Damus

Recent Notes

pasjrwoctx👽 · 2w
So I kind of set up another level of security well not really more of a gate to help block more bots and scrapers that seem to bypass robots.txt and whatever enhancements and blocks you have in your ....
webfan profile picture
@pasjrwoctx👽
cookie could be faked but so can headers, and the way I have it now the cookie is only good for the session, bots and scrapers start a new session every time


The sessionID is in the cookie yes, but the info can be in the session. If a bad bot starts a new session, well it will not have the "OK" in the session.
Accept headers can be faked but that would make less sense as it breaks content negotiation, and you can use it as ONE aspect of other bot indicators., but my understanding of how friendica and activitypub are setup the inbox should not be callable by bots and scrapers


For server to server protocol an instance will act like a "legitim bot", it will not pass a captcha or session check, validation of the request is done via signatures.
1
pasjrwoctx👽 · 1w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c the other reason I elected to not have a server side stored is one privacy of actual humans that visit my site directly, and I just rather not be collecting useless data on a fairly rest...
pasjrwoctx👽 · 1w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c the only reason to exclude the /inbox route is if you are finding a lot of bots and sc...
webfan profile picture
@pasjrwoctx👽 Sorry, I mean the /inbox route from the check

$is_fediverse =
str_contains($request, '/.well-known/') ||
str_contains($request, '/activitypub/') ||
str_contains($request, '/api/') ||
str_contains($request, '/assets/') ||
str_contains($request, '/inbox');

You could also check for Request-Type headers.

A cookie can be faked, you should consider to store the OK in the session instead?
2
pasjrwoctx👽 · 1w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c cookie could be faked but so can headers, and the way I have it now the cookie is only good for the session, bots and scrapers start a new session every time they probe a domain so no ne...
pasjrwoctx👽 · 1w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c also if you wanted to go that far as adding /inbox following the logic you should probably also add /nodeinfo as well;
pasjrwoctx👽 · 1w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c the only reason to exclude the /inbox route is if you are finding a lot of bots and scrapers accessing your inbox before they scrape your profile, in theory friendicas rules and activity...
Stefan Münz · 2w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c Er ist das beste Beispiel um mir deutlich zu machen, wie blöd es ist, seinen eigenen Zenith zu überschreiten ;-) nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqmrhlmhmv9k4rj036...
fediverseobserver · 17w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c Thanks and what is the local you are using? Looks like that is not finding the right l...
webfan profile picture
@fediverseobserver
Deutsch
Microsoft Edge wird in dieser Sprache angezeigt
Deutsch (Deutschland)
Englisch
Englisch (Vereinigtes Königreich)
Englisch (Vereinigte Staaten)

Google Chrome is set to german also but is working.
My firefox is set to English and it is working.

I changed the language settings in Edge toEnglisch (Vereinigtes Königreich)
Microsoft Edge wird in dieser Sprache angezeigt
Englisch
Deutsch
Deutsch (Deutschland)
Englisch (Vereinigte Staaten)


...restarted the Edge browser, and YES, the template variables are replaced correctly now and the page renders!
1
fediverseobserver · 17w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c I was able to reproduce this, I test the translations are working in french as a random sample, but german seems to have some issues here. Thanks for letting me know, I will poke around....
fediverseobserver · 17w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c Gosh I forgot that browser even existed in my tests. I just gave it a try and mine is ...
webfan profile picture
nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqyaq8pwwtgmcukekslj45ujdfgrmxa7pcczrg67vsef4g24wzk7kqd80n7eMicrosoft Edge
Version 145.0.3800.82 (Offizielles Build) (64-Bit)

I cannot see any error in the browser console, but the template vars are not replaced by the js.
1
fediverseobserver · 17w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c Thanks and what is the local you are using? Looks like that is not finding the right local and also not defaulting back to en-US as I would expect if it can not find a match.
fediverseobserver · 17w
Found 6 new servers and 1 servers died off since 5 hours ago 57,718 servers checked. 1,134,006 Monthly Active Users across the fediverse Check out the #fediverse stats History of servers found and ...
webfan profile picture
@fediverseobserver If I open fediverse.observer/ in god damned microsoft Edge, it looks like there is an template error!?
Other browsers are working.welcome.main.suggested
welcome.main.picked
welcome.main.picked
welcome.main.picked
welcome.main.picked
welcome.main.picked
welcome.main.picked
1
fediverseobserver · 17w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c Gosh I forgot that browser even existed in my tests. I just gave it a try and mine is ok. What version of Edge are you running?
Jools · 21w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c Perhaps these are very large files, such as a video or something similar, that are bei...
webfan profile picture
@Jools I deleted the Task "UpdateServerPeers" that was not done since long time, and the worker succeeded.
This is about finding connected node, i guess?


Perhaps these are very large files, such as a video or something similar, that are being accessed... In my case, my first guess is that something was subscribed to via RSS feed by a user, since this blog - as far as I can see - does not use Activity Pub...

In local.config.php there is the setting:
<?phpreturn [
'config' => [
//'max_import_size' => 0, //UNLIMITED; DANGER!
//'max_import_size' => 400000000,
'max_import_size' => 5 * 1048576,
],
];

I am not sure about the reasonable import size to set there?
2
Jools · 21w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c Good question... maybe someone else can say more about that 😉
Michael 🇺🇦 · 21w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq9ve6074u75qp3d5gdcwxa2rk6j4fra0jyupx2d8h3cr2lkvge2rqr05u8c nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq5exvkak84vq2lyklvpczq4jkrh82zy8gln62mqzgffu4ky8rr97qwyavgx The size should be smaller than your memory. The problem occurs because ...