#dev 2022-03-03

2022-03-03 UTC
tetov-irc, Darius_Dunlap[d], jacky, jzeneto, [jgmac1106], justAstache, Seirdy, tbbrown, Fe, jamietanna1, superkuh, gerben, strugee, mro, [Francesco_Impr], polezaivsani, [tw2113_Slack_], [tantek], sayanarijit[d], rrix, Silicon[d], Eddy04[d] and Saphire joined the channel
#
@ton_zylstra ↩️ I have a WordPress blog, with the IndieWeb plugin for webmention (twitter.com/_/status/1499379579601014784)
kinduff_, kinduff__, jacky, tbbrown, sp1ff and mro_ joined the channel
#
sp1ff aaronpk: ah, I think I see-- the template author includes them?
#
aaronpk Yea, it's meant to be built in to the site rather than something a user would ever see
#
aaronpk the docs and tutorials and such of course mention how to add them to HTML because they're written for the people who are writing the HTML
mro joined the channel
#
sp1ff Got it. I just use Emacs org-mode to publish my site, so shouldn't be too hard to add 'em. Thanks.
mro and tbbrown joined the channel
#
[tantek] there has to be more people that support "offline first" besides me and Jeremy right? https://indieweb.org/offline_first#IndieWeb_Examples
#
[schmarty] 🤔 can it really be offline _first_ if you have to visit the site at least once while online to get the serviceworker installed? 😂
#
[aciccarello] offline second? 😁
mro joined the channel
#
sknebel "offline-usable"?
#
[tantek] [schmarty] worth adding to the FAQ. "visiting the site at least once" is a web equivalent of "install the app", so yes, in as much as people treat any piece of software as "offline first", you can't use it offline without first installing it 🙂
#
[schmarty] glances towards the few pieces of physical software install media in his home
#
[tantek] hah. whether you install from physical media or the network, you still have to take that install step. even that "physical software install media" had to traverse the slow network known as the "global supply chain" 🙂
#
[schmarty] a network from which one can rarely truly be "offline"
jacky, justAstache and barnaby joined the channel
#
[KevinMarks] Though Russia is getting there
antrdnv[d], mro, angelo and tbbrown joined the channel
#
jacky [schmarty]: heh one day!
#
jacky indieweb amongst the people in front of you
mro joined the channel
#
[KevinMarks] Thats what scuttlebutt was like for me - it didn't work until I was in the same room as people using it
kimberlyhirsh[d] joined the channel
#
[KevinMarks] Hm you could go back to the mDNS .local approach
#
[KevinMarks] Though that can be harder now with devices having other networks than the shared WiFi
#
sknebel annoyingly android doesnt do mdns
#
jacky ^ super annoying
#
jacky has anyone considered integrating https://www.hcaptcha.com/privacy-pass into their site?
#
jacky mainly for content submission
#
jacky I noticed discord using it
#
jacky I'm looking at things I'd want to incorporate into my Webmention submission form to prevent bad links (already restricting it to URLs known to my site for inbound)
#
sknebel hm, I feel like rate-limiting that feature would be enough and non-intrusive?
#
[tantek] I think the thread model is drive-by manual spamming and other opportunistic attacks, not automated (at least at first)
#
jacky yeah actually that's what I'm thinking about (drive-by attacks_
#
jacky but I should also make a very clearly defined threat model
[chrisaldrich] joined the channel
#
sknebel yeah. i.e. someone plugging in random URLs for fun isnt stopped by doing it in a browser
#
sknebel captcha just slows them a tiny bit
#
sknebel automated struggles more with it
#
sknebel but also whats the damage. a) resource use b) fetching other stuff b.1) resource use on other sites b.2) your server talks to sites you wouldnt let it talk to?
Saphire joined the channel
#
sknebel a) and b.1) are not too bad if slowed down enough, b.2) you can't prevent with captcha either
#
sknebel would be my first thoughts
#
sknebel (if I'm scripting an attack I also can just use your WM endpoint directly, so the captcha there I can easily circumvent)
#
sknebel so you primarily stop dumb pots putting urls in random fields?
#
sknebel -> afk, sleep
tetov-irc, marksuth[d] and P1000[d] joined the channel