https://unicyclic.com/indieweb is great reading at the moment, but got some serious Berlin FOMO...
{
"type": "entry",
"published": "2018-11-01T12:37:50+10:00",
"url": "https://unicyclic.com/mal/2018-11-01-httpsunicycliccomindieweb_is_great_reading_at",
"syndication": [
"https://twitter.com/malcolmblaney/status/1057824024305324032"
],
"content": {
"text": "https://unicyclic.com/indieweb is great reading at the moment, but got some serious Berlin FOMO...",
"html": "<a href=\"https://unicyclic.com/indieweb\">https://unicyclic.com/indieweb</a> is great reading at the moment, but got some serious Berlin FOMO...<a href=\"https://brid.gy/publish/twitter?bridgy_omit_link=true\"></a><a href=\"https://twitter.com/malcolmblaney/status/1057824024305324032\" class=\"u-syndication\"></a>"
},
"author": {
"type": "card",
"name": "Malcolm Blaney",
"url": "https://unicyclic.com/mal",
"photo": "https://aperture-proxy.p3k.io/4f46272c0027449ced0d7cf8de31ea1bec37210e/68747470733a2f2f756e696379636c69632e636f6d2f6d616c2f7075626c69632f70726f66696c655f736d616c6c5f7468756d622e706e67"
},
"post-type": "note",
"_id": "1313241",
"_source": "243"
}
{
"type": "entry",
"published": "2018-10-31T02:50:38+00:00",
"url": "https://cleverdevil.io/2018/hello-gorgeous--1",
"photo": [
"https://aperture-proxy.p3k.io/4194725cb8d0b88107adf1f7474f03f515d27558/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f35333035363136666466663265656138666337613030376564326330373263302f7468756d622e6a7067"
],
"syndication": [
"https://twitter.com/cleverdevil/status/1057464843664613381"
],
"name": "Hello, gorgeous. \ud83c\udf78",
"author": {
"type": "card",
"name": "Jonathan LaCour",
"url": "https://cleverdevil.io/profile/cleverdevil",
"photo": "https://aperture-proxy.p3k.io/77e5d6e5871324c43aebf2e3e7a5553e14578f66/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f66646263373639366135663733383634656131316138323863383631653133382f7468756d622e6a7067"
},
"post-type": "photo",
"_id": "1303379",
"_source": "10"
}
{
"type": "entry",
"published": "2018-10-29T20:20:16+00:00",
"url": "https://cleverdevil.io/2018/colette-o-ween",
"photo": [
"https://aperture-proxy.p3k.io/95049c2ee1fece237783561c00bbe94cb74185ce/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f63633232353963613130646666343737316232326432343531353630636164312f7468756d622e6a7067",
"https://aperture-proxy.p3k.io/556d0f1759bab242d92062e27c3f223c0b717903/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f32633831373565626662376131333362366661393331336135303733393766322f7468756d622e6a7067"
],
"syndication": [
"https://twitter.com/cleverdevil/status/1057004224695939073"
],
"name": "Colette-o-ween \ud83c\udf83\ud83d\udc80\ud83d\udc83\ud83c\udffc",
"author": {
"type": "card",
"name": "Jonathan LaCour",
"url": "https://cleverdevil.io/profile/cleverdevil",
"photo": "https://aperture-proxy.p3k.io/77e5d6e5871324c43aebf2e3e7a5553e14578f66/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f66646263373639366135663733383634656131316138323863383631653133382f7468756d622e6a7067"
},
"post-type": "photo",
"_id": "1292041",
"_source": "10"
}
{
"type": "entry",
"published": "2018-10-29T11:31:44+10:00",
"url": "https://unicyclic.com/mal/2018-10-29-Hacking_on_the_IndieWeb",
"photo": [
"https://aperture-proxy.p3k.io/e91f16bd9b940e875b35b7e0444cb1e5449f4af7/68747470733a2f2f756e696379636c69632e636f6d2f6d616c2f7075626c69632f6d6f6e6f636c652d6c6f67696e2e706e67",
"https://aperture-proxy.p3k.io/4c46e4d3782ad6501382e82f2f8822b047a6136e/68747470733a2f2f756e696379636c69632e636f6d2f6d616c2f7075626c69632f7265616465722d73637265656e73686f742d312e706e67",
"https://aperture-proxy.p3k.io/916df5d6fbf12a00c393442d233b9159666764b8/68747470733a2f2f756e696379636c69632e636f6d2f6d616c2f7075626c69632f7265616465722d73637265656e73686f742d322e706e67"
],
"name": "Hacking on the IndieWeb",
"content": {
"text": "Finally found some time recently to work on projects I started at IndieWeb Summit 2018 in Portland. I say projects (plural) because I did just keep starting stuff based on different talks or chats that were going on... possibly not the best way to develop new features!\n\n\nBut anyone doing a deep dive on the \"IndieWeb Stack\" is going to notice that there's a huge number of features or protocols they might want to add or support, so where to start? I think wherever inspiration or enthusiasm hits is probably a good idea, so for me that was adding IndieAuth support to win a copy of Aaron's book, OAuth 2.0 Simplified. I also hacked in support for Microsub to my website, because you know, when you're talking about protocols anyway you might as well try and support those protocols.\n\n\nThat brings me to hacking on the IndieWeb. I already had a bunch of code in place, because there are already external services for adding things like IndieAuth support. The cool thing about hacking on new features is that you can swap out one thing at a time. This means even though the list of things you might want to add to your website is quite daunting, you can do this piece by piece.\n\n\nSo I switched over to my home grown authorization endpoint during the summit, and even though it was pretty clunky, never switched back. Having your own endpoint means no more RelMeAuth lookups, so it saves a few seconds when logging in to other sites. But since I was nowhere near finished my projects after the summit, this meant I was still using Aaron's token endpoint. And it's great that this still just works! A few months have gone by and I've now added my own token endpoint to Dobrado, but I'm very thankful to Aaron for providing services to use while we find the time to write our own.\n\n\nI've now also got better Microsub support, so if you've got an account on unicyclic.com you can log in to other readers like Monocle and see your feed there. Again it's not finished but it's nice to see progress as you complete smaller tasks (like h-app support):\n\n\n\n\nI've also cleaned up my own reader interface. There's just too many other nice looking IndieWeb readers these days, so need to try and keep up with how good things are getting! ;-)\n\n\n\n\n\n\u00a0",
"html": "Finally found some time recently to work on projects I started at <a href=\"https://2018.indieweb.org/\">IndieWeb Summit 2018</a> in Portland. I say <em>projects</em> (plural) because I did just keep starting stuff based on different talks or chats that were going on... possibly not the best way to develop new features!<br /><br />\nBut anyone doing a deep dive on the \"IndieWeb Stack\" is going to notice that there's a huge number of features or protocols they might want to add or support, so where to start? I think wherever inspiration or enthusiasm hits is probably a good idea, so for me that was adding <a href=\"https://indieauth.net/\">IndieAuth</a> support to win a copy of <a href=\"https://aaronparecki.com/\">Aaron's</a> book, <a href=\"https://oauth2simplified.com/\">OAuth 2.0 Simplified</a>. I also hacked in support for <a href=\"https://indieweb.org/Microsub\">Microsub</a> to my website, because you know, when you're talking about protocols anyway you might as well try and support those protocols.<br /><br />\nThat brings me to hacking on the IndieWeb. I already had a bunch of code in place, because there are already <a href=\"https://indieauth.com/\">external services for adding things like IndieAuth support</a>. The cool thing about hacking on new features is that you can swap out one thing at a time. This means even though the list of things you <em>might</em> want to add to your website is quite daunting, you can do this piece by piece.<br /><br />\nSo I switched over to my home grown authorization endpoint during the summit, and even though it was pretty clunky, never switched back. Having your own endpoint means no more <a href=\"https://indieweb.org/RelMeAuth\">RelMeAuth</a> lookups, so it saves a few seconds when logging in to other sites. But since I was nowhere near finished my projects after the summit, this meant I was still using Aaron's token endpoint. And it's great that this still just works! A few months have gone by and I've now added my own token endpoint to <a href=\"https://dobrado.net\">Dobrado</a>, but I'm very thankful to Aaron for providing services to use while we find the time to write our own.<br /><br />\nI've now also got better Microsub support, so if you've got an account on <a href=\"https://unicyclic.com\">unicyclic.com</a> you can log in to other readers like Monocle and see your feed there. Again it's not finished but it's nice to see progress as you complete smaller tasks (like h-app support):<br /><br /><br /><br />\nI've also cleaned up my own reader interface. There's just too many other nice looking IndieWeb readers these days, so need to try and keep up with how good things are getting! ;-)<br /><br /><br /><br /><br />\n\u00a0"
},
"author": {
"type": "card",
"name": "Malcolm Blaney",
"url": "https://unicyclic.com/mal",
"photo": "https://aperture-proxy.p3k.io/4f46272c0027449ced0d7cf8de31ea1bec37210e/68747470733a2f2f756e696379636c69632e636f6d2f6d616c2f7075626c69632f70726f66696c655f736d616c6c5f7468756d622e706e67"
},
"post-type": "photo",
"_id": "1287481",
"_source": "243"
}
{
"type": "entry",
"published": "2018-10-28T23:46:01+00:00",
"url": "https://cleverdevil.io/2018/rams-win",
"photo": [
"https://aperture-proxy.p3k.io/1d75efab5a06fb23527e377201cadb3fd26b9f64/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f63626466313064313933623762616561646632336432353430383362623832392f7468756d622e6a7067"
],
"syndication": [
"https://twitter.com/cleverdevil/status/1056693610178064384"
],
"name": "Rams win! \ud83c\udfc8\ud83d\udc0f",
"author": {
"type": "card",
"name": "Jonathan LaCour",
"url": "https://cleverdevil.io/profile/cleverdevil",
"photo": "https://aperture-proxy.p3k.io/77e5d6e5871324c43aebf2e3e7a5553e14578f66/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f66646263373639366135663733383634656131316138323863383631653133382f7468756d622e6a7067"
},
"post-type": "photo",
"_id": "1285884",
"_source": "10"
}
{
"type": "entry",
"author": {
"name": null,
"url": "https://herestomwiththeweather.com/",
"photo": null
},
"url": "https://herestomwiththeweather.com/2018/10/28/iiw-27-notes/",
"published": "2018-10-28T16:00:41+00:00",
"content": {
"html": "<p>Last week was a particularly good <a href=\"http://www.internetidentityworkshop.com/\">Internet Identity Workshop</a> and I\u2019m looking forward to reading the <a href=\"http://iiw.idcommons.net/IIW_27_Session_Notes\">session notes</a> as they are published.</p>\n\n<p>Tuesday morning\u2019s icebreaker question was \u201cwhat was your first a-ha! moment in identity?\u201d I can recall a few I had in early 2001 and one was reading Simson Garfinkel\u2019s <a href=\"https://www.goodreads.com/book/show/846498.Database_Nation\">Database Nation</a>. After the opening circle, I attended a <a href=\"https://sovrin.org/\">Sovrin Network</a> demo (see Johannes Ernst\u2019s <a href=\"https://upon2020.com/blog/2018/10/pondrin-sovrin/\">post</a>) and some 101 sessions.</p>\n\n<p><img src=\"https://aperture-proxy.p3k.io/21dde878b138e710b1535762add76185d3ecf240/68747470733a2f2f73332e616d617a6f6e6177732e636f6d2f737461726b2d6d6f6f6e2d34362f696d616765732f6669646f5f3130312e6a7067\" alt=\"FIDO 101\" />\nAt the FIDO 101 session, Chris Streeks described the SMS 2-step verification phishing attack where a victim submits login creds to a fake web page and is redirected to another fake web page to enter the SMS code. Meanwhile, the attacker passes the victim\u2019s login creds to the real site which triggers the SMS message so that the victim submits SMS code to the attacker\u2019s fake website. FIDO 2 was also discussed which addresses fake keys and also supports origin bound keys. <a href=\"https://www.yubico.com/2018/09/introducing-the-yubikey-5-series-with-new-nfc-and-fido2-passwordless-features/\">Yubikey 5</a> supports FIDO 2. One feature that was new to me is \u201cpasswordless authentication.\u201d If your threat model includes the attacker having your key, it seems you do not want this. However, I see that there is an option to add a PIN to unlock the key.</p>\n\n<p><img src=\"https://aperture-proxy.p3k.io/fecb3c4e35acd323e3dc7ec1279ca01ed6cb3063/68747470733a2f2f73332e616d617a6f6e6177732e636f6d2f737461726b2d6d6f6f6e2d34362f696d616765732f73656c665f736f7665726569676e2e6a7067\" alt=\"Self-Sovereign Identity 101\" />\nAt the Self-Sovereign Identity 101 session, Kaliya Hamlin and Heather Vescent answered questions like \u201cHow do I show up with my identity?\u201d and \u201cHow do I control my identifier?\u201d and explained that no one can take your DID (decentralized identifier) away from you. I asked whether interoperability with the DID spec is a requirement to being a self-sovereign system. There didn\u2019t seem to be consensus.</p>\n\n<p>The first session I attended was \u201cBeyond OAuth: Transactional Authz\u201d by Justin Richer. This session was related to the article <a href=\"https://medium.com/@justinsecurity/moving-on-from-oauth-2-629a00133ade\">Moving On from OAuth 2?</a> and the Identiverse video <a href=\"https://www.youtube.com/watch?v=OLwz7pIXOWQ&t=6s\">What\u2019s Wrong with Oauth 2?</a>. The main idea was how, if we throw compatibility out, can we fix the problem of putting all those parameters in the front channel of OAuth 2.</p>\n\n<p>Then I attended Aaron Parecki\u2019s \u201cOAuth for Single-Page Apps\u201d and the idea was fixing OAuth in a compatible way so that single page apps don\u2019t have to return an access token in the front channel as that is susceptible to interception and replay attacks. Torsten L. mentioned that the notion of a nonce was not defined in the OAuth 2 spec which is why there is the PKCE document.</p>\n\n<p><img src=\"https://aperture-proxy.p3k.io/39e3082240b31759672ae0c05d7c4ab2b7db6055/68747470733a2f2f73332e616d617a6f6e6177732e636f6d2f737461726b2d6d6f6f6e2d34362f696d616765732f75626f73626f782e6a7067\" alt=\"UBOSBox\" />\nPart of Wednesday is speed demo hour and it was nice to see the UBOSbox from <a href=\"https://indiecomputing.com/\">Indie Computing</a> in person. If you have grown weary of the cloud, the UBOSbox is a nice alternative. It runs in your home and the software is open source.</p>\n\n<p><img src=\"https://aperture-proxy.p3k.io/c5537db97e89f4da9099443f7290fb530496b8b8/68747470733a2f2f73332e616d617a6f6e6177732e636f6d2f737461726b2d6d6f6f6e2d34362f696d616765732f7965735f69642e6a7067\" alt=\"Yes-ID\" />\nGoing back to IIW8, there was a session on <a href=\"http://iiw.idcommons.net/Financial_Institutions_as_Identity_Providers\">Financial Institutions as Identity Providers</a> but concern was expressed that banks might not want to deal with liability in case of mistakes. That is why I found the <a href=\"https://www.yes.com/\">yes ID</a> demo interesting. It is German only but it <a href=\"http://iiw.idcommons.net/IIW_27_Demo_Hour\">enables bank customers to use their online banking accounts for conducting various digital transactions, such as login, registration, identification, payment and signing.</a></p>\n\n<p><img src=\"https://aperture-proxy.p3k.io/5844fff4f49d44e5084b374b608ce7d74faab461/68747470733a2f2f73332e616d617a6f6e6177732e636f6d2f737461726b2d6d6f6f6e2d34362f696d616765732f6f617574685f6f70656e5f7765622e6a7067\" alt=\"OAuth for the Open Web\" />\nThe last Wednesday session I attended was \u201cMaking OAuth Work on the Open Web\u201d which is related to Aaron Parecki\u2019s article <a href=\"https://aaronparecki.com/2018/07/07/7/oauth-for-the-open-web\">OAuth for the Open Web</a>. Current identity standards on OAuth 2 are <a href=\"http://www.windley.com/archives/2016/05/i_am_sybil.shtml\">administrative identity systems</a> as they are built to administer identity in a specific domain. <a href=\"https://indieauth.net/\">IndieAuth</a> is an extension of OAuth 2 with a shared global namespace. Also, there was a particular focus on solving the problem of devs needing to preregister their client app on many instances of OAuth providers (for instance, Mastodon). Aaron described using the client app\u2019s url as the client id which seems like a good solution.</p>\n\n<p>On Thursday, in the \u201cOAuth Security 4 Dummies\u201d session, redirect url matching attack was mentioned and how you can drastically reduce your attack surface if you require exact matching for redirect urls. Otherwise, you better be extremely confident about the model for your entire domain. There was excitement expressed about Justin\u2019s proposal mentioned earlier. It was noted that scopes generally don\u2019t restrict by resource and it would be nice to have something in addition to scopes for this.</p>\n\n<p>I also attended \u201cConsent Management: Receipts, Practices, Standards\u201d which is related to the <a href=\"https://kantarainitiative.org/\">Kantara Initiative</a>. There was a lot of good info but I\u2019ll just mention two good questions to consider: \u201cRevocation of consent - where is your page where a user can revoke data herself?\u201d and \u201cHow should the consent UX be different for connecting to wifi versus giving up my contacts?\u201d</p>\n\n<p>Thanks to Kaliya Hamlin, Phil Windley, Doc Searls and Heidi Nobantu Saul for another great IIW!</p>",
"text": "Last week was a particularly good Internet Identity Workshop and I\u2019m looking forward to reading the session notes as they are published.\n\nTuesday morning\u2019s icebreaker question was \u201cwhat was your first a-ha! moment in identity?\u201d I can recall a few I had in early 2001 and one was reading Simson Garfinkel\u2019s Database Nation. After the opening circle, I attended a Sovrin Network demo (see Johannes Ernst\u2019s post) and some 101 sessions.\n\n\nAt the FIDO 101 session, Chris Streeks described the SMS 2-step verification phishing attack where a victim submits login creds to a fake web page and is redirected to another fake web page to enter the SMS code. Meanwhile, the attacker passes the victim\u2019s login creds to the real site which triggers the SMS message so that the victim submits SMS code to the attacker\u2019s fake website. FIDO 2 was also discussed which addresses fake keys and also supports origin bound keys. Yubikey 5 supports FIDO 2. One feature that was new to me is \u201cpasswordless authentication.\u201d If your threat model includes the attacker having your key, it seems you do not want this. However, I see that there is an option to add a PIN to unlock the key.\n\n\nAt the Self-Sovereign Identity 101 session, Kaliya Hamlin and Heather Vescent answered questions like \u201cHow do I show up with my identity?\u201d and \u201cHow do I control my identifier?\u201d and explained that no one can take your DID (decentralized identifier) away from you. I asked whether interoperability with the DID spec is a requirement to being a self-sovereign system. There didn\u2019t seem to be consensus.\n\nThe first session I attended was \u201cBeyond OAuth: Transactional Authz\u201d by Justin Richer. This session was related to the article Moving On from OAuth 2? and the Identiverse video What\u2019s Wrong with Oauth 2?. The main idea was how, if we throw compatibility out, can we fix the problem of putting all those parameters in the front channel of OAuth 2.\n\nThen I attended Aaron Parecki\u2019s \u201cOAuth for Single-Page Apps\u201d and the idea was fixing OAuth in a compatible way so that single page apps don\u2019t have to return an access token in the front channel as that is susceptible to interception and replay attacks. Torsten L. mentioned that the notion of a nonce was not defined in the OAuth 2 spec which is why there is the PKCE document.\n\n\nPart of Wednesday is speed demo hour and it was nice to see the UBOSbox from Indie Computing in person. If you have grown weary of the cloud, the UBOSbox is a nice alternative. It runs in your home and the software is open source.\n\n\nGoing back to IIW8, there was a session on Financial Institutions as Identity Providers but concern was expressed that banks might not want to deal with liability in case of mistakes. That is why I found the yes ID demo interesting. It is German only but it enables bank customers to use their online banking accounts for conducting various digital transactions, such as login, registration, identification, payment and signing.\n\n\nThe last Wednesday session I attended was \u201cMaking OAuth Work on the Open Web\u201d which is related to Aaron Parecki\u2019s article OAuth for the Open Web. Current identity standards on OAuth 2 are administrative identity systems as they are built to administer identity in a specific domain. IndieAuth is an extension of OAuth 2 with a shared global namespace. Also, there was a particular focus on solving the problem of devs needing to preregister their client app on many instances of OAuth providers (for instance, Mastodon). Aaron described using the client app\u2019s url as the client id which seems like a good solution.\n\nOn Thursday, in the \u201cOAuth Security 4 Dummies\u201d session, redirect url matching attack was mentioned and how you can drastically reduce your attack surface if you require exact matching for redirect urls. Otherwise, you better be extremely confident about the model for your entire domain. There was excitement expressed about Justin\u2019s proposal mentioned earlier. It was noted that scopes generally don\u2019t restrict by resource and it would be nice to have something in addition to scopes for this.\n\nI also attended \u201cConsent Management: Receipts, Practices, Standards\u201d which is related to the Kantara Initiative. There was a lot of good info but I\u2019ll just mention two good questions to consider: \u201cRevocation of consent - where is your page where a user can revoke data herself?\u201d and \u201cHow should the consent UX be different for connecting to wifi versus giving up my contacts?\u201d\n\nThanks to Kaliya Hamlin, Phil Windley, Doc Searls and Heidi Nobantu Saul for another great IIW!"
},
"name": "IIW 27 Notes",
"post-type": "article",
"_id": "1286977",
"_source": "246"
}
{
"type": "entry",
"published": "2018-10-28T03:17:51+00:00",
"url": "https://cleverdevil.io/2018/last-bowl-visit-of-the-season",
"photo": [
"https://aperture-proxy.p3k.io/7d12f3d5f2ccae3518b3f7a7b7d40ec51d9c4c07/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f33643266353664643239313234383132663061346536313632623933386433312f7468756d622e6a7067",
"https://aperture-proxy.p3k.io/1e691de3349b6f27442145d8d56212071183c15c/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f63346238336231346238353265366233303636656531366539353565353564372f7468756d622e6a7067"
],
"syndication": [
"https://twitter.com/cleverdevil/status/1056384535372464128"
],
"name": "Last Bowl visit of the season! \ud83c\udf83\ud83c\udf84",
"author": {
"type": "card",
"name": "Jonathan LaCour",
"url": "https://cleverdevil.io/profile/cleverdevil",
"photo": "https://aperture-proxy.p3k.io/77e5d6e5871324c43aebf2e3e7a5553e14578f66/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f66646263373639366135663733383634656131316138323863383631653133382f7468756d622e6a7067"
},
"post-type": "photo",
"_id": "1281398",
"_source": "10"
}
{
"type": "entry",
"published": "2018-10-26T19:27:19+00:00",
"url": "https://cleverdevil.io/2018/presented-to-the-san-diego-aws-user-group-last-night",
"photo": [
"https://aperture-proxy.p3k.io/39894743ed55ed6a1cbe754e7ccd9ff6885f7f1c/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f65633835353837363734633662343562666336396535366361646337353165302f7468756d622e6a7067",
"https://aperture-proxy.p3k.io/45a74a7d6544f4bb79bd8db259c112ca2c9eac6a/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f35333663356335373765333932613533653062323034353231353530643133632f7468756d622e6a7067",
"https://aperture-proxy.p3k.io/80f7f43e1073d23292a85f1944960b3e60c420a4/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f64363161306331636665613830333038646536373965623933656431323932342f7468756d622e6a7067"
],
"syndication": [
"https://twitter.com/cleverdevil/status/1055903735929585665"
],
"name": "Presented to the San Diego AWS User Group last night \u2601\ufe0f",
"author": {
"type": "card",
"name": "Jonathan LaCour",
"url": "https://cleverdevil.io/profile/cleverdevil",
"photo": "https://aperture-proxy.p3k.io/77e5d6e5871324c43aebf2e3e7a5553e14578f66/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f66646263373639366135663733383634656131316138323863383631653133382f7468756d622e6a7067"
},
"post-type": "photo",
"_id": "1274490",
"_source": "10"
}
Giri Sreenivas just publicly launched his new product, The Helm. It’s a personal email server with a novel approach to security and privacy. The hardware looks stunning:

{
"type": "entry",
"author": {
"name": null,
"url": "https://davepeck.org/micro/",
"photo": null
},
"url": "https://davepeck.org/2018/10/19/the-helm/",
"published": "2018-10-19T09:35:00-07:00",
"content": {
"html": "<p><a href=\"https://twitter.com/giri_sreenivas\">Giri Sreenivas</a> just publicly launched his new product, <a href=\"https://medium.com/gethelm/building-the-future-of-online-privacy-and-security-with-helm-72f8d7afa850\">The Helm</a>. It\u2019s a personal email server with a novel approach to security and privacy. The hardware looks stunning:</p>\n\n<p><a href=\"https://davepeck.org/content/2018/10/19/the-helm-personal-email-server.png\"><img src=\"https://aperture-proxy.p3k.io/7bd8080871c23b9ee651081314a7dd609df7fc4a/68747470733a2f2f646176657065636b2e6f72672f636f6e74656e742f323031382f31302f31392f7468652d68656c6d2d706572736f6e616c2d656d61696c2d7365727665722d313430302e706e67\" alt=\"The Helm Personal Email Server Hardware Design\" /></a></p>",
"text": "Giri Sreenivas just publicly launched his new product, The Helm. It\u2019s a personal email server with a novel approach to security and privacy. The hardware looks stunning:"
},
"post-type": "note",
"_id": "3903147",
"_source": "2781"
}
My chapter with Jeffrey Boase and @tkobyashi was just published in the the Oxford Handbook of Networked Communication: Multiplying the Medium: Tie Strength, Social Role, and Mobile Media Multiplexity
Also on:
{
"type": "entry",
"published": "2018-10-12T16:39:59-04:00",
"url": "https://jackjamieson.net/2303-2/",
"syndication": [
"https://twitter.com/jackjamieson/status/1050848631853584384"
],
"content": {
"text": "My chapter with Jeffrey Boase and @tkobyashi was just published in the the Oxford Handbook of Networked Communication:\u00a0 Multiplying the Medium: Tie Strength, Social Role, and Mobile Media Multiplexity\n\u00a0\n\nAlso on: Twitter icon",
"html": "<p>My chapter with <a href=\"http://individual.utoronto.ca/jboase/\">Jeffrey Boase</a> and <a href=\"https://twitter.com/tkobyashi\">@tkobyashi</a> was just published in the the Oxford Handbook of Networked Communication:\u00a0 <a href=\"http://www.oxfordhandbooks.com/view/10.1093/oxfordhb/9780190460518.001.0001/oxfordhb-9780190460518-e-15\">Multiplying the Medium: Tie Strength, Social Role, and Mobile Media Multiplexity</a></p>\n<p>\u00a0</p>\n\n<span>Also on:</span><ul><li><a class=\"u-syndication\" href=\"https://twitter.com/jackjamieson/status/1050848631853584384\"> <span style=\"max-width:1rem;margin:2px;\" title=\"twitter\">Twitter icon</span></a></li></ul>"
},
"author": {
"type": "card",
"name": "Jack Jamieson",
"url": "https://jackjamieson.net/author/jackjamieson/",
"photo": "https://secure.gravatar.com/avatar/c850ec9240a04bd1ebf02540e4f57b73?s=40&d=https://jackjamieson.net/wp-content/plugins/semantic-linkbacks/img/mm.jpg&r=g"
},
"post-type": "note",
"_id": "3902987",
"_source": "2775"
}
I still have my tickets from the game at the Orange Bowl. I attended with my late grandfather, and will never forget the experience! Hoping to frame all of this eventually.
{
"type": "entry",
"published": "2018-10-12T15:34:11+00:00",
"url": "https://cleverdevil.io/2018/retro-canesfootball-souvenir-from-the-fam-for-my-birthday-best",
"photo": [
"https://aperture-proxy.p3k.io/bc12a2c9ecaddb7474eae3752a91b75faf431d71/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f32396530323037636439386161613038663431646232646231346137336631612f7468756d622e6a7067"
],
"syndication": [
"https://twitter.com/cleverdevil/status/1050771630123884544"
],
"content": {
"text": "I still have my tickets from the game at the Orange Bowl. I attended with my late grandfather, and will never forget the experience! Hoping to frame all of this eventually.",
"html": "<a href=\"https://cleverdevil.io/2018/retro-canesfootball-souvenir-from-the-fam-for-my-birthday-best\"></a>\n \n <p>I still have my tickets from the game at the Orange Bowl. I attended with my late grandfather, and will never forget the experience! Hoping to frame all of this eventually.</p>"
},
"author": {
"type": "card",
"name": "Jonathan LaCour",
"url": "https://cleverdevil.io/profile/cleverdevil",
"photo": "https://aperture-proxy.p3k.io/77e5d6e5871324c43aebf2e3e7a5553e14578f66/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f66646263373639366135663733383634656131316138323863383631653133382f7468756d622e6a7067"
},
"post-type": "photo",
"_id": "1185375",
"_source": "10"
}
{
"type": "entry",
"author": {
"name": "David Bryant",
"url": "https://www.orangemoose.com/blog",
"photo": null
},
"url": "https://www.orangemoose.com/blog/?p=126",
"published": "2018-10-10T19:22:37-07:00",
"content": {
"html": "<p>The next step in my exploration of the wonders of the <a href=\"https://indieweb.org/\">IndieWeb</a> is being able to syndicate content from my blog (here) to social media. This is enabled by the IndieWeb plugins I\u2019ve installed here via WordPress along with the syndication service <a href=\"https://brid.gy/\">Bridgy</a>. Let\u2019s see if this works\u2026</p>",
"text": "The next step in my exploration of the wonders of the IndieWeb is being able to syndicate content from my blog (here) to social media. This is enabled by the IndieWeb plugins I\u2019ve installed here via WordPress along with the syndication service Bridgy. Let\u2019s see if this works\u2026"
},
"name": "Syndication!",
"post-type": "article",
"_id": "4159231",
"_source": "2934"
}
{
"type": "entry",
"author": {
"name": null,
"url": "https://herestomwiththeweather.com/",
"photo": null
},
"url": "https://herestomwiththeweather.com/2018/10/09/micro.blog-webmentions/",
"published": "2018-10-09T11:30:20+00:00",
"content": {
"html": "<p>This is great! <a href=\"https://www.manton.org/2018/10/09/webmention-improvements-on.html\">Webmention improvements on Micro.blog</a></p>",
"text": "This is great! Webmention improvements on Micro.blog"
},
"name": "Micro.blog webmentions",
"post-type": "article",
"_id": "1166220",
"_source": "246"
}
{
"type": "entry",
"published": "2018-10-07T18:33:30+00:00",
"url": "https://cleverdevil.io/2018/my-baby-girl-keeps-growing-up",
"photo": [
"https://aperture-proxy.p3k.io/72bbb180ec5f3d34b6fc863b4eb9d7f3bc41df7c/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f30633966613761393736376166656234656461626330666261653831353636652f7468756d622e6a7067"
],
"syndication": [
"https://twitter.com/cleverdevil/status/1049004818172452864"
],
"name": "My baby girl keeps growing up!",
"author": {
"type": "card",
"name": "Jonathan LaCour",
"url": "https://cleverdevil.io/profile/cleverdevil",
"photo": "https://aperture-proxy.p3k.io/77e5d6e5871324c43aebf2e3e7a5553e14578f66/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f66646263373639366135663733383634656131316138323863383631653133382f7468756d622e6a7067"
},
"post-type": "photo",
"_id": "1152717",
"_source": "10"
}
{
"type": "entry",
"author": {
"name": null,
"url": "http://tinysubversions.com/",
"photo": null
},
"url": "https://tinysubversions.com/notes/decentralized-social-networks/",
"published": "2018-10-05T00:00:00+00:00",
"content": {
"html": "<p>There is buzz around decentralized social networks but... what are some of the cool things that decentralization can bring? (<a href=\"https://tinysubversions.com/notes/decentralized-social-networks/\">full item here</a>)</p>",
"text": "There is buzz around decentralized social networks but... what are some of the cool things that decentralization can bring? (full item here)"
},
"name": "[Notes] Why I'm excited about decentralized social networks",
"post-type": "article",
"_id": "3903021",
"_source": "2776"
}
{
"type": "entry",
"published": "2018-09-30T17:09:59+00:00",
"url": "https://cleverdevil.io/2018/happy-fifth-birthday-william",
"photo": [
"https://aperture-proxy.p3k.io/2ab01050d7f3726937539c450c2c18be76f020fc/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f31383363333338343162636365376438383666346263376632383132616639632f7468756d622e6a7067",
"https://aperture-proxy.p3k.io/dbab40d2bbf377b851b53ce1719633addfc3a0d4/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f33313964636432393635666265366364363734313835333234376335663261302f7468756d622e6a7067",
"https://aperture-proxy.p3k.io/2cee3ab431a076fbb5f10cf9639371854fbfdff7/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f38663764396364373238306330346537616435386437393838366563383432332f7468756d622e6a7067",
"https://aperture-proxy.p3k.io/e4db76a5a8423cad05776989fb4424590c00a88a/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f36346465626362626131663661323433363962353239333163613966613234662f7468756d622e6a7067",
"https://aperture-proxy.p3k.io/bd8a6df9cd4dc347d2d6cecdcf9441b8e4581501/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f64306636616438616362303836616239343932343232623561623137326233342f7468756d622e6a7067"
],
"name": "Happy fifth birthday William! \ud83c\udf82\ud83c\udf44\ud83c\udf89",
"author": {
"type": "card",
"name": "Jonathan LaCour",
"url": "https://cleverdevil.io/profile/cleverdevil",
"photo": "https://aperture-proxy.p3k.io/77e5d6e5871324c43aebf2e3e7a5553e14578f66/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f66646263373639366135663733383634656131316138323863383631653133382f7468756d622e6a7067"
},
"post-type": "photo",
"_id": "1108114",
"_source": "10"
}
{
"type": "entry",
"published": "2018-09-30T15:46:56+10:00",
"url": "https://unicyclic.com/mal/2018-09-30-A_Programmable_IndieWeb",
"category": [
"IndieWeb"
],
"name": "A Programmable IndieWeb",
"content": {
"text": "It's been a long time since we've had any new writing from Aaron Swartz, but a draft of a book has been released that he had worked on, called A Programmable Web.\n\n\nThere's a fair bit of sadness and nostalgia in reading this work, as Aaron had a characteristic writing style that many of us still miss. However it's also a fascinating read, as he introduces concepts of working with the web, building one idea on top of the next.\n\n\nIt also feels a bit like a snapshot of the time when he was writing. I wonder if he would still favor the particular technologies and development styles he writes about? Regardless of his personal development choices, I still think he would have seen the IndieWeb as having the hacker spirit he identified with. In fact, I think this book paints an alternate vision for what we would like to see the IndieWeb achieve.\n\n\nThe final page of the draft reads, \"the Semantic Web is based on a bet, a bet that giving the world tools to easily collaborate and communicate will lead to possibilities so wonderful we can scarcely even imagine them right now. Sure, it sounds a little bit crazy. But it paid off the last time they made that gamble: we ended up with a little thing called the World Wide Web. Let's see if they can do that again.\"\n\n\nIt's a beautiful picture, but I wish Aaron had written we, instead of they, here. He wasn't the sort of guy who waited for others to get things done when it was within his own abilities. The Programmable Web will be built, and the tools for collaboration are being built using the process of collaboration itself.",
"html": "It's been a long time since we've had any new writing from <a href=\"http://www.aaronsw.com/\">Aaron Swartz</a>, but a draft of a book has been released that he had worked on, called <a href=\"https://archive.org/details/AaronSwartzAProgrammableWeb/page/n0\">A Programmable Web</a>.<br /><br />\nThere's a fair bit of sadness and nostalgia in reading this work, as Aaron had a characteristic writing style that many of us still miss. However it's also a fascinating read, as he introduces concepts of working with the web, building one idea on top of the next.<br /><br />\nIt also feels a bit like a snapshot of the time when he was writing. I wonder if he would still favor the particular technologies and development styles he writes about? Regardless of his personal development choices, I still think he would have seen the <a href=\"https://indieweb.org/\">IndieWeb</a> as having the hacker spirit he identified with. In fact, I think this book paints an alternate vision for what we would like to see the IndieWeb achieve.<br /><br />\nThe final page of the draft reads, <em>\"the Semantic Web is based on a bet, a bet that giving the world tools to easily collaborate and communicate will lead to possibilities so wonderful we can scarcely even imagine them right now. Sure, it sounds a little bit crazy. But it paid off the last time they made that gamble: we ended up with a little thing called the World Wide Web. Let's see if they can do that again.\"</em><br /><br />\nIt's a beautiful picture, but I wish Aaron had written <strong>we</strong>, instead of <strong>they</strong>, here. He wasn't the sort of guy who waited for others to get things done when it was within his own abilities. The Programmable Web will be built, and the tools for collaboration are being built using the process of collaboration itself."
},
"author": {
"type": "card",
"name": "Malcolm Blaney",
"url": "https://unicyclic.com/mal",
"photo": "https://aperture-proxy.p3k.io/4f46272c0027449ced0d7cf8de31ea1bec37210e/68747470733a2f2f756e696379636c69632e636f6d2f6d616c2f7075626c69632f70726f66696c655f736d616c6c5f7468756d622e706e67"
},
"post-type": "article",
"_id": "1106025",
"_source": "243"
}
59 more...
William’s fifth birthday is coming up, so we took a trip to a lake resort and Legoland together to celebrate. It’s been special!
{
"type": "entry",
"published": "2018-09-25T04:17:56+00:00",
"url": "https://cleverdevil.io/2018/gallery-boys-trip",
"photo": [
"https://aperture-proxy.p3k.io/993c0d9a5d1772f88bad62fd7092efc16f676d63/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f31356639343131376331663361336232373461323032376630656566643638352f7468756d622e6a7067",
"https://aperture-proxy.p3k.io/ad5b0a64004aac0e8e74c0fa0a0c9071460d6344/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f36643430383864356439353961396630316563316664613538666539333761322f7468756d622e6a7067",
"https://aperture-proxy.p3k.io/2a1f6c440c17aba09c06d979d3b926cc59f54a86/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f34303536663232333065353333366531376638323933336635356233386236302f7468756d622e6a7067",
"https://aperture-proxy.p3k.io/afe820158d221eabe5c8d534583370075b9e9e91/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f61306535643238303935666265653037383830313064666636653036626264662f7468756d622e6a7067",
"https://aperture-proxy.p3k.io/f2445b6f750dfc95642876f14ea2818ae1e0a4fe/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f30376361396534396636636461313766393834386566396666646163313738622f7468756d622e6a7067"
],
"content": {
"text": "59 more...\n \n \n William\u2019s fifth birthday is coming up, so we took a trip to a lake resort and Legoland together to celebrate. It\u2019s been special!",
"html": "<a href=\"https://cleverdevil.io/2018/gallery-boys-trip\"></a>\n \n \n <a href=\"https://cleverdevil.io/2018/gallery-boys-trip\"></a>\n \n \n <a href=\"https://cleverdevil.io/2018/gallery-boys-trip\"></a>\n \n \n <a href=\"https://cleverdevil.io/2018/gallery-boys-trip\"></a>\n \n \n <a href=\"https://cleverdevil.io/2018/gallery-boys-trip\"></a>\n \n \n <a href=\"https://cleverdevil.io/2018/gallery-boys-trip\">59 more...</a>\n \n \n <p>William\u2019s fifth birthday is coming up, so we took a trip to a lake resort and Legoland together to celebrate. It\u2019s been special!</p>"
},
"author": {
"type": "card",
"name": "Jonathan LaCour",
"url": "https://cleverdevil.io/profile/cleverdevil",
"photo": "https://aperture-proxy.p3k.io/77e5d6e5871324c43aebf2e3e7a5553e14578f66/68747470733a2f2f636c65766572646576696c2e696f2f66696c652f66646263373639366135663733383634656131316138323863383631653133382f7468756d622e6a7067"
},
"post-type": "photo",
"_id": "1076472",
"_source": "10"
}
Here’s a short slow improv riffing on the harmonies in Wayne Shorter’s Speak No Evil and Miles Davis’ Nefertiti:
Speak Some Evil
{
"type": "entry",
"author": {
"name": null,
"url": "https://davepeck.org/micro/",
"photo": null
},
"url": "https://davepeck.org/2018/09/21/speak-some-evil/",
"published": "2018-09-21T10:15:00-07:00",
"content": {
"html": "<p>Here\u2019s a short slow improv riffing on the harmonies in Wayne Shorter\u2019s Speak No Evil and Miles Davis\u2019 Nefertiti:</p>\n\n\n \n <img src=\"https://aperture-proxy.p3k.io/1f200d051f10fa247b56f980be47e1a9099b73c8/68747470733a2f2f646176657065636b2e6f72672f696d672f626c616e6b3178312e706e67\" alt=\"blank1x1.png\" /><a href=\"https://davepeck.org/content/audio/2018/09/21/dave-peck-dot-org-random-jazz-improv.mp3\">Speak Some Evil</a><img src=\"https://aperture-proxy.p3k.io/1f200d051f10fa247b56f980be47e1a9099b73c8/68747470733a2f2f646176657065636b2e6f72672f696d672f626c616e6b3178312e706e67\" alt=\"blank1x1.png\" />",
"text": "Here\u2019s a short slow improv riffing on the harmonies in Wayne Shorter\u2019s Speak No Evil and Miles Davis\u2019 Nefertiti:\n\n\n \n Speak Some Evil"
},
"post-type": "note",
"_id": "3903148",
"_source": "2781"
}
There’s been a flurry of recent articles about RSS and ActivityPub:
{
"type": "entry",
"author": {
"name": null,
"url": "https://davepeck.org/micro/",
"photo": null
},
"url": "https://davepeck.org/2018/09/18/more-rss-and-activitypub/",
"published": "2018-09-18T09:48:00-07:00",
"content": {
"html": "<p>There\u2019s been a flurry of recent articles about RSS and ActivityPub:</p>\n\n<ul><li>\n <p><em><a href=\"https://twobithistory.org/2018/09/16/the-rise-and-demise-of-rss.html\">The Rise and Demise of RSS</a></em> traces some interesting RSS prehistory that I wasn\u2019t aware of. It also covers the great RSS 0.9x/1.0 schism.</p>\n </li>\n <li>\n <p>In <em><a href=\"http://inessential.com/2018/09/17/oh_god_not_this_again\">Oh God Not This Again</a></em>, Brent Simmons reminds us that RSS is plumbing; widespread adoption of RSS readers isn\u2019t necessary to make RSS \u201csuccessful\u201d.</p>\n </li>\n <li>\n <p><em><a href=\"https://jeremydormitzer.com/blog/what-is-activitypub-and-how-will-it-change-the-internet/\">What is ActivityPub, and how will it change the Internet</a>?</em> makes several breathless claims about the <a href=\"https://www.w3.org/TR/activitypub/\">W3C ActivityPub</a> standard; <a href=\"https://news.ycombinator.com/item?id=18008561\">interesting discussion</a> follows.</p>\n </li>\n <li>\n <p>The author of this <em><a href=\"https://beesbuzz.biz/blog/2535-ActivityPub-hot-take\">ActivityPub hot take</a></em> doesn\u2019t think highly of ActivityPub; <a href=\"https://news.ycombinator.com/item?id=18013800\">further interesting discussion</a> ensues.</p>\n </li>\n</ul>",
"text": "There\u2019s been a flurry of recent articles about RSS and ActivityPub:\n\n\n The Rise and Demise of RSS traces some interesting RSS prehistory that I wasn\u2019t aware of. It also covers the great RSS 0.9x/1.0 schism.\n \n \n In Oh God Not This Again, Brent Simmons reminds us that RSS is plumbing; widespread adoption of RSS readers isn\u2019t necessary to make RSS \u201csuccessful\u201d.\n \n \n What is ActivityPub, and how will it change the Internet? makes several breathless claims about the W3C ActivityPub standard; interesting discussion follows.\n \n \n The author of this ActivityPub hot take doesn\u2019t think highly of ActivityPub; further interesting discussion ensues."
},
"post-type": "note",
"_id": "3903149",
"_source": "2781"
}