@superfeedr thanks for the heads-up, it was a caching issue in #taproot — now squashed with your mention happily on my page! I need to make taproot show names of blog posts instead of/in addition to the first bit of text.
@superfeedr thanks for the heads-up, it was a caching issue in #taproot — now squashed with your mention happily on my page! I need to make taproot show names of blog posts instead of/in addition to the first bit of text.
Last night: fixed #gurdy intonation, fitted tapping string. Even without a dedicated EM pickup it’s sounding great! Can’t wait to get it hooked up to an amp.
Fixed a simple security hole in #taproot, uncovered unintentionally by an attack mounted ≈5hrs ago — intent appeared to be to create new user accounts, unintended result was the creation of a new, empty article.
Hundreds of requests were made against URLs similar to these:
/articles/do.php
/articles/modules.php?app=user_reg
/articles/index.php?app=home&mod=public&act=register
/action/sign_up
/articles/sign_up.html
/articles/?page=login&cmd=register
/articles/tiki-register.php
/articles/index.php?page=register&action=register
/index.php?page=item&action=item_add
/articles/index.php?user/create_form/
/articles/join.php
/articles/index.php?dll=register
/articles/index.php?option=com_community&view=register
/articles/register.php
/articles/signup.php
Presumably these URLs are compromised on other systems — needless to say they are far too ugly to exist in #taproot! I’m unsure exactly why /articles
was used as the base URL for the attack in all cases apart from two.
As these URLs don’t exist, and will never exist, it should be safe enough to add server- or application-level filters immediately closing any requests which include them.
And my hurdy gurdy is fixed! Huge thanks to Brooks Hood for letting me use his workshop space — top guy, highly recommended for guitar repair work if you’re in Reykjavík.
@brianloveswords according to Lewis Carroll that’s one of the signs of a perfectly balanced mind :)
Obsessed with figureheads+celebrity, we forget that organisations are defined by their structure, letting the tip overrepresent:
My new diet:
Just implemented notifications in #taproot! I get a native, first-class notification when I’m mentioned. Really easy to do with the notification API: developer.mozilla.org/en-US/docs/Web/API/notification
Update: demo video!
Not shown: clicking on the notification navigates to the source of the mention.
@aaronpk oh man you have all my favourite lego control panels! And a lego you! This is lego me:
Accidentally left pizza dough fermenting+resting whilst watching 2hr movie, wondering whether this will affect stretching/baking behaviour…
A food mailing list closed to anyone under 21? That’s a bit weird, @tastingtable:
Not to mention the requirement of a zip code with no indication of why or how it’s used.
Only we know how we actually think and what we actually believe. Everyone else has to infer it from how we express ourselves. If we find ourself contradicting other people’s interpretations of our expressions it is likely they were ineffective.
Heading off to see DJ Geimskip og Flugvél (amongst others) at Café Rosenberg later. Come along if you’re in town!
Got lightblue+bluez set up on the raspberry pi, successfully paired and connected with Macbook. Not so much success communicating, sockets only worked one way, and the OS X doesn’t seem to be able to connect to services advertised on the pi despite being able to see that they exist. Also got started with USB programming in python with pyusb — is complex, but less so than I expected.
Apparently we, as an industry, are over the whole ninja/rockstar thing and have moved onto “mountaineer” weworkremotely.com/jobs/472
“Why yes, my company are interested in hiring PHP-based sailors and javascript treeclimbers. Bring your ropes to the interview, you’re going to need them.”