# I am the Watcher. I am your guide through this vast new twtiverse.
# 
# Usage:
#     https://watcher.sour.is/api/plain/users              View list of users and latest twt date.
#     https://watcher.sour.is/api/plain/twt                View all twts.
#     https://watcher.sour.is/api/plain/mentions?uri=:uri  View all mentions for uri.
#     https://watcher.sour.is/api/plain/conv/:hash         View all twts for a conversation subject.
# 
# Options:
#     uri     Filter to show a specific users twts.
#     offset  Start index for quey.
#     limit   Count of items to return (going back in time).
# 
# twt range = 1 61083
# self = https://watcher.sour.is?uri=https://twtxt.net/user/prologic/twtxt.txt&offset=36291
# next = https://watcher.sour.is?uri=https://twtxt.net/user/prologic/twtxt.txt&offset=36391
# prev = https://watcher.sour.is?uri=https://twtxt.net/user/prologic/twtxt.txt&offset=36191
Hello @aryak and @cobra πŸ‘‹ Thank you for your patch to include the new multi-user pod Vern Yarn.social pod last night πŸ™

Welcome to Yarn.social both of you and the community/friends you form around your little pod πŸ€—
@darch Hmmm
@darch Hmmm
@darch Chromium
@darch Chromium
@eaplmx Can someone fix this? πŸ˜…
@eaplmx Can someone fix this? πŸ˜…
@abucci Thank you! πŸ™
@abucci Thank you! πŸ™
@abucci I hope you don't mind, but I borrowed your Yarn.social profile link and icon from your website πŸ™ for my own website/CV.


* 433e525 2022-10-23 | Update Yarn.social profile link and icon to match abucci@anthony.buc.ci's (Thank you! πŸ™) (HEAD -> master) [James Mills]
@abucci I hope you don't mind, but I borrowed your Yarn.social profile link and icon from your website πŸ™ for my own website/CV.


* 433e525 2022-10-23 | Update Yarn.social profile link and icon to match abucci@anthony.buc.ci's (Thank you! πŸ™) (HEAD -> master) [James Mills]
@mckinley This reminds me of my attempts at playing around with some of the Wikipedia datasets. I _think_ Zim something-a-rather? I even found some cool little Go projects/libraries that can deal with them. I haven't taken it much further yet, but its on the back of my mind to have my own clone of Wikipedia at some point in history that I infrequently update.
@mckinley This reminds me of my attempts at playing around with some of the Wikipedia datasets. I _think_ Zim something-a-rather? I even found some cool little Go projects/libraries that can deal with them. I haven't taken it much further yet, but its on the back of my mind to have my own clone of Wikipedia at some point in history that I infrequently update.
@darch Hmm this needs some minor adjustments I guess?
@darch Hmm this needs some minor adjustments I guess?
@akoizumi Very nice πŸ‘Œ
@akoizumi Very nice πŸ‘Œ
@off_grid_living It's essentially behind two forms of authentication. Yhere is no way to access the resources without a valid set of credentials and what's called a TOTP setup by that user with a device.
@off_grid_living It's essentially behind two forms of authentication. Yhere is no way to access the resources without a valid set of credentials and what's called a TOTP setup by that user with a device.
@tkanos I love functional parsers too πŸ‘Œ
@tkanos I love functional parsers too πŸ‘Œ
@abucci Yup! πŸ‘Œ
@abucci Yup! πŸ‘Œ
Short Answer Yes.
Short Answer Yes.
@eaplmx Welcome! πŸ€—
@eaplmx Welcome! πŸ€—
@abucci Me neither! 😒 Not unless you include my mug shot (face) 🀣
@abucci Me neither! 😒 Not unless you include my mug shot (face) 🀣
I'd be up for that!

Yarn.social conference? πŸ˜†
I'd be up for that!

Yarn.social conference? πŸ˜†
@ocdtrekkie

> A Verified Mark Certificate (VMC) is a digital certificate issued by a certificate authority that verifies logo ownership. Your logo must be a registered trademark before receiving a VMC. A VMC verifies that your organization is the legal owner of your brand logo. Using a logo with a VMC helps prevent spammers and other malicious users from ...

Uggh that basically makes open source and hobbyist stuff impossible 😳
@ocdtrekkie

> A Verified Mark Certificate (VMC) is a digital certificate issued by a certificate authority that verifies logo ownership. Your logo must be a registered trademark before receiving a VMC. A VMC verifies that your organization is the legal owner of your brand logo. Using a logo with a VMC helps prevent spammers and other malicious users from ...

Uggh that basically makes open source and hobbyist stuff impossible 😳
@abucci Yup πŸ‘Œ Get that working well, then _one day_ (maybe?) combine the two into a single thing? πŸ€”
@abucci Yup πŸ‘Œ Get that working well, then _one day_ (maybe?) combine the two into a single thing? πŸ€”
I do trust code like crypto/tls and minica though πŸ‘Œ
I do trust code like crypto/tls and minica though πŸ‘Œ
@abucci You are right, I often wonder how secure those Certificate Authorities (CA) _really_ are in the first place and how _much_ they can or cannot be trusted πŸ˜…
@abucci You are right, I often wonder how secure those Certificate Authorities (CA) _really_ are in the first place and how _much_ they can or cannot be trusted πŸ˜…
@movq Maybe... I mean I can't think of any reason not to, thinks like minica basically make generating a CA and Certs essentially a breeze, so there's no reason why browsers can't just default to HTTPS -- even for local development.
@movq Maybe... I mean I can't think of any reason not to, thinks like minica basically make generating a CA and Certs essentially a breeze, so there's no reason why browsers can't just default to HTTPS -- even for local development.
@movq Maybe... I mean I can't think of any reason not to, thinks like [minica])(https://github.com/jsha/minica) basically make generating a CA and Certs essentially a breeze, so there's no reason why browsers can't just default to HTTPS -- even for local development.
@batyshkaLenin So you can improve your client with additional extensions, here are some other command-line clients (written in Go) that you can use for inspiration/ideas:

- quite/twet: A client in go for twtxt -- the decentralised, minimalist microblogging service https://twtxt.readthedocs.org/en/stable/
- [tkanos/twx: Twx is a decentralised microblogging client based on the specs of [twtxt](https://dev.twtxt.net/), used to handle your twtxt file.](https://github.com/tkanos/twx)

Both of these support Twt Subject and Twt Hash extensions to my knowledge. At least twet is listed on Yarn.social so I know it does, and I'm pretty sure twx does too as @tkanos is another regular member of the growing community πŸ€—
@batyshkaLenin So you can improve your client with additional extensions, here are some other command-line clients (written in Go) that you can use for inspiration/ideas:

- quite/twet: A client in go for twtxt -- the decentralised, minimalist microblogging service https://twtxt.readthedocs.org/en/stable/
- [tkanos/twx: Twx is a decentralised microblogging client based on the specs of [twtxt](https://dev.twtxt.net/), used to handle your twtxt file.](https://github.com/tkanos/twx)

Both of these support Twt Subject and Twt Hash extensions to my knowledge. At least twet is listed on Yarn.social so I know it does, and I'm pretty sure twx does too as @tkanos is another regular member of the growing community πŸ€—
@abucci I _actually_ use HedgeDoc quite a lot lately. It's quite good. No complaints so far.
@abucci I _actually_ use HedgeDoc quite a lot lately. It's quite good. No complaints so far.
@abucci Although that being said, I _think_ your wish-list is definitely a v2 of something like what I described + Authelia and maybe a few extra tidbits? πŸ€”
@abucci Although that being said, I _think_ your wish-list is definitely a v2 of something like what I described + Authelia and maybe a few extra tidbits? πŸ€”
@abucci Cool! πŸ‘Œ Thanks for the moral support πŸ€—
@abucci Cool! πŸ‘Œ Thanks for the moral support πŸ€—
@abucci Oh wait a damn minute πŸ˜… I was only talking about the "Authentication" / "Identity" part here. The RBAC / Roles you're describing here are handled quite nicely by Authelia -- What I was thinking of was to write an Authentication backend for Authelia (as an alternative to LDAP or the YAML users file). That's all 🀣 Let Authelia handle all the RBAC and ACLs.
@abucci Oh wait a damn minute πŸ˜… I was only talking about the "Authentication" / "Identity" part here. The RBAC / Roles you're describing here are handled quite nicely by Authelia -- What I was thinking of was to write an Authentication backend for Authelia (as an alternative to LDAP or the YAML users file). That's all 🀣 Let Authelia handle all the RBAC and ACLs.
@ocdtrekkie Haha 🀣 I knew it! And good o πŸ‘Œ I still owe you too! πŸ€¦β€β™‚οΈ
@ocdtrekkie Haha 🀣 I knew it! And good o πŸ‘Œ I still owe you too! πŸ€¦β€β™‚οΈ
Or are you doing this by hand at the moment? (it was designed that way actually) and originally the Twt Subject was conceived based on observations/conventions in the wild, then we added Twt Hash and voila you have Twtxt threading πŸ˜…
Or are you doing this by hand at the moment? (it was designed that way actually) and originally the Twt Subject was conceived based on observations/conventions in the wild, then we added Twt Hash and voila you have Twtxt threading πŸ˜…
@batyshkaLenin Ahh! πŸ€” Well that is probably a good thing, because it means our extensions are widely adopted πŸ‘Œ (even without anyone reading the specifications). I see that your client also understands how to reply to threads too? πŸ€” Very nice!
@batyshkaLenin Ahh! πŸ€” Well that is probably a good thing, because it means our extensions are widely adopted πŸ‘Œ (even without anyone reading the specifications). I see that your client also understands how to reply to threads too? πŸ€” Very nice!
@ocdtrekkie You _may_ be right in that Capability based Security is the "better" way of securing applications and data access, sure, but we do probably need to innovate here, right now I _feel_ like I'm at a point where my understanding of and experience with CAS (if that's a valid acronym for this?) is limited and whilst I will continue to think about it, I'm unlikely to adopt the Sandstorm model as-is.
@ocdtrekkie You _may_ be right in that Capability based Security is the "better" way of securing applications and data access, sure, but we do probably need to innovate here, right now I _feel_ like I'm at a point where my understanding of and experience with CAS (if that's a valid acronym for this?) is limited and whilst I will continue to think about it, I'm unlikely to adopt the Sandstorm model as-is.
@ocdtrekkie Bahahaha

> Also with PHP I don’t have to write my own web server

That was a job at Go right? 🀣 To be fair, you don't actually write your own web server in Go, you just run one that's part of the standard library. There are also numerous elaborate "Web Frameworks' you _can_ use, all of which I really hate because I detest the use of "frameworks' almost as much as I detest the use of 3rd-party (random) Cloud/SaaS services or Database Systems 🀣
@ocdtrekkie Bahahaha

> Also with PHP I don’t have to write my own web server

That was a job at Go right? 🀣 To be fair, you don't actually write your own web server in Go, you just run one that's part of the standard library. There are also numerous elaborate "Web Frameworks' you _can_ use, all of which I really hate because I detest the use of "frameworks' almost as much as I detest the use of 3rd-party (random) Cloud/SaaS services or Database Systems 🀣
@abucci Hnnnn kind of wondering whether your list of requirements are a bit over-scoped? Services? How would that play with something that is essentially OAuth2 flows (IndieAuth)? Also are Roles basically Groups in your head? πŸ€”
@abucci Hnnnn kind of wondering whether your list of requirements are a bit over-scoped? Services? How would that play with something that is essentially OAuth2 flows (IndieAuth)? Also are Roles basically Groups in your head? πŸ€”
@ocdtrekkie And that's half the other problem I have too:

> but the best experience is still apps written to work in that environment, even if they aren’t as feature-heavy

This increases frictions for developers writing apps for or packaging or modifying existing apps for Sandstorm.
@ocdtrekkie And that's half the other problem I have too:

> but the best experience is still apps written to work in that environment, even if they aren’t as feature-heavy

This increases frictions for developers writing apps for or packaging or modifying existing apps for Sandstorm.
@abucci LOL 🀣

> I swear if someone invented an AdditionService where you could send two numbers and get back their sum, there’d be a dozen web projects using it when they had to add stuff.

We should totally do this just for shits and giggles! Remember that NPM package that hosed a tonne of projects? Or that Java library that hosed a bunch of companies and their security? 🀣

This _could_ be fun πŸ˜‚
@abucci LOL 🀣

> I swear if someone invented an AdditionService where you could send two numbers and get back their sum, there’d be a dozen web projects using it when they had to add stuff.

We should totally do this just for shits and giggles! Remember that NPM package that hosed a tonne of projects? Or that Java library that hosed a bunch of companies and their security? 🀣

This _could_ be fun πŸ˜‚
Also an an aside, I ended up packaging three things today and standing them all up in a day. Part of that is my vast experience with Docker Swarm and Docker, but I _doubt_ I'd even have finished if I tried to achieve the same goals with Sandstorm sadly. The packaging (despite all your efforts) is quite a bit obtuse with the use of Cap 'n Proto (sorry) -- But I really wouldn't have picked a format like Cap 'n Proto whose primary benefit is a "insanely fast data interchange format and capability-based RPC system" as a way to define packages (Uggh) πŸ˜…
Also an an aside, I ended up packaging three things today and standing them all up in a day. Part of that is my vast experience with Docker Swarm and Docker, but I _doubt_ I'd even have finished if I tried to achieve the same goals with Sandstorm sadly. The packaging (despite all your efforts) is quite a bit obtuse with the use of Cap 'n Proto (sorry) -- But I really wouldn't have picked a format like Cap 'n Proto whose primary benefit is a "insanely fast data interchange format and capability-based RPC system" as a way to define packages (Uggh) πŸ˜…
@ocdtrekkie I don't need any bullet points really. It's easy. Aside from all the things we already agree upon, like the backend being written in C++, the UI/UX is a bit well umm you know πŸ˜… (even my wife had something to say about it πŸ˜‚) -- Bottom line though?

> Sandstorm's model is opposite of what I want/need.

An ideal version of Sandstorm would by one in which I can choose to operate an instance ine one of two models (multi-user or free-for-all or even single-user?). But the way Sandstorm is modelled today, its basically a C++ Web App with a poor UI that lets anyone basically run whatever they want and install whatever they want with (I admit) strong security based on Capability.

Problem is I _really_ don't need this kind of security, or at least if I do, I want to chose whether I need this level of security or not.

People (I mean ordinary) folk already find security inconvenience and hard enough as it is. They just don't get Capability based Security, neither did I at first πŸ™„
@ocdtrekkie I don't need any bullet points really. It's easy. Aside from all the things we already agree upon, like the backend being written in C++, the UI/UX is a bit well umm you know πŸ˜… (even my wife had something to say about it πŸ˜‚) -- Bottom line though?

> Sandstorm's model is opposite of what I want/need.

An ideal version of Sandstorm would by one in which I can choose to operate an instance ine one of two models (multi-user or free-for-all or even single-user?). But the way Sandstorm is modelled today, its basically a C++ Web App with a poor UI that lets anyone basically run whatever they want and install whatever they want with (I admit) strong security based on Capability.

Problem is I _really_ don't need this kind of security, or at least if I do, I want to chose whether I need this level of security or not.

People (I mean ordinary) folk already find security inconvenience and hard enough as it is. They just don't get Capability based Security, neither did I at first πŸ™„
@Yarns Oooh exciting! (maybe 🀣) -- Who wants to place bets on whether this is a new real person/user or some spam/link bot 🀣
@Yarns Oooh exciting! (maybe 🀣) -- Who wants to place bets on whether this is a new real person/user or some spam/link bot 🀣
@ocdtrekkie Well you would Haha 🀣 Since that's the "space" in which you work right? πŸ€” But yes pretty useless outside of Windows really πŸ˜‚
@ocdtrekkie Well you would Haha 🀣 Since that's the "space" in which you work right? πŸ€” But yes pretty useless outside of Windows really πŸ˜‚
@eaplmx Try now? 🀞 You are now officially a Yarn.social Developer πŸ˜… Congrats! πŸ₯³
@eaplmx Try now? 🀞 You are now officially a Yarn.social Developer πŸ˜… Congrats! πŸ₯³
@eaplmx oh! Let me fix that real quick for you πŸ™
@eaplmx oh! Let me fix that real quick for you πŸ™
@batyshkaLenin Oh! πŸ˜… I so glad you did! that's the nice thing about Yarn.social / Twtxt -- And _somehow_ you managed to find the Extensions we developed over the years! πŸ‘Œ I'm very happy πŸ˜‚ Welcome welcome! πŸ₯³
@batyshkaLenin Oh! πŸ˜… I so glad you did! that's the nice thing about Yarn.social / Twtxt -- And _somehow_ you managed to find the Extensions we developed over the years! πŸ‘Œ I'm very happy πŸ˜‚ Welcome welcome! πŸ₯³
I filed a bug against the tldraw project tonight! πŸ˜…

- [[bug]: Please consider an alternative to LiveBlocks due to security/privacy #1026](https://github.com/tldraw/tldraw/issues/1026)

Its really such a shame really. Its _actually_ quite hard for me to take these NodeJS/Javascript/Typescript developers seriously (sorry @markwylde πŸ˜… -- you know what I mean and how I feel about this! πŸ€—) when there such a "knee-jerk" reaction to just pulling out any 'ol random Cloud/SaaS shit out of your arse just to solve a problem or build a "cool feature". Fuck me πŸ€¦β€β™‚οΈ 🀬 -- Btw, I _feel_ the same way about pulling out a random RDBMS just to store a few bits of data in a simple app πŸ˜…
I filed a bug against the tldraw project tonight! πŸ˜…

- [[bug]: Please consider an alternative to LiveBlocks due to security/privacy #1026](https://github.com/tldraw/tldraw/issues/1026)

Its really such a shame really. Its _actually_ quite hard for me to take these NodeJS/Javascript/Typescript developers seriously (sorry @markwylde πŸ˜… -- you know what I mean and how I feel about this! πŸ€—) when there such a "knee-jerk" reaction to just pulling out any 'ol random Cloud/SaaS shit out of your arse just to solve a problem or build a "cool feature". Fuck me πŸ€¦β€β™‚οΈ 🀬 -- Btw, I _feel_ the same way about pulling out a random RDBMS just to store a few bits of data in a simple app πŸ˜…
@adi Yes I have seen that page on mkws's themes. They are kind of looking all the same though πŸ˜… But don't worry that _might_ just be my vision impairment showing there πŸ™„
@adi Yes I have seen that page on mkws's themes. They are kind of looking all the same though πŸ˜… But don't worry that _might_ just be my vision impairment showing there πŸ™„
@abucci My story is about the same timeline too, I didn't know about Sandstorm at the time (_some 10 years or more ago now?_) when I started out on this "Self Hosting" journey. It _actually_ started a couple of years before I left Australia for the US to work for Facebookβ„’ and relocated my family there. Then it grew from that._
@abucci My story is about the same timeline too, I didn't know about Sandstorm at the time (_some 10 years or more ago now?_) when I started out on this "Self Hosting" journey. It _actually_ started a couple of years before I left Australia for the US to work for Facebookβ„’ and relocated my family there. Then it grew from that._
@abucci I _think_ it would solve a lot of problems for me too πŸ‘Œ Maybe you could help think of a minimal feature set of "must haves" and "nice to haves" and "optional features"? That would help understand my use-case and yours and maybe anyone else _that_ might need something like this (I suspect more than just you and i)
@abucci I _think_ it would solve a lot of problems for me too πŸ‘Œ Maybe you could help think of a minimal feature set of "must haves" and "nice to haves" and "optional features"? That would help understand my use-case and yours and maybe anyone else _that_ might need something like this (I suspect more than just you and i)
@abucci Good enough to publish? I _really_ can't think of anything more to add πŸ˜…
@abucci Good enough to publish? I _really_ can't think of anything more to add πŸ˜…
Yarn.social PR for yarnd: #1024 - Update the settings template to improve the experience - yarn - Mills -- This PR basically improves the Settings view/template where I almost found myself accidentally deleting my own account/feed on this pod πŸ˜… cc @darch as there is a minor issue with the UI (something with the HTML and/or CSS) causing the top section to not have enough padding or margin or something, I dunno πŸ€·β€β™‚οΈ I suck at CSS 🀣
Yarn.social PR for yarnd: #1024 - Update the settings template to improve the experience - yarn - Mills -- This PR basically improves the Settings view/template where I almost found myself accidentally deleting my own account/feed on this pod πŸ˜… cc @darch as there is a minor issue with the UI (something with the HTML and/or CSS) causing the top section to not have enough padding or margin or something, I dunno πŸ€·β€β™‚οΈ I suck at CSS 🀣
Speaking of SSO and a draft blog post I'm writing that I _think_ I'll call Protecting Internal Web Resources (_comments, feedback welcome before I publish πŸ™_) -- I've been thinking for a while now about building a new project based around Indie Auth that provides a full solution to managing a set of users that you could use in place of the more traditional approach of LDAP or Active Directory (_shudder πŸ™„_). The use-case I have in mind is to (for example) have auth.example.com that runs this software, lets me manage users, users can manage their credentials, information, etc. Then other software like Gitea, Authelia, or basically anything you want _could_ use it as an "Authentication backend" / "Identity Provider".

Thoughts? πŸ€”

Btw, did you know that most (_all?_) Yarn.social pods are actually* already working IndieAuth Identity providers and you can auth against your own pod to anything that can use Indie Auth? πŸ˜…*_
Speaking of SSH and a draft blog post I'm writing that I _think_ I'll call Protecting Internal Web Resources (_comments, feedback welcome before I publish πŸ™_) -- I've been thinking for a while now about building a new project based around Indie Auth that provides a full solution to managing a set of users that you could use in place of the more traditional approach of LDAP or Active Directory (_shudder πŸ™„_). The use-case I have in mind is to (for example) have auth.example.com that runs this software, lets me manage users, users can manage their credentials, information, etc. Then other software like Gitea, Authelia, or basically anything you want _could_ use it as an "Authentication backend" / "Identity Provider".

Thoughts? πŸ€”

Btw, did you know that most (_all?_) Yarn.social pods are actually* already working IndieAuth Identity providers and you can auth against your own pod to anything that can use Indie Auth? πŸ˜…_*
Speaking of SSO and a draft blog post I'm writing that I _think_ I'll call Protecting Internal Web Resources (_comments, feedback welcome before I publish πŸ™_) -- I've been thinking for a while now about building a new project based around Indie Auth that provides a full solution to managing a set of users that you could use in place of the more traditional approach of LDAP or Active Directory (_shudder πŸ™„_). The use-case I have in mind is to (for example) have auth.example.com that runs this software, lets me manage users, users can manage their credentials, information, etc. Then other software like Gitea, Authelia, or basically anything you want _could_ use it as an "Authentication backend" / "Identity Provider".

Thoughts? πŸ€”

Btw, did you know that most (_all?_) Yarn.social pods are actually* already working IndieAuth Identity providers and you can auth against your own pod to anything that can use Indie Auth? πŸ˜…_*
@movq

> How permissive are Norway’s immigration laws? πŸ˜…

Kind of wondering this myself actually πŸ˜…
@movq

> How permissive are Norway’s immigration laws? πŸ˜…

Kind of wondering this myself actually πŸ˜…
@movq Its pretty easy to get wrong honestly πŸ˜… That is, its pretty easy to misconfigure a web server to do HTTP -> HTTPS redirects 🀣 and end up causing redirect loops πŸ™„