jdev - 2024-09-06

> But you can tell a reaction without any extra metadata just by looking at the content and seeing it is a single emoji I will try it. ↺

edhelas. How do you check for a reaction?

> edhelas. How do you check for a reaction? The good thing about Movim is that the code is actually open :) ↺

https://github.com/movim/movim/blob/a4b89e1a571ebf4328a7112a146d84f38775fc7c/app/Post.php#L718

> The good thing about Movim is that the code is actually open :) edhelas. Thank you. I know. I do not know where to look. ↺

This is nice. Thank you. edhelas. ``` public function isLike() { return ($this->contentraw == '♥' || $this->content == '♥'); } ```

edhelas. I think a post about XEP-0004 would be relevant to many others; and it would generate some traffic to you. https://github.com/movim/movim/blob/master/src/Moxl/Stanza/Storage.php

anyone ever tried to follow the certificate transparency log to scan for XMPP servers ? Seems good in theory... in practice looks like ~150 domains per second

Schimon: regarding pubsub reaction, Libervia don't use comments, and won't. I've authored a specification for that: https://xmpp.org/extensions/xep-0470.html it works with any pubsub node, it's not restricted to blogging.

Schimon: I can't follow all discussions here, so please ping me if you have pubsub related stuff.

moparisthebest, I tried running the monitoring thing, it set my disks on fire.

moparisthebest: certificate transparency is so noisy. In practise for many people I expect it's hard to derive value from it. Oh a new cert issued for my domain? Why? Oh some automated process somewhere or at one of my hosting or dns companies happened to run today I guess

It would work for small selfhoster. That don't have an extensive sever and vserver cluster

And that have a gut knowledge of when their cronjobs run and don't use any services that need a cert for any reason

> moparisthebest, I tried running the monitoring thing, it set my disks on fire. Hehe yes my disks are currently burning I think I'm going to do some filtering up front and see how many domains that excludes, there are so many that are super long and have 10 levels of subdomains, maybe I'll skip all > 3 .'s for now ↺

but aren't CT logs some kind of blockchain, thus you can't filter the logs, you need all of them

What I would *like* to do is run this monitoring over 3 months which should give basically all domain names with certificates, and then try to connect to each one recording whether it supports c2s and/or s2s, and the protocols it supports for each

> but aren't CT logs some kind of blockchain, thus you can't filter the logs, you need all of them Yes, reading them all isn't the problem, I was trying to store them all in sqlite so I could do ^ later but it's going to be way too many ↺

Something something kafka

Poor peoples shodan

Also I'm surprised by the number of wildcard certs, looking like nearly 30% are wildcard

Everybody loves wildcards. In DNS, in certs, everywhere!

Menel: hehe well in ways it's better, shodan is useless for IPv6 and iirc non-standard-ports

my cert has 3 wildcards in it

Ah I thoughteith enough money it would work with everything. Wildcard will of course hide some servers. That's the goal (my goal why I use wildcards)

> Schimon: I can't follow all discussions here, so please ping me if you have pubsub related stuff. Thank you. goffi. I will! ↺