#dev 2018-02-07

2018-02-07 UTC
#
gRegorLove
Because you link to the original post. I'm thinking of my own example and many others who don't link in their POSSE copies.
#
aaronpk
I don't think Tantek even paginates his front page
#
aaronpk
How would I crawl Tantek.com to find old posts? One post at a time on the permalinks??
#
snarfed
nope nope nope
#
aaronpk
Someone’s gotta do it
#
tantek.com
edited /Falcon (+439) "/* archives */ consider "day range" archive pages for home page pagination use-case, or fragments on newmonth archive pages to start with"
(view diff)
#
tantek
aaronpk you can crawl bim archives
#
tantek
6 per year, 8ish years, only 49 currently
#
aaronpk
Are they linked anywhere from your home page tho? How would I know they exist?
#
tantek
URL truncation
#
aaronpk
That’s not a link 😂
#
tantek
well, it's certainly not "follow your nose"
#
tantek
but it's reasonably "well known" ;)
benwerd, benwerd_ and plindner joined the channel
#
snarfed
works for humans, but not for vouch code
#
snarfed
the broader question though, could we use silos as a vouch alternative/extension, is definitely worth considering!
grantcodes, eli_oat[m], schmarty, myfreeweb, zoglesby, mindB, snarfed and [kevinmarks] joined the channel
#
[kevinmarks]
does vouch evolve into something like Advogato?
#
[kevinmarks]
vouch << earlier work on resolving vouch graphs http://www.levien.com/free/tmetric-HOWTO.html
#
Loqi
ok, I added "earlier work on resolving vouch graphs http://www.levien.com/free/tmetric-HOWTO.html" to the "See Also" section of /Vouch
benwerd and mblaney joined the channel
#
schmarty
!tell eddie got an error creating a new post through Indigenous. My endpoint returned a 202 status code, which i think is legit, but Indigenous showed a red bar and returned me to the editor with content intact
#
Loqi
Ok, I'll tell them that when I see them next
#
schmarty
!tell eddie if i am reading this right, HTTP 202 is legit for a site like mine which is going to go away for a while before the post is done https://www.w3.org/TR/micropub/#response
#
Loqi
Ok, I'll tell them that when I see them next
#
schmarty
!tell eddie (the post went through just fine)
#
Loqi
Ok, I'll tell them that when I see them next
benwerd joined the channel
#
mblaney
I haven't implemented vouch, but definitely coming around to the idea.
[eddie] joined the channel
#
[eddie]
!tell schmarty Good catch! I’ll add 202 to an accepted response code in the if statement
#
Loqi
Ok, I'll tell them that when I see them next
#
Loqi
[eddie]: schmarty left you a message 9 minutes ago: got an error creating a new post through Indigenous. My endpoint returned a 202 status code, which i think is legit, but Indigenous showed a red bar and returned me to the editor with content intact
#
Loqi
[eddie]: schmarty left you a message 9 minutes ago: if i am reading this right, HTTP 202 is legit for a site like mine which is going to go away for a while before the post is done https://www.w3.org/TR/micropub/#response
#
Loqi
[eddie]: schmarty left you a message 8 minutes ago: (the post went through just fine)
benwerd joined the channel
#
[eddie]
I do need to read through the full standard and look at Indigenous to see where it might not match up
#
mblaney
!tell snarfed I left you a message in #bridgy the other day about running a dev version, but I think running the tests will be enough for my changes.
#
Loqi
Ok, I'll tell them that when I see them next
tantek joined the channel
#
Loqi
schmarty: [eddie] left you a message 36 minutes ago: Good catch! I’ll add 202 to an accepted response code in the if statement
renem_, KartikPrabhu and benwerd joined the channel
#
tantek.com
edited /Facebook (+26) "/* How to wean yourself from */ add id since apparently it ws there before per autocomplete"
(view diff)
KartikPrabhu, benwerd, AngeloGladding, snarfed, tantek, zoglesby, schmarty, grantcodes, mindB, plindner, eli_oat[m], myfreeweb, barpthewire, cweiske, [hans] and [asuh] joined the channel
#
@switch_company
Aujourd'hui en interne on implémente Webmention. Mais pourquoi donc ? 🤔 https://indieweb.org/Webmention
(twtr.io/1aNWPTUD6CG)
[prtksxna] joined the channel
#
@Dries
Thanks for your comment on my blog post @davewiner. I wanted to let you know that I replied: https://dri.es/comment/134601#comment-134601. We really need #webmention.
(twtr.io/1aNXtir2sSm)
#
@nitishchpr
Thanks for your comment on my blog post davewiner. I wanted to let you know that I replied: https://dri.es/comment/134601#comment-134601. We really need #webmention.
(twtr.io/1aNY6sCAgzX)
[kevinmarks], [hans], jeremycherfas, jeremych_, [barryf], benwerd, eli_oat, tantek and leg joined the channel; mblaney left the channel
#
1500wordmtu.com
edited /site-deaths (+134) "Add shutdown for Bumpers and Captioned"
(view diff)
[hans], eli_oat, benwerd, [], [aaronpk], [kevinmarks], [aaron_pk] and [gerwitz] joined the channel
leg, [xavierroy] and [kevinmarks] joined the channel
#
@nhoizey
@foobartel @smashingmag Both posts are great! But where is the Webmention linking them? 😁
(twtr.io/1aP9eThKKYG)
gRegorLove joined the channel
#
@foobartel
@nhoizey @smashingmag Thanks! Webmentions only implemented half way so far :( Hopefully coming soon.
(twtr.io/1aPAa9SDCbH)
benwerd, tantek and snarfed joined the channel
#
aaronparecki.com
edited /p3k_naming_convention (+9) "/* Unused Names */"
(view diff)
#
www.svenknebel.de
edited /Do_Not_Track (+122) "move EFF recommendations up the page, add sentence for context"
(view diff)
#
www.svenknebel.de
edited /User:Www.svenknebel.de (+65) "itch: DNT review"
(view diff)
#
www.svenknebel.de
edited /User:Www.svenknebel.de (+61) "/* short-term itches */"
(view diff)
benwerd, snarfed and [kevinmarks] joined the channel
#
[kevinmarks]
A parse mf2 and return oembed would be doable
#
tantek
sounds like a good unmung service
#
dgold
i might have a read of the hugo forums, see if its ever come up
#
[kevinmarks]
I did make one, but I tried to use the html version and that wasn't supported
[dshanske] joined the channel
#
[kevinmarks]
I could do a basic one I suppose
[xavierroy], snarfed and eli_oat joined the channel
#
sknebel
felix' blog post about his library is interesting, e.g. it seems fully working embeds in wordpress require the oembed to be on the same domain as stuff linked to from it
#
snarfed
anyone here have experience with the github v4 api's rate limiting?
#
Loqi
snarfed: mblaney left you a message 15 hours, 48 minutes ago: I left you a message in #bridgy the other day about running a dev version, but I think running the tests will be enough for my changes.
#
snarfed
evidently the github v4 API's rate limit (5000 "points" per hr) is per app, not per authenticated user, which is unusual, and unfortunate. https://developer.github.com/v4/guides/resource-limitations/#rate-limit
#
aaronpk
oh noes
#
snarfed
thinking about github backfeed in bridgy...if i estimate a poll will cost ~22 points, and i poll hourly, that sets a scaling celing of ~227 github accounts. beyond that, i have to start dropping poll frequency. :(
#
aaronpk
you determined there isn't enough in the web hook api to avoid polling?
#
snarfed
maybe they expect to talk to individual apps once they get big and raise their limits individually?
#
snarfed
aaronpk: webhooks get me part of the way, but not everything. https://github.com/snarfed/bridgy/issues/333#issuecomment-358442097
#
Loqi
[snarfed] particularly interesting: the v3 API has [webhooks for many events we care about for backfeed!](https://developer.github.com/webhooks/) e.g. new issue comments. not for reactions though.
#
snarfed
(not to mention i'm always reluctant to write new code against an old version of an API)
#
aaronpk
I wonder if they plan on adding more web hooks to the new api
#
snarfed
s/more/any/
KevinMarks joined the channel
benwerd joined the channel
#
snarfed
i also can't tell from the docs if you can register for a webhook programmatically, or if users would need to go into their github settings manually and add it themselves
#
www.boffosocko.com
created /Refback (+21) "initial redirect to fix some redlinks elsewhere"
(view diff)
#
snarfed
ah, found it. looks like you can programmatically. https://developer.github.com/v3/repos/hooks/#create-a-hook
#
snarfed
...except ugh that's per repo
#
snarfed
no user-wide webhooks
#
sknebel
at least they have a support forum for the new API: https://platform.github.community/c/graphql-api (but I didn't find anything relevant to your question from a quick search :/)
#
tantek
let's see if I can RSVP to my own indie events - not sure I've done that before
#
tantek
yay it worked. uh now there's a random twitter URL in my RSVPs display lol
#
tantek
whoa since when did wm io start sending back p-syndication?
#
aaronpk
I think a while?
#
tantek
maybe that's the first time I've indie RSVP'd to my own indie event, and I'm the first person to indie RSVP to one of my events while POSSEing the RSVP to Twitter?
#
www.boffosocko.com
edited /Posts_about_the_IndieWeb (+278) "Dries Buytaert (creator of Drupal) on PESOS or POSSE"
(view diff)
#
tantek
fixed
KevinMarks joined the channel
snarfed joined the channel
#
tantek
wow. zero day DoS that's pretty bad
[eddie] joined the channel
#
[eddie]
Making the jump on my local Monocle to Aperture. :crossed_fingers:
#
aaronpk
should be pretty seamless I think. tho I actually installed a new one from scratch when I moved mine.
#
[eddie]
Yeah, one major benefit is because the name is changing, I’m changing the url too, so as you said, it’s kind of just like creating a second instance and then removing the first
#
tantek
jjuran note the irony of *securityweek* being on http (not https)
KevinMarks joined the channel
#
tantek
just saying
#
tantek
and if you try to load the https version, it's a different site and you get a 404!
#
[eddie]
aaronpk: comparing my .env to the .env.example in Aperture, I don’t see XRAY_URL anymore. Is that just embedded in Aperture now?
#
aaronpk
yeah, it was never actually used
#
[eddie]
ahhh gotcha
#
aaronpk
I think I put it in the example when I first created the project
#
aaronpk
wow okay I just made making indieauth clients super easy
#
aaronpk
pushing up some changes to the indieauth-client-php library in a few minutes!
#
Loqi
[indieweb] indieauth-client-php: Sample implementation and helper methods for an IndieAuth client.
#
aaronpk
a complete indieauth client in two very short files
eli_oat and benwerd joined the channel
#
sknebel
aaronpk: resolveMeURL() seems to be used nowhere?
#
aaronpk
oh crap you're right, I thought normalizeMeURL did that
#
aaronpk
got ahead of myself there
#
@keithjgrant
@AaronGustafson @nhoizey @foobartel @smashingmag Does your jekyll webmention plugin pull them in at build time, or live on the client? (I’ve got the latter working with Hugo on my site)
(twtr.io/1aPU5GqZ5Gp)
#
aaronpk
next up i'm gonna make indieauth.rocks into a whole bunch of different identity URLs you can use to test clients
#
[eddie]
That’s awesome
#
Loqi
[Aaron Parecki] IndieAuth-Client-PHP 0.3.1
[kevinmarks] joined the channel
#
[kevinmarks]
[dgold] if you're using Hugo you could make a template for the oembed json and link from each post
#
sknebel
aaronpk: given that oversight that would have been my next question ;)
#
aaronpk
yeah I basically want to have a whole set of URLs you can use to test all the cases
#
aaronpk
including making sure you don't let someone's auth server claim to be someone else
#
aaronpk
looking forward to ripping out *so much code* from all my projects haha
#
Loqi
rofl
[miklb] joined the channel
#
[eddie]
Hmmm something feels fishy with Aperture’s scoping
#
[eddie]
I got:
#
[eddie]
“error”: “unauthorized”, “error_description”: “The access token provided does not have the necessary scope for this action”
#
[eddie]
My token endpoint returns the following when I verify my token:
#
[eddie]
“me”: “https://eddiehinkle.com/“, “client_id”: “https://aperture.eddiehinkle.com/“, “scope”: “create read”
#
Loqi
Eddie Hinkle
#
[eddie]
(I generated it with gimme-a-token
#
aaronpk
Oh hm I think it's expecting the token endpoint to return an array but now that you mention that it might be wrong
#
aaronpk
Yeah, my bad
#
[eddie]
Gotcha 🙂 no worries. Just glad I wasn’t losing my mind
#
Zegnat
Hmm. I’m thinking about retiring some rel-me links. Because RelMeAuth is a thing, I would really only want to allow that from silos that support 2FA. Anyone else thought about that?
#
sknebel
Zegnat: I asked ages ago about a way to specify the trust of rel=me's but nobody seemed interested, and I think I saw a similar request recently
#
Loqi
[Dan-Q] #175 Allow site owners to mark some rel="me" links as being unsuitable for contacting them
#
aaronpk
I don't really want to add that to relmeauth implementations, I'd be more interested in adding that kind of thing to myIndieAuth.com so you can really control it better
#
aaronpk
Another good reason to split these up
#
sknebel
makes sense
#
Zegnat
On one end I feel like removing them is counter their use of distributed verification, but as long as RelMeAuth is a thing I also feel a need to point out those I do not trust enough to handle authentication on my behalf.
#
aaronpk
It's an interesting question for relmeauth
#
sknebel
guess the question is "do we assume RelMeAuth is actually thing outside indieauth.com, or don't we? :P
#
jjuran
What about using rel=“auth”, and deprecating rel=“me” for authentication?
benwerd joined the channel
#
aaronpk
Relmeauth is certainly a thing outside of IndieAuth.com
#
aaronpk
At least in spirit if not in number of implementations
#
sknebel
then such a request is still relevant even if indieauth.com wants to solve it somewhere else
#
aaronpk
Yeah I'm more saying it's an issue for the relmeauth spec rather than IndieAuth.com
#
Zegnat
Oh yes, I do not think this is up to indieauth.com (or any implementation) to solve
#
jjuran
You could even switch seamlessly: Ignore rel=“me” for auth if any rel-“auth” is present, otherwise use rel=“me”.
#
jjuran
s/-/=/
#
aaronpk
want to start brainstorming here? https://indieweb.org/RelMeAuth#Issues
KevinMarks, benwerd and tantek joined the channel
#
Zegnat
I will add my thoughts there in ~15 minutes aaronpk :)
#
Zegnat
sknebel if you have any more references for people asking about this do add there
#
dgold
aaronpk: trying watchtower - i got the files, ran composer install; its failing with: https://pastebin.com/2tZbL8AC
#
aaronpk
oh yeah yay for no documentation :)
#
Loqi
woot
#
aaronpk
copy lib/config.example.php to lib/config.php and fill in the blanks
#
aaronpk
er, config.template.php
#
dgold
documentation! its not just a good idea :) {and yes, I acknowledge with thanks you say this isn't ready}
#
aaronpk
I will document everything later I promise :)
#
dgold
what class of db does it want?
KevinMarks joined the channel
#
aaronpk
I run it on mysql, tho I think it'll handle anything idiorm can use http://idiorm.readthedocs.io/en/latest/
#
[eddie]
I run it on mysql as well
#
dgold
last question, I promise - does that mean setting up an entire mysql:localhost as the $dbhost setting
#
aaronpk
do you not already have a mysql server somewhere?
#
dgold
as opposed to just $dbhost = '127.0.0.1'
#
dgold
no, there's a mysql on the server
#
aaronpk
you can replace the ip address with the hostname of the server
#
dgold
that's fine, was just wondering if I had to specify mysql in the config.php somehow
#
aaronpk
oh yeah, that's right, it is sorta hardcoded to mysql
#
aaronpk
would be relatively easy to change if you need tho
#
dgold
hardcode is best
#
dgold
(less things for me to put FUBAR)
#
dgold
and it works! not terrible excitement to look at, but it does work!
#
aaronpk
yep it has no UI at all :P
#
Loqi
nice
#
[eddie]
aaronpk: The “channels” action requires a “channels” scope. Even if you are just doing a read… is that right, or should I create an issue for that?
#
aaronpk
oh yeah, listing channels should require read scope not channel scope. channel scope is for managing channels.
#
aaronpk
plz file issue :)
#
[eddie]
will do :thumbsup:
#
[eddie]
I think I might have a fix but it seems like it caches token response data? Any easy way to purge the cache?
#
aaronpk
hm I should make a command for that
#
[eddie]
I’ll just generate a new token :thumbsup:
#
dgold
looking at the source, i'm guessing aperture is a more involved startup? or is it the same - clone, db, config ?
#
aaronpk
it's pretty similar, but there's a command line thing to make the database for example
#
dgold
php artisan make:migration ?
#
aaronpk
php artisan migrate
#
dgold
#amlearning
#
aaronpk
need to create the empty DB first so it has a place to put things
#
dgold
that I can do - managing to surprise myself
#
dgold
i'm running out of culture ship names though
tantek joined the channel
#
Zegnat
“culture ship names”?
eli_oat joined the channel
AngeloGladding joined the channel
#
tantek.com
edited /cross-posting (+108) "linky, note original pesetas use-case (one place to follow for all the things), and reword the worst option for a more memorable acronym"
(view diff)
benwerd joined the channel
#
loqi.me
created /POOSNOW (+152) "prompted by tantek and dfn added by tantek"
(view diff)
benwerd joined the channel
#
tantek.com
edited /cross-posting (+86) "add subheads for frag linking"
(view diff)
#
loqi.me
edited /POOSNOW (+42) "tantek added "/cross-posting#POOSNOW" to "See Also""
(view diff)
#
tantek.com
edited /POOSNOW (+3) "fix link"
(view diff)
#
loqi.me
edited /POOSNOW (+30) "tantek added "[[Single Point of Failure]]" to "See Also""
(view diff)
#
dgold
sknebel / Zegnat exactomundo! all my subdomain sites are culture ship names
#
sknebel
I had that as a VM naming scheme on my homeserver for a while
#
Zegnat
All my devices are names after national personifications.
#
Zegnat
What is naming?
#
Loqi
It looks like we don't have a page for "naming" yet. Would you like to create it? (Or just say "naming is ____", a sentence describing the term)
#
snarfed
POOSNOW 😱
#
vanderven.se martijn
edited /RelMeAuth (+1129) "/* Issues */ Consolidated identities do not carry inherent trust"
(view diff)
#
Zegnat
That definitely needs a better header ... but I am tired.
#
[eddie]
!tell aaronpk: Created two PRs on Aperture for the scope string/array and the different channel scopes.
#
Loqi
Ok, I'll tell them that when I see them next
#
tantek
naming is hard
#
loqi.me
created /naming (+42) "prompted by Zegnat and dfn added by tantek"
(view diff)
#
tantek
hey folks, keep a lookout for @Dries showing up as I invited him to stop by and chat here as he implements POSSE in Drupal for his site (and hopefully for Drupal in general) https://dri.es/comment/134641#comment-134641
#
tantek
also this is a great reply with several insightful gems that are worth taking note of (maybe even FAQing) https://dri.es/comment/134646#comment-134646
#
tantek
what is reach
#
Loqi
It looks like we don't have a page for "reach" yet. Would you like to create it? (Or just say "reach is ____", a sentence describing the term)
#
tantek
really? I thought I defined that
#
tantek
what is pay for reach
#
Loqi
pay for reach is a business practice by Facebook, Twitter, and other social media silos, whereby they charge publishers (ask them to pay) to have their posts be shown to users on their site, even if the users have already opted-in (followed, subscribed) to posts from those publishers https://indieweb.org/pay_for_reach
#
tantek
what is write
#
Loqi
It looks like we don't have a page for "write" yet. Would you like to create it? (Or just say "write is ____", a sentence describing the term)
#
tantek
what is why post
#
Loqi
It looks like we don't have a page for "why post" yet. Would you like to create it? (Or just say "why post is ____", a sentence describing the term)
#
vanderven.se martijn
edited /RelMeAuth (+651) "/* Consolidated identities do not carry inherent trust */ Add Dan Q and jjuran’s proposed solutions"
(view diff)
#
loqi.me
created /why_post (+38) "prompted by tantek and redirect added by tantek"
(view diff)
#
tantek
why << why post
#
Loqi
ok, I added "[[post]]" to the "See Also" section of /why
#
tantek
^^^ aaronpk, redirect loss of frag bug
#
tantek.com
edited /why (+4) "/* See Also */ why post"
(view diff)
leg joined the channel
#
tantek.com
edited /post (+404) "/* Brainstorming */ add Dries quote on why post"
(view diff)
#
tantek
what is reach?
#
Loqi
It looks like we don't have a page for "reach" yet. Would you like to create it? (Or just say "reach is ____", a sentence describing the term)
#
tantek
reach is usually used to refer to the number or extent of people that see or are at least shown a specific post (of yours) in whatever aggregator or [[reader]] app, site, or home (news) feed feature of a silo that they use to view posts. Many [[silos]] use algorithms (like [[The Facebook Algorithm]]) to limit which posts are shown, as one method to pressure publishers to [[pay for reach]].
#
loqi.me
created /reach (+419) "prompted by tantek and dfn added by tantek"
(view diff)
snarfed joined the channel
#
tantek
what is The Facebook Algorithm
#
Loqi
It looks like we don't have a page for "The Facebook Algorithm" yet. Would you like to create it? (Or just say "The Facebook Algorithm is ____", a sentence describing the term)
#
tantek
what is The Master Algorithm
#
Loqi
It looks like we don't have a page for "The Master Algorithm" yet. Would you like to create it? (Or just say "The Master Algorithm is ____", a sentence describing the term)
#
tantek
what is Master Algorithm
#
Loqi
Facebook Master Algorithm is the name given to Facebook's algorithm for determining what content to show in Facebook's reader (AKA News Feed shown on their logged-in homepage), also adopted and tweaked by Instagram for their reader (app home screen) https://indieweb.org/Master_Algorithm
#
tantek
The Facebook Algorithm is /Master_Algorithm
#
tantek
what is Facebook Algorithm
#
Loqi
Facebook Master Algorithm is the name given to Facebook's algorithm for determining what content to show in Facebook's reader (AKA News Feed shown on their logged-in homepage), also adopted and tweaked by Instagram for their reader (app home screen) https://indieweb.org/Facebook_Algorithm
benwerd joined the channel
#
loqi.me
edited /pay_for_reach (+12) "tantek added "[[reach]]" to "See Also""
(view diff)
[kevinmarks] and tantek joined the channel
#
loqi.me
created /💩🌨️ (+20) "prompted by jjuran and redirect added by jjuran"
(view diff)
snarfed, eli_oat and tantek joined the channel