#dev 2026-10-17
2026-10-17 UTC
cotsuka, ghorsey_mobile, Salt, grufwub, Xlongdivision, hisacro, ghorsey_mobile_, k3can8, kal_jan, GWG, dustinm`, oxtyped, ben, pauls, Pixi, [manton] and daemonspudguy joined the channel
# 
rnkn rewrote my documentation! https://blip.town/faq/
# rnkn now, urgh, webdav. what a trainwreck.
JoshuaMorris, cotsuka, Elleo, ghorsey_mobile and Guest1725 joined the channel
# 
WinnerWind rnkn: webdav is so painful im surprised people still talk about it
barnaby and no1 joined the channel
# rnkn WinnerWind: I was like "I'll just make a simple way for users to mount their site files locally without needing a SSH key..."
# WinnerWind rnkn: why not FTP?
# rnkn WinnerWind: do you mean SFTP or regular ol port 21 FTP?
# WinnerWind Samba could work too but samba is a mess to work with and also horribly insecure, and mostly windows only, but FTP is a lot better nowadays
# WinnerWind SFTP
# rnkn SFTP requires a SSH key
# WinnerWind really? TIL
# WinnerWind let me check what i'm using, because i swear i dont use an ssh key with mine
# rnkn well I guess you can use system user password, but that would have to be enabled in sshd_config
# WinnerWind ah, FTP with anonymous login disabled with the server being copyparty
# WinnerWind i also use port 3921 and not 21
# rnkn that sounds like FTP not SFTP, FTP is anonymous or user/pass, but all unencrypted
# rnkn but it's good for downloading stuff if you can match it against a checksum
# rnkn how much web space is reasonable for a portfolio website these days? 1GB? 2GB?
# WinnerWind rnkn: if you had to ask me, 1GB is enough for a small web-only site but 2GB is nice for multimedia folks
# WinnerWind i offer my homeserver to close friends running their sites and most people's personal websites barely stay above 500MiB but i've seen some of the more artsy folk easily use up 2GiB
# WinnerWind asking them to compress images/video tends to be helpful
Pixi, cotsuka, vriska, ax562 and TwinAdam_ joined the channel
# 
[capjamesg] [aaronpk] I just read your rebuilding IndieWeb projects post. One question I was left with is how you have thought about the security of the code that is written. You mention that you “still read and understand what gets shipped” but I wonder if it’s more likely things slip through the cracks if you didn’t author the code?
# [capjamesg] (Just to be clear, I’m asking this from the perspective of curiosity, interest, and because I am not familiar with the security profile of AI-generated code, not because I’m trying to imply anything.)
# [capjamesg] *profiles
# 
aaronpk actually quite the opposite. Claude has gotten really good lately, and has found a number of pretty bag bugs in the old versions, and has proactively made security fixes on the new things that I wouldn't have thought of myself. I will fully admit I am not 100% up to speed on the latest in frontend/js/csp security things for example.
# [capjamesg] Interesting! Thanks for sharing!
# aaronpk and not just front-end, it's also way better at writing the SSRF code than I would have been, because that's a pretty well established thing now. here's an example of something I always knew I should be more strict about, and it knocked it out quick https://github.com/aaronpk/p3k-http#safe-mode
# 
Loqi [preview] [aaronpk] p3k-http: A simple HTTP client, used by https://p3k.io projects
cotsuka, ghorsey_mobile, Xe, [pcarrier_com], owls, barnaby, Xe_, thatoddshade, ghorsey_mobile_, rrix, Guest135, WinnerWind, ax562, pauls8 and CrimeWave joined the channel