#dev 2026-06-23
2026-06-23 UTC
cotsuka, grufwub, m25n, [fluffy], ax562, [snarfed]1, IWSlackGateway2, ZodiacalComet, WinnerWind, pfych and saccharin joined the channel
#
chr0m4 I just created repos for every jekyll plugin I've created for my site: https://i.postimg.cc/vmKB2QvB/image.png I will share as soon as I copy the code there, maybe someone finds them useful
jjuran, deathcomestotime, WinnerWind, mossymaker, cotsuka, ZodiacalComet, d1s1nf3c1, CRISPR and manu|2 joined the channel
#
manu|2 Hello !
cotsuka joined the channel
#
manu7 I'm a Ruby dev discovering IndieWeb, so for now I'll mostly read discussions and see if I can integrate the philosophy in my projects and everyday life.
#
manu7 I have a website but don't write that much; I understand that blogging is well supported so I'm more interested in other kinds of "things": sharing code, custom data formats to create servers that can operate in a decentralized way, all that with privacy and security in mind.
ax562 joined the channel
#
manu7 I already wrote some code for ActivityPub (and I don't really like it...)
#
manu7 I think I can summarize my state of mind as "I want to be able to provide services for me (and friends) without closing the door to the rest of the world, but without being overwhelmed by it"
cotsuka joined the channel
#
manu7 Thanks, the hard thing is to have something "easy to adopt" and "easy to use" : I'm okay to generate cryptographic keys locally to create identities (thinking about Grasp for decentralized Git), I'm 100% confident that most of my friends are not...
#
WinnerWind manu7: you can use a tool to generate crypto keys for them on the server but that will tank the security of the setup a bunch. alternatively you can get them to buy a security token that can generate keys in-situ which is what ive seen many offices do
#
WinnerWind the place im interning at has a policy to either bring your own yubikey or use a company provided one for logging in
#
WinnerWind and that ssh keys used for work never ever hit a disk other than the key itself. pricey but its a solution nonetheless
#
chr0m4 manu7: con ese nombre... eres espanol?
#
manu7 chr0m4: no, I'm French (it's also a common name here, but certainly less common as in Spain or Portugal)
#
chr0m4 Oh, I didn't know, good to know, welcome btw!
#
manu7 WinnerWind: That's interesting, I never thought to provide physical keys to my friends...
#
manu7 chr0m4: Thank you!
#
WinnerWind manu7: physical keys are so much more secure than digital counterparts provided your friends have basic digital hygeine (i.e. don't fall for phishing etc.)
#
chr0m4 I'm gonna do it, I'm gonna move my mastodon instance from masto.host to my own VPS + object storage bucket
#
chr0m4 wish me luck, if I don't come back I had a stroke and I love you all
#
WinnerWind i hate to bring up company branding but Yubikey says that physical tokens in general reduce phishing (though I'm not sure how)
#
WinnerWind gl!
#
chr0m4 +1 to Yubikey
#
manu7 chr0m4: Good luck !
barnaby and cotsuka joined the channel
#
manu7 I have to go, see you later!
cotsuka and rrix joined the channel
#
chr0m4 ah yes, victory.
#
chr0m4 codeberg is having SERIOUS outages these days
#
girlonthemoon hugops to codeberg sysadmins
#
girlonthemoon the influxes from github outages must be rough
#
chr0m4 Last thing i read was that clawbot tokenmaxxer AI bros have their bullshit machines all the time trying to scrap code from everywhere and that's exhausting the servers of both Github, Codeberg and the like
#
ZodiacalComet just like with github, I didn't even notice codeberg being down
#
WinnerWind chr0m4: not trying to demean you but i have been told in the past to keep the cursing a little on the low side (this channel and all indie web channels try to be family friendly)
#
WinnerWind anyway yes scrapers are the #1 reason my site goes down. you weren't there at the time but Claude took down my website, TWICE
#
WinnerWind here's my entry on what happened + mitigations
#
chr0m4 sorry, I'm spanish, I will try to moderate my language xD
#
chr0m4 we use swear words like a comma
#
WinnerWind i understand! i personally like swearing a lot myself as well :) just maybe not here, though im not sure if the regulars have anything to say/don't mind it. better to be safe i guess
#
WinnerWind anyway, scrapers are very exhausting as i mentioned. so many mitigations, not enough life to deal with all of 'em
#
ZodiacalComet "It's all in the name of ~clout~ helping Open Source!"
#
WinnerWind i almost lost the will to keep fighting them and shutting down my site for good because my tiny bookshelf pocket server couldn't take all of them at once
#
WinnerWind slightly unrelated note: I've been replacing some of the well defined APIs for a more "follow your nose" approach in my SSG. before my SSG's markdown plugin would literally check if the file extension was .md or .txt. now it doesn't do any of that, and instead just checks if the data input is a String, and if so, run it through the markdown parser. I'm doing this for almost every plugin of mine, as its way more maintainable
#
[capjamesg] WinnerWind++ for setting expectations for the chat!
#
WinnerWind :)
cotsuka, CRISPR, d1s1nf3ct, [aciccarello] and manu7 joined the channel
#
chr0m4 https://meshtastic.org/ this is so cool
#
chr0m4 have a look
cotsuka, ax562 and spinningarrow joined the channel
#
ZodiacalComet webmention.rocks says that the list below each test are of posts that *did not* include the post URL with `in-reply-to`, but with xray and in the monocle preview it looks like it parsed it alright for the test that I just did: https://webmention.rocks/test/1
[manton] and CRISPR joined the channel
#
[tantek] LLM traffic << Cloudflare crawl-to-refer ratio indicats how abusive bots are when crawling web sites vs how much (presumably human) traffic those same domains send: https://radar.cloudflare.com/ai-insights#crawl-to-refer-ratio
#
Loqi ok, I added "Cloudflare crawl-to-refer ratio indicats how abusive bots are when crawling web sites vs how much (presumably human) traffic those same domains send: https://radar.cloudflare.com/ai-insights#crawl-to-refer-ratio" to the "See Also" section of /large_language_model_traffic https://indieweb.org/wiki/index.php?diff=111682&oldid=111597
ax5623 and cotsuka joined the channel
[pcarrier] joined the channel
#
lecaseus Hello, is anyone familiar with path traversal protection in C++?
#
[pcarrier] something like https://gist.github.com/pcarrier/88c74df866ac782fe88cb6b6bd54eb2e to check whether a path is in, eg, cwd? tl;dr: normalize and traverse until you find a mismatch
#
lecaseus thank you
#
lecaseus I came up with something simpler to check whether the slug only contains letters, numbers, and a '-'. Then any other character gets rejected
