Hi all remaining @!Streams enthusiast,
I've noticed that during the last few days my Streams website are getting a lot slower to load the Stream (and pubstream). Only unusual thing I found in the logs is this:
2024-11-05T06:59:01Z:LOG_WARNING:9515b791a8:Router.php:160:__construct: Module {1} not found.<br>2024-11-05T06:59:01Z:LOG_INFO:9515b791a8:Router.php:161:__construct: index.php: page not found: /%7B1%7D ADDRESS: 2a01:e9a:bf8:4f0:9af5:1fb1:de0b:8509 QUERY: req=/%7B1%7D<br>2024-11-05T06:59:02Z:LOG_WARNING:9515b791a8:Router.php:160:__construct: Module {1} not found.<br>2024-11-05T06:59:02Z:LOG_INFO:9515b791a8:Router.php:161:__construct: index.php: page not found: /%7B1%7D ADDRESS: 2a01:e9a:bf8:4f0:9af5:1fb1:de0b:8509 QUERY: req=/%7B1%7D<br>The IPv6 address that appears in these lines belongs to the computer I use to visit the website. I really don't know if this could be related to the pages taking ages to load.
Mike Macgirvin 🖥️
in reply to Streams • • •Somewhere in the javascript is a "sprintf" thingy that uses numbers in parens in a template. And some browsers try to "pre-fetch" the template because it looks like a URL.
It's an annoyance, but is harmless.
Papa Dragon
in reply to Streams • • •Also, I noticed in my logs that some messages related to a no longer existing account keep popping:
This comes back nearly every minute while user mastodon.sdf.org/users/TomCox does not seem to exist. Is there any way I can read of those?
Mike Macgirvin 🖥️
in reply to Streams • • •Jupiter Rowland's (streams) outlet
in reply to Mike Macgirvin 🖥️ • • •I'm genuinely surprised it doesn't break on their side already. Or maybe it does, but nobody has noticed it yet.
Marcus Rohrmoser 🌻
in reply to Jupiter Rowland's (streams) outlet • • •Hi @jupiter_rowland @mikedev @streams,
if you - while processing the Delete - get a 410 on the keyId - do you think the actor is deleted (what the delete was supposed to indicate) or not?
What else do you need?
Jupiter Rowland's (streams) outlet
in reply to Marcus Rohrmoser 🌻 • • •I'm not a developer or a protocol designer. But I assume that you need the key with which the
Delete/Actoractivity was signed to verify that theDelete/Actoractivity is genuine. The very same key that was deleted immediately after theDelete/Actoractivity was sent, although it was still needed.It's completely asinine to sign something with a key, make it depend on that key and, within a split-second, delete the key again. I seriously wouldn't wonder if Mastodon's performance issues came not only from Ruby on Rails, but also from instances looking for deleted keys all the time.
I mean, sure, in theory, you can assume that if a
Delete/Actoractivity is signed with a key, it's always genuine even if the key is nowhere to be found. But seriously, that'd enable me to forge a signedDelete/Actoractivity with some random key to flag your account deleted in most of the Fediverse and get away with it by intentionally throwing away the key.So what we actually need is the ActivityPub standard to d
... Show more...I'm not a developer or a protocol designer. But I assume that you need the key with which the
Delete/Actoractivity was signed to verify that theDelete/Actoractivity is genuine. The very same key that was deleted immediately after theDelete/Actoractivity was sent, although it was still needed.It's completely asinine to sign something with a key, make it depend on that key and, within a split-second, delete the key again. I seriously wouldn't wonder if Mastodon's performance issues came not only from Ruby on Rails, but also from instances looking for deleted keys all the time.
I mean, sure, in theory, you can assume that if a
Delete/Actoractivity is signed with a key, it's always genuine even if the key is nowhere to be found. But seriously, that'd enable me to forge a signedDelete/Actoractivity with some random key to flag your account deleted in most of the Fediverse and get away with it by intentionally throwing away the key.So what we actually need is the ActivityPub standard to define how long keys of deleted user accounts must be stored post-deletion so that all Fediverse server software can count and depend on it. And maybe after that period and only after that period, a signed
Delete/Actoractivity can be assumed genuine even without its key. And we need Mastodon and Threads to adhere to this.#Long #LongPost #CWLong #CWLongPost #FediMeta #FediverseMeta #CWFediMeta #CWFediverseMeta #ActivityPub
Mike Macgirvin 🖥️
in reply to Streams • • •