@teleclimber@social.tchncs.de
@teleclimber@social.tchncs.de avatar

teleclimber

@teleclimber@social.tchncs.de

Seeking refuge in a distributed world. Web, future programming. Full stack dilettante. Building https://dropserver.org

This profile is from a federated server and may be incomplete. Browse more on the original instance.

teleclimber, to random
@teleclimber@social.tchncs.de avatar

I've seen a lot of hot takes this weekend about the hack. Most are about how it was a long effort and how it's a supply chain problem, etc... Many are god takes. But...

One thing I haven't seen a single time is: why is a compression library able to hook in to incoming SSH connections?

Is there not a system to sandbox linked libraries? And if not, wouldn't this be worth investigating?

WASM and JS Realms are showing the way here.

teleclimber,
@teleclimber@social.tchncs.de avatar

@luis_in_brief Ah I had missed that. It's a complex hack.

teleclimber, to node
@teleclimber@social.tchncs.de avatar

Announcement post for #Deno 1.42 talks about Deno 2 as "long anticipated, many times delayed". No kidding!

Still I really appreciate the "DENO_FUTURE=1" env var that removes the deprecated APIs so you can test your code ahead of even a preview release. Nice touch @deno_land .

I just did some prep work for V2 in #Dropserver so I'll def give that a shot. I wonder if they also remove deprecated Typescript types? 🤔

https://fosstodon.org/

teleclimber, to random
@teleclimber@social.tchncs.de avatar

Sometimes work on old legacy code feels like

"Ah time to make dinner. Oh wait there is a leak in the kitchen, I better re-roof the house first."

teleclimber, to node
@teleclimber@social.tchncs.de avatar

I just released #Dropserver 0.13.1 with a few fixes and tweaks, particularly around the sandbox:

  • prepare for #Deno 2.0
  • make the CWD the appspace files directory
  • clean up inotify leaks when using #bubblewrap

https://github.com/teleclimber/Dropserver/releases/tag/v0.13.1

https://dropserver.org: "An Application Platform for Your Personal Web Services"

baldur, to random
@baldur@toot.cafe avatar

Putting together the blog post collection has meant trying to find old links in the Wayback Machine

One was this one by the legendary Kathy Sierra in 2004. It’s both inspiring and depressing, because we all know what happened in the intervening two decades

“A Computer Book Author’s Manifesto” https://web.archive.org/web/20120118171954/http://www.oreillynet.com/pub/a/oreilly/news/ksmanifesto.html

teleclimber,
@teleclimber@social.tchncs.de avatar

@baldur Another one who misses Kathy Sierra here. I had looked to see what she became and she had embraced her passion for Siberian ponies or something. There were pics of her in a wild setting with beautiful ponies running around and not a computer in sight.

teleclimber,
@teleclimber@social.tchncs.de avatar

@baldur Northern hemisphere, cold, horse-like animal. I feel like I did pretty good here.

teleclimber, to node
@teleclimber@social.tchncs.de avatar

Blog post: #Dropserver progress update for February (yes, it's a bit late 😬)

Stuff about #lume #ssg Dropserver app, submitting a patch to #browserslist to help it run in #Deno with limited permissions, and more.

https://olivierforget.net/blog/2024/dropserver-progress-february-2024/

teleclimber, to random
@teleclimber@social.tchncs.de avatar

#Framework's expansion cards give so much flexibility, sometimes in unexpected ways:

I worked in a family member's office this weekend. Their laptop has the HDMI port on the right side, so the monitor cable sits on the right ready to be plugged in. On my @frameworkcomputer laptop I happen to have the HDMI port on the left.

Instead of trying to snake the stiff short HDMI cable to the left side, I swapped the expansion cards so the HDMI was on the right and plugged in without a fight.

teleclimber, to random
@teleclimber@social.tchncs.de avatar

“ If a megacorporation builds a walled garden, it’s to hem us in. If we build a walled garden, it’s to keep them out.”

Great quote! @ben

https://werd.io/2024/gardens-and-power

hongminhee, to fediverse
@hongminhee@todon.eu avatar

I've written a #fediverse server framework that implements #ActivityPub in #Deno. There are still many features to document and add, but the basic behavior such as creating and following actors and sending and receiving activities works well. It's also been tested with Mastodon and Misskey. There's also a federated single-user blog in the repository as an example project. If you're interested in building a fediverse server app, take a look at the project! Thanks!

https://github.com/dahlia/fedify

teleclimber,
@teleclimber@social.tchncs.de avatar

@hongminhee Very cool, thank you for creating this. I'll have to see if this can be used by https://Dropserver.org apps to add fediverse functionality.

teleclimber, to CSS
@teleclimber@social.tchncs.de avatar

#CSS scope selector may make it into #FireFox in the first half of this year:

https://bugzilla.mozilla.org/show_bug.cgi?id=1830512#c3

This is good news for those of us who are eyeing this new capability to write CSS in a sane way without external tools or painful class name conventions. It's already in all Chromium browsers and in Safari Preview.

This explainer by @mia gives a good overview of the idea behind it:

https://css.oddbird.net/scope/explainer/

MDN page:

https://developer.mozilla.org/en-US/docs/Web/CSS/@scope

teleclimber, to programming
@teleclimber@social.tchncs.de avatar

I made a contribution to browserslist:

https://github.com/browserslist/browserslist/pull/819

I have been trying to get the Lume static site generator to run inside a #Dropserver sandbox, but I have been running into all kinds of issues: some modules written for #NodeJS assume they have read permissions for the entire disk, and error out when you run them with restrictive permissions. Any project that uses #PostCSS + #autoprefixer (ie most build systems) will hit this.

https://github.com/browserslist/browserslist/issues/813

1/2

teleclimber,
@teleclimber@social.tchncs.de avatar

So I proposed and implemented this change but it doesn't immediately solve the problem for Dropserver since I don't allow setting environment variables, and I'm not sure I should. It's fraught with possible problems.

It's possible running builders in a Dropserver sandbox will not work. These scripts are very liberal about reading stuff all over your disk. Some want read access to random things, and they're not even critical to the function, yet error if you deny access.

2/3

teleclimber,
@teleclimber@social.tchncs.de avatar

My goal is a Dropserver demo app that has an interface for writing blog posts, and a "generate site" button that runs Lume and creates a static site. The site is served by Dropserver's static site routes (no sandbox involved).

It's been a roller coaster, but I'll keep hacking at it. I already made the appspace dir the current working directory. That was an obviously good thing to do and it helps many npm scripts.

https://github.com/teleclimber/Dropserver/commit/cec55747bfd981d30225fbad9f419f99324f81b2

3/3

teleclimber, to random
@teleclimber@social.tchncs.de avatar

The queer.af thing is a reminder that you don't own your domain names any more than you own those songs on iTunes or those movies on Google Play.

kepano, to random
@kepano@mastodon.social avatar

These are all separate vectors:

  1. VC vs user-supported
  2. Files vs databases
  3. Open vs proprietary formats
  4. Open vs closed source
  5. Extensible vs non-extensible
  6. Private vs privacy-invasive

An open source app can be VC-backed, store its data in a proprietary format, have terrible APIs, and include telemetry

teleclimber,
@teleclimber@social.tchncs.de avatar

@kepano Sorry to nitpick but I don't think #2 is valid. If you put enough data in files and directory structures you have a database, though it's a poor one.

All your other points have a clear good/bad angle. With files/databases I don't think it's wise to say files are clearly always superior. If the data gets complex or relational or graph-like, I'll take a DB over some mad yaml or JSON thing any day.

robb, to random
@robb@social.lol avatar

Mastodon Webmentions and Privacy https://rknight.me/blog/mastodon-webmentions-and-privacy/

Since reading this post (https://brainbaking.com/post/2023/05/why-i-retired-my-webmention-server/ ) by @jefklak the other day I can't help but think webmentions via Mastodon might not be a good thing from a privacy standpoint.

Very interested to hear more thoughts on this.

teleclimber,
@teleclimber@social.tchncs.de avatar

@simoncox @robb @jefklak I've heard that spam is a problem for some people. It's not surprising. Anything that amounts to an open end point is going to get spammed sooner or later. To me this is a huge turn off. I don't have the desire to deal with yet another source of spam.

alcinnz, (edited ) to random
@alcinnz@floss.social avatar

This Guy Has Built an Open Source Search Engine as an Alternative to Google in His Spare Time - Jason Koebler @ 404:
https://www.404media.co/this-guy-is-building-an-open-source-search-engine-in-real-time/ (subscription walled)

Stract seems like a good one to keep an eye on! And to look further into!

teleclimber,
@teleclimber@social.tchncs.de avatar

@alcinnz For those who can't easily click on the link behind the wall:

https://stract.com/

matthiasott, to RSS
@matthiasott@mastodon.social avatar

Citizens of the open web! 💚

Does your website or blog have an feed? Let me – and my newsletter subscribers – know the URL(s) below.
👇

teleclimber,
@teleclimber@social.tchncs.de avatar

@matthiasott Well since you asked:

https://olivierforget.net/index.xml

Recently I've mostly posted progress updates for my project Dropserver, but I have a few posts in drafts that I want to get out.

I look forward to reading what you have to say about RSS!

teleclimber, to Blog
@teleclimber@social.tchncs.de avatar

#blog post: #Dropserver Progress Report for January. I talk about the 0.13 release, the general direction I'm heading in, and some other ideas I'm exploring.

https://olivierforget.net/blog/2024/dropserver-progress-january-2024/

#selfhosted #FOSSfriday #indieweb

teleclimber, to vscode
@teleclimber@social.tchncs.de avatar

I was looking for #vscode extensions to help write plain #HTML and #CSS and it's disappointing.

There is an extension that suggests class names it finds in your stylesheets when you are writing HTML. Cool. It works. But it's extremely superficial. It only considers individual class names, so it suggests classes that can't apply to that element.

https://marketplace.visualstudio.com/items?itemName=ecmel.vscode-html-css&ssr=false#overview

teleclimber,
@teleclimber@social.tchncs.de avatar

I'd also like an extension that reads my HTML and CSS and shows me what parts of my stylesheet are unused. There is one, but it's giving me nonsensical results.

Most extensions I see assume you're writing React or JSX or who knows what. But plain HTML + CSS? Meh.

As a community if we want to craft websites using low-tech approaches that are closer to pure HTML and CSS, we're going to have to put a lot more work into in-editor tools.

2/3

teleclimber,
@teleclimber@social.tchncs.de avatar

Just because I'd like to write plain CSS doesn't mean I want to keep my entire stylesheet structure in memory. There is a reason why languages like Go and most others have fantastic language servers. It helps developers work faster and more confidently. When I write #Go sometimes I'm just banging on "ctrl-space" because that's all that's left to do when you have a good lang server.

I'd love to get close to that w HTML + CSS.

teleclimber, to random
@teleclimber@social.tchncs.de avatar

Speaking of websites without analytics, I put together a quick site describing the Leftovers #Dropserver app:

https://leftovers.olivierforget.net/

I still have more work to do on this app, but at least it has a home now!

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • JUstTest
  • ngwrru68w68
  • everett
  • InstantRegret
  • magazineikmin
  • thenastyranch
  • rosin
  • GTA5RPClips
  • Durango
  • Youngstown
  • slotface
  • khanakhh
  • kavyap
  • DreamBathrooms
  • provamag3
  • tacticalgear
  • osvaldo12
  • tester
  • cubers
  • cisconetworking
  • mdbf
  • ethstaker
  • modclub
  • Leos
  • anitta
  • normalnudes
  • megavids
  • lostlight
  • All magazines
    •