#dev 2018-05-09

2018-05-09 UTC
#
KartikPrabhu yes
#
aaronpk apparently lol
#
KartikPrabhu for RPC" https://indieweb.org/REST#Remote_Procedure_Calls
snarfed and [unoabraham] joined the channel
#
gRegorLove schmarty, I think your mention fallback (for no h-entry) is picking up h-card u-photo instead: https://martymcgui.re/2018/05/06/134816/ mentioned by https://abraham.uno/1610/1610/
#
Loqi [Marty McGuire] This Week in the IndieWeb Audio Edition • April 28th - May 4th, 2018
#
gRegorLove https://chat.indieweb.org/wordpress/2018-05-09#t1525824907707100
#
Loqi [[unoabraham]] My Webmentions seem to be broken. All I'm getting is a big picture.
eli_oat, renem, [jgmac1106], [unoabraham] and tantek joined the channel
#
tantek.com created /👨‍👩‍👧‍👦 (+20) "r" (view diff)
deathrow1, KartikPrabhu and tantek joined the channel
#
tantek.com edited /IndieWeb (+14) "deformalize dfn a bit, +community, g, iterate minor parentheticals" (view diff)
deathrow1, tantek and eli_oat joined the channel
#
@jackyalcine I'd love for the #IndieWeb to support something like voting poll support. It'd be an extension of #WebMention but man! (twitter.com/_/status/994043534025019393)
KartikPrabhu joined the channel
#
@wilkieii ↩️ in a sense, the indieweb-adjacent experiments with "reactji" kinda show you can do this (presumably with webmention as a pingback) (twitter.com/_/status/994044463268925440)
oodani, [jgmac1106] and eli_oat joined the channel
#
@EddieHinkle ↩️ Something like this is possible even without webmention specific support. Essentially it could be done using microformats2 similar to how Events and RSVPs work over webmention. https://indieweb.org/rsvp (https://eddiehinkle.com/2018/05/09/1/reply/) (twitter.com/_/status/994070310763757580)
snarfed joined the channel
#
gregorlove.com edited /Twitter_poll (+45) "current info, link to help docs" (view diff)
#
gRegorLove what is twitter poll
#
Loqi Twitter Poll is a Twitter feature that lets you post a poll question with up to four answers for people to choose https://indieweb.org/Twitter_poll
AngeloGladding, [unoabraham], loicm, cweiske, [kevinmarks] and jeremycherfas joined the channel
#
jeremycherfas !tell zegnat Progress! We now get to the next ifelse in common.php.
#
Loqi Ok, I'll tell them that when I see them next
#
jeremycherfas Error "error_description "The request lacks valid authentication credentials""
#
jeremycherfas And in the curl_response "{"me":"http:\/\/localhost:8888\/grav-admin\/","client_id":"https:\/\/omnibear.com","scope":"post create delete update"}"
#
jeremycherfas That ""me" mtches exactly the "me" in Omnibear.
#
Zegnat Looks like Mintoken is fixed then! Did you use my alternative branch or the htaccess fix?
#
Loqi Zegnat: jeremycherfas left you a message 1 minute ago: Progress! We now get to the next ifelse in common.php.
#
jeremycherfas Your alternative branch.
#
jeremycherfas So, yes. Definite progress.
#
jeremycherfas The problem is that the $me returned by curl is encoded and the $me stored in common.php is not.
#
cweiske urldecode()
#
jeremycherfas Or vice versa, rather, because zegnat's earlier fix uses json_decode($curl_response ...)
#
cweiske ah, json encoded not url encoded
#
jeremycherfas Yes
#
Zegnat After the JSON decode it shouldn't be encoded in any way anymore.
#
Zegnat Is the Micropub endpoint including the port in its $me? It may not, and then the URLs never match.
#
Zegnat Just a random idea. I don't have the code open yet, breakfasting.
#
jeremycherfas I changed that line to `$response = ($curl_response);` and now I get a 200 back.
#
jeremycherfas But the inspector pop up closes so it is hard to see what else is going on. But hey, a 200 is even more progress, right.
#
Zegnat Yeah I don't know why it does that when the inspector is still open. Really annoying.
#
cweiske which inspector?
#
jeremycherfas Chrome. Omnibear has an option to open the Inspector before you send a POST, so you can see the error messages. But it seems that if the response is OK the popup just closes.
#
cweiske ah
#
jeremycherfas Zegnat, what was the problem that your json_decode was supposed to fix?
#
Zegnat The token endpoint sends a JSON response. So you need json_decode. The original code expected a form encoded response and used parse_str
#
jeremycherfas Because when I remove that, authorization succeeds
#
Zegnat Huh? I am confused. You need json_decode where it originally used parse_str, else it shouldn't even function.
#
jeremycherfas Let me make a gist
#
Zegnat Let me boot my machine rather than use my phone.
#
jeremycherfas Yeah. Sorry. We can pick this up again later if you prefer. I should stop soon anyway.
#
Zegnat Make the gist and I'll have a look. Whether you can work with it now or later doesn't matter
swentel joined the channel
#
jeremycherfas https://gist.github.com/jeremycherfas/6ff73f04e3c69a19a271773045e01890
#
Zegnat I don't understand. Without the json_decode surely response is just a string and all those of checks should fail as they rely on an array
#
jeremycherfas Let me run debug again, in case I have confused myself.
#
Zegnat Oh. Actually. I think it isn't working at all. What is happening is that PHP is throwing an error, which gets send to the browser as a HTTP 200 response.
#
jeremycherfas Blast.
#
jeremycherfas Well, let me reinsert an earlier quit.
#
cweiske (which is why I like to start my php scripts with "header('HTTP/1.0 500 Internal Server Error');"
#
cweiske and only send the 200 header when I actually succeed
#
Zegnat That is really clever, cweiske. I feel like it should not be neccessary, but well, PHP being PHP I guess
#
cweiske e.g. https://git.cweiske.de/anoweco.git/blob/HEAD:/www/auth.php
#
Zegnat jeremycherfas, what did you set base_url to in your config?
#
jeremycherfas This is the output of "Quit(401, 'debug', $curl_response);"
#
jeremycherfas "{"me":"http:\/\/localhost:8888\/grav-admin\/","client_id":"https:\/\/omnibear.com","scope":"post create delete update"}"
#
cweiske that's json
#
cweiske that you have to json_decode
#
Zegnat The default is just $_SERVER['HTTP_HOST'], which will be without the :8888. So if you are using the default base_url, it is actually comparing `https://localhost/` (the me in the micropub endpoint) to `http://localhost:888/grav-admin/` (the me you gave to token endpoint)
#
Zegnat Therefor it is failing
#
Zegnat So it *should* be failing at the $me check, unless you have set a correct base_url in the micropub endpoint
#
Zegnat The micropub endpoint code is assuming that you want your $me to be https:// followed by the bare domain, which is localhost for you. But that isn’t what you have used during the indieauth steps.
#
@jackyalcine An example Webmention response to my site at https://jacky.wtf/ (twitter.com/_/status/994117973374746625)
#
jeremycherfas Can we back up a bit.
#
Zegnat Sure! So the json_decode for $response is required, because as you see in the raw $curl_response, you get JSON back from the token endpoint.
#
jeremycherfas I'm looking for the config.php in /micropub
#
Zegnat Ah, I backed up too far, hihi
#
Zegnat There should be a base_url setting, on line 10
#
jeremycherfas And it seems to have vanished! But that's the first thing that gets checked.
#
jeremycherfas Need to search.
#
Zegnat Woops
#
jeremycherfas Weird. Atom doesn't include it in the project folder.
#
Zegnat Ooh, welcome to the wonderful world of IDEs. Atom may be using .gitignore to hide files from you.
#
Zegnat This is really nice for, say, hiding the vendor directory created by composer. But really sucks when it hides config files from you
#
jeremycherfas OK, back again. So, which config are we talking about here. The micropub one?
#
Zegnat Yes
#
Zegnat The micropub config should have a base_url setting (line 10)
#
jeremycherfas I have ` 'base_path' => '/grav-admin/',`
#
Zegnat This is what it is using as the comparison for $response['me'].
#
Zegnat '/grav-admin/' is not going to match 'http://localhost:8888/grav-admin/' in the auth check
#
Zegnat Change it to the full URL and try again?
#
jeremycherfas OK
#
Zegnat cweiske, is the HTTP header overwritten, or will PHP send both HTTP 500 and HTTP 200 headers from your auth file?
#
cweiske php will replace the http header
#
cweiske this is why it works at all
#
jeremycherfas So now it fails with `"The request lacks valid authentication credentials"`
#
jeremycherfas Which means $me does not match $response['me']
#
jeremycherfas So let me see what the values of those two are.
#
jeremycherfas $me is `"http://localhost:8888/"`
#
jeremycherfas $response['me] is `
#
jeremycherfas "http://localhost:8888/grav-admin/"
#
Zegnat $me should be whatever you put as base_path, I thought?
#
jeremycherfas Which is coming from Omnibear, I am pretty sure. So let me edit that.
#
Zegnat You want to tweak $me. The $response['me'] is your IndieAuth setup
#
Zegnat What did you change the base_path to?
#
jeremycherfas ` 'base_path' => 'http://localhost:8888/grav-admin/',`
#
Zegnat Huh
#
Zegnat looks at code again
#
Zegnat Maybe I am dumb, but https://github.com/skpy/micropub/blob/master/index.php#L35 is clearly sending base_path, right? And that becomes $me in the indieAuth function? https://github.com/skpy/micropub/blob/master/inc/common.php#L78
#
Zegnat So $me should be exactly what you wrote in base_path ...
#
jeremycherfas Skippy's config has both a base_url and a base_path and the base_url is base_url without the http://
#
Zegnat *facepalm*
#
jeremycherfas Sorry, $me is set to $_SERVER['HTTP_HOST']
#
Zegnat Only if $me == ''. Which it shouldn’t because we are passing $config['base_url'] from index.php
#
jeremycherfas Which is what base_url is, without the http:// in config.php
#
Zegnat But you are right, it isn’t base_path, but base_url that needs to match, I do not know how I didn’t pick up on that
#
Zegnat And this is why we should be selfdogfooding, people. It is very hard to comment on config files for systems you aren’t using yourself :P
#
jeremycherfas We aren't passing $me yet,
#
Zegnat We are, right here: https://github.com/skpy/micropub/blob/master/index.php#L35
#
Zegnat Oh, you mean the if check
#
jeremycherfas So the second parameter being passed is $me?
#
Zegnat Yes
#
Zegnat https://github.com/skpy/micropub/blob/master/inc/common.php#L78
#
jeremycherfas Right. And the default value there is ''
#
Zegnat Yep, but because we are passing a variable, the default isn’t used
#
jeremycherfas OK.
#
Zegnat And then that gets compared to the $response['me']. ($response['me'] is the me-value the token endpoint sends, and completely down the flow, is the original me that was given to the token endpoint when you logged in with selfauth.)
#
jeremycherfas So the value of $me is the value of $base_url
#
Jeena thanks for the ex
#
Jeena thanks for the explanations [manton], aaronpk and jacky
#
Zegnat Yes. That would mean $config['base_url'] should match the USER_URL configured for selfauth, jeremycherfas
#
Zegnat Because that is the URL originally given to the token endpoint as "me"
#
Zegnat (If all these separate pieces had been 1 project, that would have been 1 setting.)
#
jeremycherfas define('USER_URL', 'http://localhost:8888/grav-admin/');
#
Zegnat So 'base_url' in the micropub config should also be 'http://localhost:8888/grav-admin/'
#
jeremycherfas So I guess I need to know what $_Server[http_host] is. Or should I try hard-coding it first?
#
jeremycherfas Because if that works, we know that that is where the problem is, no?
#
Zegnat If base_url on line 10 of your micropub/config.php is set to 'http://localhost:8888/grav-admin/' and it still isn’t passing the $me == $response['me'] check, something is iffy somewhere
#
jeremycherfas OK, with base_url hard coded, things are completely different. I now get different errors.
#
Zegnat I am not sure if that is good or bad :P
#
jeremycherfas Good! First, Notice: Undefined index: HTTP_CONTENT_TYPE in /Applications/MAMP/htdocs/micropub/inc/common.php on line 38
#
jeremycherfas But better
#
jeremycherfas Warning: mkdir(): Permission denied in /Applications/MAMP/htdocs/micropub/inc/content.php on line 104
#
jeremycherfas {"error":"cannot_mkdir","error_description":"The content directory could not be created."}
#
jeremycherfas Which is great because it means Micropub is trying to make the file, and as I have done nothing yet to give it the right paths and things for Grav versus Hugo, that is entirely to be expected.
#
Zegnat That notice feels somewhat expected, as skippy doesn’t seem to check for the existence of those array keys before using them.
#
Zegnat And indeed, the mkdir error is good news and sounds like a rights issue only, not a PHP or configuration problem anymore!
#
jeremycherfas So, while it would be nice to get to the bottom of why the $me check fails, I'm happy right now to proceed with base_url hard-coded and move on.
#
jeremycherfas Maybe even move on to my breakfast.
#
Zegnat I am just finishing breakfast and getting ready for more tea :)
#
jeremycherfas I always like to accomplish something before doing dumb things like opening email and breakfast (or coffee) and this seems like a good moment to pause.
#
jeremycherfas I've learned a lot yesterday and today.
#
Zegnat Time to put that PHP course to good use, jeremycherfas! Haha
#
Zegnat remembers how he was turned down at his last job application for being “too junior” of a developer, and goes back to mitigating timing attacks against his token endpoint
#
jeremycherfas It has helped enormously.
#
jeremycherfas Almost as much as you have.
loicm, [kevinmarks], ben_thatmustbeme, Kyle-K and renem joined the channel
#
Zegnat !tell jeremycherfas thanks again for all the debugging! I have pushed v1.1.0 of Mintoken: that includes your README tweaks as well as the Apache fix
#
Loqi Ok, I'll tell them that when I see them next
#
@fhemberger @aaronpk Do you have any status on http://webmention.io regarding #GDPR regulations? Do I need a data processing contract or something like that? (twitter.com/_/status/994191291587153920)
#
jeremycherfas Thanks zegnat. I will pull that and hope to have time this evening to make further progress.
#
Loqi jeremycherfas: Zegnat left you a message 1 hour, 5 minutes ago: thanks again for all the debugging! I have pushed v1.1.0 of Mintoken: that includes your README tweaks as well as the Apache fix
[jgmac1106] joined the channel
#
@calum_ryan ↩️ Likewise would be great to have your input on this on IndieWeb slack/irc. A couple of people joined in interested in knowing more about the features available for sending/receiving Webmentions on static sites. Noted jekyll-webmention_io by @AaronGustafson as one option for Jekyll (twitter.com/_/status/994193666737627136)
#
@frankmeeuwsen Webmentions blijven tovenarij voor me. @tonzylstra reageert op http://micro.blog op mijn post. Ik reageer daar op zijn verhaal en beiden staan onder de post. Als dit kan met sociale netwerken... Crossplatform reageren.... http://diggingthedigital.com//GDPR-en-het-Indieweb/ (twitter.com/_/status/994198952152006656)
loicm, iasai, dougbeal|mb1, romangeeko, leg, snarfed and aaronpk joined the channel
#
@martijnvdven ↩️ Om Webmentions uit de tovenarij sfeer te trekken (we willen tenslotte dat iedereen het gaat gebruiken!) zijn een aantal mensen de afgelopen week druk bezig geweest met een FAQ: https://indieweb.org/Webmention-faq#FAQ Maar misschien moeten we opzoek naar betere informatiekanalen? (twitter.com/_/status/994217950629519361)
[jgmac1106], [tantek] and danyao joined the channel
#
@philhawksworth ↩️ Happy to join the IndieWeb slack if invited. Also curious about the latest in webmentions for SSGs. Do you have an example of that I can noodle around with @AaronGustafson? (twitter.com/_/status/994231216600768512)
[kevinmarks], anomalily, barpthewire and [philhawksworth] joined the channel
#
@AaronGustafson ↩️ @philhawksworth @calum_ryan Original intro: https://www.aaron-gustafson.com/notebook/enabling-webmentions-in-jekyll/ Current project: https://github.com/aarongustafson/jekyll-webmention_io (twitter.com/_/status/994240989815496704)
#
jacky ^ that project is awesome
tantek joined the channel
#
schmarty what is Morris?
#
Loqi Morris is a self-hosted PHP service for storing Webmentions from webmention.io in a JSON format that static sites can use to render them without querying webmention.io on each build https://indieweb.org/Morris
#
jacky oh this is too
#
jacky a lot of stuff for IndieWeb is written in PHP
#
jacky I haven't used that language in a while
#
schmarty ^ i felt bad hitting webmention.io for every site build, so i started caching them alongside the site source files
#
jacky that actually got me curious; what's the load like for webmention.io?
#
schmarty jacky: haha, i hadn't used it for any new projects in a while, either. i got inspired after reading a lot of the code in projects from aaronpk, zegnat, and others.
#
schmarty i also got frustrated at the extra code organization and server config steps for hosting fresh flask and sinatra apps and decided to give "just slap down a PHP file and get started" a try.
#
schmarty that is a great question! i don't recall if aaronpk has published any stats on it.
#
jacky or if he even collects any
#
jacky maybe volume per hour/day/week
#
jacky and that's fair
#
jacky for my site (and personal infra?), I've been using Dokku to make things a bit easier
#
jacky it's like Heroku on your own server
#
Zegnat He could probably generate the stats whenever, as webmention.io has to hold all the mentions in storage anyway
#
jacky :thinking_face::thinking_face: opp for a PR
#
aaronpk hm 2 weeks ago it suddenly starting picking up a looot more traffic
#
schmarty jacky: nice! i meant to check out dokku and had long forgotten.
kaushalmodi joined the channel
#
jacky I was about to ask questions that reminded me of my old PM at Lyfrt
#
jacky *Lyft
KartikPrabhu and [eddie] joined the channel
#
[eddie] aaronpk: So I’m thinking about trying to get Indigenous 1.0 released for IWS, but I’d probably need to scale down the current “1.0” feature set. Before I try to attempt figuring out what the final 1.0 would be, I want to see if you think you would be interested in rolling out the short-term Aperture accounts? I imagine you have a lot to do before that so I don’t expect that’s something you have time for
#
aaronpk ooh
#
aaronpk interesting
#
Zegnat https://twitter.com/frankmeeuwsen/status/994254007966355456 – “I think question 1 of the [Webmention] FAQ should rather be: what problem does it solve? Why is it relevant?”
#
@frankmeeuwsen @martijnvdven @tonzylstra Ik denk dat vraag 1 van de FAQ eerder mag zijn: welk probleem lost het op? Waarom is het relevant? (twitter.com/_/status/994254007966355456)
#
schmarty !tell gRegorLove thanks! i use XRay for almost all my reply context parsing these days. it's picking up the h-card: https://xray.p3k.io/parse?url=https%3A%2F%2Fabraham.uno%2F1610%2F1610%2F
#
Loqi Ok, I'll tell them that when I see them next
#
gRegorLove Ah, so you're not checking the type
#
Loqi gRegorLove: schmarty left you a message 1 minute ago: thanks! i use XRay for almost all my reply context parsing these days. it's picking up the h-card: https://xray.p3k.io/parse?url=https%3A%2F%2Fabraham.uno%2F1610%2F1610%2F
snarfed joined the channel
#
schmarty gRegorLove: not currently. i think i will start!
#
tantek good morning #indieweb-dev!
#
tantek Since IWS is just over a month away, I figured I'd try to collect a list of particular itches to scratch (features to get working) on my site *before* IWS, to show, and something to build on during
#
aaronpk [eddie]: let me think about what it would take to be able to open that up to people
#
aaronpk I do like that idea
#
tantek.com edited /Falcon (+0) "/* For IWS 2018 */ ordered" (view diff)
#
tantek.com edited /Falcon (+0) "/* For IWS 2018 */ #*" (view diff)
#
tantek Here's the things I'm trying to build *before* IWS: https://indieweb.org/Falcon#For_IWS_2018
#
tantek does anyone else have a prioritized shortlist of things they want to build *before* IWS?
#
snarfed tantek if you're taking votes, your minimal implementation of rendering rsvps on event posts is awesome...i bet it'd be pretty easy to extend to showing replies on normal posts too! i vote for that :P
#
snarfed (and i expect would still mostly avoid spam, since it seems like the majority of that for you is @-mentions, which are sent to your home page, not to posts)
#
gRegorLove Not prioritized, but I have some ideas in my head before IWS.
#
jacky I def got some thoughts in my head as well
#
jacky time to finally flesh out that Wiki page lol
#
tantek jacky yes!
#
gRegorLove It's really only two at the moment, so I guess I just prioritized them. :)
#
gRegorLove I'm keeping it private for the time being, though. :)
#
tantek I've also linked to that "For IWS 2018" list from my entry in the guest book: https://indieweb.org/2018/Guest_Book
#
tantek consider doing the same for yours!
#
tantek snarfed the RSVPs display on event posts was very much custom CSS just for that
#
snarfed sure. if it's just new CSS, that still sounds not too big a project...?
#
tantek depends on how "rich" the content is you want to display, and how well designed you want it to look
#
snarfed you're always good at starting minimal and iterating! :P
#
tantek showing responses on "normal" posts is blocked on figuring out pixelating avatar images (I get likes from sometimes distasteful accounts)
#
tantek showing actual comments (replies) on "normal" posts is similarly blocked on some form of moderation tech since I already get nonsensical (at best) replies which I do not want to show or link to on my site :/
#
tantek I realize that these are not typical problems, but eventually we're going to have to solve these problems for folks that tend to get "attacked" more on social media (that is, assuming they want to make backfeed work)
#
tantek I could start the other way too, with a whitelist and *only* show responses on "normal" posts from either indieweb or whitelisted (followings?) silo accounts
#
snarfed oh yeah i was just thinking replies to start, not necessarily likes/reposts
#
tantek replies are harder than likes/reposts
#
snarfed sounds like a good way to start!
#
jacky.wtf created /IndieMark_Scanner (+441) "Created page with "**IndieMark Scanner** is a project started by {{JackyAlcine}} to give IndieWeb participants a way to determine exactly where they fall on the scale of marks. It's like https:/..."" (view diff)
#
tantek nice!
#
[eddie] aaronpk: Sounds good. I’ll think more through what my final 1.0 feature set would look like while you think through Aperture and then we can compare notes
#
tantek I'm wondering if there's some decent heuristic for Twitter filtering that will get like 90% of unknown "normal" authors
#
aaronpk [eddie]: i think big ones for me are going to be whether or not i need to polish up the subscription management UI in aperture
#
tantek like, (5+ years old OR 1k+ followers) *and* followers > followings
#
aaronpk if you can preview and subscribe to feeds within Indigenous then people won't really need to interact with the Aperture UI except to create channels, and that sounds like a lot less support I will have to do
#
snarfed tantek: static whitelist also sounded reasonable. feel free to borrow indie map's: https://github.com/snarfed/indie-map/blob/master/crawl/domains.txt
#
[eddie] Yeah I think those are definitely 1.0 features I would need to add
#
[eddie] One of the things I’m doing right now is adding channel settings, and I’ll be adding the ability to add/remove feeds to a channel that way. Preview should be pretty simple since I can reuse the timeline view with the preview data returned from Microsub
#
snarfed fyi for twitter API users, whitelist your OAuth callback URLs, they'll start enforcing in 30d: https://twittercommunity.com/t/sign-in-with-twitter-users-must-whitelist-callback-urls/105342
#
aaronpk nice
#
jacky TIL that twitter's using discourse to send product updates like this
#
jacky lol what's the point if they're going to lock the thread
[jgmac1106] joined the channel
#
www.boffosocko.com edited /fragmention (+545) "/* User friendly name */ highlight link" (view diff)
snarfed joined the channel
#
www.boffosocko.com edited /Gutenberg (+20) "Category:WordPress and WordPress template" (view diff)
#
loqi.me created /Weebly (+61) "prompted by Zegnat and dfn added by klandwehr[m]" (view diff)
#
jacky woah TIL about fragmentioner
#
jacky nice
#
tantek snarfed, thanks for the offer of domain.txt whitelist! surprised to find an IP on there 104.131.146.26
#
snarfed tantek: you can also get all of bridgy's twitter usernames from its public dataset,
#
snarfed https://bigquery.cloud.google.com/dataset/brid-gy:datastore
#
www.boffosocko.com edited /IndieMark_Scanner (+122) "see also links" (view diff)
swentel, [shurcool], [kevinmarks], snarfed and tantek joined the channel
#
[kevinmarks] https://github.com/w3c/wg-effectiveness/blob/master/process.md
[jgmac1106], arush and [eddie] joined the channel; arush left the channel
#
[eddie] Hmmm 36 issues for a potential Indigenous 1.0.... about 1 a day to finish in time for IWS?!?!? 😕 haha I guess we’ll see. I definitely need to step it up
#
[eddie] Some are harder than others so it might not be as challenging as it seems
#
aaronpk oof
#
[eddie] I might end up doing a second pass to remove some lol
#
aaronpk oh gosh https://github.com/search?q=GDPR&type=Issues
#
KartikPrabhu yup, expected
#
KartikPrabhu would be hilarious if someone tries to remove their data from BLOCKCHAIN
#
tantek KartikPrabhu: I think GDPR may have effectively outlawed use of blockchain for any personal/identifiable data, which is nearly all data these days (account info, photograph etc.)
#
KartikPrabhu lol
#
tantek due to the removal requirement
#
tantek and yes, pretty much every blockchain instance / use-case is "commercial"
#
aaronpk https://www.computerworld.com/article/3269750/blockchain/will-blockchain-run-afoul-of-gdpr-yes-and-no.html "personal data should never be stored on the blockchain"
#
[kevinmarks] Yep. There is even advice not to post hashes of data that is susceptible to a dictionary attack on it.
#
aaronpk wow there are a lot of posts about this https://www.google.com/search?q=gdpr+blockchain
#
[kevinmarks] Also, should be "a blockchain"
#
tantek probably belongs on /blockchain
#
@pandemia ↩️ Hai ragione Nicola, su Pandemia li ho riaperti insieme a webmention. Su http://lucaconti.it potrei fare la stessa cosa ma non l'ho fatto per pigrizia e perché non mi diverte tanto gestire la parte tecnica. Ora sono a San Francisco. Magari quando torno (twitter.com/_/status/994289171228344320)
#
KartikPrabhu I think blockchain should always be in all caps, to denote shouting
#
aaronpk KartikPrabhu++
#
Loqi kartikprabhu has 22 karma in this channel (197 overall)
#
aaronpk so if someone who has an account at webmention.io contacts me to ask me to delete their account, I will do that, that makes sense
#
aaronpk but what happens if someone who has sent a webmention to someone with a webmention.io account contacts me to delete all their information?
#
aaronpk i feel like that is not my place to do that, since it would be surprising to the person who has the webmention.io account
#
Zegnat I am not sure if having a legitimate interest to handling their data (because a person with an account has requested this of you) makes you exempt from removing said data. I don’t even know if there are exceptions to the right to be forgotten thing.
#
Zegnat should probably look that up
#
aaronpk it seems like that person should contact the account owner to request deletion, and then the account owner could contact me requesting deletion
#
Zegnat Maybe, but would that make you a data processor for the account owner? Maybe in the way Google Analytics is reframing things? If so, I wonder if that means you must have DPAs with account owners
#
Zegnat shuts up before he starts to be the one spreading FUD
#
aaronpk I don't really know, but I see why some companies are just like screw it, we're closed to all EU customers
#
tantek I think the requiring ability to delete your account (and any info it gathered) is a good thing
#
loqi.me created /hypothesis (+24) "prompted by KartikPrabhu and redirect added by KartikPrabhu" (view diff)
snarfed joined the channel
#
KartikPrabhu huh! that rediect didn't work
#
Zegnat maybe you should advertise people hosting their own copy of webmention.io more instead, aaronpk. Then they are in charge of their own data and what they do with it
#
aaronpk tantek: yes deleting *your* account
snarfed joined the channel
#
aaronpk but my question is what if someone like Zegnat comes to me and says "delete everything about me from webmention.io", does that mean i should also delete the webmentions he has sent to tantek.com that are stored in your account?
#
snarfed aaronpk: ianal but i believe now
#
snarfed er now
#
snarfed ER NO
#
[kevinmarks] There is some caselaw there, in the deletion of spent criminal convictions from search engine results. But that is a high bar to match.
#
KartikPrabhu hmmm i read "caselaw" as "coleslaw" first
#
aaronpk mm
#
www.boffosocko.com created /crowdfunding (+20) "redirect to payment: closest equivalent to crowdfunding" (view diff)
#
tantek really? shouldn't it instead redirect to our actual crowdfunding for now?
#
@andrewsreading ✌ @Reading "The Indieweb privacy challenge (Webmentions, silo backfeeds, and the GDPR) // Sebastian Greger" http://ing.am/p/4YuK (twitter.com/_/status/994296474904289281)
#
www.boffosocko.com edited /musician (+607) "soundcloud and Patreon; related see also links" (view diff)
chrisaldrich joined the channel
#
loqi.me created /uncanny_valley (+190) "prompted by aaronpk and dfn added by [kevinmarks]" (view diff)
#
@nhoizey ↩️ Asynchronous fetching of Webmentions was one of my suggestions to speed up my @jekyllrb build with @AaronGustafson’s plugin… 😉 https://github.com/aarongustafson/jekyll-webmention_io/issues/81 (twitter.com/_/status/994297852212936704)
#
dgold I am starting to bitterly regret my choice of hugo (despite all the awesomeness)
#
dgold golang templating is a faecal funnel.
#
[kevinmarks] Oh no, how come? Because you end up writing go in them?
#
dgold [kevinmarks]: because there's so many gotchas hiding in it
#
dgold hahah! Variadic Formulae!
#
dgold Hahah! date has to be in such-and-such a format, or YOUR ENTIRE SITE DIES IN A FIRE
#
gRegorLove go-thcas
#
dgold hahaha! <dateFormat "2006-01-...>: error calling dateFormat: unable to cast false of type bool to Time
#
dgold …
#
Loqi awesome
#
gRegorLove not awesome, Loqi
#
gRegorLove note to self: spellcheck your jokes
#
dgold ah! go-tchas
#
dgold go-tcha
#
gRegorLove (sorry)
snarfed joined the channel
#
[kevinmarks] How is variadic stuff biting you?
#
@schmarty ↩️ I use http://webmention.io's webhook feature to store mentions when they are received. That means no polling at build time! https://github.com/martymcguire/morris (twitter.com/_/status/994303772192116736)
#
[jgmac1106] So I am working on this: https://github.com/microformats/generators/edit/master/creators/hcard.html and wanted to remove AIM and and Twitter and LinkedIn I am having trouble in line 113 twitter : ' <a class="url" href="aim:goim?screenname=${aim}">AIM<\/a>\n', can't figure out the correct link
#
Zegnat “XHTML 1.0” - ha, giving an idea when that original HTML was written
#
dgold [kevinmarks]: i dunno what they mean...
#
Zegnat I am not sure Twitter registers a custom scheme, [jgmac1106]. So you might just have to link it to https://twitter.com/${twitter} or something
#
Zegnat (At least I am assuming that is what you are asking.)
#
[jgmac1106] can i just do plain html in the link in a javascript function
#
Zegnat Probably
#
[jgmac1106] which you did I see
#
Zegnat I think it is using some sort of templating engine
#
[jgmac1106] okay, just thinking a "build your hcard tool" like that is a great thing for people on sites that don't have plug ins
#
Zegnat https://github.com/microformats/generators/blob/master/lib/template.js “TrimPath Template”
#
Zegnat I am not sure I would build that tool the same way if I did it today. I see no reason why it would need the whole of jQuery to generate an HTML string.
#
[jgmac1106] okay so I am not going crazy, I was thinking same thing.
loicm joined the channel
#
bear for all the python devs -- https://www.bleepingcomputer.com/news/security/backdoored-python-library-caught-stealing-ssh-credentials/
#
bear tl;dr is: if you use a module named ssh-decorate your credentials have been stolen
[chrisaldrich] joined the channel
#
aaronpk ouch
#
Zegnat Yikes
#
schmarty it happened!
#
bear oops - ssh_decorate
[kimberlyhirsh] joined the channel
#
tantek Zegnat: I see no reason why a generator update from hCard to h-card would need to even ask the questions of what JS framework it was written with, why it would need that framework, and prompt or imply a rewrite far beyond the original scope of a simple update. cc: [jgmac1106]
snarfed joined the channel
#
Zegnat Well, you have to update template strings, but they target a 2005 templating system I had never heard about. It doesn’t need changing, but it did mean I had to check what that templating system does/does not support
#
Zegnat That’s why the question was asked
#
Zegnat I do not want to say that needs to be rewritten though, updating is fine
#
[jgmac1106] Filed a PR changed a String and added additional variable. Could be useful tool for people who have to manually update
snarfed joined the channel
#
@frankmeeuwsen Dank je wel @sebsel voor deze uitleg over webmentions aan de hand van de jeugdvrienden! https://seblog.nl/2018/05/09/5/de-magie-van-webmentions https://t.co/mOZsvSnW8L (twitter.com/_/status/994320163943206913)
#
vanderven.se martijn edited /Webmention (+289) "/* Articles */ {{sebsel}}’s great description of what webmentions are, and their multiple layers" (view diff)
#
Zegnat sebsel++
#
Loqi sebsel has 21 karma in this channel (67 overall)
[dgold] joined the channel
#
@frankmeeuwsen ↩️ @johanvoets Dat dacht ik ook de eerste keer. Het zit inderdaad wat slimmer in elkaar dan de pingback. https://indieweb.org/Webmention-faq#Are_Webmentions_like_Pingbacks (twitter.com/_/status/994326391960293377)
#
@ChrisAldrich I'd love to invite @judell @dr_jdean @dwhly @xolotl & @hypothes_is to join everyone at @IndieWebSummit in June to discuss open web technology related to webmention, annotation, highlighting, and other #IndieWeb and #edtech topics. https://boffosocko.com/2018/05/09/annotating-and-indiewebsummit-2018/ (twitter.com/_/status/994327404146405376)
#
snarfed gdpr--
#
Loqi gdpr has -1 karma in this channel (-2 overall)
#
snarfed (apropos of nothing, purely out of spite)
#
aaronpk lol
#
gRegorLove hehe
#
gRegorLove aaronpk, when you have time, could you review/deploy this indiewebify.me PR? https://github.com/indieweb/indiewebify-me/pull/64
#
Loqi [gRegorLove] #64 Add /rel-me-check URL that returns more detailed information
#
gRegorLove I might take a crack at some other indiewebify.me issues/updates before IWS
#
snarfed gRegorLove++
#
Loqi gregorlove has 43 karma in this channel (231 overall)
#
gRegorLove It would be nice to offload the send webmention stuff to Telegraph if possible. Multiple reports of it breaking on indiewebify.me
#
snarfed did the continuous deploy break? it used to deploy on push
#
aaronpk i moved it off of app-engine where the continuous deploy was set up because we kept having even weirder errors with it running there
[kevinmarks] joined the channel
#
aaronpk i don't know why i hyphenated app engine
#
gRegorLove brain-in-url-slug-mode :)
snarfed joined the channel
#
GWG Afternoon
snarfed joined the channel
#
gRegorLove o/ GWG
#
GWG gRegorLove: Hello
#
GWG I hear good things about Zombie Run
#
GWG I love Mike Tyson's Punch OUt
#
GWG I want to boot up my Picade suddenly
#
tantek GWG - have you had a chance to come up with 1-2 things you want to build before IWS?
#
GWG I'm trying to think of something I can accomplish.
#
GWG I put everything on pause to do some Webmention improvements
#
GWG tantek: I just made Semantic Linkbacks support displaying that people listened to my podcast. So, might do more of those
#
tantek whoa your podcast posts show Listens responses? that's very cool!
[jgmac1106] joined the channel
#
GWG https://david.shanske.com/2018/04/18/an-indieweb-podcast-episode-2-indieauth/#comments
#
Loqi [Jeena] I love the podcast, I didn’t know that it was needed that badly but just listening to people talking about IndieWeb technology and questions I realize that it’s so much easier for me to listen to long ass podcasts for hours than read pages and pa...
#
tantek GWG++ nice work!
#
Loqi gwg has 31 karma in this channel (346 overall)
#
GWG tantek: pfefferle just merged read
#
GWG I also did watch
#
tantek nice
#
GWG I also may have used the wrong term for Bridgy
#
GWG I referred to webmentions sent from Bridgy as delegated. But I think that's wrong
#
snarfed "backfed"
#
GWG snarfed: Is there another circumstance where a webmention would come from one source URL, but have a different URL property?
#
snarfed probably?
#
GWG That isn't backfeed?
#
snarfed probably
#
GWG I didn't built it to be a Brid.gy specific feature
#
GWG Own Your Swarm does it as well.
#
snarfed ah i see. "proxied"
#
GWG That is better
#
GWG But, I want to add a higher degree of moderation in that case
#
GWG I added a domain whitelist to Webmention
#
GWG So, the logic is that if the source URL is on the domain whitelist, auto-approve it. The second level is to check the canonical URL. In future, it may be that I find a way to narrow it down.
#
GWG I don't think I am building vouch today
mblaney, [chrisaldrich] and snarfed joined the channel