GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Conversation

Notices

  1. Embed this notice
    Phantasm (phnt@fluffytail.org)'s status on Friday, 14-Mar-2025 23:21:48 JST Phantasm Phantasm
    • Fish of Rage
    • H. Faust
    @sun Did you by any chance disable access to local activities for unauthed users on SPW? Because currently I see broken replies to @hfaust with no parent and fetching the parent (from the inReplyTo field) returns "Not found".
    In conversation about 3 months ago from fluffytail.org permalink
    • Johnny Peligro likes this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Friday, 14-Mar-2025 23:26:09 JST Fish of Rage Fish of Rage
      in reply to
      • H. Faust
      @phnt @hfaust yes because we were getting destroyed by multiple scrapers
      In conversation about 3 months ago permalink
      Doughnut Lollipop 【記録係】:blobfoxgooglymlem: and Johnny Peligro like this.
    • Embed this notice
      Phantasm (phnt@fluffytail.org)'s status on Friday, 14-Mar-2025 23:29:56 JST Phantasm Phantasm
      in reply to
      • Fish of Rage
      • H. Faust
      @sun @hfaust Any plans to turn it back on in a few days, because this effectively makes all federation from SPW push-only? A relay does nothing as that's an automated repeat.
      In conversation about 3 months ago permalink
      Johnny Peligro likes this.
      Johnny Peligro repeated this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Friday, 14-Mar-2025 23:30:29 JST Fish of Rage Fish of Rage
      in reply to
      • H. Faust
      @phnt @hfaust I don't know yet because when I turn it back on the scraping just comes back in a day
      In conversation about 3 months ago permalink
      Phantasm and Johnny Peligro like this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Friday, 14-Mar-2025 23:35:24 JST Fish of Rage Fish of Rage
      in reply to
      • Fish of Rage
      • H. Faust
      @phnt @hfaust its not even the scraping that matters because well it's public data, it's that it makes the site run like shit
      In conversation about 3 months ago permalink
    • Embed this notice
      Phantasm (phnt@fluffytail.org)'s status on Friday, 14-Mar-2025 23:36:46 JST Phantasm Phantasm
      in reply to
      • Fish of Rage
      • H. Faust
      @sun @hfaust Yeah I get that. I got my ass kicked by Chinese scrapers fucking up my Gitea instance and by extension the Pleroma DB, because the were stored on the same disk. I had to completely nullroute Alibaba US and half of Huawei Cloud.
      In conversation about 3 months ago permalink
      Johnny Peligro likes this.
    • Embed this notice
       (mint@ryona.agency)'s status on Friday, 14-Mar-2025 23:41:08 JST  
      in reply to
      • Fish of Rage
      • H. Faust
      @phnt @hfaust @sun One weird trick DESTROYS Money Moon Man's lockpost empire!
      for i in $(curl https://fedilist.com/instance/csv\?software\=pleroma | cut -d',' -f1); do curl https://shitposter.world/ostatus_subscribe\?acct\=https://$i/internal/fetch; done
      In conversation about 3 months ago permalink

      Attachments



      Lina Inver?e, ✙ dcc :pedomustdie: :phear_slackware: and Johnny Peligro like this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Friday, 14-Mar-2025 23:42:32 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • H. Faust
      @mint @phnt @hfaust my site works fast now, it was running slow and my upload was being saturated. you can name call me all you want
      In conversation about 3 months ago permalink
    • Embed this notice
      Lina Inver?e (lina@eientei.org)'s status on Friday, 14-Mar-2025 23:43:08 JST Lina Inver?e Lina Inver?e
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      @mint @phnt @hfaust @sun why not just keep that shit to dm's anyway if you're gonna try to hide your threads
      In conversation about 3 months ago permalink
       likes this.
    • Embed this notice
      Phantasm (phnt@fluffytail.org)'s status on Friday, 14-Mar-2025 23:43:45 JST Phantasm Phantasm
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      @mint @hfaust @sun Shush, keep the DoS options open-secrets. You already know when one of those options leaks to hands of someone that doesn't like you.
      In conversation about 3 months ago permalink
       and ✙ dcc :pedomustdie: :phear_slackware: like this.
    • Embed this notice
       (mint@ryona.agency)'s status on Friday, 14-Mar-2025 23:43:52 JST  
      in reply to
      • Fish of Rage
      • H. Faust
      @sun @phnt @hfaust I'm literally fixing the shit you broke for everyone else right now.
      In conversation about 3 months ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Friday, 14-Mar-2025 23:45:53 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • H. Faust
      @mint @phnt @hfaust if you don't make my site run like shit then what's the problem
      In conversation about 3 months ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Friday, 14-Mar-2025 23:47:21 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      @i @phnt @mint @hfaust what works best is making yourself a less desirable target.
      In conversation about 3 months ago permalink
      Doughnut Lollipop 【記録係】:blobfoxgooglymlem: likes this.
    • Embed this notice
      :blank: (i@declin.eu)'s status on Friday, 14-Mar-2025 23:47:22 JST :blank: :blank:
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      @sun @phnt @mint @hfaust at least replace the /objects/* redirect with a strict cache like fse/salon/ryona do

      doubt you're saturating it with json instead of all the mediaproxies
      In conversation about 3 months ago permalink
    • Embed this notice
       (mint@ryona.agency)'s status on Friday, 14-Mar-2025 23:48:03 JST  
      in reply to
      • Fish of Rage
      • H. Faust
      @sun @phnt @hfaust The fact I have to do this to begin with.
      In conversation about 3 months ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Friday, 14-Mar-2025 23:48:41 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • H. Faust
      @mint @phnt @hfaust "I'm accessing data by replicating it elsewhere without causing a performance problem, take that"

      ...oh no?
      In conversation about 3 months ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Friday, 14-Mar-2025 23:49:46 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      @i @phnt @mint @hfaust I'll do this, I'm trying to improve things across the board.
      In conversation about 3 months ago permalink
      Phantasm likes this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Friday, 14-Mar-2025 23:50:11 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      @i @hfaust @mint @phnt you don't happen to have snippet of code for this do you
      In conversation about 3 months ago permalink
    • Embed this notice
       (mint@ryona.agency)'s status on Friday, 14-Mar-2025 23:50:52 JST  
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      @sun @hfaust @phnt About time ti gets reported to gitlab as well, but seeing how the second last update presented accessing outbox with public posts as critical security vulnerability, I doubt it's anywhere near concern for them.
      In conversation about 3 months ago permalink
      ✙ dcc :pedomustdie: :phear_slackware: likes this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Friday, 14-Mar-2025 23:55:11 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • H. Faust
      @mint @phnt @hfaust can you please do that? despite being aggressive with me over it your input is valuable and I appreciate it
      In conversation about 3 months ago permalink
    • Embed this notice
       (mint@ryona.agency)'s status on Friday, 14-Mar-2025 23:56:42 JST  
      in reply to
      • :blank:
      • Fish of Rage
      • H. Faust
      @sun @i @phnt @hfaust Skimming through code, removing `false` here might do the trick.
      https://git.pleroma.social/pleroma/pleroma/-/blob/develop/lib/pleroma/web/activity_pub/visibility.ex?ref_type=heads#L76
      In conversation about 3 months ago permalink

      Attachments

      1. Domain not in remote thumbnail source whitelist: git.pleroma.social
        lib/pleroma/web/activity_pub/visibility.ex · develop · Pleroma / pleroma · GitLab
        Pleroma backend
      ✙ dcc :pedomustdie: :phear_slackware: and Phantasm like this.
    • Embed this notice
       (mint@ryona.agency)'s status on Saturday, 15-Mar-2025 00:06:14 JST  
      in reply to
      • Fish of Rage
      • H. Faust
      @sun @phnt @hfaust https://git.pleroma.social/pleroma/pleroma/-/issues/3363
      In conversation about 3 months ago permalink

      Attachments

      1. Domain not in remote thumbnail source whitelist: git.pleroma.social
        Broken federation with :restrict_unauthenticated enabled for local activities (#3363) · Issues · Pleroma / pleroma · GitLab
        As requested by Money Moon Man. Scenario: there's an instance A and instance B. Instance A has puts its API...
      Phantasm and Fish of Rage like this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Saturday, 15-Mar-2025 00:06:29 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • H. Faust
      @mint @phnt @hfaust thank you, I appreciate it
      In conversation about 3 months ago permalink
      Phantasm and Johnny Peligro like this.
    • Embed this notice
      pomstan (pomstan@xn--p1abe3d.xn--80asehdb)'s status on Saturday, 15-Mar-2025 00:09:50 JST pomstan pomstan
      in reply to
      • 
      • Fish of Rage
      • H. Faust

      @mint @phnt @hfaust @sun what the fuck lol

      In conversation about 3 months ago permalink
       likes this.
    • Embed this notice
      Phantasm (phnt@fluffytail.org)'s status on Saturday, 15-Mar-2025 00:57:28 JST Phantasm Phantasm
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      @i @mint @hfaust @sun
      btw doesn't Pleroma already cache objects, or is that on fetch-only?
      In conversation about 3 months ago permalink
    • Embed this notice
       (mint@ryona.agency)'s status on Saturday, 15-Mar-2025 00:59:21 JST  
      in reply to
      • :blank:
      • Fish of Rage
      • H. Faust
      @phnt @i @hfaust @sun It does, but doing it with nginx is faster (like in my case of proxying to another continent).
      In conversation about 3 months ago permalink
      Phantasm and pwm like this.
    • Embed this notice
      david [blobcat] (david@blob.cat)'s status on Wednesday, 02-Apr-2025 01:33:55 JST david [blobcat] david [blobcat]
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      @mint @phnt @hfaust @sun this fix federating spw for me. Thanks!
      In conversation about 3 months ago permalink
      Fish of Rage likes this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 01:38:57 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      @i @david @phnt @mint @hfaust I'm gonna give it to AI to see if it can fix it lol
      In conversation about 3 months ago permalink
    • Embed this notice
      :blank: (i@declin.eu)'s status on Wednesday, 02-Apr-2025 01:38:58 JST :blank: :blank:
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      @david @phnt @mint @hfaust @sun isn't it swell that one gives a shit about the network failing to federate to any useful degree

      https://git.pleroma.social/pleroma/pleroma/-/issues/3363 will stay untouched for years longer
      In conversation about 3 months ago permalink

      Attachments

      1. Domain not in remote thumbnail source whitelist: git.pleroma.social
        Broken federation with :restrict_unauthenticated enabled for local activities (#3363) · Issues · Pleroma / pleroma · GitLab
        As requested by Money Moon Man. Scenario: there's an instance A and instance B. Instance A has puts its API...
       and Johnny Peligro like this.
    • Embed this notice
      feld (feld@friedcheese.us)'s status on Wednesday, 02-Apr-2025 01:40:55 JST feld feld
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      @sun @i @david @phnt @mint @hfaust This seems pretty easy actually -- if you get an authenticated fetch from a server you've never federated with, fetch their key??
      In conversation about 3 months ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:14:40 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      @i @david @phnt @feld @mint @hfaust there is a bigger problem here which is you have to stick shit in the database before querying to see if there's even really a user on the remote server.
      In conversation about 3 months ago permalink
    • Embed this notice
      :blank: (i@declin.eu)'s status on Wednesday, 02-Apr-2025 02:14:41 JST :blank: :blank:
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      @feld @david @phnt @mint @hfaust @sun yes, the fix is as simple as {:ok, _user} <- ActivityPub.make_user_from_ap_id(actor_id) like refetch_public_key does
      In conversation about 3 months ago permalink

      Attachments


      1. https://declin.eu/media/32/19/14/32191428649208619dd085cde42ad83a16b79b758aac6daa417d2175556563a5.png
       likes this.
    • Embed this notice
       (mint@ryona.agency)'s status on Wednesday, 02-Apr-2025 02:22:00 JST  
      in reply to
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      @feld @david @i @phnt @hfaust @sun A better fix would be to make the setting that blocks access to API stop blocknig access to fucking objects.
      In conversation about 3 months ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:27:58 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      @i @david @phnt @feld @mint @hfaust sure but now it's slow and you can get attacked with a slow server
      In conversation about 3 months ago permalink
    • Embed this notice
      :blank: (i@declin.eu)'s status on Wednesday, 02-Apr-2025 02:28:00 JST :blank: :blank:
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      @sun @david @phnt @feld @mint @hfaust what, of course not? make_user_from_ap_id fetches the remote user before writing it, not after
      In conversation about 3 months ago permalink
    • Embed this notice
      pwm (pwm@darkdork.dev)'s status on Wednesday, 02-Apr-2025 02:28:59 JST pwm pwm
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      @sun @david @i @phnt @feld @mint @hfaust slow loris fake fedi profile attack vector :niggathonk:
      In conversation about 3 months ago permalink
      Phantasm likes this.
    • Embed this notice
       (mint@ryona.agency)'s status on Wednesday, 02-Apr-2025 02:29:53 JST  
      in reply to
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      @sun @david @i @phnt @feld @hfaust Almost as if signed fetches do nothing but add more load to the server.
      In conversation about 3 months ago permalink
    • Embed this notice
       (mint@ryona.agency)'s status on Wednesday, 02-Apr-2025 02:30:47 JST  
      in reply to
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @pwm @david @i @phnt @feld @hfaust @sun I got DoSed by pedophiles putting 1TB speedtest files as signing actor in forged requests, nothing happened, pleromer just dropped connection after ~30 seconds of not receiving it.
      In conversation about 3 months ago permalink
      pwm likes this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:31:28 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @mint @david @pwm @i @phnt @feld @hfaust so you guys are suggesting it's sufficient to just query the actor before inserting into database (which is the sane way anyway)
      In conversation about 3 months ago permalink
      pwm likes this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:31:39 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @mint @david @feld @hfaust @i @phnt @pwm I want this shit fixed too
      In conversation about 3 months ago permalink
      pwm likes this.
    • Embed this notice
       (mint@ryona.agency)'s status on Wednesday, 02-Apr-2025 02:32:32 JST  
      in reply to
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @sun @david @pwm @i @phnt @feld @hfaust My suggestion is above.
      Screenshot_20250401_203218.png
      In conversation about 3 months ago permalink

      Attachments


      1. https://ryona.agency/media/78/3c/e8/783ce87b9580c949dc64357553a7a63eee77963032adf8020b10273364502e80.png?name=Screenshot_20250401_203218.png
      pwm likes this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:35:21 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @mint @david @pwm @i @phnt @feld @hfaust ok this now exceeds the small amount of time I allocated to see if I could fix this without trouble.
      In conversation about 3 months ago permalink
      pwm likes this.
    • Embed this notice
      :blank: (i@declin.eu)'s status on Wednesday, 02-Apr-2025 02:36:15 JST :blank: :blank:
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @mint @david @pwm @phnt @feld @hfaust @sun which as easy as defaulting to just the else case instead of a flat out false
      In conversation about 3 months ago permalink

      Attachments


      1. https://declin.eu/media/9d/d5/75/9dd5759c701bb208d46a5462f248c7d49148bb98e9c060b5d1bec6a504937ab3.png
       and pwm like this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:36:47 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @i @david @pwm @phnt @feld @mint @hfaust you're saying this is all it takes? I could put this in and it fixes the problem?
      In conversation about 3 months ago permalink
    • Embed this notice
      Johnny Peligro (mischievoustomato@tsundere.love)'s status on Wednesday, 02-Apr-2025 02:37:57 JST Johnny Peligro Johnny Peligro
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • FWC
      @i @david @phnt @mint @hfaust @sun @fwc point n laugh
      In conversation about 3 months ago permalink
    • Embed this notice
      :blank: (i@declin.eu)'s status on Wednesday, 02-Apr-2025 02:38:28 JST :blank: :blank:
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • FWC
      • Johnny Peligro
      @mischievoustomato @fwc @david @phnt @mint @hfaust @sun and get banned off the gitlab again?
      In conversation about 3 months ago permalink
      Johnny Peligro likes this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:38:45 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @i @david @pwm @phnt @feld @mint @hfaust gonna be honest pleroma codebase is convoluted so when I feel like coding I do something else rather than hack on pleroma
      In conversation about 3 months ago permalink
    • Embed this notice
      :blank: (i@declin.eu)'s status on Wednesday, 02-Apr-2025 02:38:46 JST :blank: :blank:
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @sun @david @pwm @phnt @feld @mint @hfaust as was suggested last time? yes
      In conversation about 3 months ago permalink
    • Embed this notice
      Johnny Peligro (mischievoustomato@tsundere.love)'s status on Wednesday, 02-Apr-2025 02:38:54 JST Johnny Peligro Johnny Peligro
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • FWC
      @i @fwc @david @phnt @mint @hfaust @sun fwc doesn't like pleroma, me not really either, we just laugh
      In conversation about 3 months ago permalink
    • Embed this notice
      Phantasm (phnt@fluffytail.org)'s status on Wednesday, 02-Apr-2025 02:39:33 JST Phantasm Phantasm
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @sun @david @pwm @i @feld @mint @hfaust Didn't you already did that since federation works fine and has worked since mint showed you that part of the code? I haven't checked any objects yet with curl, but I remember it still returning 404 while the federation kept working.
      In conversation about 3 months ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:40:18 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @i @david @pwm @phnt @feld @mint @hfaust you know good and well one line can cause a ton of problems.
      In conversation about 3 months ago permalink
      Phantasm likes this.
    • Embed this notice
      :blank: (i@declin.eu)'s status on Wednesday, 02-Apr-2025 02:40:19 JST :blank: :blank:
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @sun @david @pwm @phnt @feld @mint @hfaust ONE LINE
      In conversation about 3 months ago permalink
    • Embed this notice
      Phantasm (phnt@fluffytail.org)'s status on Wednesday, 02-Apr-2025 02:40:26 JST Phantasm Phantasm
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • FWC
      • Johnny Peligro
      @mischievoustomato @fwc @david @i @mint @hfaust @sun Literal skill issue. Watching his queues blow up by a simple poast defed was also funny from the other side.
      In conversation about 3 months ago permalink
      Johnny Peligro likes this.
    • Embed this notice
       (mint@ryona.agency)'s status on Wednesday, 02-Apr-2025 02:40:30 JST  
      in reply to
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @phnt @david @pwm @i @feld @hfaust @sun No, curling objects still returns "Not found". It's working because I literally forced his server to fetch internal actors of every Pleroma instance.
      In conversation about 3 months ago permalink
      Phantasm likes this.
    • Embed this notice
      pwm (pwm@darkdork.dev)'s status on Wednesday, 02-Apr-2025 02:41:05 JST pwm pwm
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      @sun @david @i @phnt @feld @mint @hfaust if I were BDFL I would defer fetching actor information and later drop information that couldn't be verified. Opens up a question about what to do with temporarily unverified information, but, for new actors I think just quarantining the object until verification could be done would be sufficient (and dropping it if verification failed later) Even if the max holding time is just a few minutes, that ought to be enough to handle slow servers and not overwhelm the db unless you were being deliberately attacked; in which case rate limits or a setting to temporarily disallow federating new users globally or per domain would give you the controls needed to manage.
      pleromer keeps actor keys and such, so it would only happen when a user first federates. Probably maybe not worth bothering actually implementing.
      In conversation about 3 months ago permalink
      Johnny Peligro likes this.
    • Embed this notice
      Johnny Peligro (mischievoustomato@tsundere.love)'s status on Wednesday, 02-Apr-2025 02:41:24 JST Johnny Peligro Johnny Peligro
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • FWC
      @phnt @fwc @david @i @mint @hfaust @sun the fediverse is held up by duct tape and dreams
      In conversation about 3 months ago permalink
    • Embed this notice
      Johnny Peligro (mischievoustomato@tsundere.love)'s status on Wednesday, 02-Apr-2025 02:41:49 JST Johnny Peligro Johnny Peligro
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • FWC
      • Johnny Peligro
      @phnt @david @fwc @hfaust @i @mint @sun and tbf silverpill fixed it fast, pleroma would take around a year while saying it's not an issue
      In conversation about 3 months ago permalink
    • Embed this notice
      :blank: (i@declin.eu)'s status on Wednesday, 02-Apr-2025 02:41:53 JST :blank: :blank:
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @phnt @david @pwm @feld @mint @hfaust @sun doing for i in $(curl https://fedilist.com/instance/csv\?software\=pleroma | cut -d',' -f1); do curl https://shitposter.world/ostatus_subscribe\?acct\=https://$i/internal/fetch; done could be considered a security breach as bad as the outbox being opened so people can fetch PUBLIC POSTS
      In conversation about 3 months ago permalink

      Attachments



       and Phantasm like this.
    • Embed this notice
      Phantasm (phnt@fluffytail.org)'s status on Wednesday, 02-Apr-2025 02:42:31 JST Phantasm Phantasm
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @i @david @pwm @feld @mint @hfaust @sun I was talking about the else in visible_for_user().
      In conversation about 3 months ago permalink
    • Embed this notice
       (mint@ryona.agency)'s status on Wednesday, 02-Apr-2025 02:43:17 JST  
      in reply to
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @i @david @pwm @phnt @feld @hfaust @sun To be fair same endpoint could be used to plant 'p onto remote servers.
      In conversation about 3 months ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:43:32 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @i @david @pwm @phnt @feld @mint @hfaust flipping one switch stopped 99% of my load problems, idgaf until the scrapers figure out the other ways to scrape posts.

      anyway, it looks like I already put it in at some point
      In conversation about 3 months ago permalink

      Attachments


      1. https://media.shitposter.world/shitposter.club/37/8c/55/378c559dcbfd766ebc89f0521a4141c07ec908bfe597da7e56b1030c13acd9fb.png?name=r1jQ_iY_g_UUOg.png
      Phantasm likes this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:44:12 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • FWC
      • Johnny Peligro
      @mischievoustomato @fwc @david @i @phnt @mint @hfaust I would love to do more stuff with mitra but rust has a learning curve
      In conversation about 3 months ago permalink
      Johnny Peligro likes this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:44:47 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @i @david @feld @hfaust @mint @phnt @pwm guys I hate activitypub
      In conversation about 3 months ago permalink
      pwm likes this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:46:23 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @i @david @pwm @phnt @feld @mint @hfaust oh I misunderstood, so just replace the if statement with

      public?(message) and not local_public?(message)
      In conversation about 3 months ago permalink
    • Embed this notice
      :blank: (i@declin.eu)'s status on Wednesday, 02-Apr-2025 02:46:24 JST :blank: :blank:
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @sun @david @pwm @phnt @feld @mint @hfaust no you literally didn't, that's the default, remove the if and do just public?(message) and not local_public?(message)
      In conversation about 3 months ago permalink
    • Embed this notice
      Johnny Peligro (mischievoustomato@tsundere.love)'s status on Wednesday, 02-Apr-2025 02:46:41 JST Johnny Peligro Johnny Peligro
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • FWC
      @sun @fwc @david @i @phnt @mint @hfaust i knkw
      In conversation about 3 months ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:48:43 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @i @david @pwm @phnt @feld @mint @hfaust ok anyway I have been told without a failing test case this is going nowhere.
      In conversation about 3 months ago permalink
    • Embed this notice
      :blank: (i@declin.eu)'s status on Wednesday, 02-Apr-2025 02:49:51 JST :blank: :blank:
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @sun @david @pwm @phnt @feld @mint @hfaust YES
      In conversation about 3 months ago permalink

      Attachments


      1. https://declin.eu/media/31/82/76/318276ad6ffc74b1fcaf377306d4c0e8e7726337bba78157f7097d7016885183.png
       likes this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:50:48 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @i @david @pwm @phnt @feld @mint @hfaust I was convinced not to just inject a one-liner in code that may have security ramifications
      In conversation about 3 months ago permalink
      Phantasm and pwm like this.
    • Embed this notice
      :blank: (i@declin.eu)'s status on Wednesday, 02-Apr-2025 02:50:49 JST :blank: :blank:
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @sun @david @pwm @phnt @feld @mint @hfaust upstreams mom is failing test case
      In conversation about 3 months ago permalink
    • Embed this notice
      pwm (pwm@darkdork.dev)'s status on Wednesday, 02-Apr-2025 02:51:40 JST pwm pwm
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      @sun @david @i @phnt @feld @mint @hfaust projects die when the developers no longer exclaim, "fuck it, we ball"
      In conversation about 3 months ago permalink
       and Phantasm like this.
    • Embed this notice
      :blank: (i@declin.eu)'s status on Wednesday, 02-Apr-2025 02:52:17 JST :blank: :blank:
      in reply to
      • 
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @sun @david @pwm @phnt @feld @mint @hfaust PUBLIC POSTS ARE NOT A SECURITY RAMIFICATION, OR ELSE WHY WOULD YOU TAG THEM AS https://www.w3.org/ns/activitystreams#Public
      In conversation about 3 months ago permalink

      Attachments


       and pwm like this.
    • Embed this notice
       (mint@ryona.agency)'s status on Wednesday, 02-Apr-2025 02:52:57 JST  
      in reply to
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @i @david @pwm @phnt @feld @hfaust @sun To make them available for the public (gscon policule - the public).
      In conversation about 3 months ago permalink
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:54:02 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @i @david @pwm @phnt @feld @mint @hfaust ok yeah you're right in the context of the function it's hard to see how it would be unsafe. I'm doing it.
      In conversation about 3 months ago permalink
      Phantasm and pwm like this.
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 02:55:36 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @i @david @pwm @phnt @feld @mint @hfaust ok done
      In conversation about 3 months ago permalink
      Phantasm likes this.
    • Embed this notice
       (mint@ryona.agency)'s status on Wednesday, 02-Apr-2025 02:56:36 JST  
      in reply to
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @sun @david @pwm @i @phnt @feld @hfaust
      >curl -H "Accept: application/activity+json" https://shitposter.world/objects/7f3a4d17-e079-4ccd-bf79-859c78863397
      <{"@context":["https://www.w3.org/ns/activitystreams",[..]
      Appears to have worked.
      In conversation about 3 months ago permalink

      Attachments



      Phantasm and Fish of Rage like this.
    • Embed this notice
       (mint@ryona.agency)'s status on Wednesday, 02-Apr-2025 02:59:36 JST  
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @sun @david @feld @hfaust @i @phnt @pwm Like pulling teeth, but at least I can now see posts on rawr onion.
      Screenshot_20250401_205804.png
      In conversation about 3 months ago permalink

      Attachments


      1. https://ryona.agency/media/80/83/76/8083763ffa94d835147dcea4cde5a5d7e6bcf6b407fbb844de308512d78a6de4.png?name=Screenshot_20250401_205804.png
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 03:00:21 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @mint @david @pwm @i @phnt @feld @hfaust it also bypasses the restrict_unauthenticated for direct links to notices but I don't give a fuck if it doesn't result in more load on my server from scrapers
      In conversation about 3 months ago permalink
      Phantasm likes this.
    • Embed this notice
      Phantasm (phnt@fluffytail.org)'s status on Wednesday, 02-Apr-2025 03:01:41 JST Phantasm Phantasm
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @sun @david @pwm @i @feld @mint @hfaust Should be fine. I haven't seen a scraper that worked like that in a while.
      In conversation about 3 months ago permalink
    • Embed this notice
       (mint@ryona.agency)'s status on Wednesday, 02-Apr-2025 03:02:48 JST  
      in reply to
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @sun @david @pwm @i @phnt @feld @hfaust So it did the same thing as unchecking the bottom option. Figured it won't apply to mastoapi, but still better than nothing.
      Screenshot_20250401_210133.png
      In conversation about 3 months ago permalink

      Attachments


      1. https://ryona.agency/media/5b/4c/a5/5b4ca5c9a3f2baa530455e7dd1eb6b0dbfa70bdb10ab85373e32e697fa152e70.png?name=Screenshot_20250401_210133.png
    • Embed this notice
      Fish of Rage (sun@shitposter.world)'s status on Wednesday, 02-Apr-2025 03:03:12 JST Fish of Rage Fish of Rage
      in reply to
      • 
      • :blank:
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @mint @david @pwm @i @phnt @feld @hfaust let's see what happens.
      In conversation about 3 months ago permalink
    • Embed this notice
      feld (feld@friedcheese.us)'s status on Wednesday, 02-Apr-2025 03:05:43 JST feld feld
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • pwm
      @sun @mint @david @pwm @i @phnt @hfaust We should never allow an unauthenticated request (not one of our users) make external API calls that can hang and delay our ability to respond.

      Kinda think the smart thing to do would be to deny the first attempt at authenticated fetch because we don't know them and insert an Oban job to fetch their instance actor. Future requests could then begin working, possibly within a second or two. Also will let us prevent duplicates / hammering their server with requests by limiting unique jobs to once per domain like every 5 mins or something
      In conversation about 3 months ago permalink
    • Embed this notice
      Kirino Kousaka (kirino@shitpost.cloud)'s status on Wednesday, 02-Apr-2025 03:11:53 JST Kirino Kousaka Kirino Kousaka
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      Don't yell at my friend >:O
      In conversation about 3 months ago permalink
      Phantasm and Fish of Rage like this.
    • Embed this notice
      feld (feld@friedcheese.us)'s status on Wednesday, 02-Apr-2025 04:01:58 JST feld feld
      in reply to
      • 
      • pomstan
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • pwm
      @pomstan @david @pwm @i @phnt @mint @hfaust @sun many years ago there was a Cisco ACL shared among network engineers called ACL_FUCK_CHINA
      In conversation about 3 months ago permalink
    • Embed this notice
      pomstan (pomstan@xn--p1abe3d.xn--80asehdb)'s status on Wednesday, 02-Apr-2025 04:01:59 JST pomstan pomstan
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm

      @sun @david @pwm @i @phnt @feld @mint @hfaust why not simply nuke chinese subnets?

      In conversation about 3 months ago permalink
    • Embed this notice
      feld (feld@friedcheese.us)'s status on Wednesday, 02-Apr-2025 04:04:56 JST feld feld
      in reply to
      • 
      • pomstan
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • pwm
      @pomstan @david @pwm @i @phnt @mint @hfaust @sun back then you didn't need to, but yes -- today the addresses allocated per country are a moving target
      In conversation about 3 months ago permalink
    • Embed this notice
      pomstan (pomstan@xn--p1abe3d.xn--80asehdb)'s status on Wednesday, 02-Apr-2025 04:04:57 JST pomstan pomstan
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm

      @feld @david @pwm @i @phnt @mint @hfaust @sun you need to subscribe to an actual ip database instead of a static list

      In conversation about 3 months ago permalink
    • Embed this notice
      :blank: (i@declin.eu)'s status on Wednesday, 02-Apr-2025 04:25:15 JST :blank: :blank:
      in reply to
      • 
      • pomstan
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm
      @feld @david @pwm @phnt @mint @hfaust @sun @pomstan that's when you start dumping in entire ASN's
      In conversation about 3 months ago permalink
      Phantasm and feld like this.
    • Embed this notice
      feld (feld@friedcheese.us)'s status on Wednesday, 02-Apr-2025 05:05:45 JST feld feld
      in reply to
      • 
      • pomstan
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • pwm
      @pomstan @david @pwm @i @phnt @mint @hfaust @sun I've been hearing that IPv6 is the future since the first World IPv6 day (which the ISP I worked at participated in!) and still it has barely gained traction in the West except on mobile networks. Fortunately mobile phones are a huge use of the internet today so there is some significant traction there, but not really for wired service (cable/fiber/DSL). And often those who do offer IPv6 won't give you a stable allocation so you can't properly leverage a /56 for your own networks. You end up having to use NPTv6 which is basically NAT (sorta, it just replaces half of the address and replaces it with whatever your ISP is currently giving you)

      Still not a lot of movement on IPv6 with some of the largest websites/providers. Amazon is now trying to push customers to IPv6 and charging more for IPv4 addresses, but they aren't deploying IPv6 for all their own services ... :sigh:
      In conversation about 3 months ago permalink
    • Embed this notice
      pomstan (pomstan@xn--p1abe3d.xn--80asehdb)'s status on Wednesday, 02-Apr-2025 05:05:46 JST pomstan pomstan
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm

      @i @david @pwm @phnt @feld @mint @hfaust @sun iirc ipv6 is geo-aggregatable, that's also why it is the future

      In conversation about 3 months ago permalink
    • Embed this notice
      feld (feld@friedcheese.us)'s status on Wednesday, 02-Apr-2025 06:20:55 JST feld feld
      in reply to
      • 
      • pomstan
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • pwm
      @pomstan @david @pwm @i @phnt @mint @hfaust @sun What good is having an allocation if next time the ISP router reboots you get a completely different one? This is normal behavior for a bunch of ISPs
      In conversation about 3 months ago permalink
    • Embed this notice
      pomstan (pomstan@xn--p1abe3d.xn--80asehdb)'s status on Wednesday, 02-Apr-2025 06:20:56 JST pomstan pomstan
      in reply to
      • 
      • :blank:
      • Fish of Rage
      • H. Faust
      • david [blobcat]
      • feld
      • pwm

      @feld @david @pwm @i @phnt @mint @hfaust @sun why do you need NPT if you get a properly sized dynamic allocation?

      In conversation about 3 months ago permalink

Feeds

  • Activity Streams
  • RSS 2.0
  • Atom
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.