# I am the Watcher. I am your guide through this vast new twtiverse.
# 
# Usage:
#     https://watcher.sour.is/api/plain/users              View list of users and latest twt date.
#     https://watcher.sour.is/api/plain/twt                View all twts.
#     https://watcher.sour.is/api/plain/mentions?uri=:uri  View all mentions for uri.
#     https://watcher.sour.is/api/plain/conv/:hash         View all twts for a conversation subject.
# 
# Options:
#     uri     Filter to show a specific users twts.
#     offset  Start index for quey.
#     limit   Count of items to return (going back in time).
# 
# twt range = 1 196279
# self = https://watcher.sour.is?offset=167656
# next = https://watcher.sour.is?offset=167756
# prev = https://watcher.sour.is?offset=167556
@lyse Yeah @xuu has a Paul request to fix this already so I'll have a look at that and get that merge soon.
@lyse Yeah @xuu has a Paul request to fix this already so I'll have a look at that and get that merge soon.
@bender you mean to say always show the domain part for mentions even on the same pod?
@bender you mean to say always show the domain part for mentions even on the same pod?
@stigatle very nice 👌
@stigatle very nice 👌
🧮 USERS:1 FEEDS:2 TWTS:1052 ARCHIVED:77238 CACHE:2443 FOLLOWERS:17 FOLLOWING:14
@xuu 😂😂😂😂😂😂
@movq my bad man. I left off a return in the formatter func. I have a PR to fix waiting on @prologic
@movq my bad man. I left off a return in the formatter func. I have a PR to fix waiting on @prologic
@lyse wow on my browser it shows up as all stars! •••••••
@lyse wow on my browser it shows up as all stars! •••••••
So, the client now has a lot of features. I will work on fixing the @ mentions tomorow, making it like this: @username in bold. Will also see if I can fix so that users already mention in a post you click 'reply' on is also put into the status text field. When these things are sorted the flutter version has the same features as the GTK4 client. I'm quite pleased with the result of the conversion to flutter so far. Finally got motivated to work with it, which feels good.
@stigatle all good.
one more test..
[47°09′06″S, 126°43′40″W] Wind speed: 83kph
Getting started on the last week of vacation as well now. So I'm definately gonna enjoy the next week to the max :)
Today I got to have a nice motorcycle trip with my daughter, we drove the road at the coast here, to the beach, sat there and had some soda and drove back again :) Was really nice. Weather has been great today, really warm and the sun is out.
test 2
test 1
@(#jcbcpoa) test 2
test 1
Im back, yesterday I took it really easy, and today Im still taking it easy, but left the bedroom before noon.
@mckinley Or … just turn it off. 🥴
@mckinley Or … just turn it off. 🥴
@mckinley Or … just turn it off. 🥴
@mckinley Or … just turn it off. 🥴
I meant, they both work. The pedantic in me would like it to be consistent, and the same, all the time.
[47°09′07″S, 126°43′06″W] Wind speed: 86kph
@lyse good idea! Thanks for looking out for me, mate. Password changed to a slight, more secure, variation: hunter3!.
Hello, IT, have you tried turning it off and back on again?
@prologic Thanks for reverting! Now we just have to properly fix the bug. Or decide whether this attribute feature is really needed in the first place.
Let me suggest to use a more secure password, @bender. One, that does not contain "password". Like hunter2!!
@bender Hmm none whatsoever in the feed they are teh same:


2024-08-03T23:24:20Z\t(#iztis3a) @<bender https://twtxt.net/user/bender/twtxt.txt> LOL 🤣
2024-08-03T23:24:54Z\t(#thfnzga) @<bender https://twtxt.net/user/bender/twtxt.txt> LOL 🤣


However just noticed both of these now render the same again, weird 🤔
@bender Hmm none whatsoever in the feed they are teh same:


2024-08-03T23:24:20Z	(#iztis3a) @<bender https://twtxt.net/user/bender/twtxt.txt> LOL 🤣
2024-08-03T23:24:54Z	(#thfnzga) @<bender https://twtxt.net/user/bender/twtxt.txt> LOL 🤣


However just noticed both of these now render the same again, weird 🤔
@bender Hmm none whatsoever in the feed they are teh same:


2024-08-03T23:24:20Z	(#iztis3a) @<bender https://twtxt.net/user/bender/twtxt.txt> LOL 🤣
2024-08-03T23:24:54Z	(#thfnzga) @<bender https://twtxt.net/user/bender/twtxt.txt> LOL 🤣


However just noticed both of these now render the same again, weird 🤔
Many thanks @lyse 🙏
Many thanks @lyse 🙏
Or rather reverted lextwt (_for the time being_)
Or rather reverted lextwt (_for the time being_)
Fixed! 💪
Fixed! 💪
The Android system upgrade tool on my phone (Android 13 → 14) is so clever, it can only update via WLAN – not LAN. Booo!

But hey, at least there *is* a system upgrade tool.
The Android system upgrade tool on my phone (Android 13 → 14) is so clever, it can only update via WLAN – not LAN. Booo!

But hey, at least there *is* a system upgrade tool.
The Android system upgrade tool on my phone (Android 13 → 14) is so clever, it can only update via WLAN – not LAN. Booo!

But hey, at least there *is* a system upgrade tool.
The Android system upgrade tool on my phone (Android 13 → 14) is so clever, it can only update via WLAN – not LAN. Booo!

But hey, at least there *is* a system upgrade tool.
@bender ROFL 🤣 So now you want Twts to be analyzed for secrets, keys and what not before posting and some kind of DLP ?! 😱 Farrrrrkkkkk 🤣
@bender ROFL 🤣 So now you want Twts to be analyzed for secrets, keys and what not before posting and some kind of DLP ?! 😱 Farrrrrkkkkk 🤣
@prologic 🥳🥳🥳 That’s good! I wasn’t looking forward to change my password123 password (you should see that at your end as *********, due to Yarn’s high security measures).
Scratch that. Bug found! 🐞
Scratch that. Bug found! 🐞
@lyse More on #yarn.social on LiberaChat (IRC) obviously 🙄
@lyse More on #yarn.social on LiberaChat (IRC) obviously 🙄
Git bisecting reveals https://git.mills.io/yarnsocial/yarn/commit/3a760502be273c306b488f8815adfd85b97a37f0 from five weeks ago. This updates all sorts of dependencies. Markdown and lextwt jump into my eye. These are my best bets so far.
@prologic 'Clownflare' 🤣🤣🤣 Love it.

But yes the idea of a cheap VPS as a tunnel and keeping home network all local is a good one I reckon.
@lyse I _think_ it's these lines of code: https://git.mills.io/yarnsocial/yarn/src/commit/5101ec240ddb0e5e39809bf8a7b847508b3ac298/internal/feed.go#L162-L166
@lyse I _think_ it's these lines of code: https://git.mills.io/yarnsocial/yarn/src/commit/5101ec240ddb0e5e39809bf8a7b847508b3ac298/internal/feed.go#L162-L166
@prologic Yep. Doesn't matter if JS in turned on or not. So it is somewhere hiding in the Go core. Some replacement going berserk, I'd say.

It happens to each bracketed text individually: https://lyse.isobeef.org/tmp/bracketed-text/triple.png

But then the question still is, why on earth does it happen to old twts, too? I'm getting into my code excavator.
It's also (_expectedly_) in the feed file on disk:


2024-08-04T21:22:05+10:00\t[foo][foo=][foo][foo=]
It's also (_expectedly_) in the feed file on disk:


2024-08-04T21:22:05+10:00	[foo][foo=][foo][foo=]
It's also (_expectedly_) in the feed file on disk:


2024-08-04T21:22:05+10:00	[foo][foo=][foo][foo=]
@lyse Holy fucking shit! You're right! You got me out of bed for this one, I spun my local dev instance and entered a Twt with [foo] and ended up with [foo][foo=][foo][foo=] wut da actual fuq?! 🤔
@lyse Holy fucking shit! You're right! You got me out of bed for this one, I spun my local dev instance and entered a Twt with [foo] and ended up with [foo][foo=][foo][foo=] wut da actual fuq?! 🤔
The reason I think this is some kind of attack is based on the repeated content and some of its uniqueness 🤔 This is so uncharacteristic if both victims 🤔
The reason I think this is some kind of attack is based on the repeated content and some of its uniqueness 🤔 This is so uncharacteristic if both victims 🤔
@stigatle Nice one 🥳 Kooking really good! 👌
@stigatle Nice one 🥳 Kooking really good! 👌
@lyse I'm not sure this is a bug to be honest? What possible code could cause this?! 🤔
@lyse I'm not sure this is a bug to be honest? What possible code could cause this?! 🤔
Righto, @prologic, I just checkout out current main of yarnd (commit 5101ec240ddb0e5e39809bf8a7b847508b3ac298) and ran make dev. After registering a user and logging in, I then entered a twt with double bracketed text (without the equal sign on the second one, though) and it was expanded into eight brackets. So, this is clearly a bug. Let me dig deeper.

I hope I zoomed in enough, so you can read the stuff on my screenshot: https://lyse.isobeef.org/tmp/bracketed-text/bug.png
@lyse Thank you! 🙏
@lyse Thank you! 🙏
[47°09′19″S, 126°43′41″W] Working impossible due to thunderstorm
@prologic To clarify, I meant some kind of a cache poisoning attack using the gossipping mechanism to inject garbage on purpose. Not hijacked user accounts.

However, since this all relates to bracketed text, I do not find an attack of some sort very likely. It's probably just a bug somewhere.
Media upload works, light\dark theme enabled. Tested it on debian\windows - works out of the box, statusbar moved to bottom for cleaner UI. Next is working more on ui when it refreshes the timelines. .
Media upload works, light\\dark theme enabled. Tested it on debian\\windows - works out of the box, statusbar moved to bottom for cleaner UI. Next is working more on ui when it refreshes the timelines. .
@prologic Here's an attempt at an analysis: https://lyse.isobeef.org/tmp/bracketed-text/

I just set up a cronjob to fetch and analyze both feeds every six hours. I probably have to do some dedup, otherwise the list gets out of handy rather quickly.
@lyse Yes

> How do the feeds look on disk? Do they already contain this bracketed text?

Because the handle just serves the Twtxt file directly.
@lyse Yes

> How do the feeds look on disk? Do they already contain this bracketed text?

Because the handle just serves the Twtxt file directly.
@bender / @mckinley could you both please change your password immediately? I will also work on some other security hardening that I have a hunch about, but will not publicize for now.
@bender / @mckinley could you both please change your password immediately? I will also work on some other security hardening that I have a hunch about, but will not publicize for now.
Hmm I see it! It's so obvious 🤦‍♂️ I smell an attack of some kind.
Hmm I see it! It's so obvious 🤦‍♂️ I smell an attack of some kind.
@lyse No problems! Is it stils in the list when I redo this search, it'll be gone 😅
@lyse No problems! Is it stils in the list when I redo this search, it'll be gone 😅
@lyse This is really weird. Do you have an example of this bracketed text? Re peers, I'm aware of all the peers, nothing surprising there.
@lyse This is really weird. Do you have an example of this bracketed text? Re peers, I'm aware of all the peers, nothing surprising there.
Running from Little Debbie: 12.20 miles, 00:10:43 average pace, 02:10:47 duration
was hoping for a breeze or some rain from this tropical depression "debbie" but saw none of that until i had stopped. broke it up in 4 mile blocks and walked a bit to regain composure/heart rate. had some at the end with speed. funny how the only people i saw out today were runners.
#running
Running from Little Debbie: 12.20 miles, 00:10:43 average pace, 02:10:47 duration
was hoping for a breeze or some rain from this tropical depression "debbie" but saw none of that until i had stopped. broke it up in 4 mile blocks and walked a bit to regain composure/heart rate. had some at the end with speed. funny how the only people i saw out today were runners.
#running
Running from Little Debbie: 12.20 miles, 00:10:43 average pace, 02:10:47 duration
was hoping for a breeze or some rain from this tropical depression "debbie" but saw none of that until i had stopped. broke it up in 4 mile blocks and walked a bit to regain composure/heart rate. had some at the end with speed. funny how the only people i saw out today were runners.
#running
And now, @bender's feed changed, too. Bracketed text got duplicated once again.

How do the feeds look on disk? Do they already contain this bracketed text?

For reference, I just placed a copy of the feed here: https://lyse.isobeef.org/tmp/bracketed-text/bender-2024-08-04-10-34.txt

I haven't marked the changed twts by @mckinley as read last time, so I don't know if something changed there as well. In any case, current snapshot: https://lyse.isobeef.org/tmp/bracketed-text/mckinley-2024-08-04-10-39.txt

Yarnd gossipping might be the reason for the truncated stuff, @prologic. Who are your peers? Any obvious broken yarnd version or even some kind of an attacker involved? But there must be something else broken in yarnd for the bracketed text to be duplicated.
@bender This one had me laugh real hard! :'-D Well done, mate.
@prologic Ah, I already forgot that I had a backup user Let's get rid of this guy. :-)
[47°09′12″S, 126°43′43″W] Working impossible due to blizzard
https://www.teotimepacreau.fr/blog/modelisation-base-de-donnees/ #sql
@prologic In that screenshot (https://twtxt.net/media/7c3rEWveU64SAxrXZ6CDYS.png), all the bracketed stuff is duplicated again, compared to lyse’s original twt. I suspect that’s the cause for the changed hash.

I could not reproduce this by manually duplicating those text areas in lyse’s twt. I end up with the hash pjdciga instead, but I probably mistyped something.
@prologic In that screenshot (https://twtxt.net/media/7c3rEWveU64SAxrXZ6CDYS.png), all the bracketed stuff is duplicated again, compared to lyse’s original twt. I suspect that’s the cause for the changed hash.

I could not reproduce this by manually duplicating those text areas in lyse’s twt. I end up with the hash pjdciga instead, but I probably mistyped something.
@prologic In that screenshot (https://twtxt.net/media/7c3rEWveU64SAxrXZ6CDYS.png), all the bracketed stuff is duplicated again, compared to lyse’s original twt. I suspect that’s the cause for the changed hash.

I could not reproduce this by manually duplicating those text areas in lyse’s twt. I end up with the hash pjdciga instead, but I probably mistyped something.
@prologic In that screenshot (https://twtxt.net/media/7c3rEWveU64SAxrXZ6CDYS.png), all the bracketed stuff is duplicated again, compared to lyse’s original twt. I suspect that’s the cause for the changed hash.

I could not reproduce this by manually duplicating those text areas in lyse’s twt. I end up with the hash pjdciga instead, but I probably mistyped something.
[47°09′37″S, 126°43′23″W] Wind speed: 43kph -- batteries low