#social 2018-09-25

2018-09-25 UTC
jdormit_mobile joined the channel
#
dansup
pixelfed federation is almost ready :D
#
dansup
and it will bring ephemeral stories to the fediverse! https://mastodon.social/@pixelfed/100575877914080686
#
Loqi
[pixelfed] Hello Stories. :pixelfed: Everyone has a story to tell. Whats yours?#pixelfed #comingsoon [video]
#
aaronpk
That's brave to launch a feature like that and not assume it will be abused!
#
aaronpk
There's nothing stopping someone from modifying mastodon to just ignore delete activities for example
#
dansup
aaronpk: stories are basically DM's sent to all your followers that expire in 24h
#
dansup
true
#
dansup
there is nothing stopping anyone from copying anything. Most people know that
#
aaronpk
There is also no absolute security, but there are varying degrees of how easy something is to hack or abuse
#
dansup
The same principal applies to deleting a status
#
dansup
it could have the same visibility, like a DM
#
aaronpk
Yes but the expectation is different
#
dansup
you can screenshot a snapchat, people know that. You can't prevent it
#
dansup
if you are worried about your privacy, you probably wouldnt use this feature anyways
#
aaronpk
I'm just saying, the press has no mercy. If the articles about Gargron that have been coming out are any indication I would be very hesitant to do this.
#
aaronpk
But it is a cool feature and if everyone behaves then that's great
#
rialtate[m]
aaronpk: what articles about gargron?
#
dansup
aaronpk: I'm not worried, instagram is a lot different than twitter :)
#
dansup
its also a lot more popular :D
#
dansup
I'm working with anfora to develop a standard for ephemeral stories. https://mastodon.social/@pixelfed/100784534276161528
#
Loqi
[pixelfed] We are working with @anfora to bring federated ephemeral stories to the fediverse!#soon #together
xmpp-social, vasilakisfil, Guest84, pmbauer_, melody_, jdormit_mobile and rhiaro joined the channel
#
jdormit_mobile
Articles about Gargrom I'm assuming are referring to the Wil Wheaton fiasco?
#
jdormit_mobile
s/Gargrom/gargron
#
aaronpk
Yeah it was all tied up in that
#
rialtate[m]
Links?
#
heluecht[m]
Are there any test tools for checking LD signatures? A few times a day I'm getting invalid LD signatures. And I really want to know if the problem is on my or the remote side.
#
heluecht[m]
Alternatively it would be good to have some JSON-LD normalizer that is not digitalbazaar/json-ld.
#
saranix
heluecht[m]: https://json-ld.org/playground/ - probably uses that lib though
#
heluecht[m]
saranix: The normalised data from that page differs in some points from the one that I created with my used library. It would be good to know if that page uses some PHP library.
#
heluecht[m]
That library on that page does this "_:c14n?" thing in the different order.
#
heluecht[m]
If that page does it in the way that it is meant to be, then I'm really in need of a better lib.
#
saranix
heluecht[m]: afaik both were written by the same person... says a lot about how difficult it is to follow that spec :-)
#
heluecht[m]
I really don't want to write my own normalizer ...
#
nightpool[m]
> <@heluecht:feneas.org> I really don't want to write my own normalizer ...
#
nightpool[m]
can you give me an example of the normalization difference heluecht?
#
nightpool[m]
ughhh weird unclear riot quoting lol
#
heluecht[m]
Yeah, take this one:
#
heluecht[m]
Just compare the last lines with these ones:
#
heluecht[m]
sent a long message: heluecht[m]_2018-09-25_16:46:46.txt <https://matrix.cybre.space/_matrix/media/v1/download/cybre.space/JjpfcAXyaernMTlaoIsQTCsf>
#
heluecht[m]
You see that the ":c14n1" and ":c14n0" are reversed.
#
heluecht[m]
On my system the "source" element gets the ":c14n0", the "tag" element gets the ":c14n1".
#
heluecht[m]
And the official (?) normalizer at that page does it in the opposite way.
#
heluecht[m]
This line is the source of the problem: https://github.com/digitalbazaar/php-json-ld/blob/master/jsonld.php#L2821
#
heluecht[m]
I just changed it from a "sort" to a "rsort" and some message that previously wasn't valid, was checked valid.
#
heluecht[m]
Meh ...
#
saranix
it makes more sense that the attributes would be in alphabetical order. It probably says as much in the spec, but good luck finding it :-) I would guess the playground one is wrong. I don't think it's maintained as frequently as the lib either...
#
heluecht[m]
The lib that I'm using had been changed several years ago ...
#
heluecht[m]
Oh, and another test had failed. So there seems to be other problems as well.
#
saranix
yeah reversing it was probably just coincidence. it's probably random order on the playground one
#
heluecht[m]
I can reproduce the problem by sending me a message with a mention and a tag.
#
heluecht[m]
So Mastodon is using some library that does this differently than my library.
jdormit_mobile and DenSchub_ joined the channel
#
puckipedia
ok maybe normalization isn't quite as difficult as i thought
#
heluecht[m]
Why do you think so?
#
puckipedia
the spec is kinda difficult to read compared to other stuff
#
heluecht[m]
So why do you think it isn't that difficult?
#
puckipedia
i've got most of this code manually written already. normalization is a lot of hashing mostly
#
puckipedia
like, i implemented the JSON-LD completely myself
#
heluecht[m]
You aren't doing this in PHP, I guess?
#
puckipedia
nope
#
heluecht[m]
Could you? :-D
#
heluecht[m]
Question is, where's the problem with my library - and can it be fixed?
#
puckipedia
hmm
#
puckipedia
lemme see
#
puckipedia
got it
#
puckipedia
or well
#
puckipedia
lemme see
#
puckipedia
heluecht[m]: ok, so without cheating
#
puckipedia
what does this output
#
puckipedia
:)
#
heluecht[m]
It should show the 4e99 at first, I guess?
#
puckipedia
hah nope
#
puckipedia
it sorts it as 5e5, then 4e99
#
heluecht[m]
Why?
#
puckipedia
integers :D
#
puckipedia
so i'm guessing this is your issue
#
heluecht[m]
So it expands the 5e5 to some 5 with 5 zeros?
#
heluecht[m]
Or what?
#
puckipedia
yes
#
puckipedia
heluecht[m]: try replacing sort($hashes); with sort($hashes, SORT_STRING);
#
puckipedia
no idea how much this'll help but i feel this might cause the issue
#
puckipedia
but only sometimes :D
#
puckipedia
... tbh, not sure what'll happen anyways with some other code which has this same issue
#
puckipedia
you may want to look at this as well??
#
puckipedia
sorry, not a great php'er but I know the traps people fall in
#
heluecht[m]
Changing this for the hashes doesn't change anything :-(
#
heluecht[m]
I will have a look at the other place as well.
#
heluecht[m]
Why in the world is someone putting stuff together, hashing it with "sha1" and is sorting this hash?
#
heluecht[m]
Which drug caused such thinking?
#
heluecht[m]
puckipedia: I suggest that you are implementing this by yourself. After this is done we can compare the results.
#
puckipedia
it's probably gonna take a while because json-ld isn't high on my prioerity
#
heluecht[m]
I hate this stuff already.
jdormit_mobile and DenSchub joined the channel
#
dansup
heh
puckipedia and jdormit_mobile joined the channel
#
heluecht[m]
args ...
jdormit_mobile joined the channel