BoarAvoir

joined 2 years ago
[–] BoarAvoir@hexbear.net 9 points 1 month ago

It's fixed

(thank you for letting us know)

[–] BoarAvoir@hexbear.net 4 points 2 months ago (1 children)

Hi, thank you for reporting this issue! sorry it's taken a bit to work its way to the relevant people. It should be working now, assuming you are not currently rate limited and you don't require multiple retries to get the 2fa code right.

a little inside baseballSo the issue is, lemmy doesn't have super granular controls on various API rate limits, there are only like 7 categories but there are many more API endpoints than that. For reasons I cannot fathom, the /login endpoint uses the same rate limit as the /register endpoint (for applying for a new account), which we keep pretty low to prevent registration spam, etc.

In addition, 2FA logins require 2 calls to /login, since the first one has to come back with a response telling the page to display the 2fa prompt, and then a second request is sent with the 2FA code.

Long story short, there was recently an attempted "raid" of the site by some trolls, and in preparation the /register rate limit was lowered further than normal, to only 1 per hour. This had the unintended effect of making 2FA logins impossible, and has now been increased. In future our devs may change the login rate limit to not track /register, but for now 2FA should be working again, though if you mis-type the code you may get rate-limited for an hour until a more permanent fix is in place.

[–] BoarAvoir@hexbear.net 7 points 3 months ago (1 children)

New pronouns require a small amount of dev time to add, but it's pretty easy normally. My bigger concern would be the ongoing rebase of our customizations onto lemmy 0.19.6. I've asked in the dev chat!

[–] BoarAvoir@hexbear.net 8 points 6 months ago (2 children)

surprise! we browse the trans mega!

sie/hir has been added, give them a shot!

[–] BoarAvoir@hexbear.net 8 points 9 months ago (1 children)

Yep. It is actually automated, it renewed on its own ages ago, but reloading the web server to pick up the new cert just silently failed. Should be resolved now.

[–] BoarAvoir@hexbear.net 26 points 1 year ago* (last edited 1 year ago) (4 children)

dean-neutral

(Note: this is not in any way an official statement by the admin team, I'm just a tech dweeb)

Proposal: Do Nothing, but improve searchability by making the shortcode autocomplete also search by tags, not just the canonical name.

We have the ability to add basically unlimited alt-names or descriptors to the tags for each emote, which has made searching in the emoji picker much more viable even for obscure emotes (provided they are well-tagged). Problem is, nobody uses the emoji picker, most people don't even know it exists.

Make sure the library is reasonably well tagged and make that tweak to the searching and this whole conundrum goes away.

Examples below of some existing tags from a previous effort to tag all the emotes:

We might also want to make the alt-text more descriptive for people with screen readers but that's a separate conversation

Edit: Oh it looks like a dev (comrade makotech222) has already chimed in on this below:

also, its maybe possible we can enhance the inline emoji window to use keywords as well. would have to do some experimentation with it.

This would also basically address the following other suggestions:

https://hexbear.net/comment/4396592

https://hexbear.net/comment/4397267

https://hexbear.net/comment/4396837

https://hexbear.net/comment/4396793

https://hexbear.net/comment/4396237

https://hexbear.net/comment/4395861

https://hexbear.net/comment/4397894

https://hexbear.net/comment/4395895

https://hexbear.net/comment/4397730

https://hexbear.net/comment/4397711

 

secondary option if this isn't feasible: remove the unicode emojis from the emoji picker so it goes straight to our custom emotes when opened, and make it more prominent in the UI somehow (highlight it in a different color, make it bigger, make it sparkle, idc). And still finish the job tagging them all

[–] BoarAvoir@hexbear.net 20 points 2 years ago (1 children)

As others have mentioned, that was implemented in a hurry due to tightening up security and safety around embedded images. I've brought it up to the devs to hopefully rectify, as if an instance is trustworthy enough to federate with (aka, not actively malicious) then it is probably safe to show their embeds (behind a blur).

At the latest, this restriction will go away when lemmy upgrades to pictrs 0.5 which will support proxying image requests, but unless there are objections from the rest of the team we will likely add all federated instances to the image allowlist before then.

[–] BoarAvoir@hexbear.net 6 points 2 years ago (1 children)

Working on this very site. So nothing cool, no

[–] BoarAvoir@hexbear.net 16 points 2 years ago* (last edited 2 years ago)

I really hope we can restore the old Active algorithm, it's still on the table afaik, but I'm told the way that lemmy's database schema works has changed enough that it isn't trivial to switch back to.

[–] BoarAvoir@hexbear.net 4 points 2 years ago

Temporary fix applied. But yes, banning people for many thousands of years seems to have broken the modlog as the GitHub issue shows

1
submitted 2 years ago* (last edited 2 years ago) by BoarAvoir@hexbear.net to c/hexbear@hexbear.net
 

We will be down for ~30 mins. If you can't get in after an hour, check our Mastodon or twitter for updates, or try force refresh, clearing cache, etc.

EDIT: doing another quick hotpatch. You may see some interruptions

view more: next ›