#dev 2020-08-25

2020-08-25 UTC
[KevinMarks] joined the channel
#
dansup jacky: that is such a cool feature, I added support to pixelfed when it launched
#
jacky I'm def adding it myself
#
jacky only concern is figuring out the 'below' fold stuff
geoffo joined the channel
#
skalnik Oooh I was just looking into this the other day and couldn't find much, I guess I wasn't searching the right words
#
skalnik jacky++
#
Loqi jacky has 33 karma in this channel over the last year (116 in all channels)
#
jacky it came up in my e-mail feed from lobsters via someone else's blog post
#
skalnik Good timing :)
eddiehinkle, [eddie], [tantek], jonnybarnes, [snarfed] and KartikPrabhu joined the channel
#
GWG Looking at iTunes and Media RSS regarding [manton]'s comment earlier about podcasting feeds.
#
GWG Also a gap in microformats, possibly.
[chrisaldrich] joined the channel
#
[snarfed] granary handles the custom itunes RSS extension fields, and generally has mf2 fields that all of them map to
[schmarty] joined the channel
#
[snarfed] some of them are still inconsistent in the wild though, eg /duration and /size
#
GWG [snarfed]: This is what I noted brainstorming on JSONFeed... might write another version for h-feed. https://github.com/manton/JSONFeed/issues/144
#
Loqi [dshanske] #144 Podcasting Feeds
jonnybarnes, [fluffy], cweiske, [tantek], swentel, moppy, KartikPrabhu, enpo, dckc, [James_Gallaghe], [Murray], willnorris, genehack, voxpelli, [Rose] and leg joined the channel; crab left the channel
#
petermolnar oh, this is a neat interface for posting: https://apps.rhiaro.co.uk/no-ceremonies-are-necessary/
jbove, ludovicchabant, jonnybarnes, peterrother, themaxdavitt, KartikPrabhu, [KevinMarks], [Zegnat] and nekr0z joined the channel
#
GWG aaronpk: How is the IndieAuth rewrite going? Only asking because I want to audit my implementation afterward.
jonnybarnes, geoffo, [schmarty], floridafruitgeek, [manton], jeremych_, [snarfed], dckc, [Jose_Leiva], [Sue_Hanen], [fluffy], peterrother, jbove and [tantek] joined the channel
#
@ravisagar I have #webmentions enabled on my site, if you follow @indiewebcamp and want to send me @webmentionrocks then feel free. https://www.ravisagar.in/blog/displaying-my-live-gps-location-site-and-also-my-battery-status (twitter.com/_/status/1298337487220281345)
[KevinMarks] joined the channel
#
[KevinMarks] AMP is parsing html with regex https://github.com/ampproject/amphtml/issues/29540
#
Loqi [nikse] #29540 [amp-story] AmpStory runtime replacing vh/vw in css classnames
#
[snarfed] z̦͇͇͈̝̤a͘l̜̲̖̭͔̜̲̀g̙͈̀o͘,͍̲̲͍̺̫͝ ͓͚͉̝͍h̝e͍͔̻͎̱͟ ̧̳̱c͕̹͚̖͎̗̳o̷̹̩͚͖͕ͅm̶̝e̦s
#
aaronpk [snarfed]++
#
Loqi [snarfed] has 47 karma in this channel over the last year (79 in all channels)
#
[tantek] welcome [jenny_phire_] !
[manton], [Ana_Rodrigues] and [asuh] joined the channel
#
[KevinMarks] Uh oh https://twitter.com/tomayac/status/1298371563767701505?s=20
#
@tomayac Wow, this Web Share API bug ⤵️ is concerning. const pwn = () => { navigator.share({ text: 'Check out this cute kitten!', url: 'file:///etc/passwd', }); }; Turns out Safari actually shares the _contents_ of /etc/passwords, and allows for stealing the history, too. https://twitter.com/firt/status/1298338366065451008 (twitter.com/_/status/1298371563767701505)
KartikPrabhu joined the channel
#
[tantek] yeah that's bad
jonnybarnes, KartikPrabhu and [fluffy] joined the channel
#
[fluffy] holy crap
jonnybarnes joined the channel
#
aaronpk Umm that's like a fix it yesterday thing
#
aaronpk also normally not made public until the fix is out
[snarfed] joined the channel
#
[snarfed] sounds like they did responsible disclosure and apple said they “won’t solve this security hole this year,” hence they published
#
[snarfed] it does take a substantial amount of user interaction, and makes the filename visible before sending, so i can kinda understand. still not ideal though
#
aaronpk oof
[chrisaldrich] joined the channel
#
[tantek] yeah disclosure timeline here: https://blog.redteam.pl/2020/08/stealing-local-files-using-safari-web.html
#
aaronpk i had a moment earlier today where i fantasized about hosting my website from home but having it mirrored on a cloud VPS and my studio internet, all synced on the backend using syncthing, where everything is a file on disk, including all the webmentions I receive, so that any of the servers can be the ones that receive micropub requests or store webmention comments and they all just are eventually
#
aaronpk consistent
#
[snarfed] struggles with the ROI
#
aaronpk fun
#
aaronpk probably why the thought lasted only a moment
#
aaronpk it'd be fun to be able to take a copy of it on a raspberry pi and set up an ad hoc wifi network somewhere and still be able to post and receive webmentions while otherwise completely offline
#
[tantek] curious about how you'll handle https