#dev 2026-06-23

2026-06-23 UTC
cotsuka, grufwub, m25n, [fluffy], ax562, [snarfed]1, IWSlackGateway2, ZodiacalComet, WinnerWind, pfych and saccharin joined the channel
#
chr0m4
I just created repos for every jekyll plugin I've created for my site: https://i.postimg.cc/vmKB2QvB/image.png I will share as soon as I copy the code there, maybe someone finds them useful
jjuran, deathcomestotime, WinnerWind, mossymaker, cotsuka, ZodiacalComet, d1s1nf3c1, CRISPR and manu|2 joined the channel
#
manu|2
Hello !
cotsuka joined the channel
#
manu7
I'm a Ruby dev discovering IndieWeb, so for now I'll mostly read discussions and see if I can integrate the philosophy in my projects and everyday life.
#
[Murray]
Hi manu7 and welcome! Do you have your own website yet, or still in the planning phase?
#
manu7
I have a website but don't write that much; I understand that blogging is well supported so I'm more interested in other kinds of "things": sharing code, custom data formats to create servers that can operate in a decentralized way, all that with privacy and security in mind.
ax562 joined the channel
#
manu7
I already wrote some code for ActivityPub (and I don't really like it...)
#
manu7
I think I can summarize my state of mind as "I want to be able to provide services for me (and friends) without closing the door to the rest of the world, but without being overwhelmed by it"
#
[Murray]
sounds like a really healthy approach to be honest 🙂
cotsuka joined the channel
#
manu7
Thanks, the hard thing is to have something "easy to adopt" and "easy to use" : I'm okay to generate cryptographic keys locally to create identities (thinking about Grasp for decentralized Git), I'm 100% confident that most of my friends are not...
#
WinnerWind
manu7: you can use a tool to generate crypto keys for them on the server but that will tank the security of the setup a bunch. alternatively you can get them to buy a security token that can generate keys in-situ which is what ive seen many offices do
#
WinnerWind
the place im interning at has a policy to either bring your own yubikey or use a company provided one for logging in
#
WinnerWind
and that ssh keys used for work never ever hit a disk other than the key itself. pricey but its a solution nonetheless
#
chr0m4
manu7: con ese nombre... eres espanol?
#
manu7
chr0m4: no, I'm French (it's also a common name here, but certainly less common as in Spain or Portugal)
#
chr0m4
Oh, I didn't know, good to know, welcome btw!
#
manu7
WinnerWind: That's interesting, I never thought to provide physical keys to my friends...
#
manu7
chr0m4: Thank you!
#
WinnerWind
manu7: physical keys are so much more secure than digital counterparts provided your friends have basic digital hygeine (i.e. don't fall for phishing etc.)
#
chr0m4
I'm gonna do it, I'm gonna move my mastodon instance from masto.host to my own VPS + object storage bucket
#
chr0m4
wish me luck, if I don't come back I had a stroke and I love you all
#
WinnerWind
i hate to bring up company branding but Yubikey says that physical tokens in general reduce phishing (though I'm not sure how)
#
chr0m4
+1 to Yubikey
#
manu7
chr0m4: Good luck !
barnaby and cotsuka joined the channel
#
manu7
I have to go, see you later!
cotsuka and rrix joined the channel
#
chr0m4
ah yes, victory.
#
chr0m4
codeberg is having SERIOUS outages these days
#
girlonthemoon
hugops to codeberg sysadmins
#
girlonthemoon
the influxes from github outages must be rough
#
chr0m4
Last thing i read was that clawbot tokenmaxxer AI bros have their bullshit machines all the time trying to scrap code from everywhere and that's exhausting the servers of both Github, Codeberg and the like
#
ZodiacalComet
just like with github, I didn't even notice codeberg being down
#
WinnerWind
chr0m4: not trying to demean you but i have been told in the past to keep the cursing a little on the low side (this channel and all indie web channels try to be family friendly)
#
WinnerWind
anyway yes scrapers are the #1 reason my site goes down. you weren't there at the time but Claude took down my website, TWICE
#
WinnerWind
here's my entry on what happened + mitigations
#
chr0m4
sorry, I'm spanish, I will try to moderate my language xD
#
chr0m4
we use swear words like a comma
#
WinnerWind
i understand! i personally like swearing a lot myself as well :) just maybe not here, though im not sure if the regulars have anything to say/don't mind it. better to be safe i guess
#
WinnerWind
anyway, scrapers are very exhausting as i mentioned. so many mitigations, not enough life to deal with all of 'em
#
ZodiacalComet
"It's all in the name of ~clout~ helping Open Source!"
#
WinnerWind
i almost lost the will to keep fighting them and shutting down my site for good because my tiny bookshelf pocket server couldn't take all of them at once
#
WinnerWind
slightly unrelated note: I've been replacing some of the well defined APIs for a more "follow your nose" approach in my SSG. before my SSG's markdown plugin would literally check if the file extension was .md or .txt. now it doesn't do any of that, and instead just checks if the data input is a String, and if so, run it through the markdown parser. I'm doing this for almost every plugin of mine, as its way more maintainable
#
[capjamesg]
WinnerWind++ for setting expectations for the chat!
#
Loqi
WinnerWind has 3 karma in this channel over the last year (11 in all channels)
cotsuka, CRISPR, d1s1nf3ct, [aciccarello] and manu7 joined the channel
#
chr0m4
https://meshtastic.org/ this is so cool
#
chr0m4
have a look
#
aaronpk
it's cool, i've been playing with it, but i haven't figured out how i want to tie it to my website yet
cotsuka, ax562 and spinningarrow joined the channel
#
ZodiacalComet
webmention.rocks says that the list below each test are of posts that *did not* include the post URL with `in-reply-to`, but with xray and in the monocle preview it looks like it parsed it alright for the test that I just did: https://webmention.rocks/test/1
#
Loqi
[preview] [Webmention Rocks!] Discovery Test #1
[manton] and CRISPR joined the channel
#
[tantek]
Well this is a pretty damning indicator of the bot abuse, the crawl to refer ratio:
#
[tantek]
LLM traffic << Cloudflare crawl-to-refer ratio indicats how abusive bots are when crawling web sites vs how much (presumably human) traffic those same domains send: https://radar.cloudflare.com/ai-insights#crawl-to-refer-ratio
#
Loqi
ok, I added "Cloudflare crawl-to-refer ratio indicats how abusive bots are when crawling web sites vs how much (presumably human) traffic those same domains send: https://radar.cloudflare.com/ai-insights#crawl-to-refer-ratio" to the "See Also" section of /large_language_model_traffic https://indieweb.org/wiki/index.php?diff=111682&oldid=111597
ax5623 and cotsuka joined the channel
[pcarrier] joined the channel
#
lecaseus
Hello, is anyone familiar with path traversal protection in C++?
#
[pcarrier]
something like https://gist.github.com/pcarrier/88c74df866ac782fe88cb6b6bd54eb2e to check whether a path is in, eg, cwd? tl;dr: normalize and traverse until you find a mismatch
#
lecaseus
thank you
#
lecaseus
I came up with something simpler to check whether the slug only contains letters, numbers, and a '-'. Then any other character gets rejected