#dev 2021-12-11
2021-12-11 UTC
Seirdy, KartikPrabhu and Seb[d] joined the channel
# 
@shipilev Well, two can play this game. Probing for a JNDI hack? Get 10 gigabytes of compressed HTML in return. (Had to kill Chromium mid-render.) https://pbs.twimg.com/media/FGRrOOSWQBAXNQp.jpg (twitter.com/_/status/1469417410214125569)
# 
@ladyaeva here's how funding works in the open source community: 1. you donate to the FSF because like they support free software right? 2. the FSF takes that money and buys gold and bitcoins with it 3. ??? 4. spiders georg maintains critical tech infrastructure as a high stress hobby (twitter.com/_/status/1469617608706215937)
tetov-irc and akevinhuang joined the channel
# 
capjamesg[d] TIL GitHub commits have RSS feeds.
# capjamesg[d] No. Just a feed of commits.
# capjamesg[d] I'm going to hook up a feed to my Discord bot.
# capjamesg[d] I'll get a message when I make a commit. Only for certain things though.
# capjamesg[d] (I should have said Atom feeds, not RSS)
# 
[KevinMarks] do they use the Activity Stream 1 extensions for events? I know Jira does
akevinhuang2 and kogepan joined the channel
[schmarty] joined the channel
# 
[schmarty] GWG: got a link?
chenghiz_ and [dmitshur] joined the channel
# 
[dmitshur] Hmm, thinking about a RelMeAuth situation, where github.com/first-last-example says their website URL is https://first.last.example, but that URL redirects to https://lastname.example, and https://lastname.example has a rel=me link to github.com/first-last-example. Is it definitely clear what the outcome here should be? Does the redirect code matter (temporary vs permanent)?
# [dmitshur] I guess the reason it feels weird is because of the tension between:
# [dmitshur] • first.last.example redirecting to last.example is it trying to say "last.example" is more canonical
# [dmitshur] The strictest interpretation may be to say they can't login with either URL because it's an ambiguous situation.
# [dmitshur] • github.com/first-last-example saying their profile URL is "https://first.last.example" is trying to say "first.last.example" is more canonical
nertzy, mlncn, ben_thatmustbeme, KartikPrabhu, colivier[d], [jacky], IntriguedWow[d], [timothy_chambe], Seirdy and kogepan joined the channel
# [schmarty] as far as I can see, RelMeAuth doesn't have much to say about redirects, but IndieAuth does: https://indieauth.spec.indieweb.org/#authorization-server-confirmation
# [schmarty] (the examples in that section seem relevant)
# [schmarty] additionally, an IndieAuth client "MUST" follow redirects: https://indieauth.spec.indieweb.org/#discovery-by-clients
# [schmarty] ah but that's just for the discovery step, so doesn't say whether to fetch and follow redirects for the URL listed on a relme service profile. 😅
# [schmarty] heh that makes it even less of a model for RelMeAuth
# 
aaronpk the old description might be helpful for RelMeAuth https://indieauth.spec.indieweb.org/20200926/#redirect-examples
# [schmarty] ahaaaaa that's what i was remembering. aaronpk++
akevinhuang joined the channel
# aaronpk woohoo this feature has been a long time coming! now you can zoom in on my maps to see the detailed path of my trips! https://aaronparecki.com/2021/12/09/11/
[chrisbergr] and tetov-irc joined the channel
# [dmitshur] Nice, congrats! aaronpk++