KopsiI am researching IndieWeb for my masters thesis and was curious, whether there have been any recent privacy/security surveys of it. Google hasn't provided any results regarding this, so i was curious, whether there was something unpublished or published in a way that couldn't be found by Google.
KopsiWith security/privacy survey I meant a structural analysis of the components regarding security and privacy implications and possible weaknesses. I did a small survey of a specific IndieAuth implementation recently and (in theory) have found two minor vulnerabilities based on OAuth vulnerabilities. So thats the sort of stuff I was looking for.
[jgmac1106], nele1, [KevinMarks] and hs0ucy joined the channel
vika_nezrimayaI'm interested in one android thing and while I doubt that someone here can answer, I'll still drop this here: if Android places background restrictions on apps, then how the heck Google Play Services evades them and still manages to, e.g. deliver push notifications to apps using FCM? Is this restriction simply waived for apps in /system/priv-app? Documentation obviously says nothing about it so people can't replicate what GMS does to
vika_nezrimayaI want to receive notifications for Kittybox but a foreground service notification is simply too ugly :c while it can be hidden, it's still a bit ugly
[jgmac1106]basically you used to be able to embed audio and video using the media src url and HTML...now it seems some are arbitrarily not allowed...but no documentation on the change anywhere
[tantek]My thinking is that it would be nice to point someone to a validator explaining why their rel=canonical is malformed rather than give them one-off uncited advice
[jgmac1106]this one was...hypothes.is supposed to use rel="canonical" to match...we think someone annotated the post on the feed page and not url of the link (someone being me)
gRegorLoveOk, backing up a bit... if there are 2 URLs with the same content, I thought the ideal setup would be to link rel-canonical on both of them. Is that not correct?
gRegorLoveExample: my photo post here https://gregorlove.com/2020/02/yo-dawg/ is syndicated to Instagram. If a search engine indexes both, I want them to have mine be canonical. I can't specify rel-canonical on IG, though.
ZegnatSelf refering rel-canonicals are recommended if the same resource is available with multiple different query parameters. IIRC from my SEO sessions. So if you have something like example.com/article?source=facebook and example.com/article?source=twitter and want search engines to index both as just example.com/article it is recommended to have that as a rel canonical
ZegnatI have definitely slaped some rel="canonical" on <a> elements that I had pointing to the resource itself, because “why not”. But do not expect them to do much.
ZegnatWe also do the ownership thing through rel-canonical, kinda. When one paper shares an article from the other, it gets displayed in their design, but with a rel-canonical to the paper the article first appeared in.
ZegnatAnd as gRegorLove said, it is often more code to first detect the cruft and then render the rel-canonical, so you just end up always having it there
[tantek]Zegnat, gRegorLove you're right that it is more work to detect, I'm only detecting one non-canonical version and doing something special. If you load any of my pages with http:, you get a rel-canonical to the full https: URL
[tantek]yes I think minimizing markup is useful (there's lots more that I could minimize), for slow clients, for teaching (less noise on View Source), and lastly for info density for search indexing
Loqi[Tantek Çelik] Freshly posted: Toward a More Civil and Social Web
@optoutools founder Teresa’s keynote @IndieWebCamp Berlin last November
12:10s video: https://archive.org/details/iwcberlin2-keynote-teresaingram
#AI #AIEthics #NLP #machineLearning #socialWeb #s...
@mattmaldre↩️ As @Flickr is trying to find ways to get people to subscribe to their service, including a feature like webmentions in their service would be wonderful.
As a photographer, I would LOVE to know when sites use my photos. If Flickr could facilitate that, AWESOME. (twitter.com/_/status/1237112636552200193)
Loqi[Tantek Çelik] Freshly posted: Toward a More Civil and Social Web
@optoutools founder Teresa’s keynote @IndieWebCamp Berlin last November
12:10s video: https://archive.org/details/iwcberlin2-keynote-teresaingram
#AI #AIEthics #NLP #machineLearning #socialWeb #s...
sknebeljust because other people think they are the right choice for them to publish (which presumably is driving you writing consuming code) doesn't mean you have to think that
[LewisCowles]I agree with the comment that Postels law can be dangerous, but really like the CSS take on compliance. Just try to make as many lines as you can parse work
[tantek]CSS has made a good balance with forward/backward compatibility in great part due to open and fairly thorough test suites (which helps avoid (most) of those "bug for bug" compat problems. at least minimize them. a few still pop-up time to time.)
[KevinMarks]He's citing a lot of css people I do pay attention to. I'm feeling like a Poe's law thing like Jenn Schiffer does (he invents a <Box> tag ffs. But I think he might be serious.
[tantek]He cites some good inspiration, and then goes off into the weeds and reinvents effectively inline Style attribute styling because he doesn't like to name things, thus missing all the points about reusable components etc. in order to re-use them, you have to name them.
@StuRobsondesigner: can we update the card component to use the largest padding? developer: the card component? Do you mean – rounded-lg my-2 p-4 justify-center? (twitter.com/_/status/1235472931528028161)
[tantek]encapsulation and components are still a challenge in the web platform. I think if those were solved it would address a lot of the things that frameworks are working far too hard to do