#dev 2024-01-13

2024-01-13 UTC
jacky, angelo_, gRegorLove_, sebsel, eitilt, [0x3b0b], Khan and [tw2113] joined the channel
#
[tw2113]
getting myself some javascript practice by converting old GitHub Gists that are based on jQuery into vanilla JS
#
[tw2113]
kind of fun
#
[tw2113]
plus javascript know-how is a small blocker for a promotion at my dayjob, so anything I can do to improve in that area is a plus
jacky joined the channel
#
jacky
oh that's a good idea
#
[tw2113]
I have snippets like a random hex color generator, and js-based header anchor links. Plus my favorite one that I need to review...convert all images on a page to be "They Live" movie style like when they look at the world with the sunglasses
jacky joined the channel
#
[tw2113]
at the same time, I reduced about 500 random-ish github gists down to 32. A lot of old support saves
#
jacky
oh that movie name is _familiar_
#
jacky
_yes_ this was one I've been trying to get the name of for so long lol
#
jacky
and it's a Carptener production
#
[tw2113]
glad I could help 😄
#
[tw2113]
"I'm here to chew bubble gum and kick ass. And I'm all out of gum"
gRegor, lagomorph_, Nick4, Nicky1 and geskeca joined the channel
#
c​apjamesg
How do you check the integrity of a downloaded file?
#
c​apjamesg
I know you can hash the downloaded file and compare to a preset hash.
#
c​apjamesg
But how do you define that hash in the first place?
#
sknebel
not sure what you mean by "define that hash"
geskeca joined the channel
#
c​apjamesg
Say I have a Python script that downloads a file.
#
c​apjamesg
The script downloads the file.
#
c​apjamesg
I hash the file.
#
c​apjamesg
To what hash do I compare the hash from the file to know the file is the one I want?
#
sknebel
to a hash you know beforehand. or a hash you have discovered together with the link. or a hash the user has looked up out of band. depends on what you are doing and what you want to guard against
#
sknebel
or maybe you'd rather want a signature than just a hash
#
c​apjamesg
Signature?
#
c​apjamesg
I’m not doing anything right now. I was thinking that machine learning involves downloading a lot of weights. I wondered how companies like Hugging Face assure the integrity of those files in their down loaders.
#
c​apjamesg
Or what options were available.
#
sknebel
for that I'd assume that there is some kind of index where it looks up the actual url to download and that may also contain the hash
#
sknebel
or the use a fileformat that has some kind of in-built integrity check
#
sknebel
(or they think random errors are unlikely enough to not bother)
#
sknebel
e.g. if you look at software repositories, like the one Debian/Ubuntu use for apt, there the index files that list all the files and their hashes. and then the index files are signed with GPG so you can verify that the index file has been transmitted unmodified from the release maintainer, and can check the same for future updates (where the hash obviously wouldnt be known yet)
#
sknebel
despite package fetching etc for a long time entirely and nowadays still commonly happened over HTTP
#
sknebel
(although this system has had weaknesses over the years, these were more in the details than the overall design)
#
c​apjamesg
The index file is signed?
#
c​apjamesg
So the workflow is: developer makes release, release is added to an index file with the hash of the file, the index file is signed, I grab the index, checking its integrity using a public key, then I choose what file to download based on the version I want etc.
#
c​apjamesg
The file hash can be used to double check the downloaded file has not been tampered with?
#
sknebel
exactly
#
c​apjamesg
And I’d have the index’s public key on my machine? (Or the means by which to retrieve it?)
#
sknebel
sometimes when you see instructions on how to install software you'll see instructions along the lines of "add our repository to your system config, tell it to trust this key for signatures on it"
#
c​apjamesg
Ah, that’s why!
#
c​apjamesg
One more question.
#
c​apjamesg
Oh, no.
#
c​apjamesg
No more questions.
#
c​apjamesg
I get it!
#
sknebel
part of that is also that with linux distros both packages being distributed offline on disks and being hosted by many different people on mirror servers are common, so its explicitly not assuming anything about the security of the transport
#
sknebel
whereas others might say "users download everything over HTTPS, lets assume our hosting doesnt get hacked, some checks in the file format to detect flipped bits are enough"
#
sknebel
(although Windows and macOS also expect signatures on executables)
[jeremycherfas], jacky, geoffo, [Al_Abut], barnaby, cidney and [capjamesg] joined the channel
#
[Joe_Crawford]
[tantek] I'm spending a bit of time in the meeting this morning seeing if I can make it straightforward to tweak the look of individual letters on Bollocks. 🙂 https://codepen.io/artlung/pen/qBvaePM
#
[capjamesg]
[Joe_Crawford] I see this when subscribing to your homepage microformats feed in Monocle:
#
[Joe_Crawford]
Thank you! I must've broken my metadata. Blurgh. Thanks [capjamesg] ++
#
[Joe_Crawford]
capjamesg++
#
Loqi
capjamesg has 43 karma in this channel over the last year (133 in all channels)
#
[Al_Abut]
[capjamesg] I tried to sign up to Monocle last night and couldn’t figure out the dependencies (Aperture? Something dynamic on my own site?) which is where I bailed on trying social readers 😞
#
[capjamesg]
Sign up for Aperture first, then Monocl.e
#
[Al_Abut]
do you maybe have a link handy to a newbie-friendly guide to using social readers?
#
[capjamesg]
One second!
#
[capjamesg]
Let me see what I can find!
#
[capjamesg]
I haven't watched it, but looks like good context.
#
[Al_Abut]
ok, thanks, I’ll check it out
#
[capjamesg]
[Al_Abut] Are you signed up to Aperture?
#
[Al_Abut]
as for signing up for Aperture, it said I need to set up a Microsub server first?
#
[capjamesg]
Aperture is your server.
#
[capjamesg]
Monocle is the client.
#
[capjamesg]
Aperture is where the content from the feeds you subscribe to is collected. Monocle shows the results.
#
[capjamesg]
And if your site supports Micropub you can also post from Monocle!
#
[capjamesg]
If you go to https://aperture.p3k.io/dashboard, you should see a header you need to put in the `<head>` tag of your website.
#
[capjamesg]
Once you have put that head tag in, log in to Monocle.
#
[Al_Abut]
I can’t sign in to Aperture because it says “*missing authorization endpoint*Could not find your authorization endpoint” and when I go to setup instructions, I’m lost
[Jo] joined the channel
#
[Al_Abut]
these instructions make me think that a static site like mine might not work, or is beyond me technically: https://aperture.p3k.io/docs
#
[Al_Abut]
or that I should sign up to a hosted service like http://micro.blog that has it built in already…?
#
[capjamesg]
Your site will work.
#
[capjamesg]
There is one more step...
#
[capjamesg]
Can you follow the instructions on https://aperture.p3k.io/docs?
#
[capjamesg]
You need to add those tags into your <head> first.
#
[Al_Abut]
ohjhhhhh
#
[Al_Abut]
I mixed that up with the github link I added to sign into the http://indieweb.org
#
[capjamesg]
Here is the process:
#
[capjamesg]
1. You set up IndieAuth using http://indieauth.com so you can log in to Aperture and Monocle and other services.
#
[capjamesg]
2. You set up Aperture to poll feeds.
#
[capjamesg]
3. You set up Monocle to read your feeds 🎉
#
[Al_Abut]
one is microformats in the body of the page, the other is a more explicit link in the <meta>
#
[capjamesg]
Yeah. The head tags are basically giving information about where Monocle and Aperture can go to help you sign in.
#
[capjamesg]
The rel=me links say "hey, I want to use my email/GitHub to log in!"
#
[Al_Abut]
thank you so much, my eyes naturally skimmed down to api keys and client development, then my brain said nope
#
[capjamesg]
No worries!
#
[capjamesg]
I use Monocle and I love it!
#
[capjamesg]
I wouldn't read Garfield in anything else 😂
barnaby joined the channel
#
[Al_Abut]
I really want to try it! Using a read-only feed reader has been really fun but I feel like I’m at a party with masking tape over my mouth
#
[Al_Abut]
and I talk a lot
#
[Al_Abut]
hahaha
#
Loqi
haha
#
[capjamesg]
Loqi, that's not very nice 😄
#
[Al_Abut]
comedy heckled by a bot - my day is complete
#
[capjamesg]
For a Taylor Swift perspective, go to #indieweb-chat and start a message with `!ts` then your query.
[lifeofpablo], [campegg] and geoffo joined the channel
#
Zegnat
I think this may be another project that does micropub into git, for static sites: https://gitlab.com/jamietanna/www-api/tree/master/www-api-web/micropub
#
Loqi
[preview] [Jamie Tanna] Setting Up a Micropub Server for www.jvt.me
barnaby joined the channel
#
[tantek]
capjamesg, [Al_Abut] what instructions for setting up a social reader were you using when you got confused / stuck?
#
[tantek]
Rather than advising only in chat, we should fix the upstream problem in the docs and then test those out until they "work" (can be followed to success)
#
Zegnat
[capjamesg]: you can also have a look at https://edwardtufte.github.io/tufte-css/ which includes side notes in free to use css
#
Zegnat
I am pretty sure I saw something not too long ago about how you could make it so elements did not overlap. The problem tracy was mentioning. But I cannot recall top of mind right now
#
[Al_Abut]
[tantek] it was these setup instructions in Aperture: https://aperture.p3k.io/docs
#
[Joe_Crawford]
[tantek] my current changelist replicating _Never Mind The Bollocks_ is that I did a full reworking of handling the text for individual letters. Individual letters now have css vars that can be tweaked to your liking. In theory you can adjust those values as needed. I Implemented the background for the cut out as css conic-gradients rather than as a stretchy div with a clip-path. I also, because I wanted to see if resolution
#
[Joe_Crawford]
independence was on track added a 800x800 pixel version to the 500x500 versions. Same markup, adding a class. 2 zoom adjustments and a margin adjustments does a fair job.
#
[Al_Abut]
to recap from the other channel real quick, I thought two wrong thoughts 1) that I had indieauth setup already because of being able to sign in with my website into http://indieweb.org and 2) I naturally skipped down to the sections about API’s and developing clients, which don’t seem clearly demarcated as advanced or optional or whatever. does that make sense?
#
Zegnat
[capjamesg]: aaah, here it is, I just had to look through my feed reader for a minute. An experiment with the new CSS anchors (Chrome experiment) by Eric that makes sure sidenotes will not overlap https://meyerweb.com/eric/thoughts/2023/09/12/nuclear-anchored-sidenotes/
geoffo joined the channel
#
[aciccarello]
For micropub on a static site, I can recommend Indiekit. You tell it your folder structure and give it a function to convert microformats to a text file and it does everything else for you.
#
[aciccarello]
If you hook it to a MongoDB instance you get some more CMS style stuff in the UI, but I don't have that so I mostly use the micropub endpoint via other apps.
[schmarty] joined the channel
#
[schmarty]
anyone else using http://alltogether.io today? it's not working for me 😢
#
[schmarty]
websocket connection errors for my signed-in session.
#
[schmarty]
signed out and also can't sign back in. same `The connection to wss://together-server.tpxl.io/graphql was interrupted while the page was loading.` errors 😭
#
[aciccarello]
I'm getting a domain not claimed error
#
[aciccarello]
> Domain Not Claimed
#
[aciccarello]
> This domain has been mapped to Squarespace, but it has not yet been claimed by a website. If this is your domain, claim it in the Domains tab of your Website Manager.
#
[Al_Abut]
thanks [aciccarello]! I’ll ping you if/when I play around with it
#
[aciccarello]
Setting up a server was the blocker for me as most of my server experiments were on free hosting that shuts down during inactivity which isn't great for micropub. I've published my config repo online if you're interested. [Paul_Robert_Ll] has been super helpful and responsive on GitHub too.
#
[aciccarello]
What is Indiekit?
#
Loqi
Indiekit (GitHub repo) is “the little Node.js server with all the pieces needed to own your content and share it with the wider independent web” https://indieweb.org/Indiekit
#
[aciccarello]
I thought I linked to the config there but apparently not
#
Loqi
[preview] [aciccarello] ciccarello-indiekit: Indiekit server for my personal website.
#
[schmarty]
uh oh. all of [grantcodes] sites appear to be having trouble 😬
lagomorph_, geoffo and [lifeofpablo] joined the channel
#
Zegnat
Somewhat related to the HWC. Turn anything into a feed: https://rss.diffbot.com/
#
Zegnat
RSS << [https://rss.diffbot.com/ RSS Anything] - Transform any old website with a list of links into an RSS Feed.
#
Loqi
ok, I added "[https://rss.diffbot.com/ RSS Anything] - Transform any old website with a list of links into an RSS Feed." to the "See Also" section of /RSS https://indieweb.org/wiki/index.php?diff=92192&oldid=87516
lagomorph_ joined the channel
#
superkuh
I wrote a little perl script that does that locally. Takes a <ul> and makes an RSS feed.
#
superkuh
Since I was already generating recently post and recent change <ul> pages.
#
superkuh
Most of the heavy lifting is just XML::RSS::SimpleGen; http://superkuh.com/rssgen.pl.txt
to2ds joined the channel
#
to2ds
Zegnat - That RSS tool looks pretty cool.
to2ds joined the channel
#
to2ds
Is there a means to set different background colors for #indieweb-chat and #indieweb-dev?
[snarfed] joined the channel
#
[snarfed]
trying out https://getunblocked.com/ on my code, it's pretty slick
geoffo joined the channel
#
[snarfed]
definitely not perfect, but surprisingly ok
#
to2ds
Is it based on just commit messages?
#
[snarfed]
no, full repo contents (code, issues, PRs, etc), plus a number of other data sources like wikis, Slack, etc
#
to2ds
Wow. That is comprehensive.
[lifeofpablo], gRegor and GWG joined the channel