Toots for alderwick@merveilles.town account

Written by Andy Alderwick on 2025-01-25 at 21:04

All of Ofcom's (the UK regulator responsible for enforcing the Online Safety Act) examples have numbers of monthly users (≍ visitors) of 5000 or above. Usually much more than 5k.

So what is the threshold for “significant”? It's never defined — neither in the legislation nor in Ofcom's advice.

:eccehomo:

If I can't see what's up from down with this legislation, how are Merveilles' Mastodon instance or forum going to comply too? (Because this law applies no matter where the operators live.)

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2025-01-25 at 20:58

Oh no…

According to the #OnlineSafetyAct, users to the Merveilles Git Forge aren't just the ones with accounts… it's everyone that visits the website too :flan_facepalm:

So while I'm fighting bots hammering the service (https://mastodon.gamedev.place/@reidrac/113889142183511732), I'm also meant to be tracking the humans in order to count them. And geo-locating them too.

All in order to gather evidence that there aren't a significant number of UK visitors. But let's say I did, and found that there are 500. Is that significant?

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2025-01-23 at 01:56

Introducing my favourite goblin for #GoblinWeek: Zephyr Grimspark, the engineer from Wylde Flowers.

“I heard that during Fall, humans like to jump into piles of leaves. Why would ya do that? Leaves are covered with bugs! Jump in a pile of lithium metal instead! It's real soft!”

If you'd like to watch a cosy playthrough, I recommend LadyShelab's! https://redirect.invidious.io/playlist?list=PL9EBq1DyhMVBk3kjGKoJ-GFADIj5v-30R

=> View attached media

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2025-01-14 at 11:07

Then I woke up. 🙀

I'm astonished that my dream world would conjure up a reality where English and Welsh Law is so easily readable!

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2025-01-14 at 11:03

With the new Online Safety Act on my mind, I was reading through a legal summary of what you have to do when running an online service to be complaint with all English and Welsh Law, not just the Online Safety Act.

I'd just got to the bit where it says that (again, outside the UK things are different) if you are running Microsoft Internet Information Services (IIS) as your web server, that is considered to be “Plating” and you are exempt from a number of checks you must otherwise carry out.

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2025-01-03 at 17:35

My custom, secure networking code is just like an onion: when I deal with it, my eyes sting and I start sobbing uncontrollably :flan_hacker:

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-31 at 23:00

Happy New Year 12025! :flan_hurrah:

Will we get to see pictures of simultaneous aurorae and fireworks from folk at high latitudes? :flan_ooh:

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-22 at 08:48

@welshpixie Thank you for tooting about getting games working with Proton! I've just bought Ooblets and it's working fine under Debian and my 90's window manager :flan_thumbs:

=> View attached media

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-13 at 17:43

Turns out this time of year is ideal to go on antibiotics that say that I need to avoid strong sunlight (because it sensitises the skin).

Our solar panels have generated 4.0 kWh over the last seven days. A single sunny day in winter will generate 5 kWh (and 22 kWh in summer).

Plus, achievement unlocked: after driving other people to hospital so many times over the years, I get to drive myself in today ✅

So lack of DecAdv updates weren't just me being tired, I have a chest infection as well :flan_sick:

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-08 at 03:06

Just listening to Mute (Feelings) from the Analogue: A Hate Story soundtrack and it still gives me spine tingles, @io :flan_heart:

[#]theStudio

=> View attached media

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-07 at 20:01

OpenBSD → Debian replacement complete. Stop the clock! #Bitburner

=> View attached media

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-07 at 15:58

Due to hardware failures/problems with my laptop, I'm having to go back to Debian after running OpenBSD for so many months.

I have discovered with surprise that I have Feelings about this :flan_piteous:

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-06 at 02:36

[#]DecemberAdventure Day 5 has me struggling with OAuth 2.0 for Divan Divan. With thanks to @evert at https://indieweb.social/@evert/113601034991042721, I had the confidence to fork an Alpine package that only does OpenID Connect and made it work with OAuth 2.0. (The patch was already at https://github.com/zmartzone/lua-resty-openidc/pull/262 but was rejected by the maintainer.)

Phew! For what's meant to be a smol cute project, there's been plenty of pre-work involved before it becomes something more exciting :flan_ball:

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-05 at 15:53

Edit: This has been answered :flan_hurrah:

I'm super confused after reading http://www.thread-safe.com/2012/01/problem-with-oauth-for-authentication.html and its take-home message that we should not be using #OAuth2 for authentication: that's what #OpenIDConnect is for.

If that's the case, why does #Forgejo, Gitea etc. allow OAuth2 to be used this way?

That blog post was from 2012 but I've seen the same advice in 2019 at https://github.com/zmartzone/lua-resty-openidc/issues/261#issuecomment-483841062 : “OAuth 2.0 cannot be used for user authentication”. (That GH issue is part of what I'm chasing down as part of dev work.)

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-05 at 01:44

[#]DecemberAdventure Day 4 has me worrying about secrets for Divan Divan. Secrets everywhere.

No surprises that this absolute banger of a track has been on my mind all day :flan_metal:​:

Williams Syndrome — Secrets

https://redirect.invidious.io/watch?v=6457Hm7-GNE

[#]theStudio

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-04 at 02:15

Been working more on Divan Divan for day 3 of #DecemberAdventure.

I have an Alpine Linux repo with a package for CouchDB, and a recipe to boot a VM from scratch into Alpine with CouchDB running. A lot of time was spent getting that package created.

After playing with OpenResty as a webserver, I realise that it's a perfect match for the job. So next step is to expand the recipe to install OpenResty from Alpine's regular repositories and get it configured.

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-02 at 22:47

I'm sure this was a sensible use of my time, but when I came up with this pun I couldn't let it go.

A system built around CouchDB, and uses containers… :flan_think: plus of course the most stylish things come from the 80s.

Is it a working title? Is it a cry for help? Why not both?

Presenting… Divan Divan :flan_metal:

=> View attached media

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-02 at 21:38

[#]DecemberAdventure for today is exploring an idea I've had for community hosting:

• hosts with public IPv4/v6 addresses have HTTP(S) and WireGuard ports forwarded to a VM running a web server and CouchDB

• hosts without public access run a VM that connects to the WireGuard mesh

• both types of host run payloads — easiest to imagine are Docker / Podman containers — that get accessed by URLs on the public webservers

• configuration on what is hosted where, WireGuard public keys, and collaboration on ACME protocol to obtain SSL certs are all mediated through CouchDB replication

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-01 at 13:51

¹ These VPSes are an average of 0.60 € per month, so I'm not going to involve their support on trying to fix their fussy router.

=> More informations about this toot | View the thread

Written by Andy Alderwick on 2024-12-01 at 13:50

This #DecemberAdventure starts with some #SysadminStrife:

• I have three new VPSes to experiment on :flan_hurrah:

• IPv6 works on Linux, but not OpenBSD :flan_hulk:

• if I hack the neighbour advertisement packets that OpenBSD sends, then IPv6 works! :flan_hacker:

I have a proof-of-concept working, now I need to integrate it so whenever OpenBSD tries to send an “incorrect”¹ packet, my program intercepts it and sends the “correct” packet instead.

=> More informations about this toot | View the thread

=> This profile with reblog | Go to alderwick@merveilles.town account

Proxy Information
Original URL
gemini://mastogem.picasoft.net/profile/423819
Status Code
Success (20)
Meta
text/gemini
Capsule Response Time
403.478691 milliseconds
Gemini-to-HTML Time
6.462982 milliseconds

This content has been proxied by September (ba2dc).