Just another Swedish programming sysadmin person.
Coffee is always the answer.

And beware my spaghet.

  • 60 Posts
  • 271 Comments
Joined 3 years ago
cake
Cake day: June 11th, 2023

help-circle


  • Om man läser i de diskussioner som skett kring federering i projektet så har det redan ratats att använda någon W3C eller IETF standard för federering, så ett egenutvecklat protokoll av något slag ser troligast ut, där kommentarerna också lutade hårt emot att federering med icke-Fluxer mjukvaror sågs som en bugg mer än en funktion.

    Det lät rätt mycket som att “federering” egentligen kommer betyda delegerad auth, där din klient - kanske med hjälp av ett relä på din instans - pratar separat mot varenda server i federeringen, istället för att bygga en faktiskt federerad lösning.


  • Lösningen på att en centraliserad kommersiell plattform ställer till problem för sina användare är verkligen inte att skapa en ny centraliserad plattform, speciellt inte om den också planerar att bli en kommersiell produkt.
    V har redan bevisat att det går att skapa distribuerade/federerade lösningar för det här, som då också är helt säkra mot problemen som Discord just nu uppvisar. Det skulle vara mycket bättre om folk fokuserade mer pengar och utvecklartid mot sådana lösningar istället, så att vi inte blir sittande i den här sitsen igen i framtiden.







  • As a note, the EU requirements for cookie banners actually have a few interesting requirements.

    So they engineered the consent mechanism to be as high-friction as possible to say “no”, while the “yes, violate my privacy” choice is always a single click.

    A consent dialog needs to offer a “decline” option that’s at least as easy to access as the “agree” option. If they try to coerce you to give consent simply to avoid tedium, then that consent mechanism is in violation of GDPR.

     

    Also a fun tidbit;
    Ended up sharing a table at a speakers dinner in 2019 with a guy who worked for the same advertisement company that caused the Target scandal (among others). He had some interesting things to share about how such things happen, and also how the advertisement industry works internally.
    It’s got a remarkable amount of parallels to high-frequency trading.




  • I actually recently added the Microsoft logout page to µblocks domain filter at work, since it would every now and then trigger a logout the very first page load after I’d log in to the email there.

    This has also somehow caused a bunch of other AD-connected systems to suddenly behave a lot better when it comes to session termination.

     

    Edit: Since people were asking for it, this is what you need to add to the “My filters” tab in your UBO config;

    ||login.microsoftonline.com/common/oauth2/v2.0/logout^$document
    

    This will prevent any requests from redirecting you to log out, timeouts etc will still invalidate your session.









  • Again, it works until it requires reloading, i.e. the next update of any component or the next restart of the server.

    I’m also running an inode cache on the client side, on top of the persistent opcache, but due to the sheer number of files that Nextcloud consists of it still generates a frankly ridiculous amount of calls when it needs to invalidate the cache. If you’re running on local drives then that’s likely much less of an issue, regardless of what kind of drive it is, but this is hosted on machines that do not have any local storage.