#dev 2025-09-10

2025-09-10 UTC
grufwub, sebbu, CrimeWave and cotsuka joined the channel
#
gRegor [tantek], this actually helped me find some code I had tested but only as a signed-in admin. I forgot to launch it even though it worked! Once this is fixed, the old slug will redirect correctly.
#
[tantek] nice!
#
gRegor and unfortunately it's probably been broken for a while now, so thanks for reporting!
#
[tantek] 🙏
#
[tantek] that's how I felt about my ISBN / ASIN redirects (which had been broken since I flipped on the PHP 8.x switch)
#
gRegor 🤞 https://gregorlove.com/2025/09/i-was-reminded-of/
#
Loqi [preview] [gRegor Morrill] Lessons for custom WordPress plugins and themes
#
gRegor heyyy, nice
#
gRegor thx Loqi
#
Loqi you're welcome
#
gRegor gives Loqi the 303 redirect
#
Loqi eats the 303 redirect
#
gRegor This makes me also realize I think I want to drop trailing slash on my slugs. Think that was a choice from almost a decade ago and I don't remember why
#
gRegor Like I specifically chose to redirect no trailing slash to trailing slash: https://gregorlove.com/2025/09/lessons-custom-wordpress-plugins
#
gRegor Seems it should be the other way
sarna joined the channel
#
[tantek] yeah people do both
#
[tantek] I prefer no trailing slash for content
#
[tantek] I think it makes cleaner looking URLs. matter of aesthetic preference perhaps
#
gRegor agreed
#
gRegor And this led to fixing my coffee page redirect too: https://gregorlove.com/starbucks/
#
a2adam capjamesg[d]: It looks like I'd have to upgrade my subscription to do so, but that currently isn't within my budget. Thank you for the heads up though. I'll try to revisit this when I can.
#
a2adam I am wondering if it would be easier for a neocities blog instead but I don't have enough time to re-code a site from scratch.
#
[tantek] they make you pay more to edit your post templates?
bitauger, ramsey and cweiske joined the channel
#
cweiske @aaronpk, I have a massive attack on my websub server since about a week. I get topic update pings for 3500 URLs per minute from 1500 different IP addresses. I switched my hub to a whitelist approach, disabling usage of it for other sites than my own.
#
Loqi cweiske: vikanezrimaya left you a message on 2024-08-23 at 8:13pm UTC: https://github.com/cweiske/anoweco may need an update, section 5.2.1 of IndieAuth, one needs to append `iss=` to the authorization response
#
cweiske example url that also lists switchboard: romareis dot nl/atom320756.xml
#
cweiske all the URLs (when opened with a browser and not curl) redirect to "bt-fr-cl dot com" and some subpath - this seems to be a tracking tool
#
cweiske it's geographically split onto dozens of countries. top 5:
#
cweiske 59 IR, Iran, Islamic Republic of
#
cweiske 64 RO, Romania
#
cweiske 311 GB, United Kingdom
#
cweiske 123 UA, Ukraine
#
cweiske 1000 US, United States
DusteD joined the channel
#
capjamesg a2adam[d]: I didn't realise Ghost made you pay to update the template 😭
joshproehl, cotsuka and sebbu joined the channel
#
aaronpk whoa thanks for the heads up
#
[tantek] cweiske++ +1 thanks for the heads up
#
Loqi cweiske has 1 karma over the last year
ttybitnik joined the channel
#
trwnh re: https://indieweb.org/text/mf2%2Bhtml (saw it edited in indieweb-meta) i was wondering if an alternative would be a profile instead of a new media type -- are there thoughts about this simply uncaptured?
oodani joined the channel
#
a2adam capjamesg[d]: Yeah, it's better than wordpress at a base level but having to double my price to get to that is kind of annoying to say the least. Thank you though!
#
capjamesg reacted with 🙌 to <a2adam[d]> Yeah, it's better than wordpress at a …
CRISPR joined the channel
#
aaronpk wow I see a swarm of websub pings that match that pattern too
#
aaronpk it's a bunch of random domains but the filename is always atom0000000.xml (random numbers)
#
aaronpk i didn't notice it before because if a URL has no subscribers basically nothing happens on the server
#
aaronpk my hub is tracking 10 million feed URLs now tho 😂
#
aaronpk well i don't want to fill up my database anymoer so i am also locking this down
#
capjamesg Oh wow
#
capjamesg Is this just a random bot trying to connect to WebSub servers?
#
aaronpk It's actually sending publish commands with URLs that have real (junk) data
#
[schmarty] why would someone flood a websub server with pings?
#
[schmarty] hoping for a misconfigured websub server that... ??? republishes spam on the web? emails the content to people? such a waste.
#
doesnm ddos attack?
#
aaronpk looking at the content, it appears to be some sort of spam vector, like i guess they are hoping links will get published out somewhere
[snarfed] joined the channel
#
[snarfed] yeah real DDoSes are rarely at the HTTP or other application level
barnaby, thegreekgeek_, GuestZero, gRegor, [asuh], [manton] and NaomiAmethyst joined the channel
#
gRegor what is HSTS
#
Loqi HSTS is an acronym for HTTP Strict Transport Security, an HTTP header that indicates to browsers how long the website should only be accessible over HTTPS for https://indieweb.org/HSTS
rozodru joined the channel
#
[tantek] ^ that page needs some gardening / indieweb relevance or redirecting to Wikipedia
#
Loqi Ok, I'll tell them that when I see them next
#
[tantek] !tell aaronpk did (could) you publish the source of https://pin13.net/city-color.php ?
#
Loqi aaronpk: [tantek] left you a message 2 minutes ago: did (could) you publish the source of https://pin13.net/city-color.php ?
#
aaronpk `substr(md5($_REQUEST['city']), 0, 6)`
#
[tantek] lol ok
#
Loqi !march
#
Loqi Countdown set by [tantek] on 2023-06-09 at 12:35pm PDT
#
Kaja It's March 2020, 2020 (UTC)
#
carrvo I have an apache issue where I have my own package with this change: https://github.com/phokz/mod-auth-external/pull/67 and it gives `denied` instead of `denied (no user)`. I think it may be a config issue since it works on dev not prod. Any ideas? Or should I spend time trying to extract a more precise config example?
pyropenguin joined the channel
#
gRegor woo onelineprograms++
#
Loqi onelineprograms has 1 karma over the last year
[Al_Abut] joined the channel
#
Loqi sparklines has 1 karma in this channel over the last year (2 in all channels)
#
[tantek] onelinediagrams++ sparklines++
#
Loqi onelinediagrams has 1 karma over the last year
#
[tantek] no MD5 built into JS so not porting that code to CASSIS unfortunately
#
[tantek] in other news (so to speak 😉), I reloaded https://news.indieweb.org/en and gRegor is still at the top! twice 😂
#
gRegor hashtag winning
#
gRegor oh wait, it's not a leaderboard :D
#
[tantek] you know if you changed the slug again you could take the entire 1,2,3 podium 😉
#
[artlung] I've liked it via Mastodon and my likes. I'm sure there are other ways for me to like it.
#
gRegor I accept snail mail likes
#
gRegor You know where I live :)
#
gRegor I do like seeing those come in: oh, Joe liked this on Mastodon, on there's the one from his website's likes page, etc.
failxontour, CrimeWave and [aciccarello] joined the channel
#
failxontour Hey bit of a silly noob can someone lend me a hand and help me in validating the issue with my git repository not pushing changes to my website via ssh? It does update the .git/refs and says it's according to the latest commits in codium but when I check for the changed files on my website they're still the old version.
#
failxontour I've set the upstream git repo to be my github repo and did have a bit of issues mangling arround with lfs which I had to set a git config flag to surpress if from pushing anything.
#
failxontour https://bin.disroot.org/?fbcd2f00f483db42#tVccJ8DtnkQymYRDiTP8GQqmvRRGev1BQHieP9DBVRs
#
failxontour My git config on my shared hosting
#
failxontour Had to add the last line to be able to push my changes to my git repo
#
failxontour I have set permission i think correctly for .git dir to be 0755
#
failxontour With HEAD, config and other files being set to only 0644
#
failxontour Basically maybe to get my logic more straight push from working dir (local copy) to remote destination (shared hosting) git repo.
#
failxontour And or make it so I can just type pull on the remote repo and it pulls (clones) the changes from the remote github repo.
#
failxontour For e.g. on my github repo I have updated this site to display a different message but on my current live version site it still displays the old version https://failxontour.de/maintaenance.html
#
failxontour https://github.com/failxontour/failxontour.de/blob/public/maintaenance.html
#
failxontour This is like my 2nd time I actually deployed a git repository in a productive enviorement so please bare with me