#dev 2022-02-02

2022-02-02 UTC
cygnoir[d] joined the channel
#
aaronpk
grr i've learned so much about event sites building Meetable that i'm super annoyed at my own website's handling of events and need to figure out how to fix it
jacky joined the channel
#
[schmarty]
aaronpk: like from a plumbing perspective?
#
aaronpk
a bit of both
#
aaronpk
for example my site will always display the start time of an event, which isn't what I want for multi-day events
#
aaronpk
and that is both a plumbing and UI problem
wagle, [jgmac1106] and darkkirb joined the channel
#
[tantek]
aaronpk, I think it's at least reasonable to download / cache the entire upthread reply-context of something (any post) you're liking/bookmarking
#
[tantek]
use-case: someone upthread deletes a tweet
#
aaronpk
i suppose the first easier step is to just always download the whole thing, regardless of whether i display it
#
[tantek]
I've definitely had that happen to me before
#
[tantek]
at least upthread yeah, and regardless of who is in the reply-chain
#
[tantek]
the downthread tweetstorm detection (and saving) is a different user feature
#
[tantek]
(look for "/" in the last 10 chars of the tweet you're favoriting 😂 )
#
aaronpk
i think just looking for replies to a tweet from the same author is probably 97% accurate
#
[tantek]
even if they "only" use it to "correct" something in the original tweet, it's worth getting both
#
[tantek]
or like in the case of the plot twist 🙂
#
[jgmac1106]
it ain't perfect cuz it was sourc code and manual
#
[jgmac1106]
this is the micro.blog backup file: https://github.com/jgmac1106/cyberblog/blob/main/index.html wish each h-entry it's own folder, or maybe do it by week...one single file for me isn't sustainable
#
[jgmac1106]
oops I have been gone too long and doing too much cybersecurity
#
[jgmac1106]
but please turn on mfa
#
[jgmac1106]
for manual until it hurts I didn't do too bad. aaronpk would be smart enough to automate it, but I went fro,m source code I think to sublime, and then using weird editing hacks to instert microformats
#
[tantek]
don't turn on mfa if it means SMS and SMS recovery. that's making yourself more vulnerable
#
[tantek]
the YouTube Music not-logged in experience is WAY better than the Spotify not-logged-in experience
#
[tantek]
this makes me actually want to consider using YouTube Music, especially if there was some way to import/export playlists
#
[tantek]
as in, the ability to share a playlist that someone can play without having to login or install an app is quite compelling
#
[tantek]
does anyone else create playlists in YT Music and/or import/export them?
#
[jgmac1106]
agree on weakness of SMS (also in the ZTA memo BTW) but a reduction in the attack vector overall still better
#
[jgmac1106]
my university actually pulled back from authentication apps and allowed sms again bc of the trouble of support, made me sad
#
[tantek]
it's not a reduced attack vector overall, it's an INCREASED attack vector as in social engineering a SIM card is *easier* than phishing your email/pw single-factor
#
GWG
My employer makes me use a MFA app every 14 days to reauth up everything, and some things every time I log in.
#
[KevinMarks]
Yes, you create playlists the same way you do in YouTube. You need to be logged in with a Google account but it doesn't need to be a paid one.
#
[KevinMarks]
The side benefit of a YT music paid account is that it removes ads from YouTube too.
#
[KevinMarks]
YT music is pretty much YT with the video off (you can turn it on too)
#
[KevinMarks]
I made this playlist by hand from the tweet thread by searching each song name and picking a performance I liked https://music.youtube.com/playlist?list=PLLpSh8dWOWl-BWwNXiF-N5cn4Aq0o5QpY&feature=share
#
[jgmac1106]
sorry nerve damage leads to sloppy late night typing
#
[jgmac1106]
I am going to be so excited to have seperation from all my kids streaming and Xboxing
[fluffy] joined the channel
#
[jgmac1106]
Ingnore the MongoDB. Rebuilding my app in Python, Django,and PostgresSQL
#
KartikPrabhu
[jgmac1106]: I use SQLite which allows me to copy-paste and backup my database as a file
[chrisaldrich] joined the channel
#
[tantek]
GWG, a separate TOTP app is fine
#
[tantek]
[jgmac1106] I like "serbers" kind of like "birbs" and vaguely sounding like "Cerberus"
#
GWG
[tantek]: That's what I use
[Aaron_Klemm], [benatwork], [chrisaldrich]1, [benatwork]1, petermolnar, joshproehl_, hoenir, aaronpk[d], mossymaker[d], benji, Myst[d], [schmarty], MarkJR84[d], grantcodes[d], jjuran, sarahd[d], KartikPrabhu, sp1ff, [jackjamieson], wagle, juanchipro[m], Matt[m], kandr3s[m], ermahgerddavid[m, nekr0z, doubleloop[m], zack[m], unrelentingtech, kinduff, rommudoh[m], mambang[m], marksuth[d], LaBcasse[m], Abhas[m], samwilson, angelo, zachburau[d], diegov, bg2, jamietanna[m], [aciccarello], npd[m], EvanBoehs[m], binyamin[m], reed, micahrl[m], Seirdy, P1000[d], Christian_Olivie, [manton], Ramon[d], superkuh, hans63us[d], capjamesg[d], bneil, sayanarijit[d], Zegnat[d], klez, alex11, feoh, daiyi[d], GWG, nsh, BinarySavior, doosboox, corenominal[d], kloenk, saptaks_znc, ben_thatmustbeme, chenghiz_, sebbu, wrmilling, moose333, vilhalmer, eco, gerben, push-f, rrix, Saphire, rhiaro, stevestreza_, willnorris, Kaja, lanodan, aaronpk, [fluffy], [jgmac1106], oxo111999, tetov-irc, darkkirb, jamietanna, Seb[d], sknebel, balupton[d], [tw2113_Slack_], aspenmayer[d], Jeremiah[d], rattroupe[d], justGhost, IWSlackGateway, Zegnat, [KevinMarks] and Ruxton joined the channel
#
[tantek]
finally made an anniversary post for Webmention and WebSub: https://tantek.com/2022/032/t2/anniversary-webmention-websub
#
Loqi
[Tantek Çelik] Last month was the anniversary of two #IndieWeb #distributedWeb building block specifications becoming @W3C Recommendations: * 5y Webmention: https://www.w3.org/TR/2017/REC-webmention-20170112/ * 4y WebSub: https://www.w3.org/TR/2018/REC-websub-20180...
#
[tantek]
invited folks at the end of the post to join this channel
#
Loqi
😄
#
@t
Last month was the anniversary of two #IndieWeb #distributedWeb building block specifications becoming @W3C Recommendations: * 5y Webmention: https://www.w3.org/TR/2017/REC-webmention-20170112/ * 4y WebSub: https://www.w3.org/TR/2018/REC-websub-20180123/ Both specs are peer-to-peer mechanisms, ... https://tantek.com/t5H42
(twitter.com/_/status/1488774972738654211)
#
[tantek]
review/feedback/corrections welcome 🙂
[jeremycherfas] and gRegor joined the channel
#
capjamesg[d]
[tantek] breakfastand.coffee now accepts syndication links.
#
capjamesg[d]
At the moment this isn't access controlled other than requiring a syndication link. That access control will come when I get the indieauth login setup.
#
sknebel
capjamesg[d]: typo on front page: " that might be worth visitng."
#
capjamesg[d]
aaronpk How did you deploy vouch-proxy on the wiki? I find the docs very confusing.
#
capjamesg[d]
I don't understand what protectedapp.example.com refers to in the nginx example.
#
sknebel
the app that you are setting up auth for
#
sknebel
(i.e. the wiki)
#
sknebel
capjamesg[d]: ^^^
tetov-irc and hans63us[d] joined the channel
#
aaronpk
It's definitely a bit tricky to get your head around all the config options
#
capjamesg[d]
aaronpk I have a strange question.
#
capjamesg[d]
SSO is set up but... after logging in with IndieLogin, sessions aren't saved.
#
capjamesg[d]
The /validate requests are coming into the Vouch Proxy on page load but the user appears as logged out on MediaWiki.
#
sknebel
the mediawiki plugin is setup and you use the same header name it expects?
#
capjamesg[d]
Auth_remoteuser and IndieWeb/LassoAuth.php are both configured.
#
capjamesg[d]
(to use breakfastand.coffee instead of indieweb domains)
#
capjamesg[d]
That's the nginx config ^
#
capjamesg[d]
(9093 is the port because 9090 is used by grafana)
#
aaronpk
If the wiki is showing logged out it sounds like it's not finding the Remote-User header
#
sknebel
you dont have the proxy_set_header Remote-User $auth_user; in the location block, not sure if thats ok or not
#
sknebel
you could add a path to a PHP script that dumps the headers
#
sknebel
that says to use fastcgi_param REMOTE_USER $auth_user; if you use fastcgi
#
aaronpk
That ^^
#
aaronpk
another thing I like to do is put a test.php file on the server that just outputs all the headers it sees
#
aaronpk
oh you said that already too haha
#
capjamesg[d]
How do you do that? This is my first project related to PHP.
#
capjamesg[d]
From the browser dev tools, I see there is a VouchCookie set.
#
aaronpk
<?php print_r($_SERVER);
#
aaronpk
But yeah it sounds like nginx isn't setting the header right
#
capjamesg[d]
There isn't a REMOT_USER set 😦
#
capjamesg[d]
*REMOTE_USER
#
aaronpk
Do what sknebel said
#
sknebel
(the fastcgi_param bit)
#
capjamesg[d]
sknebel I tried moving the proxy_set_header Remote-User $auth_user bit and it didn't change anything.
#
capjamesg[d]
I have also tried using the fastcgi_param directive but that didn't change the headers either.
#
sknebel
hm. try using a different header name, some implementations are weird about REMOTE_USER
#
sknebel
i.e. fascgi_param COFFEEBEANS and then check if COFFEEBEANS is set :D
#
capjamesg[d]
Nope 😦
#
aaronpk
Try adding it right next to fastcgi_param SCRIPT_FILENAME
#
Loqi
does a happy dance!
#
capjamesg[d]
aaronpk++
#
Loqi
aaronpk has 24 karma in this channel over the last year (122 in all channels)
#
capjamesg[d]
sknebel++
#
Loqi
sknebel has 8 karma in this channel over the last year (34 in all channels)
jacky joined the channel
#
capjamesg[d]
[tantek] IndieAuth is set up on the breakfastand.coffee wiki. I'd appreciate your help populating a few pages with your recommendations 🙂
#
capjamesg[d]
Feel free to POSSE from your own site. All you need is a u-syndication link to the URL https://breakfastand.coffee (that exact URL is needed)
[tonz] and jacky joined the channel
#
jacky
random: do Wordpress site double as "identity" providers?
#
jacky
like OpenID/etc?
#
aaronpk
if they install an OpenID or IndieAuth plugin sure
#
jacky
I didn't think of that, lol
KartikPrabhu joined the channel
#
sknebel
capjamesg[d]: I'm quite busy right now so probably in a few weeks or so, but at some point we should talk about how we get OSM maps into that :)
#
capjamesg[d]
Let's do it!
#
capjamesg[d]
Maybe publishers could optionally add a h-geo object to their post that is then turned into an embedded OSM map?
#
sknebel
something like that, yeah
#
capjamesg[d]
Are there better ways to do it?
#
capjamesg[d]
I haven't done a lot with maps so am very new to the world.
#
sknebel
would be interesting to try and find the actual OSM objects for the places. and I'm not up to speed on nice ways of embedding such maps in mediawiki
#
capjamesg[d]
That's a good idea! I don't know how to do that so it will be a good learning opportunity.
#
capjamesg[d]
Do we have a good "how to sign in with indieauth" tutorial?
#
Loqi
[Ryan Barrett] Like all of you, I got a little stir crazy over the last year. I made it outside plenty, but I still felt cooped up now and then, and I dearly missed going new places and seeing new things. On another note, I really, really like breakfast. Like, a lo...
#
capjamesg[d]
(Slight nudge: we should have a "breakfast tour" page on the wiki :D)
#
capjamesg[d]
I shall need to create a "coffee crawl" one too.
#
capjamesg[d]
(You should be able to sign in with IndieAuth now!)
#
[snarfed]
got a 400 from https://vouch.breakfastand.coffee/auth/... when I tried to log in with IndieAuth just now
#
capjamesg[d]
That is very strange.
#
capjamesg[d]
Can you try again? I tried with a different domain and could get in.
#
capjamesg[d]
Did you get to the indieauth.com stage?
#
[snarfed]
huh, worked the second time
#
[snarfed]
yeah the 400 was after the full indieauth dance
#
capjamesg[d]
You are on the user list now 🙂
#
capjamesg[d]
Very strange.
#
capjamesg[d]
(I can now say my purchase of jamesg.coffee was justified because I used it for testing with another domain haha)
#
[snarfed]
might be worth looking at the vouch.breakfastand.coffee error logs to see what happened
#
[snarfed]
low priority
KartikPrabhu joined the channel
#
capjamesg[d]
I shall. I am new to the Vouch Proxy so will need to dig around to see what went wrong.
#
[tantek]
coffee crawl! that sounds like the kind of trip/travel post that GWG would (does?) publish!
#
GWG
[tantek]: I don't like coffee
#
[tantek]
GWG, I meant in general, not specific to coffee 😉
#
[tantek]
capjamesg[d], looks like email registration is still enabled? i.e. when not logged in there's a Create account link in the top right, which goes to: https://breakfastand.coffee/index.php?title=Special:CreateAccount&returnto=Main+Page which looks fully enabled
#
capjamesg[d]
Ah yes. I enabled it back when I was trying to fix the vouch proxy server. I tried so many different things. I’ll push a change.
#
[tantek]
GWG, do you like breakfast?
Asaf_Agranat[d] joined the channel
#
[tantek]
capjamesg[d]++ amazing! IndieAuth login works! congrats on getting that setup
#
Loqi
capjamesg[d] has 25 karma in this channel over the last year (68 in all channels)
#
GWG
[tantek]: Yes, I just rarely do food/dining type posts...I did want to review experiences more
#
[tantek]
Is this only the second public MediaWiki instance with IndieAuth login?
#
[tantek]
and in particular with *only* IndieAuth login?
#
[tantek]
I feel like "how to add" this functionality alone is worth documenting on its own page on the wiki so we can encourage other wikis to do so
#
[tantek]
capjamesg[d], while it's fresh in mind for you, could you write some notes about the steps you took (and where you got stuck, errors you saw, how you did troubleshooting/fixing) to setup IndieAuth login on breakfastandcoffee?
antrdnv[d], joshproehl_, joshproehl and gRegor joined the channel
#
capjamesg[d]
[tantek] I might wikify an answer 🙂
#
capjamesg[d]
There were a few issues. Perhaps due to my inexperience with deploying hosted software but nonetheless important.
#
capjamesg[d]
Specifically on IndieAuth, the process was pretty easy. I copied the IndieWeb wiki auth extension for Lasso / vouch proxy. The biggest challenge was figuring out how to run the proxy and get the headers right.
#
capjamesg[d]
I can document what I did to get past those issues.
#
capjamesg[d]
Does Loqi attribute your wiki changes to Loqi or your wiki account?
#
sknebel
it mentions the chat name in the message, but edits as Loqi
#
sknebel
it cant impersonate people
#
sknebel
(and also cant verify that the chat names are hte people the matching website belongs to, so it couldnt do that reliably etiher way)
#
kinduff
Hello, I'm trying to find the optimal way to backfill these responses from GitHub https://github.com/kinduff/kinduff/issues/11, Brid.gy doesn't seem to pick them up
#
Loqi
[utterances-bot] #11 The weight of the clipboard
jacky, chenghiz_, ben_thatmustbeme, sebbu, doosboox, feoh, bneil, Zegnat, diegov, IWSlackGateway, Matt[m], [KevinMarks], justGhost, rattroupe[d], Jeremiah[d], aspenmayer[d], balupton[d], sknebel, [tw2113_Slack_], [jgmac1106], Seb[d], darkkirb, hans63us[d], [tonz], [fluffy], [Aaron_Klemm], gRegor, kloenk, rrix, corenominal[d], nekr0z, zack[m], lanodan, wrmilling, moose333, unrelentingtech, LaBcasse[m], aaronpk, eco, nsh, npd[m], samwilson, klez, BinarySavior, GWG, Abhas[m], reed, doubleloop[m], EvanBoehs[m], rommudoh[m], KartikPrabhu, kandr3s[m], [schmarty], micahrl[m], benji, petermolnar, Myst[d], sarahd[d], hoenir, aaronpk[d], jjuran, MarkJR84[d], Kaja, mossymaker[d], willnorris, daiyi[d], juanchipro[m], rhiaro, antrdnv[d], alex11, capjamesg[d], sayanarijit[d], gerben, Ramon[d], vilhalmer, Christian_Olivie, P1000[d], sp1ff, Seirdy, superkuh, tetov-irc, wagle, [jackjamieson], joshproehl, Ruxton, Zegnat[d], kinduff, [aciccarello], angelo and saptaks_znc joined the channel
#
[snarfed]
kinduff you need a u-syndication link for Bridgy GitHub backfeed: https://brid.gy/about#GitHub%20responses
Matt[m] and push-f joined the channel
#
rattroupe[d]
Snarfed, I was never able to figure out why bridgy didn’t forward Reddit comments. I can’t tell from the docs if it’s designed to do that or not
#
[snarfed]
rattroupe it is! it's definitely working in general, eg https://brid.gy/reddit/lgats , https://brid.gy/reddit/bonkerfield
#
[snarfed]
happy to help debug if you want
#
[snarfed]
oh sorry, only the second link is an example of comments specifically
kandr3s[m] joined the channel
#
rattroupe[d]
I have a blog post that I syndicat3 to Reddit here https://brid.gy/reddit/rattroupe
push-f joined the channel
#
rattroupe[d]
Bridgy sent me the original syndicated Reddit post as a bookmark
#
rattroupe[d]
But when the Reddit post got a reply, bridgy didn’t send that
#
[snarfed]
thanks! I'll look
EvanBoehs[m], doubleloop[m] and nekr0z joined the channel
#
[snarfed]
think I might see the problem, I'll try to fix it soon
reed joined the channel
#
rattroupe[d]
I’m a little relieved that there is a problem. I couldn’t tell if it was just me not using bridgy correctly, or if I had the wrong expectations of what it would do
Saphire, samwilson, kinduff, jacky, zack[m], jamietanna[m], diegov, mambang[m], rommudoh[m], micahrl[m], ermahgerddavid[m, binyamin[m], LaBcasse[m], npd[m], Abhas[m], unrelentingtech, juanchipro[m] and tetov-irc joined the channel