#dev 2025-10-07

2025-10-07 UTC
#
[morganm] Well I'd be lying if this didn't shake me some today
#
[morganm] I think it was automatic spam , but it's possible they used truffle hog or something like that and found an expired key somewhere in a repository? That's what got me: in a portfolio project from 2016 it's entirely possible there was at some point a now expired credential. It's what makes it so frustrating
#
[morganm] And plus... A Google maps API key? Nothing to lose your hat about completely. I have no memory of ever paying for a service but at some point I used a dev free tier API key
#
[morganm] Anyways I need to touch grass and relax tonight
#
[morganm] + most likely explanation is that it's automatic spam and bot driven. Best not to engage any further and forget about it
troojg, gRegor, [snarfed], [jeremycherfas]2, [Zephyr]1, [aciccarello]2, thegreekgeek, Xe_, sknebel_, Lars-Christian, [0x3b0b]_, rrix, [snarfed]1, [schmarty]2, [Zephyr]2, [jeremycherfas], [John_Gorenfeld], [Zephyr], [schmarty], [schmarty]3, bugliker021, grufwub, vidak, CrimeWave, [Zephyr]3, [jeremycherfas]3, 020AAAWPD, [schmarty]4, [jeremycherfas]4, Saige_Leah[d], Salt, DanQ, qbrack_, [Al_Abut], [schmarty]5, GWG-, geoffo, oodani, hyperreal, Codebuzz, posixlycorrect and barnaby joined the channel
#
[jeremycherfas] I too had a spam surprise today, more than 4000 comments in an hour, all in Russian and sharing a few details in the body of the post. So .htaccess was no help. Fortunately, the site is behind a free Cloudflare account so I was able to say I’m under attack and then, with a little help from Perplexity, come up with some rules to block. Seems to have worked. I hope.
Guest6 joined the channel
#
jeremycherfas Ooops. Seems I need to keep the Under Attack option enabled, despite having set up blocking rules.
barnaby, DanQ, thegreekgeek, rozodru, ttybitnik and qbrack_ joined the channel
#
[morganm] Just a random upbeat note; I'm having a really positive time trying out Playwright for testing again
Salt and [manton] joined the channel
#
[manton] Anyone planning to post about FediForum? Curious how it’s going. Something came up with family and I can’t attend today, but hope to join tomorrow.
#
[tantek] Didn't see it in the list of events so 🤷 ?
#
[Al_Abut] [morganm] is that for browser automation? That’s on my backlog of stuff to try for a few projects, first a fun one as a warmup for another that’s commercial. I’ve never done anything like that before and also heard good things about Puppeteer too.
ttybitnik and gRegor joined the channel
#
[morganm] https://github.com/airbr/wsg-playwright if you wanted to take a look [Al_Abut]
[Murray], [Murray]1, [jeremycherfas]1, geoffo, grufwub, [nukecaprica_pe], Lars-Christian, sp1ff`, [snarfed] and sarna joined the channel
#
[snarfed] [aaronpk] do you know of a tutorial anywhere for delegating your site's IndieAuth provider to http://indielogin.com? I assume that's possible, but haven't found good instructions...?
barnaby joined the channel
#
aaronpk that is not possible
#
aaronpk that's the other half of the indieauth.com service that i still haven't built a replacement for
#
[snarfed] aha ok
[aciccarello] joined the channel
#
aaronpk I was secretly hoping someone else would end up making and running that, but maybe i should give up hope and finally just do it
#
[snarfed] the agony and ecstasy (mostly agony) of open source 🤷
#
aaronpk i need a good name
#
[tantek] Maybe a service diagram would help that shows boxes for these different pieces? Like how would you describe to an RP what they would use this new service for vs IndieLogin?
#
[tantek] And how would you describe to a user who is seeing these domains in their browser and/or setting them up to delegate your site's identity as an IdP?
#
aaronpk one thought was to go with myindieauth.com like myopenid.com
#
[snarfed] [aaronpk] also the process for registering client ids is GitHub issue?
rozodru, Salt, saptaks, posixlycorrect, hyperreal2, _fluffy, Kaja, CrimeWave and [lazcorp] joined the channel
#
[lazcorp] I think I've managed to set up ActivityPub on my blog so it can be followed at @artists-notebook@www.lazaruscorporation.co.uk (finally, after about a year)
#
[snarfed] looks good!
#
[lazcorp] Is that POSSE or POSIE (Publish (on your) Own Site, Implement Endpoint)? 😉
#
[snarfed] lol
#
[snarfed] not POSSE
#
[lazcorp] Agreed- it's syndication in the same way that RSS is syndication (the ActivityPub implementation is part of my website) as opposed to sending off the content into a silo somewhere
#
[lazcorp] So not really POSSE - hence POSIE
#
aaronpk [snarfed]: heh sort of yes, tho I really need to make that process better and also have some sort of usage policy for the site
#
[tantek] huh myopenid is not loading for me
#
aaronpk they shut it down over 10 years ago but have kept the domain registered
#
[tantek] what is myopenid
#
Loqi myOpenID was an OpenID service that shutdown 2014-02-01 https://indieweb.org/myOpenID
#
[snarfed] [aaronpk] thanks! lmk if you need anything from me for the https://fed.brid.gy/ client id
troojg joined the channel