#dev 2022-11-01

2022-11-01 UTC
#
@kn_wler I’m sure there are simple explanations of how Webmentions work and the general requirements to implement them, but everything I’ve seen seems so convoluted. (twitter.com/_/status/1587238104334843904)
geoffo, Seirdy, barnaby, sebsel, Saphire and wagle joined the channel
#
[tantek] note follow-up: https://twitter.com/kn_wler/status/1587262298716082176
#
@kn_wler The spec is actually pretty helpful. (twitter.com/_/status/1587262298716082176)
stevestreza, Saphire and wagle joined the channel
#
[tantek] slow response on Twitter API for posting just now
#
[tantek] fascinating watching ~14 attempts to "federate" (deliver to inboxes), with two errors, and the rest of them "complete"
mcint, stevestreza, wagle, lockywolf, gRegorLove_, barnaby, [MiaCrow], [Ana_Rodrigues] and [Ana_Rodrigues]1 joined the channel
#
@theAdhocracy ↩️ You also want to take a look at http://Brid.gy: https://brid.gy/about (twitter.com/_/status/1587440600529473536)
geoffo joined the channel
#
[schmarty] i was promised openssl3 updates today 👀. or maybe it's more like i have been threatened with openssl3 updates today 😰. the anticipation!!
#
@kn_wler What if Webmention support was so good that one would feel left out if they used a social media platform that didn’t support them? Right now it’s the opposite. We feel left out of the conversation if we’re not on Twitter. (twitter.com/_/status/1587448291104628738)
kloenk joined the channel
#
aaronpk Oh yeah, happy OpenSSL day
#
sknebel Yay for running old systems that don't have openssl 3 yet 😅
#
Loqi does a happy dance!
#
[schmarty] i have very few affected boxes to check in on, haha
geoffo joined the channel
#
barnaby I don’t think I need to do anything other than consumer OS updates and assuming that my web host patches it for me
#
barnaby thankfully I’m no longer hosting all my sites on a weird VPS with a virtualization method which prevented most debian updates due to not supporting the latest linux kernel version for some reason
#
barnaby I suppose that’s just what you get when you buy services from a company called “cheapvps”
#
sknebel Ah, openvz. That's slowly dying out, but not entirely yet
#
barnaby yeah that was it
#
barnaby this particularl provider didn’t seem to care about the problems or have any interest in offering an upgrade plan
#
sknebel There quite possibly wasn't one
#
sknebel OpenSSL update released. code execution in certificate verification - primarily client-side, check your webmention endpoints!
mro joined the channel
#
[schmarty] 😬
#
sknebel got downgraded to HIGH from critical because apparently reasonable chance security mitigations catch it
#
[schmarty] link to deets https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/
#
Loqi [OpenSSL Security Team] CVE-2022-3786 and CVE-2022-3602: X.509 Email Address Buffer Overflows
[campegg] and strugee joined the channel
#
[schmarty] updated ubuntu 22.x packages available for openssl3
#
[schmarty] (specifically: libssl-dev libssl3 openssl)
#
[snarfed] sknebel++ schmarty++
#
Loqi schmarty has 16 karma in this channel over the last year (34 in all channels)
#
Loqi sknebel has 12 karma in this channel over the last year (32 in all channels)
gxt and barnaby joined the channel
#
[snarfed] also interesting feature of IndieWeb, if it's client-side, that may mean it's less severe for the industry overall, but _more_ severe for us, since more of our projects make outbound HTTP requests
barnaby, strugee_, mro, mro_, sp1ff and [benatwork] joined the channel
#
AramZ-S[m] Could I use code from there?
#
AramZ-S[m] Does webmention pull all that data about a Tweet?
#
AramZ-S[m] Image, alt text, etc... ?
#
[snarfed] AramZ-S via Bridgy, yes
#
AramZ-S[m] [snarfed] would you mind linking the code? I'm not sure where in the project to find it as I'm not super familiar with the code base
#
IWDiscordGateway <capjamesg> https://verifiablecredentials.dev/
#
[snarfed] AramZ-S sure!...not sure exactly what you're asking though. you can use the Twitter API to do that now, or you could use https://granary.io/ to get it in eg mf2 format. otherwise, mind clarifying?
#
AramZ-S[m] It has been a while since last time I played in it but it def requires more than one API query to Twitter, right? I still have to dive into the Image part of it. I'm basically trying to figure out how to best get all the different data points and also get them into a coherent layout and design with a pretty large number. Also, I know you've got Mastodon working and I'm looking to eventually get to that service in my Node project as
#
AramZ-S[m] well.
#
AramZ-S[m] Granary is cool. I haven't seen this before btw!
#
IWDiscordGateway <capjamesg> granary++
#
Loqi granary has 1 karma in this channel over the last year (2 in all channels)
#
IWDiscordGateway <capjamesg> Ah! Loqi! You're working on Discord!
#
@wikipediachain ↩️ List of macOS built-in apps > HTML > NetSurf > Cascading Style Sheets > Line Mode Browser > XML > W3C recommendation > IndieAuth > Web browser > Internet Explorer 1 > Camino (web browser) > Zimbra > Unicode and email > Bidirectional text > Z-variant > Kharosthi > Braille ASCII (twitter.com/_/status/1587564839244861440)
#
[snarfed] AramZ-S great! and you can definitely get all of a tweet's info from a single Twitter API call, including image(s) and alt text. not sure what else you were thinking
#
AramZ-S[m] Perhaps I was thinking about Video, I think I remember embeded videos seem to require a seperate query.
#
AramZ-S[m] I also just didn't go after Alt Text so maybe I had the wrong API call or just wasn't paying attention.
boek, strugee, mro and sp1ff` joined the channel