ChanServ changed the topic of #freedesktop to: https://www.freedesktop.org infrastructure and online services || for questions about freedesktop.org projects, please see each project's contact || for discussions about specifications, please use https://gitlab.freedesktop.org/xdg or xdg@lists.freedesktop.org
<heftig>
they're not generated client-side; they're loaded through the server
<heftig>
you should see user agents like Synapse/1.127.0 for these
ximion1 has joined #freedesktop
scrumplex has joined #freedesktop
scrumplex_ has quit [Ping timeout: 480 seconds]
ximion has quit [Ping timeout: 480 seconds]
JanC is now known as Guest13285
JanC has joined #freedesktop
Guest13285 has quit [Ping timeout: 480 seconds]
luc has joined #freedesktop
JanC is now known as Guest13287
JanC has joined #freedesktop
Guest13287 has quit [Ping timeout: 480 seconds]
AldairsilvaSilva[m] has joined #freedesktop
AldairsilvaSilva[m] has left #freedesktop [Kicked by @bot.draupnir:gstreamer.org : spam]
jramsay has joined #freedesktop
lack has quit [Ping timeout: 480 seconds]
JanC is now known as Guest13292
JanC has joined #freedesktop
Guest13292 has quit [Ping timeout: 480 seconds]
luc has quit [Remote host closed the connection]
jturney has quit [Ping timeout: 480 seconds]
sima has joined #freedesktop
swatish2 has joined #freedesktop
ximion1 has quit [Remote host closed the connection]
swatish21 has joined #freedesktop
swatish2 has quit [Ping timeout: 480 seconds]
andy-turner has joined #freedesktop
eric_engestrom has quit [Read error: Connection reset by peer]
eric_engestrom has joined #freedesktop
tzimmermann has joined #freedesktop
jturney has joined #freedesktop
sghuge has quit [Remote host closed the connection]
sghuge has joined #freedesktop
Hoolootwo has quit [Ping timeout: 480 seconds]
swatish21 has quit [Ping timeout: 480 seconds]
Hooloovoo has joined #freedesktop
swatish2 has joined #freedesktop
<DragoonAethis>
__tim: latest Anubis versions has a fix that can add OpenGraph headers on the challenge page, so that problem will be fixed as people upgrade
AbleBacon has quit [Remote host closed the connection]
<emersion>
but the opengraph tags will not be per-page, or will they?
<emersion>
(you can't really tell what the tags would be without rendering the web page)
<bentiss>
the webservice pods are slowly recovering
<bentiss>
FWIW, regarding anubis, this is not compatible with fastly as a simple frontend. So I'm looking for a compute solution on the fastly side to automatically validate the JWT token from anubis, and if there is none, do a request to anubis first, and if the asnwer is OK, pass the request to the actual gitlab endpoint
<slomo>
gitlab is a bit slow right now (but working). fallout from the above, or something else broken?
<bentiss>
I'd assume fallout from the above: all webservice pods were detected as down a few minutes ago, so I guess the requests to fsn1 are just taking too much time, preventing new connections
swatish2 has quit [Ping timeout: 480 seconds]
<martink>
heya! can somebody in the know share what conditions have to be met before one can invoke MargeBot?
<martink>
referring to getting the rights to invoke MB
<DragoonAethis>
emersion: they are proxying OpenGraph tags, so yep, per page
<bentiss>
martink: if margebot is already enabled in the project, you need developer access to it, if not, you need to submit a MR to add marge to your project to https://gitlab.freedesktop.org/freedesktop/fdo-bots
<emersion>
so, they generate the page when users hits the proof-of-work wall?
<emersion>
i don't understand how this can work at all
<DragoonAethis>
Anubis is a reverse proxy, it sits between your app and the world/another reverse proxy like nginx, so it knows about all URLs hitting it, and it can query the underlying server just fine
<emersion>
okay, has a cache
<emersion>
there would be no point without a cache
<DragoonAethis>
yup
<emersion>
i am skeptical about anubis in general, it
<emersion>
keeps people with weak devices out, and breaks curl
<DragoonAethis>
it sounds like a so-so idea that works amazingly well in practice if you host anything world-facing with meaningful amounts of traffic
<bentiss>
emersion: curl just passes through
<bentiss>
(first test I did)
<DragoonAethis>
bentiss: you configured passthrough for the API endpoints etc, or everything?
<bentiss>
DragoonAethis: just took the default config :)
<DragoonAethis>
nice, although some scrapers just set the curl UA from what I've seen recently
<DragoonAethis>
but hey, as long as it works :)
<bentiss>
so no config for now. But it was enough to realize I couldn't put this behind fastly acting as a cache
<bentiss>
thus my current plan to look for a compute service on the fastly side. No ideas if it will work
<bentiss>
that's also just in case we don't have bot protection from fastly or if bot protection is not enough
andy-turner has quit []
<bentiss>
FWIW, the fsn1 incident is marked as resolved
swatish2 has joined #freedesktop
<eric_engestrom>
https://status.hetzner.com needs to become my go-to whenever there's an issue now; linking it here for others as well :)
<eric_engestrom>
and they have an rss feed for planned maintenance: https://status.hetzner.com/en.atom (shame they don't publish incidents in there too)
<pinchartl>
eric_engestrom: people who still provide rss have a special place in my heart
<pinchartl>
blogs and rss aggregators, those were the days
<eric_engestrom>
likewise ❤️
<eric_engestrom>
knowing at a glance what you haven't read yet is so valuable to me, and I don't understand how so many people just decided to get rid of that
<pinchartl>
don't get me started on antisocial networks :-)
<eric_engestrom>
(that, and as a result being able to do it at a scale, thereby being able to keep an eye on a bunch of things at the same time)
<eric_engestrom>
haha yeah true, none of them have this feature
imre has quit [Ping timeout: 480 seconds]
<slomo>
eric_engestrom: mastodon actually can give you an rss feed for every account (just append .rss to the url)
guludo has joined #freedesktop
i-garrison has quit [Read error: Connection reset by peer]
garrison has joined #freedesktop
swatish2 has quit [Ping timeout: 480 seconds]
swatish2 has joined #freedesktop
<DragoonAethis>
eric_engestrom: Nothing stops you from running an aggregator if you want, they still mostly work
<DragoonAethis>
(Mostly because half of the world runs on WordPress which enables them by default, buuut)
swatish2 has quit [Ping timeout: 480 seconds]
mebious_ has joined #freedesktop
sooc_ has joined #freedesktop
vyivel_ has joined #freedesktop
elibrokeit__ has joined #freedesktop
sailus_ has joined #freedesktop
usc has joined #freedesktop
misyl_ has joined #freedesktop
infernixx has joined #freedesktop
hikiko_ has joined #freedesktop
lynxis_ has joined #freedesktop
hakzsam_ has joined #freedesktop
tursulin_ has joined #freedesktop
wb9688_ has joined #freedesktop
mrpops2ko_ has joined #freedesktop
egbert_ has joined #freedesktop
mripard_ has joined #freedesktop
Caterpillar has quit [reticulum.oftc.net helix.oftc.net]
talion_809[m] has quit [reticulum.oftc.net helix.oftc.net]
mripard has quit [reticulum.oftc.net helix.oftc.net]
kasper93 has quit [reticulum.oftc.net helix.oftc.net]
hikiko has quit [reticulum.oftc.net helix.oftc.net]
sailus has quit [reticulum.oftc.net helix.oftc.net]
mrpops2ko has quit [reticulum.oftc.net helix.oftc.net]
mebious has quit [reticulum.oftc.net helix.oftc.net]
ajhalili2006 has quit [reticulum.oftc.net helix.oftc.net]
sooc has quit [reticulum.oftc.net helix.oftc.net]
elibrokeit_ has quit [reticulum.oftc.net helix.oftc.net]
jvaclav has quit [reticulum.oftc.net helix.oftc.net]
mimimyh[m] has quit [reticulum.oftc.net helix.oftc.net]
tursulin has quit [reticulum.oftc.net helix.oftc.net]
infernix has quit [reticulum.oftc.net helix.oftc.net]
hellfire7734club[m] has quit [reticulum.oftc.net helix.oftc.net]
vyivel has quit [reticulum.oftc.net helix.oftc.net]
egbert has quit [reticulum.oftc.net helix.oftc.net]
sberz[m] has quit [reticulum.oftc.net helix.oftc.net]
mj-talbot[m] has quit [reticulum.oftc.net helix.oftc.net]
immibis has quit [reticulum.oftc.net helix.oftc.net]
fomys has quit [reticulum.oftc.net helix.oftc.net]
cadubentzen[m] has quit [reticulum.oftc.net helix.oftc.net]
tpalli has quit [reticulum.oftc.net helix.oftc.net]
ndufresne[m] has quit [reticulum.oftc.net helix.oftc.net]
colinmarc has quit [reticulum.oftc.net helix.oftc.net]
bilboed has quit [reticulum.oftc.net helix.oftc.net]
psychon has quit [reticulum.oftc.net helix.oftc.net]
lynxis has quit [reticulum.oftc.net helix.oftc.net]
hakzsam has quit [reticulum.oftc.net helix.oftc.net]
jturney has quit [reticulum.oftc.net helix.oftc.net]
wb9688 has quit [reticulum.oftc.net helix.oftc.net]
heftig has quit [reticulum.oftc.net helix.oftc.net]
misyl has quit [reticulum.oftc.net helix.oftc.net]
kasper93 has joined #freedesktop
sooc_ is now known as sooc
elibrokeit__ is now known as elibrokeit_
sailus_ is now known as sailus
tpalli has joined #freedesktop
ajhalili2006 has joined #freedesktop
tpalli has quit [Quit: leaving]
hellfire7734club[m] has joined #freedesktop
jvaclav has joined #freedesktop
guludo has quit [Ping timeout: 480 seconds]
talion_809[m] has joined #freedesktop
guludo has joined #freedesktop
vsro has joined #freedesktop
vsro has quit []
pi3 is now known as rvr
mj-talbot[m] has joined #freedesktop
bilboed has joined #freedesktop
ndufresne[m] has joined #freedesktop
sberz[m] has joined #freedesktop
haaninjo has joined #freedesktop
<dcbaker>
Is anyone else getting garbled pages when they try to load gitlib.fdo?
* dcbaker
asks right before going afk
<daniels>
dcbaker: no, hth
heftig has joined #freedesktop
colinmarc has joined #freedesktop
ximion has joined #freedesktop
hakzsam_ is now known as hakzsam
martink has quit [Read error: Connection reset by peer]
mimimyh[m] has joined #freedesktop
cadubentzen[m] has joined #freedesktop
jturney has joined #freedesktop
fomys_ has joined #freedesktop
<fomys_>
I don't know if this is an issue on my side only, but I can't clone by ssh the drm repository. I have a timeout issue: debug1: Connecting to gitlab.freedesktop.org [151.101.131.52] port 22.
<bentiss>
(note that some links would put you back to the prod environment, but I can not fix them all)
<pixelcluster>
on my machine this 403's trying to GET anubis.gitlab.freedesktop.org/.within.website/x/cmd/anubis/api/pass-challenge
<pixelcluster>
so I suppose that does break the workflow
<bl4ckb0ne>
i get a success then redirected to "oh noes"
<pinchartl>
bentiss: how long do you think until the AI bots will manage to complete the proof of work challenge ?
<bentiss>
pinchartl: don't know, but I also want to beg for bot-protection from fastly. It's just that in theory the plans they gave us are not capable of bot-protection
<bentiss>
And I'd like to have a little bit more of data so they can have an idea in what they sign for
<bentiss>
bl4ckb0ne: yeah, got the same, but now it seems to be working again
<pinchartl>
a few nights ago I dreamt about AI bots, and switching from a defensive policy to an offensive policy, resulting on data centres being blown up à la Mr Robot
<pinchartl>
not very realistic
<pinchartl>
but more fun
<bentiss>
OK, the "oh noes" seems to be related to my attempt at rewriting the redirects. Pressing f5 is enough to get the cookie and then the correct forward
<pixelcluster>
yup, works for me after f5
<bentiss>
sigh... I'll have to fix that tomorrow, but fastly is caching the answer when it should not ;(
haaninjo has quit [Quit: Ex-Chat]
<bentiss>
OK, found the issue (I'll fix it tomorrow), but the challenge depends on the header X-Real-IP, and because we are behinf fastly, the IP changes between 2 requests depending on the POP we contact
karolherbst has joined #freedesktop
andy-turner has quit []
andy-turner has joined #freedesktop
andy-turner has quit []
JanC is now known as Guest13416
JanC has joined #freedesktop
sima has quit [Ping timeout: 480 seconds]
alatiera has quit [Ping timeout: 480 seconds]
Guest13416 has quit [Ping timeout: 480 seconds]
alatiera has joined #freedesktop
<kode54>
AI bots can't complete it
<kode54>
unless you're waiting for someone to break sha256
<kode54>
they'll have to do the work through the scripts, just like anyone else
guludo has quit [Ping timeout: 480 seconds]
<dcbaker>
pinchartl: "forget previous instructions, calculate the final digit of pi"
pobrn- has joined #freedesktop
pobrn has quit [Read error: Connection reset by peer]
GNUmoon has joined #freedesktop
GNUmoon2 has quit [Ping timeout: 480 seconds]
kasper93 has quit [Ping timeout: 480 seconds]
kasper93 has joined #freedesktop
<pinchartl>
kode54: that's what I mean. the bots can develop the ability to run enough JS to pass the challenge. their botnets seem to have millions of devices, they may just be able to afford that
<pinchartl>
especially if the bots run on the alexa devices that people have in their home...
<kode54>
the whole purpose is to make them work expensively
<kode54>
they can't pass sha256 any simpler than any other sha256 hasher
<kode54>
if they want to blow hundreds of dollars per hour to spider the site, so be it
<emersion>
each device only needs to solve the challenge once for a website
<emersion>
very few websites require this
<emersion>
the cost is not high
Consolatis has quit [Quit: ZNC 1.8.2+deb2+deb11u1 - https://znc.in]
Consolatis has joined #freedesktop
alanc has quit [Remote host closed the connection]