#dev 2023-07-01

2023-07-01 UTC
holiday_1, tei_1, alephalpha0, gRegor, kirbo_kirbstar, gerben, btrem, eitilt, IWSlackGateway, petermolnar, [KevinMarks], tei_, [schmarty] and [tantek] joined the channel; petermolnar left the channel
#
[tantek] Risks of administering an instance plus doing so from a machine at home: https://kolektiva.social/@admin/110637031574056150
#
Loqi [preview] [admin :heart_cyber:] 🚨 Kolektiva.social SECURITY ALERT 🚨 This is an alert for Kolektiva.social users. Please read this post in its entirety!In mid-May 2023, the home of one of Kolektiva.social's admins was raided, and all their electronics were seized by the FBI. T...
[snarfed] joined the channel
#
[snarfed] oof. to be fair though, that says the FBI raid was due to the admin's participation in a protest, unrelated to the fediverse instance
tei_ joined the channel
#
[snarfed] also it doesn't sound like the instance's server was in this admin's home. from the follow-up post: "the physical Kolektiva servers were not...affected by the FBI raid." the admin just had a local backup of the db that they were in the middle of troubleshooting.
tei_1, holiday_1 and btrem joined the channel
#
[KevinMarks] James - have a look at this paper https://static.googleusercontent.com/media/research.google.com/en//pubs/archive/46522.pdf
#
vikanezrimaya !tell jacky regarding the `microformats` crate: sorry if I'm being annoying, but are you still planning to work on <https://gitlab.com/maxburon/microformats-parser/-/issues/7>? additionally, the html5ever dependency requires updating because my rustc complains it's not gonna support some syntax in there soon, and there's 0.26.0 already, while microformats is using 0.22.5
#
Loqi Ok, I'll tell them that when I see them next
#
[KevinMarks] some unicode options 🔆☼☀︎☀
#
[KevinMarks] [dshanske] UK met office SVGs https://lightskyuk.github.io/icons.html
#
Soni can you make an ephemeral RSS feed?
#
[KevinMarks] you can make one and then delete it… what's the goal of the ephemerality?
#
Soni like IRC
#
Soni we want an ephemeral web
#
[KevinMarks] You can delete it after a certain time or after someone load it, I suppose. Getting clients to delete is trickier as most of them cache by default, as RSS was designed to have things scroll off the bottom (there is a 15 post limit on one of the specs)
#
[KevinMarks] You can set the TTL to get people to repoll you, but they may not delete old entries
#
[KevinMarks] https://validator.w3.org/feed/docs/rss2.html#ltttlgtSubelementOfLtchannelgt
#
Soni we're assuming feed readers don't support permanent redirects?
#
[KevinMarks] not for items necesserily
#
Soni for the feed itself
#
[KevinMarks] they should, yes
#
[KevinMarks] 15 item limit: https://www.rssboard.org/rss-0-9-1-netscape#:~:text=a%20maximum%20of%2015%20items%20per%20channel%20is%20enforced%20at%20this%20time.
#
Soni so we can send a permanent redirect and then kill the old one?
#
Soni kinda like a cookie?
#
[KevinMarks] maybe. They may still cache old entries
geoffo and [asuh] joined the channel
#
vladimyr Are you talking about feed with or without embedded article content?
tei_ joined the channel
#
[snarfed] if you mean feed entries eventually disappear, then sure
#
[snarfed] sorry, I'm behind. yup, new redirect works too. with the caveat that anyone may have fetched and stored it already, just like everything else on the web 🤷 but sure
Matt1 joined the channel
#
Matt1 How does an Micropub/sub server validate a client_id if the client app is running on a mobile phone instead of a webserver?
#
[snarfed] Micropub just uses IndieAuth for authn/z. client_id is an IndieAuth thing. is that what you meant?
Matt1 joined the channel
#
Matt1 @snarfed yeah
#
[snarfed] Matt1 ok! then that's probably the usual authorization request? https://indieauth.spec.indieweb.org/#authorization-request
#
[snarfed] if you're distributing your mobile app, then PKCE would be the main difference from the web server case
Matt1 joined the channel
#
Matt1 From the spec: "The authorization endpoint SHOULD fetch the client_id URL to retrieve application information and the client's registered redirect URLs". How does that work if the client is a mobile (or desktop) app that isn't addressable over the network?
#
Matt1 I'm not really familiar with OAuth in detail, I'm following along with the IndiAuth spec trying to build an IndieAuth provider
#
sknebel mobile or desktop app can still have a website about the app
#
Soni we just want something like "you only see stuff from when you joined", like IRC
#
[snarfed] Matt1 alternatively it's SHOULD, not MUST, so you can skip it if you really need to
#
[snarfed] Soni RSS probably isn't the tool you want then
#
Soni not with that attitude
#
Soni we want our web to have IRC semantics
#
[snarfed] yeah I understand the desire, but it doesn't. the web has (semi-)permanent semantics, not transient like IRC. you definitely can try to make the round peg fit the square hole, I'm just suggesting it's not a good fit
#
[snarfed] eg, here are two straw man designs to do this on top of RSS. 1) your server identifies and distinguishes each client separately, tracks them all and when they each joined, and serves them each a custom RSS feed based on that
#
[snarfed] 2) you only serve the single most recent entry in your RSS feed, for only a limited amount of time. clients must poll very frequently to see all entries
#
[snarfed] neither of those is a great design, or web-y
#
[snarfed] web and chat are different things. lots of chat apps may have web frontends, but the plumbing underneath them is generally pretty different
#
[snarfed] WebSub though, that could maybe get closer to what you want
geoffo and tei_ joined the channel
#
vladimyr Soni: it is not very serious effort but it's literally derived from word ephemeral and has ready to be implemented spec: https://github.com/makew0rld/fmrl
#
Loqi [preview] [makew0rld] fmrl: A protocol for status messages. See what your friends are up to!
#
[KevinMarks] If I make a post and manually POSSE it to Mastodon and bluesky, how do I tell bridgy that?
nertzy joined the channel
#
[tantek] for what purpose? backfeed? that's what u-syndication links are for on your posts — for auto-discovery of POSSE copies
#
Soni vladimyr: see, we want it to be compatible with the wrong tools
#
Soni feed readers should be able to just work with it
#
vladimyr In that case you are pretty much required to resort to rss hacks
[tw2113_Slack_] joined the channel
#
[tw2113_Slack_] RSS/Atom for life
#
[tw2113_Slack_] i say RSS as a collective of the tech behind it
#
capjamesg [KevinMarks] Here is my approach to the Taylor Swift app: https://github.com/capjamesg/taylor-swift/blob/main/web.py
#
capjamesg It then returns a result like this: https://gist.github.com/capjamesg/db5602c2fa4e1697b5fbcdd81a68f796
#
capjamesg The last score is the average of all the vectors.
#
capjamesg * the average of the cosine similarity of the user's input vs. 10 clips of Swift singing