supermouse | Reading

github posting in

Return a login requirement for logged-out quick-reply comments (#3676)

The /_rpcaddcomment endpoint dereferenced the remote user unconditionally when building the protocol request, so a logged-out POST with a valid form auth token died with a 500 instead of a normal error. Guard for a missing remote up front and return the login requirement, matching the other handlers in this file.

Co-authored-by: Claude Opus 4.8 noreply@anthropic.com

Commit: d90b2464 Author: Mark Smith

github posting in

changelog

Fix login panel and restore community join link on the not-found page (#3677)

The shared 404 page for hidden or missing entries (error/unavailable.tt) included login.tt for everyone, so logged-in viewers got the "you're logged in / change login options" panel instead of nothing. Show the login form only to logged-out viewers.

Restore the community join prompt the old protected page had: when the journal is a community the viewer could join, offer a /circle//edit link. The decision uses only the journal and the viewer, never the entry, so a hidden entry and a missing one in the same community still render byte-identical bodies. The protected handler reads the journal from the request note both entry paths already set.

Co-authored-by: Claude Opus 4.8 noreply@anthropic.com

Commit: bef46050 Author: Mark Smith

github posting in

changelog

Answer slugs under the wrong date the same as missing slugs (#3675)

A slug requested under the wrong date got the stock 404 page when the slug existed, even for a private entry, while a missing slug got the unavailable page. The different page revealed that the slug exists.

determine_view now drops the entry for a date mismatch, so the request falls through to the same not-found answer as a missing slug.

Co-authored-by: Claude Opus 5.5 noreply@anthropic.com

Commit: 487a2ad7 Author: Mark Smith

mark posting in

dw_maintenance

Hi all,

I had to push some code live today to fix something, and that brought with it a couple of new things like if you have two-factor authentication (2FA/MFA) enabled, you got automatically logged out and it is now required to log in. If you don't, you can set it up if you want (you don't have to.)

This also means that if you have 2FA enabled, you will not be able to use 3P clients using your username and password anymore. You should be able to use API keys in most cases, but there's some nuance to that (and tbh, I just am not precisely sure what clients anybody even uses.)

Please do comment if you're seeing anything weird, as per usual, and we'll work on it. Thank you!

github posting in

changelog

Clean up comment posting preview and add tests

Simplify how the talkpost_do preview path and the unscreen-parent option are built, and add regression tests for comment posting previews.

Co-Authored-By: Claude Opus 4.8 noreply@anthropic.com EOF

Commit: 9df16a61 Author: Mark Smith

rmc28

I've had Kara for just over four weeks, I've put about a thousand miles on her, and taken her to five ice rinks (Cambridge, Alexandra Palace, Basingstoke, Lee Valley, Peterborough) with a sixth up tomorrow as Kodiaks 2 play Coventry Phoenix tomorrow evening.

The Octopus "smart charging" is not smart enough to tell the difference between mains, house battery, and solar panels. A couple of times it has drained my house battery into Kara when I would have preferred it didn't, but I think I've figured out how to stop that now.

I am very much enjoying being able to offer lifts rather than having to ask for them, and I'm also (mostly) enjoying the driving itself.

github posting in

changelog

Answer hidden entries and comments the same as missing ones (#3674)

Answer hidden entries with the same 404 as missing ones

Entry URLs let anyone probe for hidden entries. A private entry's slug URL got a 403 "protected" page while a missing slug got 404, and in an adult-flagged journal the interstitial answered for wrong-anum and missing slug URLs but not for hidden entries.

DW::Controller::Journal now decides before the adult interstitial and make_journal: a missing entry, wrong anum, or entry the viewer can't see gets one 404 page (error/unavailable.tt, shared with the JS journal server) that depends only on the viewer. Public suspended entries keep their suspension notice, since their existence is already public.

correct_anum loads the row before reading anum, so slug lookups no longer report a wrong anum.

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com

Answer hidden comments the same as missing ones

A comment id in a request could tell a comment the viewer can't see (screened, deleted, by a suspended user, on another entry, or with the wrong anum) from one that doesn't exist. ?thread= rendered a hidden comment's placeholder instead of falling back to the whole entry, and ?view= could pick its page. ?replyto= answered 403 for screened comments and suspended posters but 404 for missing ones, ?edit= and talkpost_do edits said "not yours" instead of "invalid", and replies through talkpost_do were accepted for hidden parents. /go threadroot redirected for hidden comments, /talkscreen and /delcomment named deleted comments before checking permission, and /manage/tracking named deleted comments and hidden entries.

LJ::Entry->visible_comment is now the one test for all of these. The journal controller answers hidden replyto and edit ids with the same 404 as hidden entries, before the adult interstitial. load_comments ignores hidden thread and view ids as it does missing ones. Journal managers keep the detailed talkscreen and delcomment errors, since they can act on every comment in the journal.

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com

rmc28

It's the first of October, it's the start of a new academic year, and I am still alive, eleven years after the care teams at Addenbrookes stopped cancer from killing me.

I am profoundly grateful to be alive, and to have built a good life: family, friendships, ice hockey, reading, swimming ... and a job I'm good at and enjoy doing that pays for it all.

Watch on YouTube

rmc28

Books on pre-order:

Call Me Traitor by Everina Maxwell (1 Dec)
Unrivaled (Game Changers 7) by Rachel Reid (1 Jun 2027)

Books acquired in September:

and unread:
1. Stone Blind by Natalie Haynes [3]
2. The Love Hypothesis by Ali Hazelwood [3]
3. Abbie Offsides by Anna McCallie
and previously read:
1. Steadfast (True North 2) by Sarina Bowen

Borrowed books read in September:

Odyssey by Stephen Fry [2]
Pandora's Jar by Natalie Haynes
Ladies in Hating by Alexandra Vasti

Rereads in September:

The Demigod Files (Percy Jackson) by Rick Riordan
The Last Olympian (Percy Jackson and the Olympians 5) by Rick Riordan

I am just about keeping up with my library loans, and grateful for the "suspend hold" option so I can release the ebooks and eaudios in a controlled manner. I've made a steady two-books-a-month progress the Percy Jackson readalong with the back catalogue of The Newest Olympian, but the podcast is about to go into a stretch covering the two movies and the first season of the TV show. I am definitely not rewatching the films and I don't think I want to rewatch the show, but that's quite a lot of episodes before we get back to the books. Will I get through them all this month? Let's find out. I am cycling less, driving more, and also napping more (which often involves podcast/audiobook on a timer).

I was tempted by the Greg Bear and Timothy Zahn HumbleBundles but in the end left them unbought, as I haven't read anything bought in September or August, and still have lingering unreads from July, June and April.

The new Everina Maxwell is only two months away now. Excitement!

[2] Audiobook
[3] Physical book

smuttymcsmutface posting in

dw_community_promo

Kink Hub: A Sharing & Reccing Community for Kink Fics

Links:

kinkhub | Community Rules | Posting Guidelines | Monthly Themes & Free-For-All | October: Kinktober

Description: Kink Hub is an 18+ comm for anything kink fic, where you can self-promote, share and rec fanfics of all fandoms and original works. RPF is welcome.

It's

kinkhub's third anniversary! For the month of October, the theme for all shared fics is "Kinktober". All works written for Kinktober (any year, any prompt list) count for this theme. If you've written or read any Kinktober fics, you're very welcome to share the links to them in the comm.

ysabetwordsmith posting in

dw_community_promo

allbingo provides a space for creative people to share their work, using bingo cards for inspiration.

crowdfunding is a community for creators, patrons, and fans of cyberfunded creativity.

Further details below ...

( Read more... )

Current Mood: busy

github posting in

changelog

Update makertube embed filter (#3658)

Update embed whitelist
Update makertube.net embed filter
Merge issues

Commit: 3c051e81 Author: chebegeek

github posting in

changelog

Bump js-yaml from 4.2.0 to 4.3.2 in /api (#3664)

Bumps js-yaml from 4.2.0 to 4.3.2. - Changelog - Commits

github posting in

changelog

Support service configuration for small self-hosted sites (#3666)

Commit: b39a3822 Author: Mark Smith

github posting in

changelog

Move Node.js from 20 to 24 LTS (#3673)

Node 20 reached end of life in April 2026; 24 is the current Active LTS. Both the devcontainer and the production base22 image install it from NodeSource for sass and esbuild.

Co-authored-by: Claude Opus 5.5 noreply@anthropic.com

Commit: 303817ab Author: Mark Smith

github posting in

changelog

Fix API rate limiting on the Plack request object (#3672)

DW::API::RateLimit->wrap called $r->connection->remote_ip and $r->headers_out->{...}, which DW::Request::Plack does not provide, so every rate-limited REST endpoint died before running. Use the native get_remote_ip and header_out methods.

Co-authored-by: Claude Opus 5.5 noreply@anthropic.com

Commit: 802db096 Author: Mark Smith

rmc28

I am waiting on call for my part of some weekend working (other people have to get their parts done first).

Swimming
( Read more... )

Ice hockey
( Read more... )

Car
( Read more... )

Health
( Read more... )

julesjones

43 years of extra life so far thanks to Stanislav Petrov.

https://en.wikipedia.org/wiki/1983_Soviet_nuclear_false_alarm_incident

Climate change is real, and already killing thousands of people. But for the younglings saying "you old people don't know what it's like to grow up in a world where we're all going to fry" - actually, we do. I was a teenager when Petrov looked at a computer report and decided that it was a false alarm. I've sung Tom Lehrer's "We will all go together when we go" more than once in those 43 years. I'm glad there's no thunder forecast for tonight, because it still occasionally wakes me from a nightmare.

agoodwinsmith

I would like to invite everyone to remember the sign off of Looney Tunes cartoons by Porky Pig. I do believe the graphics for the white hole/ black hole, as we see them, with a cloud band as a stage across the front, is meant to remind us of "That's All, Folks!"

And it was never "All" - there would always be another cartoon in front of another movie.

And *THAT* means that "The Space Baby" was likely Porky Pig.

If they can avoid more gimmick episodes for the final five, then this will indeed have been "all".[1]

[1] - does anybody know -> did Looney Tunes end up owned by Desilu?

agoodwinsmith

This doesn't really deserve SPOILERS because it appears to be a complete fantasy on my part, but this is in regard to Tomorrow's Enterprise.

~

~

~

I *swear* that during my first viewing of the episode, while live, that I saw the following: Present day Uhura is in the future sickbay with future Chapel, future Boyce, and future Kirk. Uhura addresses Kirk three times, as follows: Jim; Admiral; Captain. Kirk responds to Admiral with "Admiral?"

I've watched the episode again twice, and that event is not anywhere at all. It was all in my head. Yes, I saw the similar scene where it is Pike instead of Kirk, but during my first viewing my scene was additional. The only thing I can think of is that sometimes I close my eyes, and I think I am just listening with my eyes closed, but later evidence determines that I was actually lightly asleep.

So, my evidence for a third time line being hinted evaporates. Shoot.

I have to say that I think the action was pretty slow (almost boring), and the orchestral flourishes very ornamental and full of harps. Conducive to snoozing, as it were.[1]

[1] - therefore: not my fault

Profile

supermouse

August 2022

S	M	T	W	T	F	S
	1	2	3	4	5	6
7	8	9	10	11	12	13
14	15	16	17	18	19	20
21	22	23	24	25	26	27
28	29	30	31

Page Summary

github in changelog - Return a login requirement for logged-out quick-reply comments (#3676)
github in changelog - Fix login panel and restore community join link on the not-found page (#3677)
github in changelog - Answer slugs under the wrong date the same as missing slugs (#3675)
mark in dw_maintenance - Code pushed -- FYI
github in changelog - Clean up comment posting preview and add tests
rmc28 - Car
github in changelog - Answer hidden entries and comments the same as missing ones (#3674)
rmc28 - Eleven years
rmc28 - To-read pile, 2026, September
smuttymcsmutface in dw_community_promo - Kink Hub Theme of the Month: "Kinktober"
ysabetwordsmith in dw_community_promo - Allbingo and Crowdfunding
github in changelog - Update makertube embed filter (#3658)
github in changelog - Bump js-yaml from 4.2.0 to 4.3.2 in /api (#3664)
github in changelog - Support service configuration for small self-hosted sites (#3666)
github in changelog - Move Node.js from 20 to 24 LTS (#3673)
github in changelog - Fix API rate limiting on the Plack request object (#3672)
rmc28 - Keeping busy
julesjones - Happy Stanislav Petrov day
agoodwinsmith - And another thing - SNW S4 E10 - That's all, folks.
agoodwinsmith - SNW - Admiral Kirk

Style Credit

Style: Fall Leaves for ColorSide by branchandroot
Resources: Stock.XCHNG

Expand Cut Tags

No cut tags

Page generated Oct. 3rd, 2026 11:45 pm