@kraftner@mastodon.social
@kraftner@mastodon.social avatar

kraftner

@kraftner@mastodon.social

👨‍💻 Senior one-man show trying to make the web nicer.
👪 Retired https://vienna.wordcamp.org #WCVIE orga
♂️ He/Him
🚀 #WordPress • #WebDev • #OpenSource • #Simplicity • #Privacy

This profile is from a federated server and may be incomplete. Browse more on the original instance.

juliank, (edited ) to random
@juliank@mastodon.social avatar

Just uploaded a new build of @keepassxc to Debian unstable, this adds a separate keepassxc-minimal package, and a transitional package that depends on keepassxc-full | keepassxc-minimal; so people upgrading (or new installing) will get the full experience again.

This is still 2.7.7, mind you. 2.7.8 I need to go look at some day when I'm not killing myself with apt solver work!

kraftner,
@kraftner@mastodon.social avatar

@juliank @keepassxc Thank you for this solution!

keepassxc, to random
@keepassxc@fosstodon.org avatar

Debian Users - Be aware the maintainer of the KeePassXC package for Debian has unilaterally decided to remove ALL features from it. You will need to switch to keepassxc-full to maintain capabilities once this lands outside of testing/sid.

kraftner,
@kraftner@mastodon.social avatar

@keepassxc Am I right that this won't affect the Ubuntu PPA?

kraftner, to wordpress
@kraftner@mastodon.social avatar

If you ask me media handling in is currently utterly broken:

  • generating image sizes only on upload
  • no proper way to (re-)generate thumbs (incl. show-stopping bugs in WP-CLI)
  • no media usage tracking
  • orphaned files on editing images
  • no folders/structuring in the backend
  • incomplete/manual responsive image size handling (not even talking about content-awareness or art direction)

I know there are plugins out there but that itself is really weird for such a core feature.sigh

aardrian, to random
@aardrian@toot.cafe avatar

Wow, I didn't expect high quality stuff from the current team at REDACTED but I also didn’t expect to wish this was written by an LLM instead. At least it might not have possessives instead of plurals.

Also, does this mean they think <form> is “accessible” or native controls are? Because, well, both are wrong (<form> is neither accessible nor inaccessible, and this author has clearly never used a native date picker).

kraftner,
@kraftner@mastodon.social avatar

@aardrian Just noticed it is live now. Also on your comment itself: 🔥

kraftner,
@kraftner@mastodon.social avatar

@aardrian I really shouldn't try to communicate with emojis. 😀 What I was trying to say is that it hits hard but very much so because it isn't aggressive or condescending but just very clear on the facts of how lacking that post is. They basically set that site on fire themselves. Really painful to watch this whole clusterfuck...

Edent, (edited ) to wordpress
@Edent@mastodon.social avatar

I do generally like - but it appears to have started filling my blog with stuff.

Just loads of unnecessary translation cruft in JavaScript. This isn't something I enabled. There's no obvious way to turn it off.

I'm trying not be be all "old man shouts at clouds" - but isn't even attempting to be a lightweight and publisher friendly tool right now.

[Edit: It is some other Automattic plugin. Not JetPack.]

kraftner,
@kraftner@mastodon.social avatar

@Edent @jackmcconnell Do you have an example URL where that is the case?

kraftner,
@kraftner@mastodon.social avatar

@Edent @jackmcconnell Okay found one: https://shkspr.mobi/blog/2024/04/theatre-review-instructions-for-a-teenage-armageddon/
It seems that you're loading plenty of stuff that shouldn't be there in the frontend, e.g. React.
Have you tried turning of the caching plugin?
Looking at the source it seems that litespeed is bundling stuff together that isn't needed in the frontend and in the course triggers loading the translations and other stuff.

kraftner,
@kraftner@mastodon.social avatar

@Edent @jackmcconnell It might still be some kind of conflict between WordPress Core, a plugin and a caching solution.
Can you tell me which plugin you disabled that made it go away?

kraftner,
@kraftner@mastodon.social avatar

@Edent @matze You're both kind of right but just keep talking past each other.
If a script uses translatable strings and this script is loaded WP automatically loads translations for that.
Yes this has to be client asset because it happens in JS and not in the backend-generated HTML.
Yes it also shouldn't be here because it has nothing to do with the actual site content.
But it is not the fault of WP core but a plugin. Either the one the script is from, a caching plugin or a combination of those

kraftner,
@kraftner@mastodon.social avatar

@Edent @jackmcconnell I see. Looks like you already found the corresponding issue: https://github.com/Automattic/wordpress-activitypub/issues/705
So it is a bug in a plugin.
Just as constructive feedback: The easiest way to badly trigger WP people is to lump WP Core, bad/buggy plugins and Automattic together. 😉

kraftner,
@kraftner@mastodon.social avatar

@Edent Ouch. No it does not.
WordPress.org is a FOSS project. Automattic is one of the biggest contributors and maintains a lot (many say too much) control over the open source project.
But they still are distinct things and not making this distinction devalues all the contributions of non-Automattic contributors to WP Core.
You're of course still free to continue ignoring that difference, but I promise you when you're trying to debug a WP issue you'll lose a lot of good will from the get-go! 😉

alda, to wordpress
@alda@topspicy.social avatar

Here is the structure of a How-To article:

[An introduction with a bunch of crap written by Chat-GPT]

[An initial example using the built-in plugin/theme editor, demonstrating the author's disregard to best practices and urging others to be unprofessional]

[A screenshot of some scary-looking PHP code]

[A section claiming how difficult and technically involved the previous step was, suggesting there's an alternative]

[A plug for the author's plugin that does the thing you want]

kraftner,
@kraftner@mastodon.social avatar

@alda ...and if you look at the promoted plugins code it is a more bloated and even worse version of the scary-looking PHP code from the article. 💥

Edent, to random
@Edent@mastodon.social avatar

Have a strong password is great.

Until a website says "Please enter the 3rd, 9th, and 17th character from your password."

And then you go blind trying to find them in
gD@YGXa6k*^EB&I5@b$0

kraftner,
@kraftner@mastodon.social avatar

@Edent I would be much more worried about the fact that they are obviously storing the password in plaintext... 😬

erikKroes, to random
@erikKroes@mastodon.social avatar

deleted_by_author

    •
    kraftner,
    @kraftner@mastodon.social avatar

    @erikKroes I assume you are aware of it since it stopped, but just in case you aren't: Some process seems to have gone wrong here, I see countless such messages from you.

    kraftner,
    @kraftner@mastodon.social avatar

    @erikKroes No worries, bugs happen, just wanted to let you know in case you weren't aware.

    fabiantodt, to wordpress
    @fabiantodt@fosstodon.org avatar

    🥳 Just updated my Good Slider plugin and added a blueprint.json for it - so it's easy to preview directly from the plugin repository. Testing the blueprint is a bit cumbersome as of now, but for plugins like this, I really think it's an awesome feature. 👍
    https://wordpress.org/plugins/good-slider/

    kraftner,
    @kraftner@mastodon.social avatar

    @fabiantodt @davidbisset So basically one could create a demo that isn't actually the plugin from which you launched the demo? This sounds like it is only a matter of time until people start abusing that... 😬

    kraftner,
    @kraftner@mastodon.social avatar

    @fabiantodt @davidbisset My primary thought about this is that people could try to demo the premium version to get people hooked on the features. As if the mess with upselling crippled free versions isn't already bad enough. But yeah, probably needs to be countered on a policy level. 😏

    Edent, (edited ) to random
    @Edent@mastodon.social avatar

    I need to store the hash of a file.

    For various boring reasons, I only have 128 bits of space. This cannot be changed.

    Is it better to use MD5, or truncate the output of SHA-256 / 512 ?

    Please argue in the replies.

    kraftner,
    @kraftner@mastodon.social avatar

    @Edent I am not a cryptographer so I am in no position to give any feedback.
    What I know though is that you might want to add the reason for hashing to the question since that probably is relevant. Guarding against accidental corruption and duplicate files or malicious hash collision attacks?

    alda, to wordpress
    @alda@topspicy.social avatar

    Things that are built into WordPress but receive little-to-no use:

    1. Hello.php and an upsell of Akismet
    2. Blog posts
    3. Comments
    4. Dependency on an external service for profile pictures

    Things that aren't built into WordPress but should be:

    1. Multiple authors per post
    2. A form builder for wp-admin
    3. An ORM that prevents n+1 queries
    4. Modularity via composer packages
    5. Bucket storage support

    kraftner,
    @kraftner@mastodon.social avatar

    @chris @alda @pch I remember vaguely that there was an attempt of modularity for core a very long time ago. Was it somehow related to BuddyPress? Or multsite pre core-merge? Anyone remembers that? All I remember is that it went nowhere like any other major fork or attempt at serious overhaul of core ever since. 😀

    kraftner,
    @kraftner@mastodon.social avatar

    @chris @alda @pch I think the original argument in that particular case was that it only brings benefits for devs and potentially confusing new issues for users (dependency hell etc.). And at some point in the past (I got basically this answer when I asked for plugin dependencies at the Q&A of the first WCEU in 2013) this might even been true. But the disadvantages of not adopting modern PHP practices will (some say have already) grow so big some day that this becomes the lesser evil.

    pfefferle, to wordpress
    @pfefferle@mastodon.social avatar

    is there a best practice to set plugin default settings or do (db) migrations on plugin install and update?

    kraftner,
    @kraftner@mastodon.social avatar

    @pfefferle Whatever you do: Do not (only) rely on hooks that only trigger when using the standard, internal updating mechanism like https://developer.wordpress.org/reference/hooks/upgrader_process_complete/
    There are way too many sites out there that update differently (manual, FTP, composer etc.)
    Generally I'd say have an autoloaded option that stores the current version you compare with the current version. On mismatch start migration.
    Also be careful to handle downgrades or other broken states and not solely rely on version info in the option

    kraftner,
    @kraftner@mastodon.social avatar

    @pfefferle Well it basically is a single "if" comparing a string with an autoloaded option. I'd say the performance impact will be almost impossible to see even in a benchmark. If you've reached that level of performance optimization I really envy your codebase! 😉

    Edent, to android
    @Edent@mastodon.social avatar

    Does anyone know of a modern phone which allows call recording without root?

    I'm currently on an aging 5T running and can record calls just fine - a button in the dialler lets me record straight from the line. I don't need to put it on speaker and record via the microphone.

    (Looking for 1st hand experience, not search results. No need to reply to discuss the legality of call recording. I need root-less for online banking etc.)

    kraftner,
    @kraftner@mastodon.social avatar

    @Edent May sound stupid, but have you tried rotating the phone?

    kraftner,
    @kraftner@mastodon.social avatar

    @Edent I don't have a screen here to test with my phone, but I've seen that behaviour when sharing a screen via WiFi. But yeah, probably a stupid proposal anyway since you've obviously tried that...I just remember me not realising that for longer than I am proud of with WiFi and rotation lock on... 😂

    matthiasott, to random
    @matthiasott@mastodon.social avatar

    Please read this as what it is: anecdotal evidence. But it tells you a lot about the current status of computer science education in Germany.

    My son’s teacher insists that an if statement always also needs an else.
    Always.
    Empty, if need be.
    He wrote an empty else { }.

    😐

    kraftner,
    @kraftner@mastodon.social avatar

    @matthiasott @bastianallgeier 1 week before my final school exam my teacher called me and asked if I might have some time before the exam to explain my project to him so that he knows what to ask me and doesn't make a fool of himself during the exam. 😁 But he still was a great computer science teacher-always encouraging me during the height of the dot com crisis to still follow my passion. I wouldn't be were I am now without him. So although competence is of course important it isn't everything.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • anitta
  • thenastyranch
  • rosin
  • GTA5RPClips
  • osvaldo12
  • love
  • Youngstown
  • slotface
  • khanakhh
  • everett
  • kavyap
  • mdbf
  • DreamBathrooms
  • ngwrru68w68
  • megavids
  • magazineikmin
  • InstantRegret
  • normalnudes
  • tacticalgear
  • cubers
  • ethstaker
  • modclub
  • cisconetworking
  • Durango
  • provamag3
  • tester
  • Leos
  • JUstTest
  • All magazines
    •