#dev 2020-04-07

2020-04-07 UTC
[Jeff_Hawkins] joined the channel
#
jmac
this has been a learning experience
[Rose], hs0ucy and [chrisaldrich] joined the channel
#
sivy
aaronpk: ah, good point
#
sivy
aaronpk: although, the client is the same in both cases
#
sivy
golang local debugger v. server golang binary
#
sivy
so I don’t think it’s the user agent
#
[LewisCowles]
[sivy] do you have an example link?
#
sivy
I tried adding a fake UA to the curl from the linode, and got a 405
#
sivy
someone’s being a clever monkey
#
sivy
so I’m getting weird results from different clients
#
[LewisCowles]
I just ran curl -v -X GET http://amzn.to/MyKindleBook and got a real URL
#
[LewisCowles]
and another "https://www.amazon.com/gp/product/0062237357/ref=as_li_tl?ie=UTF8&tag=monkinetic-20&camp=1789&creative=9325&linkCode=as2&creativeASIN=0062237357&linkId=633da12ad44cf70ea23fb53016bec73c
#
[LewisCowles]
is the issue that the amazon product is giving 503?
#
sivy
yeah
#
sivy
hm
#
[LewisCowles]
other than being gzipped, which gunzip can handle
#
[LewisCowles]
```curl -L https://amzn.to/2XekSZF -H "authority: www.amazon.com" -H "cache-control: max-age=0" -H "upgrade-insecure-requests: 1" -H "user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" -H "sec-fetch-dest: document" -H "accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9" -H
#
[LewisCowles]
"sec-fetch-site: none" -H "sec-fetch-mode: navigate" -H "sec-fetch-user: ?1" -H "accept-language: en-US,en;q=0.9" -c cookie.dat --compressed```
#
[LewisCowles]
my machine doesn't support --compressed, so I pipe to gunzip
#
[LewisCowles]
they have massively aggravated me with their client-side sniffing
#
[LewisCowles]
none of it is temporal though, so I don't know that whoever implemented it finished school
#
[LewisCowles]
:face_with_symbols_on_mouth:
KartikPrabhu, [snarfed], sivy, [fluffy], loicm and jacky joined the channel
#
@polarbirke
↩️ Ich fühle mich da weiterhin wohl mit. Wir zeigen ja nichts an, was nicht vorher schon öffentlich war – mit klarer Attribution. Und da ich die Webmentions server-seitig hole/erzeuge, gibt's im Client nicht mal einen Ping an einen third-party service.
(twitter.com/_/status/1247424175997890560)
gxt, loicm, OlegStotskyDisc4, gkimbwalaDiscord, Senshi[m]1, thatguyDiscord[4, sscarfe and inkjama joined the channel
#
@polarbirke
↩️ An "Löschen" habe ich auch schon gedacht, das müsste gehen – bei http://webmention.io kannst du die webmention ja entfernen. Allerdings müsste man dafür bei jeder neu gefundenen Webmention einen Ping an den Autor mit dem Link zum Löschbutton senden. Find ich etwas spammig?
(twitter.com/_/status/1247462614692777993)
#
@tosbourn
↩️ Thanks for your offer, I'm learning and tinkering at the moment. If you have any great articles or examples of webmentions would appreciate you sharing.
(twitter.com/_/status/1247465742305505282)
[jgmac1106], [Sadik_Shahadu], [KevinMarks], jeremych_, [prtksxna], swentel and hs0ucy joined the channel
#
@jgmac1106
↩️ Here is is agood source of articles https://indieweb.org/Webmention#articles. I just added webmentions to my wiki at http://longthoughts.jgregorymcverry.com/doku.php. It took a http://webmention.io account, two lines in my header, one javascript file (css optional) (https://jgregorymcverry.com/notes/2020-04-07-1)
(twitter.com/_/status/1247483590583222273)
#
[jgmac1106]
oops two lines in my head...but no need to be pendantic
sscarfe, swentel, KartikPrabhu, hs0ucy, jenelizabeth, [LewisCowles], vika_nezrimaya and [tantek] joined the channel
#
[tantek]
snarfed, h-feed authorship is an interesting problem and worth researching & brainstorming properly rather than seeing if h-entry approaches “just work” because that may be overdoing it
#
[tantek]
Better to collect examples (links, analysis) of h-feed elements that you’re trying to parse and analyze them to figure out a minimum algorithm based on examples
#
GWG
[tantek]: I updated the list of people who said they published h-feed last year. But maybe we need to ask people who aren't on that list to add themselves.
#
[tantek]
The “XML approach” would be to assume / require authors/publishers always use an author property and then “just” look for that. While a good starting point, it’s obviously a bad approach to optimize for developer convenience rather than researching reasonable real world examples and making sure to handle them
#
[tantek]
It’s also a bad approach to “just try” some other similar algorithm to see if it “just works” as you’re likely making all sorts o bad assumptions by doing so
#
[tantek]
So I disagree with both “just use representative h-card” and “just use h-entry authorship but for h-feed”
#
[tantek]
There’s no shortcut here. If you want a good algorithm it has to start with documenting & analyzing real world publishing examples
#
aaronpk
What is dark sky
#
Loqi
Dark Sky is a weather API (no new signups possible) which some people use to show weather information on posts https://indieweb.org/Dark_Sky
[snarfed] and geoffo joined the channel
#
[tantek]
Really hope typlog meant u-in-reply-to not -of
#
[tantek]
Could you ask them [chrisaldrich] ?
#
GWG
aaronpk: Why ask re Dark Sky now? Something prompted it?
#
aaronpk
noticed my weather isn't appearing on my posts
#
GWG
aaronpk: Open Weather Map time?
#
GWG
aaronpk: The API hasn't stopped though.
#
aaronpk
yeah that's what i was checking
#
GWG
I'm looking into a failover logic.
#
GWG
If one fails, try another or alert me
#
GWG
I do a lot of NWS
#
swentel
ok, that was confusing, was looking for a simple wysiwyg editor and then found quill :)
#
Loqi
[quilljs] quill: Quill is a modern WYSIWYG editor built for compatibility and extensibility.
#
GWG
Naming confusion there
sscarfe joined the channel
#
aaronpk
ironically they were started at almost exactly the same time, both may 2014
#
GWG
aaronpk: What percentage of your journeys are domestic?
#
GWG
roughly
#
aaronpk
by miles or flight legs?
#
GWG
Just how much are you out of the country
#
GWG
If you are more in than out, the National Weather Service has a free API
zenen joined the channel
#
zenen
So I'm graduating this year and I'm aiming to find a job in webdev this coming fall. I'm planning on working a lot this summer and then using the money I earn to move to a new city and find employment there. Does anyone have suggestions on where to start in terms of building my portfolio over the next while?
#
zenen
I want to be able to find work at a quality company, so I feel like I need a quality portfolio to achieve that. I need some guidance to figure out what to focus on because the world of webdev is... big.
#
zenen
Would building a good personal page be enough?
#
GWG
zenen: We're biased as a community
#
GWG
We always think have your own webpage is a good thing
#
GWG
We always think having your own webpage is a good thing
#
zenen
of course! and I'm here because I agree with that philosophy
#
[tantek]
I think a good personal page is an excellent start
#
[tantek]
we have a starter page on GitHub if you want to start with something static
[LewisCowles] joined the channel
#
[LewisCowles]
zenen, a blog of things you are learning and have learned is a commonly touted thing of interest to prospective employers as well as showing off some of the focuses and skills you have.
#
[tantek]
it also demonstrates curiosity, self-motivation, and an interest in actively learning & growing new skills, all of which are strong positives for developers
#
[tantek]
what is a blog
#
Loqi
A blog (or weblog) is an online journal or diary typically written by one person (there are some group blogs) about whatever subjects they wish, sometimes on a particular subject such as a science blog or political blog, and often on its own domain in a very much IndieWeb way, though the term long predates the community https://indieweb.org/blog
#
zenen
what is aperture
#
Loqi
Aperture is an open source Microsub server developed by Aaron Parecki https://indieweb.org/Aperture
#
zenen
aaaah this is so cool, people have already developed so many tools and frameworks for this movement
#
[tantek]
what are building blocks
#
Loqi
Building blocks are key design-patterns, technologies, and methods for building and improving your independent website https://indieweb.org/building-blocks
#
[tantek]
lots to dig into there zenen ^^^
#
zenen
ahahah i'm looking right into a rabbithole i've been dreaming about for years
#
[snarfed]
great feeling, i remember it well. welcome!
gRegorLove and sscarfe joined the channel
#
[tantek]
welcome zenen++
#
Loqi
zenen has 1 karma in this channel over the last year (2 in all channels)
#
[LewisCowles]
Although it's a silo. I absolutely love GitHub actions and other public SaaS CI/CD providers supporting yaml
#
[snarfed]
hosted tools are totally fine! we all use something hosted at some level of the stack, eg our ISP
#
[snarfed]
the key parts of "ownership" indieweb advocates are your own domain and data portability. beyond that, how much of the stack you self host is up to you
#
[LewisCowles]
More of a notice that it's dependent on them than saying "aim for no ownership"
#
[snarfed]
yup. we all depend on other people for lots of things. interdependence isn't inherently bad
#
[snarfed]
key point is everyone gets to choose how much and what they want to self host, and why
#
[LewisCowles]
Outside of standards tracks, I think it's always risky and undesirable, but I agree that is my own personal profile
#
[snarfed]
yes! you get to choose that. others get to use eg micro.blog. both are totally ok
#
[snarfed]
domain and data portability are the two keys for this community
sscarfe joined the channel
#
@steveivy
Repaired some stuff in #goldfrog around #webmention handling on weird responses (hello amzn redirects) (monkinetic txt-beb46c9)
(twitter.com/_/status/1247575172443287552)
hs0ucy, blake and [jgmac1106] joined the channel
#
[jgmac1106]
"domain and data portability are the two keys for this community" nice sum up snarfed
#
[jgmac1106]
snarfed++
#
Loqi
snarfed has 49 karma in this channel over the last year (86 in all channels)
#
GWG
Trying to enhance my REST API to Feed code to minimize the number of requests from 10 to 3.
#
GWG
4, actually. Forgot timezone.
#
Loqi
[[snarfed]] gRegorLove yeah i could just omit it, but ideally i'd try a bit harder than that 😁
#
gRegorLove
I wasn't meaning to suggest the lazy solution. I kind of feel like it's the most correct though, since indienews is a multi-author feed
#
gRegorLove
If an overall feed author is needed, the URL being converted could be the default
hs0ucy, muety and leg joined the channel
#
@n2try
@Medium Probably an unusual request, but is there a chance you're going to implement the Webmention or Pingback standard on your platform some time? Could be a great benefit for indie bloggers. https://www.w3.org/TR/webmention http://www.hixie.ch/specs/pingback/pingback
(twitter.com/_/status/1247596746101923840)
#
@n2try
@TwitterEng Probably an unusual request, but is there a chance you're going to implement the Webmention or Pingback standard on the platform some time? Could be a great benefit for bloggers. https://www.w3.org/TR/webmention http://www.hixie.ch/specs/pingback/pingback
(twitter.com/_/status/1247597497045958657)
dckc joined the channel
#
dckc
waves
#
[snarfed]
dckc: more on https://indieweb.org/push_notification . if jenkins supports eg Pushbullet or Pushover, or can connect to them via webhooks or Zapier or IFTTT, that might work
#
dckc
I started a long-running database job using Jenkins. I'd like to get a high-priority notification when it's done so I don't have to stare at it the whole time and yet I don't lose a bunch of time after it finishes on lower priority stuff
#
dckc
IFTTT = The Borg. I'm trying to avoid The Borg.
#
dckc
I have my own domain and I have rented hardware at a colo site.
#
dckc
this is INDIEweb, after all.
#
dckc
ideally, the only parties to the communication are my phone and jenkins and a VPN which we have both agreed to use
#
dckc
"No replicable indieweb solutions to Push Notifications yet." <- does that pre-date https://github.com/luruke/browser-2020#push-api ? or does Push_API not cut it?
#
Loqi
[luruke] browser-2020: Things you can do with a browser in 2020 ☕️
#
dckc
PHP. hm. maybe "PHP 7" indicates more modern dev practices that are less scary?
#
dckc
MySQL or MongoDB... so it's fried. I'd rather something baked (http://www.aaronsw.com/weblog/000404)
#
[LewisCowles]
what is "a high-priority notification"?
#
Loqi
It looks like we don't have a page for "a high-priority notification" yet. Would you like to create it? (Or just say "a high-priority notification is ____", a sentence describing the term)
#
[LewisCowles]
Known supports postgres too
#
[LewisCowles]
and heroku, via that docker
#
[LewisCowles]
so you could throw a bit of script into Jenkins and get parallel pipelines
jenelizabeth joined the channel
#
dckc
high-priority notification is phone buzz; i.e. android notification
#
aaronpk
afaik the browser push api still goes through the browser vendor's servers
swentel joined the channel
#
[LewisCowles]
I think aaron is right. There was something about keys or encryption (not TLS) when I looked into it last year. AFAIK apple doesn't fully support either. Although not a concern for Safari, it does hurt compat to have one of the big 3 not supporting.
#
[LewisCowles]
I wonder if anyone is using RTC data channels or websockets to work around that with normal browser notifications
#
[LewisCowles]
I use mailhog for mails like dckc is mentioning as it does allow me to subscribe to email notifications in a local-network context, which saves internet flakiness / round-trips and keeps internal noise internal, and ephemeral
#
[LewisCowles]
I also happen to have updated my mailhog docker image and set it to auto-build to keep dockerhub fresh today
#
[LewisCowles]
I also wrote Safari when I meant Android
#
dckc
websockets... mailhog... these are interesting ideas...
#
dckc
well, it's done now... as of 2020-04-07 09:19:58
#
dckc
(not sure what timezone)
#
dckc
oops; wrong job
loicm, [tantek] and jamietanna joined the channel
#
jamietanna
Hey dckc for the notifications conversation, I'd recommend Pushover - I've had a few good recommendations for it, and I can't fault it - good API with a high amount of free notifications
#
dckc
api.pushover.net hm. stll centralized. sigh.
#
aaronpk
you're still going to be running through android/ios servers to get it to your phone at the end of the day anyway
#
aaronpk
there's not really a way to avoid the centralization aspect with phone notifications
#
dckc
websockets don't go thru The Borg, do they?
#
aaronpk
no but that won't result in a phone push notification
#
dckc
no? I can't get my web browser to make a phone notification out of a websockets message?
#
dckc
my phone web browser, that is
#
dckc
or some app on f-droid?
#
aaronpk
you can probably do it from an app on android, but on iOS you can't run in the background long enough to keep the connection open
#
aaronpk
also you're then on your own for dealing with maintaining the connection, retries, network timeouts, network changes, etc
#
dckc
libp2p to the rescue? ethereum whisper? hm.
#
[tantek]
it's not a tech problem, it's an ecosystem problem. unclear how libp2p or eth* could make any difference in the runtime
#
swentel
oh lord, I just wrote the best thing ever for indieweb :p
#
swentel
making a video
#
Loqi
swentel has 18 karma in this channel over the last year (37 in all channels)
#
[LewisCowles]
I like dckc wishes to make it all de-centralised, but dckc, you will notice and exponential cost once you start moving out of amortization bubble
#
dckc
runtime? as in performance? my performance needs are pretty moderate. anything up to 5 minutes is better than me remembering to look at it every few minutes
#
dckc
and yes, it's an ecosystem problem...
#
[LewisCowles]
runtime as-in application. You'd need to keep safari / android open all the time to use browser notifications
#
dckc
as in: economies of scale lead to centralization. but the cost is more or less unbearable. (surveillance capitalism...)
#
[LewisCowles]
it's not strictly true that keeping them open excludes background processes.
#
dckc
I'm willing to build / install android gorp
#
[LewisCowles]
Google Chrome on Android certainly is registered to send and receive push notifications, and regular notifications. It's more than outside of your own individual use-case, and a lot of setup, it's not generally applicable
#
[LewisCowles]
what is android gorp?
#
Loqi
It looks like we don't have a page for "android gorp" yet. Would you like to create it? (Or just say "android gorp is ____", a sentence describing the term)
#
dckc
android gorp = software that uses the Android API (at least: the open source part of it that doesn't rely on centralized services)
#
[LewisCowles]
you also cannot hi-jack their ability due to the certificate signing, only registered certificate holders can send the messages like pushover
#
[LewisCowles]
Open Source != doors down
#
[LewisCowles]
Android functions using binary blobs and some services would require significant effort to avoid using the mechanisms in place
#
dckc
I can open TCP / UDP ports without certificate gorp, yes?
#
gRegorLove
I'm discussing updating indiebookclub to add comments and wondering what different servers do if they get a post with both `content` and `summary`. More details in https://github.com/gRegorLove/indiebookclub/issues/16
#
Loqi
[gRegorLove] #16 Feature: notes/comments field
#
[LewisCowles]
I don't think you can on android actually
#
dckc
blinks
#
[LewisCowles]
you can root / hack the device, but again it's an unreasonable user assumption
#
[LewisCowles]
you can listen on a socket and make requests on open ports
#
[LewisCowles]
I'm fairly certain they don't let you just open sockets that hit the outer network
#
gRegorLove
I was trying to avoid putting the generated "what to read [book] by [author] [isbn]" in the `content` since it's not explicitly authored by the poster (like that, at least), vs a note/comment that is.
#
[LewisCowles]
that could be an IPC facilitating internal socket
#
dckc
how do all the trackers do their thing if they can't open sockets?
#
dckc
<uses-permission android:name="android.permission.INTERNET" />
#
dckc
^ right; I would have to grant that at install time. fair enough, yes?
#
[LewisCowles]
INTERNET permission is part of it, but then you need to know the network allows
#
[LewisCowles]
which other apps have open ports
#
[LewisCowles]
Java does not need an internet permission btw
#
[LewisCowles]
been using Java since the 1990's
#
[LewisCowles]
do-able is different from reasonable
#
[LewisCowles]
or encouraged
#
[LewisCowles]
Android does very little to discourage an emboldened, determined user
#
dckc
scrolls back to see where we switched from "technically possible" to "encouraged by surveillance capitalism"
#
[LewisCowles]
but it does not encourage them
#
[LewisCowles]
cute. I also dislike surveillance capitalism
#
dckc
the android platform itself is open source. Then there's what google likes. I'm OK with the former and not the latter.
#
[LewisCowles]
so it's a mathematical abstract android device we're discussing?
#
[LewisCowles]
if not, as well as google, you have vendors
#
dckc
well, I have one in my hand. I haven't rooted it. ordinary consumer device. Moto g6 or whatnot.
#
[LewisCowles]
When publishing to your device, you need to consider the network(s), the vendor, Google (if certified, which I believe it is) and the platform as a hostage of those others
#
dckc
I'm installing f-droid... had to change an "install from unknown sources" preference, but didn't have to root, so far...
#
[snarfed]
again, Push API does work for this, and it's directly between web server and browser on mobile
#
[snarfed]
even includes icons, actions, etc
#
[snarfed]
i've used it with both android and iOS. a while back, i'm definitely on the expert
#
[snarfed]
er, not an expert
#
[snarfed]
but still
#
[LewisCowles]
snarfed, how does it work on iOS. Is MDN / Can-i-use wrong?
#
[LewisCowles]
They both suggest safari doesn't support Push
#
[snarfed]
ah, chrome
#
[LewisCowles]
That might be the specific why it worked
#
[snarfed]
(browser handles the connections to servers, we don't need to directly ourselves)
#
[LewisCowles]
which if you can persuade users to do because of audience education etc, is grand
#
[LewisCowles]
but not a given
#
[LewisCowles]
For my case the app (someone else) was 20% safari
#
[snarfed]
ah so far we'd mostly been talking about ourselves as our own users
#
[snarfed]
if you mean readers etc, that's different
#
[LewisCowles]
I was happy to be fair. I dislike real-time comms in-general
#
[LewisCowles]
ironically from a real-time comms agent 😛
#
[LewisCowles]
I'm not claiming to be an expert btw, just fairly confident of recent experience
#
[LewisCowles]
Googles line on droid and chromebook is also a very undesirable one in the sense they are the sole protector as well as primary known abuser.
#
[LewisCowles]
Many people with non-G certified devices suffer without visibility, because those providers don't have the target on their back the multi-national does
[jgmac1106], superjen96 and [fluffy] joined the channel
#
zenen
I just spent a good chunk of the day trying to find a way to remove Google from my Google Pixel... the results were pretty unsatisfactory
#
zenen
I couldn't find a LineageOS image without most of google's applications installed, and the ones that weren't just made the whole thing less convenient
TrondGiske joined the channel
#
swentel
well, you won't find many lineageOS google apps on it as that's their point I guess :)
#
swentel
hmm weird sentence
#
swentel
hmm wait
#
swentel
the images DID contain google apps? (I think I need sleep ;)
#
[LewisCowles]
I need sleep too. It's getting harder and harder though
#
swentel
zenen, I'm going to try https://e.foundation/ soon - might be an option
#
Loqi
Home
#
swentel
but not sure yet if there's a pixel image
#
swentel
oh, looks like it yes
#
zenen
swentel: I'm using a 3a, which doesn't have official support. I found an independent package from someone but they preinstalled gapps
#
zenen
yea I just came across e-foundation recently, i still have to give it a better look
#
zenen
there's no support for the 3a though, so I'd have to learn how to make ports and that's beyond my skillset atm
#
[LewisCowles]
I adapted an OpenSource project to build the whole of Google ChromeOS in 4 commands. Building Android cooks my brain. I have neither the desire, nor time. I'm resigned to being sad nobody is doing what I'd like with OS's, glad that I have Linux and sunk-costs of 20 years fiddling to make it do what I need.
[snarfed] joined the channel
#
dckc
in the early days of Android I used to try this ROM or that... I got curious about who was making them and where was the source code... I eventually realized that this was grey-market work and they didn't exactly want their identities known.
[grantcodes] joined the channel
#
[grantcodes]
swentel is recreating some together ui without me even requesting it 😛 together has the gallery view, but I decided not to autoplay videos.
#
[grantcodes]
swentel++
#
Loqi
swentel has 19 karma in this channel over the last year (38 in all channels)
#
GWG
I keep wanting a gallery view for my site
[KevinMarks] joined the channel
[tantek] joined the channel