the token as both Authorization and in the POST form body
# 16:51 aaronpk i think the main reason to support post body access tokens was for javascript clients, since they can't set the header
snarfed joined the channel
# 16:51 myfreeweb but why body
# 16:51 myfreeweb should be query string
# 16:51 aaronpk no way! query string is worse cause it gets logged
# 16:52 myfreeweb but js can set headers
# 16:53 myfreeweb famously, jQuery.ajax sets X-Requested-With: XMLHTTPRequest
# 16:53 snarfed i'm putting together a list of bridgy beta users that we'll test new features and changes on first
# 16:53 snarfed kylewm, aaronpk, tantek, KevinMarks, benwerd, i'm seeding it with you all. let me know if you don't want that
# 16:55 aaronpk IIRC kylewm sends the access token in both because some servers were only looking in one place
# 16:55 aaronpk regardless, "access_token" is a reserved property so you should never be treating that as a property of the post content
# 16:55 myfreeweb well, yeah, i fixed that
# 16:55 myfreeweb but that was suprising
# 16:57 kylewm aaronpk: yes that was the reason, though i think it is fixed now for the particular user who was having trouble with http headers
# 16:58 aaronpk were there other reasons for using the post body?
# 16:58 snarfed (the first bridgy beta tester change will be switching instagram from API to scraping. so, maybe not "fun," exactly...but something. :P)
# 17:00 kylewm it was header only for 95% of the life of woodwind
# 17:00 aaronpk i feel like someone else was having trouble with the header, can't remember who, and can't remember whether it was sending or receiving
mlncn joined the channel
# 17:03 aaronpk i mean if everyone can handle sending and receiving the token in the header, then we should really just say that's the only way to do it, since it makes it more likely to have interoperable clients and servers
gRegorLove joined the channel
# 17:07 kylewm oh ifttt was a good reason to support sending it in the body
# 17:08 aaronpk in theory yeah, although i haven't seen a demonstrated use case for that
loic_m joined the channel
# 17:10 kylewm ah right, probably because of CORS where you can't reliably POST to someone else's domain
# 17:15 j4y_funabashi yeah I was glad for that rule when I built my photo posting form, tis nice to be able to put the token as a form field rather than have an intermediate script just to set a header
pl_ joined the channel
# 17:33 KevinMarks I think it is useful to keep the token in post body, but the spec should explicitly say to strip it out
# 17:36 KevinMarks tantek: re twitter's "tailored for you" - I disagree strongly. They need to be much smarter about sending notifications in @ replies, ratehr thna blindly spamming you with all of them, so that option needs to remain. It could be more transparent about what it does, yes, but for twitter to solve the harassent problem it needs some kind of vouch-like or content filter on notifications
snarfed, snarfed1, begriffs and tantek joined the channel
KartikPrabhu, snarfed, tantek and j4y_funabashi joined the channel
# 18:52 GWG feel this has been a productive WordPress Indieweb week
# 18:54 aaronpk I would love to read a summary of that! I haven't been following too closely. would make a great post for this-week
begriffs joined the channel
# 18:59 GWG I do. I did a bunch of fixes on Post Kinds.
# 19:00 GWG I want to finish the work on the Indieweb plugin so I can self dogfood it
# 19:01 KevinMarks Did you see acegiak got sending and receiving person tags working?
# 19:02 tantek Kevinmarks - excited about that - hoping to see it on the wiki!
# 19:02 Loqi Ok, I'll tell them that when I see them next
# 19:04 GWG That was part of my feeling it had been productive
# 19:06 GWG acegiak uses my code more than I do.
nitot joined the channel
mlncn joined the channel
# 19:15 GWG I want to have a new Indieweb plugin up before someone shows up wanting a one click solution.
begriffs joined the channel
# 19:15 aaronpk i ... didn't even realize you could move user pages
# 19:21 aaronpk so using {{ }}
within a page will include the template contents in the page
begriffs and cweiske joined the channel
# 19:32 j4y_funabashi aaronpk: I got confused because everyone else seems to use {{username}}
to link to their user page, hence the page rename
mlncn joined the channel
yakker, snarfed1, shiflett and tantek joined the channel
# 20:16 j4y_funabashi gRegorLove: thank you, I can see myself becoming a wiki gardener this weekend :)
# 20:19 aaronpk my first website was hosted on a 75mhz Pentium running Windows sitting in a closet at home
# 20:19 aaronpk kind of crazy that the raspberry pi is smaller than the floppy drive of that computer and like 100x more powerful
begriffs joined the channel
# 20:21 j4y_funabashi I am still a little scared about opening ports on my router but it seems to be ok so far, any security tips?
# 20:22 aaronpk just make sure you do normal system updates and such. if you're only opening port 80 i wouldn't be too worried
# 20:22 aaronpk it only starts getting scary when you're exposing other services that are easier to hack, like samba or mysql and stuff.
# 20:24 aaronpk short version: hosting a web server at home on a raspberry pi, forwarding port 80 from the router to the pi
# 20:24 j4y_funabashi aaronpk: yeah ok, opening up ssh would be nice for rsync and irc (similar to your setup) but that is the scary one
# 20:24 bear ah, if your home router supports a DMZ then put the raspberrypi in it
# 20:25 aaronpk i have SSH open too, but it's not really different from opening SSH on a VPS
# 20:25 bear having it behind your normal router, with iptables only allowing 80 and SSH is not a bad thing
# 20:25 bear and then port forward 80 and SSH to it
# 20:25 aaronpk i have my home server on my main home network because i often want to do ssh tunneling to other stuff at home
# 20:26 bear yes, that's why I used SSH and not 22 - was just typing that
# 20:26 aaronpk yeah you avoid the brute force attacks by running it on something other than 22. if you have it on 22 and watch your logs you'll see all sorts of fun SSH attempts all day long
KartikPrabhu joined the channel
# 20:35 bear it isolates the traffic going to that IP
# 20:35 bear to be honest, unless your comforatable with setting up iptables - I would just use port forwarding
# 20:35 bear because in the dmz all traffic is routed to the IP without any filtering
# 20:36 bear hmm, I should order a pi and do some test setups
# 20:36 bear then avoid it for now and use port forwarding
# 20:37 bear yes, ufw, iptables, pfsense -- all software firewalls
# 20:38 j4y_funabashi ok cool, so firewall only allows access on certain ports and DMZ stops that box from talking to any other box?
# 20:39 bear a DMZ is just a way of saying that your home router will consider that server to be an external server
# 20:39 bear so all traffic headed to it will be unfiltered by the router's firewall
# 20:39 bear [home network] <--> [router] <--> [dmz] <------ internet
# 20:40 j4y_funabashi ahhh ok, yeah I think I will stick with port forwarding in that case, thank you for the help!
tantek joined the channel
Gold joined the channel
# 20:54 tantek looks like I need someone to help be a backup for me here
Lancey and yakker joined the channel
# 21:02 Loqi [Jeremy Keith] Introduction to Ember FastBoot by Tom Dale on Vimeo
snarfed joined the channel
# 21:22 kylewm tantek: I requested a mozilla wiki account. First account registration that has asked for a resume!
# 21:23 kylewm hmm, 'Could not copy file "/tmp/php0HzEgo" to "c/c1/c15/c152934358d6706b9f8779fe5af3a2eb8d3a2fac.pdf".'
# 21:24 kylewm apparently, I will just do it without the resume
# 21:25 kylewm KevinMarks: are you coming to homebrew tomorrow?
# 21:59 gRegorLove Twitter's advanced search "match this phrase exactly" still uses periods as regex "any single character" it appears.
# 22:02 KevinMarks even if you do html-aware parsing there are <p> in it <p class=\"reading\">\n<span class=\"vague\">1 min read </span>\n</p>\n<p>
dougmckown joined the channel
# 22:04 dougmckown Does anyone know if it's possible to import Medium posts into another blogging platform?
# 22:05 gRegorLove I'm interested in documenting the features, but not sure I want to install it and give it access to Contacts and SMS on my phone
# 22:05 KevinMarks there is an html export, but it did odd things to links last time I checekd
# 22:05 miklb dougmckown not sure, but if there's an RSS feed from Medium, should be able to at least import into WordPress
# 22:07 dougmckown @kevinmarks Thanks, I know how to export, but am not sure that to do with the exported posts.
# 22:08 gRegorLove If the export is just HTML, it would probably be difficult to auto import to another CMS and maintain date-published order.
# 22:09 dougmckown Not sure yet. I'm just wondering what the options are. Medium appears to export into HTML.
# 22:09 gRegorLove Most CMS will have some sort of import, but it varies quite a bit.
# 22:09 gRegorLove I think WordPress built-in import uses XML (import from other WordPress export files), and I'm sure there's a variety of third party plugins.
# 22:10 dougmckown Okay, thanks all! I hoped someone had built a Medium-to-some-other-CMS tool.
# 22:10 dougmckown If the export were XML, then we could import into almost anything, I guess.
# 22:11 miklb seems there is a RSS feed for authors on Medium. Definitely could import that into WordPress, then export to what ever you decide on. I'm sure there is a plugin to export markdown
# 22:12 miklb then could probably use a html->markdown parser?
# 22:12 sknebel mh, one would have to try to wrangle the exported data or a scrape of the medium blog into something easier to digest
# 22:17 dougmckown @sknebel, thanks for the link, but I assume that tool is one-post-at-a-time, correct?
# 22:19 KevinMarks so you could down;load them, but you'd need to put them through some parsing to fix the broken links and things
danlyke and lukebrooker joined the channel
# 22:34 Loqi Ok, I'll tell him that when I see him next
# 22:36 Loqi Ok, I'll tell him that when I see him next
# 23:07 sknebel found one of the 410d articles on archive.is -> should I link the archived version next to it?
# 23:09 gRegorLove I'm not sure, since 410 is (should be?) a deliberate deletion
KartikPrabhu joined the channel
begriffs joined the channel
# 23:15 sknebel reading it, I don't think the article is that important to the argument. so no
shiflett and yakker joined the channel
snarfed joined the channel
# 23:55 acegiak kevinmarks: Did recieve your person-tag once my machine calmed down and stopped 503ing webmentions
# 23:56 acegiak trying to work out why tino's comment didn't propagate through
# 23:57 KevinMarks getting salmentions to you before involved a manual webmention