#indieweb 2018-10-29

2018-10-29 UTC
[jgmac1106] joined the channel
#
Loqi [indienews] New post: "Hacking on the IndieWeb - unicyclic" https://unicyclic.com/mal/2018-10-29-Hacking_on_the_IndieWeb (from https://aaronparecki.com/2018/10/28/19/)
renem, Ruxton, wolftune and snarfed joined the channel
#
Zegnat Good morning IndieWeb
wolftune, sl007, cweiske and KartikPrabhu joined the channel
#
ichoquo0Aigh9ie agh
#
jacky normalcy has been restored :D
#
deathrow1 aaronpk: ping regarding indieweb hack week! i live in berlin and might be up for some hacking during the week, as i'm not sure how much time i have during the weekend. am flexible but need to synchronize with work.
#
deathrow1 aaronpk: got times/places to meet?
#
deathrow1 i'm off for work now, but in the evening (berlin time)
#
deathrow1 i'll just leave these links here as a reminder, and possible starting point for some hacking =)
#
deathrow1 https://github.com/aaronpk/IndieAuth.com/issues/168
#
deathrow1 https://github.com/aaronpk/IndieAuth.com/issues/141#issuecomment-323371814
#
Loqi [joelpurra] #168 Add support for security keys (U2F)
#
Loqi [aaronpk] Some resources on U2F thanks to @joelpurra - https://twitter.com/agl__/status/898219500134252544 - https://www.imperialviolet.org/2017/08/13/securitykeys.html - https://www.w3.org/TR/webauthn/ - https://fidoalliance.org/specs/fido-u2f-v1.0-nf...
#
jacky oooh webauthn
#
jacky I've been looking into that over using OTP for Koyper
#
jacky *Koype
#
jacky I'd need a yubikey neo tho
#
Zegnat Same here jacky. I would love to do some indieauth with a hardware based token, but that alone isn't reason enough to buy one.
#
jacky true! I could use it to harden security across services that I know support it
#
jacky kinda wish okta/lastpass/et al allowed you to unlock them using a hardware token
#
Zegnat True there are a handful of places I could use the token, but not nearly enough places to justify the expenditure, I feel :(
#
jacky lol how much would it be over by you?
#
jacky I think it's like ~$30 USB for me
#
jacky *USD lol
#
Zegnat Last I checked I didn't immediately find a Swedish reseller. So would basically be US price + shipping + VAT
#
jacky sheesh
jihaisse and [tantek] joined the channel
#
viaken I have 4 Yubikey 4s, but nothing that handles NFC yet.
[tonz] joined the channel
#
sl007 Good morning indieweb
#
Loqi sl007: Zegnat left you a message 5 days ago: that rel-me article has been doing surprisingly well... Gun to hear it is crawling up in Google's ratings. (No SEO necessary.)
#
sl007 Regarding 2FA / OTP on node js - nice https://github.com/speakeasyjs/speakeasy
#
Loqi [speakeasyjs] speakeasy: Two-factor authentication for Node.js. One-time passcode generator (HOTP/TOTP) with support for Google Authenticator.
#
sl007 !tell aaronpk Did you got the twitter DMs ? Answering to John Bruce now.
#
Loqi Ok, I'll tell them that when I see them next
ben_thatmustbeme and swentel joined the channel
#
Zegnat I have done TOTP implementation on websites before. Pretty straightforward. (Though not sure if I recommend Google Authenticator, how did it handle backups?)
#
Loqi It looks like we don't have a page for "Google Authenticator" yet. Would you like to create it? (Or just say "Google Authenticator is ____", a sentence describing the term)
#
Zegnat What is Google Authenticator?
#
Zegnat What is TOTP?
#
Loqi The Time-based One-time Password Algorithm (TOTP) is a mechanism of generating a one-time password from a shared secret key and the current time, often used for two-factor authentication https://indieweb.org/TOTP
[Rose] joined the channel
#
[Rose] I use Authy, as I can sync it between devices. Though I plan to move everything to 1Password for the autocopying.
[jgmac1106] and ben_thatmustbeme joined the channel
#
Zegnat I specifically do not want the 2FA tokens in the same place as my passwords. Kinda defeats the purpose. So I'm not moving them to 1Password.
#
Zegnat I use andOTP, which allows encrypted backups of the keys (unlike some other apps I have tried)
#
[Rose] If someone gets into my 1Password I have bigger problems than them having my 2FA codes
#
[Rose] Because honestly with what's in there they will be able to get into the account anyway and I'd never be able to regain access, if they just use the existing credentials then the chances are higher that I'll be able to get back in because they won't change the recovery details to something outside of my control.
#
swentel I use supergenpass
#
swentel might be less user friendly
#
swentel but I don't have to worry about anything being hacked
#
Zegnat I have seen pros and cons for those on-the-fly password generators. I believe we ended up not recommended them on PRISM Break, but I don't recall exact issues right now
#
Zegnat s/recommended/recommending/
[eddie], ben_thatmustbeme, [jgmac1106], [Rose] and [kevinmarks] joined the channel
#
[kevinmarks] I think rel=me display is going in the next mastodon release, so we'll see it outside mastodon.social, so a good time to talk it up
#
[kevinmarks] https://mastodon.social/@Gargron/100977193934785069
#
Loqi [Eugenio] Outline :thinkerguns: https://files.mastodon.social/media_attachments/files/007/488/715/original/3c5a9c95aae8dd3c.png
Kongaloosh and anarchivist joined the channel
#
AkyRhO Good morning indieweb
#
AkyRhO since this weekend, i can't publish to my blog from micropublish.net anymore. Error is " There was an error making a request to your Micropub endpoint. The error received was: " - nothing more, anyone experienced the same issue or is it on my end?
oodani joined the channel
#
AkyRhO I use micropub wp plugin version 2.0.0
#
GWG AkyRhO, did it work after you updated to 2.0?
#
AkyRhO I think not
#
AkyRhO but i'm not sure
#
AkyRhO i tried to rollback to 1.4.3 as well but it doesn't work either
#
GWG 2.0 changes the endpoint. I'm not sure if Micropublish.net caches it or not.
#
GWG I just checked and published using the same software.
#
AkyRhO quill has a similar problem
#
AkyRhO first it display a success message for a second or so
#
AkyRhO then redirect me to https://quill.p3k.io/null
#
AkyRhO and nothing was posted on my blog
jimpick joined the channel
#
GWG AkyRhO: I'm not 100% sure. But I'd have to know more information.
#
AkyRhO sure
#
AkyRhO which information?
#
GWG Do you have any error messages on your side?
#
GWG Also, might be better if we move to the Indieweb-WordPress room
jgmac1106 and [jgmac1106] joined the channel
#
[kevinmarks] Hmm. https://twitter.com/youngvulgarian/status/0?s=19
#
[kevinmarks] Domains as command line https://twitter.com/googledocs/status/1055490445088903168?s=19
#
@googledocs Introducing a ✨ .new ✨ time-saving trick for users. Type any of these .new domains to instantly create Docs, Sheets, Slides, Sites or Forms ↓ https://pbs.twimg.com/tweet_video_thumb/DqXa8bCXQAA3wDX.jpg (twitter.com/_/status/1055490445088903168)
#
[kevinmarks] 1st tweet deleted https://twitter.com/ow/status/1056876657619931138?s=19
#
@ow Twitter is run by idiots https://pbs.twimg.com/media/DqrHteaWsAAJP4x.jpg (twitter.com/_/status/1056876657619931138)
ludovicchabant and [Vincent] joined the channel
#
[Vincent] Good morning indieweb!
#
[Vincent] I’m happy the like button is going its always been ambiguous. But it isn’t going to solve Twitters bigger problems at all.
eli_oat, [Rose] and [kevinmarks] joined the channel
#
aaronpk good morning
#
Loqi aaronpk: sl007 left you a message 5 hours, 19 minutes ago: Did you got the twitter DMs ? Answering to John Bruce now.
#
Loqi greetings human
#
aaronpk kevinmarks lol that is pretty ironic coming from the same company that's trying to kill the URL
snarfed joined the channel
#
sl007 just read https://indieweb.org/2018/Berlin#Adjacent_Events about "informal IndieWeb Hack Week" - but only booked hotel for weekend. Is anybody there ?
#
aaronpk guess it's time to pick a place!
#
aaronpk it'll be mostly like working at coffee shops and such
wolftune joined the channel
#
sl007 just btw : photo or fake - a "scary" survey : https://ow3d.de
cuibonobo, [kevinmarks], eli_oat and [schmarty] joined the channel
#
[schmarty] looking forward to it! i am about 27 hours away from wheels-up on my way to BER
#
sl007 Fun: This mastodon instance seems to run on 3 Raspberries plus a pine64 : https://asonix.dog/about – source https://github.com/tootsuite/documentation/blob/master/Running-Mastodon/Resources-needed.md
#
petermolnar yeah, that's not a great idea to be honest, the Pi can still wear out SD cards with logging/writes
#
petermolnar while I love the idea of running services from Pi(s), the last time I tried, the only safe way was to essentially go read-only OS
#
petermolnar (that was a couple of years ago I have to admit)
#
aaronpk BarBot has been running on a pi for about 2 years but I think it finally got corrupted when the power went out
#
aaronpk Haven't been home long enough to actually fix it :-(
benwerd, [eddie], jgmac1106, [jgmac1106] and chrisaldrich joined the channel
#
chrisaldrich Good morning IndieWeb.
#
[schmarty] o/ chrisaldrich
#
chrisaldrich schmarty!
#
chrisaldrich What is no platform?
#
Loqi It looks like we don't have a page for "no platform" yet. Would you like to create it? (Or just say "no platform is ____", a sentence describing the term)
#
chrisaldrich What is no platforming?
#
Loqi It looks like we don't have a page for "no platforming" yet. Would you like to create it? (Or just say "no platforming is ____", a sentence describing the term)
#
chrisaldrich I've heard references to this idea, but it seems like there are alternate names for it.
#
chrisaldrich What is Gab?
#
Loqi It looks like we don't have a page for "Gab" yet. Would you like to create it? (Or just say "Gab is ____", a sentence describing the term)
swentel joined the channel
#
[schmarty] chrisalrich: deplatforming?
snarfed joined the channel
#
[schmarty] oops, [chrisaldrich] i mean. thought i was smarter than slack autocomplete.
#
chrisaldrich I'd looked that up manually... are there examples of deplatforming besides the recent example of Gab?
#
chrisaldrich Have people used the phrase in relation to being kicked off social sites like Twitter for violating Terms of Service?
#
[schmarty] infowars
#
chrisaldrich yes, perfect example...
#
[schmarty] [chrisaldrich]: yep, i've seen that term used in relation to exactly that. or even to having Twitter "verified" status removed.
#
chrisaldrich I'll start a bit of a stub for it....
[chrisaldrich] and [kevinmarks] joined the channel
#
[kevinmarks] If you want some history https://hatfulofhistory.wordpress.com/2015/11/03/by-whatever-means-necessary-the-origins-of-the-no-platform-policy/
#
chrisaldrich thanks kevinmarks. I also recall a recent NPR related story about some related history going back to journalism in the early 1900's related to racism.
#
snarfed slowly inches bridgy publish toward supporting delete
#
snarfed https://github.com/snarfed/bridgy/issues/84
eli_oat joined the channel
#
Loqi [snarfed] #84 allow updating or deleting a published post
#
[kevinmarks] I thought this was a good point https://twitter.com/melissagira/status/1056887328776601600?s=19
#
@melissagira When we have a glut of tech writers whose political knowledge begins and ends in a browser, of course we’re going to end up with tech writers floating the idea that CDA 230 is enabling fascism: QT [@aprilaser] Useful chronicling. One thing I'd add is that social media companies were able to become this toxic because they have zero legal liability for anything that happens on their sites https://www.buzzfeednews.com/article/ryanhatesthis/brazil-jair-bolsonaro-facebook-elections (twitter.com/_/status/1056887328776601600)
eli_oat, snarfed, sl007, gRegorLove and [eddie] joined the channel
#
deathrow1 Zegnat: yubico (yubikey) is a swedish company — i ordered a nano straight from their website. also, they gave me a free blue key variant for attending a meetup in sthlm a few years ago =)
#
aaronpk they do hand them out quite often :)
#
deathrow1 aaronpk: didn't "leave a message" with the bot properly, but did you note my ping here from ~12 hours ago?
#
aaronpk oh yea!
#
aaronpk I don't have a plan yet, other than my usual rough plan which is to find coffee shops with wifi that don't mind me camping out there for hours. i'll probably be working from coffee shops most of thursday and friday.
#
deathrow1 sounds good
#
aaronpk I arrive wednesday morning so i'll probably scope things out then
#
deathrow1 plenty of places to sit down around the event area, although i can't say i know which ones have wifi and a work-friendly environment/policy
#
deathrow1 sknebel: know of any? perhaps where the berlin meetings were held on skalitzer?
#
aaronpk yeah I usually look on foursquare for tips that mention wifi or photos of laptops
sl007 and snarfed joined the channel
#
sknebel that place rebranded and from the one visit there I had I think has gotten better, but don't know how they're during the day (they're now big breakfast stuff during the day, vodka bar at night)
#
deathrow1 unless they are very busy around lunch they might be happy to have some customers during the day/afternoon =)
#
sknebel yeah, not unlikely, just haven't been there
#
deathrow1 "Vodkabar & breakfast" — straight up name ;)
#
deathrow1 either way, i can probably join anywhere people end up — am living within walking distance of mozilla
#
deathrow1 just need to get enough work hours in this week ;)
#
aaronpk cool! my goal is to find something walking distance from there
#
aaronpk if you find anything in the area feel free to suggest something!
#
deathrow1 am basically never working from cafés, so the wrong person to ask =/
#
deathrow1 is flo in here? he did café scouting last year afarc
#
deathrow1 afairc
#
sknebel he's not really on IRC.
#
sl007 swentel - are you the one in Gent ? - I'll sponsor a 5 days IndieWebCamp in Vlissingen 28th Jan. - currently in mail contact with https://ruben.verborgh.org and SOLID people. Will add it to the wiki in some minutes. Want to co-organize (help a bit)?
#
swentel sl007, not sure if I will be able to help out a lot, need to rehearse for a gig mid february, but should at least be able to attend a few days
tonz joined the channel
#
tonz @sl007 also do get in touch with me and Frank Meeuwsen. We plan one for Utrecht in April, but willing to help lut probably
#
sl007 swentel If it is about "the complete Moonlight Sonata" you are excused ;)
#
swentel sl007, yeah first part then hehe :)
#
sl007 tonz cool, thankyou - will put it in the wiki soon …
#
Zegnat tonz, hmm, April, I think I can swing that
#
Zegnat deathrow1, I have literally attended 0 tech things in Sweden myself, so haven’t been in touch with Yubico here. If they do sell within Sweden that would definitely be an option I should look into. (If aaronpk doesn’t drop a key in my lap.)
wolftune joined the channel
#
deathrow1 Zegnat: ordered to germany, so pretty sure they ship within sweden ;)
#
Zegnat Just hoping it is shipped from within EU. As Sweden isn’t letting post (or people) cross its borders these days :P
#
aaronpk i'll bring you one :)
#
deathrow1 Zegnat: shipped with the swedish postal service afaik
#
deathrow1 Zegnat: not letting it cross borders?
#
Zegnat All post from outside the EU gets blocked by Swedish Posts. Have to pay extra administrative fees, they do VAT checks, etc. This has also put them way back on packages so has led to big slow downs in deliveries.
#
aaronpk hmm, showing the location I created my travel posts is kind of confusing https://aaronparecki.com/2018/11/13/1/
#
Zegnat All in all not fun to try and order anything
#
Loqi [Aaron Parecki] Portland to Dallas-Fort Worth, Dallas-Fort Worth to Moline https://aaronparecki.com/2018/11/13/1/map.png
#
aaronpk that's a trip to Moline, but I created the post in Columbus. should I just not show the location I created the post in at all?
#
Zegnat It is clear to me that the location in the footer has nothing to do with the map and the contents of the post.
#
Zegnat But I obviously am used to seeing your site
#
deathrow1 Zegnat: pretty sure they only check stuff which is over a limit or has no mention of contents "value"
#
Zegnat Nope. New Swedish policy. Every non-EU item gets checked to make sure VAT has been collected. They also lowered to minimum price to 1 SEK (~10 euro cent)
wolftune joined the channel
#
deathrow1 Zegnat: ouch =/
[Rose], [jgmac1106], [kevinmarks], snarfed, benwerd_ and benwerd joined the channel
#
viaken Zegnat: I'd ship you one, but the price of shipping is higher than the cost of the key
[tantek], sl007 and chrisaldrich joined the channel
#
chrisaldrich Not sure if it's on anyone's radar, but I just noticed the project https://github.com/tsileo/microblog.pub which apparently has IndieAuth and microformats support.
#
Loqi [tsileo] microblog.pub: A self-hosted, single-user, ActivityPub powered microblog.
#
snarfed unfortunate name collision (somewhat)
#
sknebel interesting, I had seen their python activitypub library (github's automatic recommendations are surprisingly good) but not this
wolftune joined the channel
#
aaronpk whoa I wonder if they'll add micropub support then for the client-to-server API
#
chrisaldrich Anyone know tsileo personally or even tangentially. Might be worth inviting them to our happy little party.