Loqi[gRegor Morrill] “Our level of discomfort with others’ transparency is reflective of our discomfort with our own shortcomings.”
— Wendy Holland, Mission Gathering sermon on February 4, 2018
tantek.comedited /Leaders (-90) "that was an odd Loqi bug to fix, concerning that I somehow snuck a string into the static "See Also" heading that Loqi added" (view diff)
tantek!tell aaronpk interesting that your post permalink https://aaronparecki.com/2018/02/08/1/ doesn't show your own follow-up replies to my comment! I'd expect to see the whole thread there.
Loqiaaronpk: tantek left you a message 1 hour, 4 minutes ago: interesting that your post permalink https://aaronparecki.com/2018/02/08/1/ doesn't show your own follow-up replies to my comment! I'd expect to see the whole thread there.
[eddie]The worst part about iOS development? Code signing and device provisioning. The latest build of Indigenous (full of bug fixes) works fine in my device and simulator but fails when building for TestFlight
jeremycherfasThat phony760 is so weird. I happen to have Slack open at the same time, and there the message shows as a bunch of black blocks and double border thingies.
LoqiIt looks like we don't have a page for "removing irc spam" yet. Would you like to create it? (Or just say "removing irc spam is ____", a sentence describing the term)
ZegnatThe Spam section has a link to the GitHub archive, I didn’t duplicate that link again in the section I wrote. Maybe should have. I’ll do that now.
vanderven.se martijnedited /IRC (+174) "/* How-to remove spam */ Put the edit screenshot in the right list item, add information on where to find the files." (view diff)
Zegnatjeremycherfas, please see if the How-to on spam is more clear now :) I originally wrote it trying to create a step-by-step guide any one could follow
@sl007@OKNRW@derarndt Seit 4 Jahren arbeite ich an einem dezentralisierten CMS – einige der Technologien (Micropub, Webmention, ActivityPub) sind inzwischen W3C-Empfehlungen. Also nicht falsch verstehen, Eure Idee ist toll. Aber BITTE überlasst das Digi-Feld bundesweit nicht auch noch den Rechten. (twitter.com/_/status/961898047549661184)
[eddie]Nope, it just worked for me. That said it worked after I submitted two PRs so, you’ll want to be sure you have the latest code from aaronpk’s branch
[eddie]Hmmm that’s a good question. I think I need to add that in to the account debug screen because I don’t think there is currently a way to see that 😕
ZegnatIf the auth token is in de debug screen, you can make a request with that to your token endpoint yourself dgold. The token endpoint will tell you what scopes that token has.
ZegnatLooking at the aperture code, I think we can also cheat if you need some scopes in there without regenerating the token in indigenous. But probably best not to start of with a hack :P
ZegnatIn your case `curl -H "Authorization: Bearer %%%" https://tokens.indieauth.com/token` on the command line should do the trick. just replace %%% with the actual token.
jeremycherfasZegnat You remember that business about finding out the fields Known will accept by using a GET to the endpoint? Does it have to be an authenticated request?
ZegnatIt has to be a POST request. It can probably be done with either your current session (as you have it in the browser), or by passing the API key in a header
jeremycherfasZegnat, but "Many pages report some basic information about them by making GET requests, so for example, making a GET request to the same /status/edit endpoint will return, among other things, available syndication methods and the type of object being created."
jeremycherfasThe hard thing about working on Known's "each page is an endpoint" thing is that each type of page requires a different signature for authentication. Which is a real pain.
jeremycherfasAnd weirdly, the commands that used to work with the old version, like shpub-0.6.0.phar server now give an error "shpub-0.6.0.phar: command not found"
[eddie]!tell aaronpk: Does Aperture have any way to funnel posts into the notifications channel? The Microsub spec defines a home and notification channel but I’m not sure how Aperture deals with those right now
aaronpkone of my plans it to make Aperture handle home page webmentions and have those go into the notifications channel. but you could kind of hook that up manually right now if you wanted
aaronpk[miklb]: my site recognizes when a post has a Twitter POSSE copy, finds the twitter URL, then passes that to silo.pub to send my copy of the like to twitter
[miklb]I hadn’t thought about silo.pub, I was looking at using the existing bridgy one in GWG’s plugin. I guess I need to look at what is returned in the micropub like/repost to know exactly what property I can check for. Thanks
[eddie][miklb] a like/repost would return the url of the item liked or reposted. So you would want to first, check if the url is a Twitter url. If so, Bridgy/silo.pub it. Secondly, if it’s not a twitter url, parse it for microformats and check for any twitter u-syndication links, if so Bridgy/silo.pub it
snarfedbridgy publish also checks for synd links itself, so alternatively, you could just attempt to bridgy publish everything, and let it fail on non-syndicated posts
[miklb]thanks, I’d rather get more familiar with micropub, and particularly, your plugin for it. I might be too intimidated to submit any PRs, but we’ll see.
[eddie][miklb] I work as a programmer full-time professionally. Over the course of the last decade, I have written less than 10 unit tests 😉 you are in good company
snarfedalternative perspective: i work as a programmer full time too. over the last two decades, i can probably count on one hand the things that have fundamentally changed the way i work. unit tests are at the top of that list, unequivocally for the better.
ZegnatI have also had a hard time fitting unit tests into my workflow. Because I am often just working off of a very specific specification on the inputs and outputs already.
[eddie]I think Unit Tests are amazing. If you can, do it :thumbsup: But never be ashamed that you can’t write them. They are, as Snarfed pointed out a time saving optimization
aaronpkI find it really hard to write unit tests for larger projects, especially when there's a UI involved. but I'm a huge fan for libraries and other self-contained parts of a project.
[eddie]Hopefully I’ll be able to get into it more at work, we use Angular and so part of our current programming cycle, one of our people has started up integrating the Angular testing stuff into our programming environment
[miklb]I just haven’t found the right environment and timing to learn them. Maybe if what I come up with for the micropub plugin will be my first foray. I trust snarfed to be helpful in the PR
ZegnatI find I am writing a lot of code that depends on HTTP stuff. And just having to do all the Request object mocking already turns me off of writing the tests. But I’ll get over that some day.
ZegnatDiactoros actually seems to come with a really nice Request serialiser and unserialiser. Now that I have done some projects with that lib, I have been thinking about writing tests again.
[eddie]GitHub integration on Bridgy Publish, allows you to post a like of a GitHub repo to your site and then syndicate that into a GitHub repo star. Or post an issue or comment on your site and copy that GitHub
Loqi[cleverdevil] While I think a Gallery object would be nice, eventually, I am not convinced that its necessarily the best way to go here. Its my understanding that pretty much all Entities support attachments, so doing it in the near-term in a more cross-cutting wa...
Loqi[Tantek Çelik] Made it to my destination safe and sound.Figured out the next big thing I want to build for my site for the #newwwyear:* POSSE issues^1 and replies to GitHubas part of my #indieweb 2018 stretch goal of owning/POSSEing all* my public posts, specifical...
stephenpieper.netcreated /User:Stephenpieper.net (+154) "Created page with "https://stephenpieper.net I've been adding bits and pieces of Indieweb structure to my personal Worpress site. Plugins mainly but I'd like to learn more."" (view diff)
Loqi[tantek] Proposal: we close all classic mf (AKA mf1) examples-in-wild pages as of 2017, noting that 1. They have been so successful (millions of WP blogs etc.) that no need to track individual examples anymore, and 2. Anyone adding microformats today should b...
tanteksnarfed, in the OAuth prompt to Authorize Bridgy, there's a list of "Organization access" and they're all green checkmarked, except for one, which has a grey x instead next to it, and a "Request" button
tantek"By requesting this approval, you are asking owners of the ACME organization to allow this application to access private organization data and modify public organization data."
tanteksnarfed, given the recent scares about github accounts going away (people deleting) and getting replaced by new users with same username, where such accounts used to host libraries that got included in things, this is worth thinking about
@weekstweetsThis morning, the creator of go-bindata deleted their GitHub account and someone else created a new account under the same name. Another reason to pay closer attention to the provenance and security of your software supply chain. https://lnkd.in/dvWXU_4 (twitter.com/_/status/961304627596623874)
tantekmy point is people are more "sensitive" about looking at anything related to Github and security right now, so "Authorize snarfed" being the big green button while the header at the top says "Authorize Bridgy" is likely to raise some red flags
snarfedi probably still wouldn't use the bridgy username. juggling multiple github accounts sounds like a bad time, ongoing, for an iffy workaround to a narrow problem
snarfedalthough, actually, this is totally unrelated to where the code is hosted. it's just about which github account owns the oauth app. which makes it maybe easier to admin.
[eddie]snarfed: for what it’s worth I thought “That’s very strange that it says Authorize Snarfed... oh well it’s a Beta” if I came in from outside the community and saw it I would have been pretty confused. That said, I’m not the most security conscious so I very well might have used it anyway
@weekstweetsThis morning, the creator of go-bindata deleted their GitHub account and someone else created a new account under the same name. Another reason to pay closer attention to the provenance and security of your software supply chain. https://lnkd.in/dvWXU_4 (twitter.com/_/status/961304627596623874)
tantekgiven that most services that use @-references allow username renaming (and account deletion / recreation by another party), there is the risk (and likely real examples already out there) of autolinked @-names that no longer refer to who they used to when the authoring was done
tantekwhereas now I'm thinking there needs to be a *publish-time* auto-linking step which captures the *user-id* of the @-name at publish time, and stores that in the post content
tantekfor all @-names in a post, the server should discover their user-ids and store them at publish-time as @-name,user-id pairs in a sidetable, for future auto-link resolution
tantekfor all *links* in a post, the (publishing) server should store the publish-time archive.org URL for each (because of course the publishing server is already pinging archive.org to Save each link right? which returns the archive.org URL for it) in a sidetable
tantekwhile keeping any changes/history? e.g. if an @-name to user-id changes, that's worth warning the user about (and likely keeping the original @-name to user-id mapping)
tantekand if (when?) you find out a link (domain?) has broken, you add it to a deadlinks table (manual update?) which then is a clue to the auto-linker to use the most recent archive.org URL from that sidetable instead
[kevinmarks]The concrete example is instagram, which will remap @'s if the instagram userid has been mapped to a different twitter id and verified by OAuth
tantek1. if you @-mention a name in an IG caption/comment, that will always link to instagram.com / thatname and never be updated, regardless if the owner of "thatname" changes it to "anothername"
tantekso either those @-mentions break or you end up with old captions/comments linking to new/different accounts than they did when they were written!
tantek(yes I have found specific examples of this, but with private accounts that I can't share publicly. you should be able to verify the above with a pair of accounts and publishing from one referencing the other, renaming the other)
tantekso step one - anyone who is auto-linking @-names or links, get and save the user-id for each @-name at publish time, and get and save the archive.org URL for each plain text URL at publish time
gRegorLove snarfed: Seems something odd is happening with Granary and my quote post: https://granary.io/url?input=html&output=atom&url=http://gregorlove.com/notes/ search "Wendy"
@miklb Been in a dev rut, so to break out going to see how quickly I can go from 0 to live #indieweb site sending/receiving webmentions with @eleven_ty. Since it supports liquid, I can use my work from jekyll-indieweb as a heads start https://github.com/miklb/jekyll-indieweb (twitter.com/_/status/961783010604605441)
tantek.com edited /Leaders (-90) "that was an odd Loqi bug to fix, concerning that I somehow snuck a string into the static "See Also" heading that Loqi added" (view diff)
tantek !tell aaronpk interesting that your post permalink https://aaronparecki.com/2018/02/08/1/ doesn't show your own follow-up replies to my comment! I'd expect to see the whole thread there.
Loqi [Aaron Parecki] Portland to San Francisco https://aaronparecki.com/2018/02/08/1/map.png
www.boffosocko.com edited /Medium (+472) "rel-canonical setting for WordPress plugin; pagelogo; moved TOC" (view diff)
[jeremycherfas] [eddie] For the record, Quill has never been able to find my syndication targets from Known.
[kevinmarks] It used to be able to. The version on my phone works, but when I connect again it doesn't work any more.
loqi.me created /removing_irc_spam (+35) "prompted by tantek and redirect added by tantek" (view diff)
@sl007 @OKNRW @derarndt Seit 4 Jahren arbeite ich an einem dezentralisierten CMS – einige der Technologien (Micropub, Webmention, ActivityPub) sind inzwischen W3C-Empfehlungen. Also nicht falsch verstehen, Eure Idee ist toll. Aber BITTE überlasst das Digi-Feld bundesweit nicht auch noch den Rechten. (twitter.com/_/status/961898047549661184)
@feross 🙌 Just released a CLI tool called `thanks` to help you thank the open source maintainers you depend on! ✨ 1. Run 'npx thanks' in your project 2. See which of your dependencies are seeking donations! 💸 🌟 Open source authors, add yourself to the list: https://github.com/feross/thanks https://pbs.twimg.com/tweet_video_thumb/DVjOet0VQAA2CYg.jpg (twitter.com/_/status/961745970080792576)
Zegnat https://indieauth.spec.indieweb.org/#access-token-verification - is what you want. Just go a GET request to your token endpoint, with the Authorization header filled with the token that Indigenous is using.
dgold but... you're not putting it in /usr/local/bin, you're putting it in ~/bin
@jacobian Has anyone done a Django implementation of micropub and webmention? (twitter.com/_/status/962002367074873344)
[eddie] [miklb] a like/repost would return the url of the item liked or reposted. So you would want to first, check if the url is a Twitter url. If so, Bridgy/silo.pub it. Secondly, if it’s not a twitter url, parse it for microformats and check for any twitter u-syndication links, if so Bridgy/silo.pub it
aaronpk XRay is probably one of my better documented ones if you want a good example https://github.com/aaronpk/XRay
KartikPrabhu wait what beta test?
[cleverdevil] snarfed++
stephenpieper.net created /User:Stephenpieper.net (+154) "Created page with "https://stephenpieper.net I've been adding bits and pieces of Indieweb structure to my personal Worpress site. Plugins mainly but I'd like to learn more."" (view diff)
@weekstweets This morning, the creator of go-bindata deleted their GitHub account and someone else created a new account under the same name. Another reason to pay closer attention to the provenance and security of your software supply chain. https://lnkd.in/dvWXU_4 (twitter.com/_/status/961304627596623874)
@francesc 📢 #GOLANG WARNING go-bindata creator deleted their @github account and someone else created a new account with the same name. There's no guarantees that the new user has good intentions, so if you're using the repository make sure you verify it first! https://github.com/jteeuwen/go-bindata (twitter.com/_/status/961249107020001280)