lil5 :golang: 🚲 🇳🇱

I try to keep a productive/helpful tone. Also I prefer tabs, sized at 3 😈 My favorite languages/frameworks are Tailwind, GoLang & SQL

Builder of https://example.stupidwebauthn.site/ a passkey auth

Website: https://li.last.nl/
Github: https://github.com/lil5
Codeberg: https://codeberg.org/lil5
Pronouns: He/him they/them

Public Key

npub13mf5xspvn2elj6cnmvc6x4r3fv53ecpgysjlgjwkuq7f7mxwfuxqv6tkv8

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsga56rgqkf4vledvfakvdr23c5k2guuq5zgf05f8twq0yldn8y7rqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsyghmu8

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub13mf5xspvn2elj6cnmvc6x4r3fv53ecpgysjlgjwkuq7f7mxwfuxqv6tkv8

Show more details

Last Notes

2025-01-09 09:51:22 UTC

@npub1h2c…nndg HTTPS error at: https://wiki.todon.nl/

2025-01-09 08:54:45 UTC

- reply

image source: https://fedi.tips/how-to-defederate-fediblock-a-server-on-mastodon/

2025-01-09 08:53:14 UTC

@npub132y…9hck https://pony.social/@xavier/113789228125976526
I'm browsing for a mastodon server that doesn't federate with threads, it was a bad idea at the beginning, it's an even worse idea now.
Its 7 steps to do, the time it took for server admins to let me know they're thinking about it, it could have been done.
Any server recommendations are appreciated 💌
#recommendations #Fediverse
https://cdn.fosstodon.org/media_attachments/files/113/797/531/849/804/357/original/b9a034b86cb74953.png

2025-01-08 18:59:35 UTC

- reply

it helps for auto fill by password managers
Also if you inspect element on the password input and change the type to text it will just become visible.

2025-01-08 16:43:54 UTC

- reply

Fw to @npub1080…cr2f fosstodon.org is still federating threads too
@npub132y…9hck

2025-01-08 13:42:25 UTC

A React-Router v7 template using Bun and Hono.
https://github.com/jpcpereira93/react-router-bun-hono-template
#bunJS #hono #ReactRouter #reactJS #remix

2025-01-08 12:01:51 UTC

Just added some more keywords to filter-out namely #bluesky, I haven't come across many meta key words to filter, but I'm almost certain it will come.
#filters #mastodon
https://cdn.fosstodon.org/media_attachments/files/113/792/601/441/506/021/original/612ad2abef512fa8.png

2025-01-08 10:36:36 UTC

- reply

Lijst hosting bedrijven in Nederland:
https://www.webhosters.nl/hosting-bedrijven/
https://webhostland.nl/hosting-bedrijven/

2025-01-07 22:14:26 UTC

- reply

https://fosstodon.org/@lil5/113624321335997206

2025-01-07 22:04:18 UTC

- reply

with all the ai in recent phone & desktop devices I’m surprised that the browser can generate alt text before sending off your image.

2025-01-07 18:17:22 UTC

- reply

soo graphql then?

2025-01-06 22:27:59 UTC

- reply

‘quit —force’ is a good way to put it, I’m just used to ‘sudo quit’

2025-01-06 21:24:31 UTC

- reply

Generics are great for libraries and small helper scripts but for an actual program I haven’t come across a single use case

2025-01-06 21:24:18 UTC

- reply

there is a ton of go projects and programmers who like to over-engineer make it too complex & forget that maintenance isn’t about code architecture but how data flows through it.
Go is really simple, we’re just thinking too complex about it.

2025-01-06 10:45:46 UTC

http://www.myproject.localhost:8080/
http://app.myproject.localhost:8080/
http://api.myproject.localhost:8080/
TIL you can add subdomains to localhost & it will just work!
Great for throwing a #CaddyServer in between you and your development containers, let it route to all the different services by domain.
#WebDev

2025-01-06 08:16:54 UTC

- reply

i made an authentication service in BunJS, which uses passwordless-id https://github.com/stupidwebauthn/server/blob/main/src/index.ts

2025-01-06 03:06:48 UTC

- reply

i create a JWE (token+user id+expiry date+version) and give that to the requesters browser as a cookie (httponly,strict), then send the unencrypted token to the email, only the browser that sent the request can now access the account. Done - no state required
A version is added so that i can always invalidate all jwe & jwt per user.
ℹ️
JWT is signed
JWE is encrypted
https://example.stupidwebauthn.site/

2025-01-04 10:11:56 UTC

- reply

Is it pronounced Ghost-tity or Ghos-tetewhy or Ghost-thai?

2025-01-04 08:33:21 UTC

- reply

Alt text while important, if we realistically look at these companies, will not be generated server side, client side I could see this becoming a thing.

2025-01-03 16:38:46 UTC

- reply

what are we even talking about it’s a single line in JS
https://fosstodon.org/@andrasbacsai/113750099452411479

2025-01-03 14:29:28 UTC

Exiting #vim is hard because phonetically one says “force quit” (:!q)
While the valid command is: “quit, oh and force away any warnings” (:q!)
#neovim

2025-01-03 10:29:55 UTC

- reply

alt text:
Airplane:
The Project they want me to run on it
Being towing by a bicycle:
My Office Laptop

2025-01-03 08:46:23 UTC

- reply

and yet you were too lazy to add alt text:
Laziness kills ambition
Anger kills wisdom
Fear kills dreams
Ego kills growth
Jealousy kills peace
Doubt kills confidence
Now read that right to left.

2025-01-03 08:42:02 UTC

Kudos to mastodon for finding a positive use case for #AI
Alt text generation 🎉 ❤️
#alttext

2025-01-03 08:35:49 UTC

- reply

alt text:
E-reader show a page displaying in a yellow glow:
Software Design is Knowledge Building
E olano.dev - Facundo Olano
Software Design is Knowledge Building
1/2/2025, 9:31:42 AM
1. The Story
This is the story of system SVC from company ORG. It's a true story, but I've smoothed out the details: by making it generic, I hope that it will be more familiar.

2025-01-03 08:26:22 UTC

- reply

nope, sorry but nobody is looking to administer an email server on top of mastodon 1000x more spam for 5 people using it.

2025-01-03 08:17:54 UTC

- reply

We've raised $4M to solve the problem of wrong years in footers.
This is a joke right, Right?!
https://cdn.fosstodon.org/media_attachments/files/113/763/433/086/282/541/original/42f41ead4e96ff19.jpeg

2025-01-03 08:00:07 UTC

- reply

SSH key + Lock Screen 🧹 I say it counts

2025-01-02 17:00:50 UTC

https://share.transistor.fm/s/2596bef9
Very cool project!
Gorjan Jovanoski is the co-founder of AirCare, the mobile app that helps you know what you breathe. He joins me to tell the story of founding AirCare, and share some of the surprises, good and bad, along the way.

2025-01-01 19:00:12 UTC

- reply

website: https://passkeys.dev/

2025-01-01 10:58:46 UTC

This year will be Powerful!
Math.pow(45,2)

2024-12-31 20:28:12 UTC

- reply

totally setting a reminder to change my user agent to this on 1st April

2024-12-30 06:12:15 UTC

- reply

What I’m trying to say is that unlike passwords, if the website is compromised and then later fixed, there’s no need to ask people to reset their passkey.

2024-12-29 13:27:05 UTC

- reply

(account lockout, vendor lock-in) those are more recovery flows that aren’t necessarily part of authentication.
Backups are tbd
Public key crypto helps against backend code infections stealing passwords, bcrypt only secures data at rest, but traditional login forms send plain text passwords (via tls) to the backend, it has access to your password.

2024-12-29 12:43:32 UTC

- reply

yes _if_ you’re using a password manager which, after 10years of advising people to use one, no one uses.
Most people use one password for everything and google authenticator for 2fa and copy the code by memory.
Passkeys are linked to the login domain _forcing_ the using of proper login procedure.

2024-12-29 12:23:29 UTC

- reply

It terms of phone loss, it is assumed that you’re using a passcode &or biometric. And that you’d be able to deactivate the phone remotely.
Most phishing attempts make use of fake looking websites, using lookalike domains, #passkeys & #webauthn secure against this unlike password+TOTP

2024-12-28 12:55:27 UTC

- reply

dark grey on light grey aren’t specifically illegal (especially in iOS when high contrast mode exists) you just need to be mindful on the contrast it has.
Not everything needs to be black on white for it to be accessible for those in between bad eye sight and pristine vision

2024-12-28 11:07:16 UTC

Super simple example of how to add pprof to your app with an optional build tag.
Add pprof · lil5/tigerbeetle_api@55e3614
https://github.com/lil5/tigerbeetle_api/commit/55e361422282de0871ae536b51c3a3085931e3e9
#golang

2024-12-28 07:41:18 UTC

- reply

orange on a grey background is a nightmare for bad eyes, if the buttons must be that color, I’d recommend using a darker grey, red or blue #a11y

2024-12-27 19:54:27 UTC

- reply

I only managed to build an auth service because passwordless-id/webauthn makes it simple
here’s my project: https://stupidwebauthn.site/
It handles auth cookies, email registration, passkey checks.

2024-12-26 06:52:01 UTC

- reply

just a reminder that Passkeys are much better alternative than passwords.

2024-12-25 13:01:56 UTC

- reply

if(!obj) throw “invalid”
If you’re expecting a struct then embracing falsy will save you

2024-12-24 14:29:45 UTC

- reply

see gofumpt for even stricter formatting 🫡 (backwards compatibility with gofmt)
https://github.com/mvdan/gofumpt
#GoLang

2024-12-24 06:07:17 UTC

- reply

why add passkeys to your hashtag list?
Webauthn basically negates a lot of security vulnerabilities

2024-12-23 20:41:27 UTC

- reply

fmt.Printf + _test.go 💀

2024-12-23 07:04:30 UTC

- reply

at the point that you must need to know what kind of obj it is by its prototype, you’re using it wrong or should be using a different language.

2024-12-22 14:56:20 UTC

- reply

most laptops stands are too small compared to a stack of encyclopedias

2024-12-21 04:47:20 UTC

- reply

I suggest using #Homebridge or other smart home hub (Homey, HomeAssistant) and run it through that

2024-12-20 15:27:44 UTC

- reply

tigerking for nerds

2024-12-20 14:57:22 UTC

- reply

it looks to me like you’ve over complicated your Makefile, the go compilation speed is fast enough that the following should be enough:
.PHONY: build
build:
go build .

2024-12-19 20:38:05 UTC

- reply

_zigbee is pricey_, even compared to wifi. Take a look at iot zigbee vs wifi vs Bluetooth

2024-12-18 20:28:53 UTC

Friday, 11 April 2262 23:47:16.854 GMT
Will be the int64 unix nano epoch max date.

2024-12-18 14:34:26 UTC

- reply

if your going to add a warning use the inbuilt CW button!

2024-12-18 10:38:39 UTC

https://lil5.github.io/tigerbeetle_versions/
I built a small tool to see the best upgrade path for your old tb db.
It includes a Bun tool that reads all #tigerbeetle releases using #github cli: https://github.com/lil5/tigerbeetle_versions/tree/main/getversions

2024-12-18 09:22:52 UTC

- reply

it’s the sad truth with sqlc that you need to read the generated code to ensure that it added enough ?

2024-12-17 06:25:16 UTC

- reply

having used other options dotenv is the simplest
github.com/joho/godotenv
I use a .env file for development then use environment variables in production.

2024-12-17 05:49:22 UTC

- reply

https://m.imdb.com/title/tt28651516/

2024-12-17 05:48:09 UTC

- reply

Considering Rust doesn’t imply adoption either.

2024-12-16 14:26:13 UTC

- reply

umami has been easy to setup

2024-12-16 12:01:15 UTC

React Router gets (yet another) version update
https://remix.run/blog/incremental-path-to-react-19
The people at #ReactRouter have forgotten that api stability matters.

2024-12-16 07:03:35 UTC

- reply

you’re apps look really good and was interested what you built them with.

2024-12-16 00:00:28 UTC

- reply

null string is great
v.String == “” // for if null or empty
v.IsValid // is null (don’t worry about if empty)

2024-12-13 10:58:27 UTC

- reply

are you using swift or react native for this app?

2024-12-13 10:21:35 UTC

When the crypto.js file simply contains cryptography
#Web3IsDoingGreat
https://cdn.fosstodon.org/media_attachments/files/113/644/990/011/738/871/original/70492ffcb4f1f1d8.jpeg

2024-12-12 06:42:09 UTC

- reply

+1 xD

2024-12-12 06:39:30 UTC

- reply

your sanity /j
Would ‘instanceof’ work or do you need to add that in too?

2024-12-12 06:36:01 UTC

https://thisvsthat.io/performance-testing-vs-scale-testing
Performance test ≠ Scale test
Performance testing evaluates how well a system performs under normal conditions
Scale testing assesses how well a system can handle increased workloads and user traffic
#GoLang

2024-12-11 07:53:17 UTC

- reply

Q: If a website has dark mode but you need to manually set it to auto, does said website even have a dark mode at all?
A: No

2024-12-10 21:13:18 UTC

benchstat command - golang.org/x/perf/cmd/benchstat - Go Packages
https://pkg.go.dev/golang.org/x/perf/cmd/benchstat
Compare multiple go benchmark results, all from the std library
$ go test -run='^$' -bench=. -count=10 > old.txt
$ go test -run='^$' -bench=. -count=10 > new.txt
$ benchstat old.txt new.txt
#golang

2024-12-10 11:43:17 UTC

0 Days since DNS was the issue
Webdock - Some issue with our webdock.cloud aliasdomain
https://status.webdock.io/cm4i6domn001h11l7pofqyhwf
#webdock #vps #hosting

2024-12-10 10:36:27 UTC

- reply

yeah input email will already do the trick

2024-12-09 18:39:11 UTC

HTML DOM Form reset() Method
https://www.w3schools.com/jsref/met_form_reset.asp
#React #ReactDOM is lacking a few form-event-target types, thanks to these lacking types, devs overly depend on useState when the dom could hold state instead.
#WebDev
https://cdn.fosstodon.org/media_attachments/files/113/624/296/913/806/677/original/9f60b3482d830088.png

2024-12-09 13:50:55 UTC

#astro devs
I just successfully moved from astro-i18n to astro-react-i18next, since a while back astro-i18next had been erroring out during the page generation script, astro-react-i18next removes the need for a generate step and just works with a [...locale] directory
https://github.com/jeremyxgo/astro-react-i18next

2024-12-08 11:11:03 UTC

- reply

block all non get requests might work

2024-12-07 23:02:34 UTC

- reply

so often it advises me to concatenate sql queries

2024-12-07 16:43:50 UTC

- reply

https://pkg.go.dev/github.com/gin-gonic/gin?tab=versions
As you can see from gin versions they don’t release very often. But the project is maintained.

2024-12-07 09:41:28 UTC

NextUI v2.6.0 https://nextui.org/blog/v2.6.0#built-in-validation
NextUI Now has automatic validation styles, and they're beautiful
#React #NextJS #Tailwind CSS #NextUI #ReactAria

2024-12-06 07:04:37 UTC

- reply

This is huge:
ref as a prop: Refs can now be used as props, removing the need for forwardRef.

2024-12-04 13:45:55 UTC

- reply

Makefile of 622 lines!! What are you smoking?
Here 9 lines https://gist.github.com/lil5/bb33d57ea32d8b2fc44aba305df69bb4

2024-12-04 11:05:27 UTC

- reply

this vscode extension has been so good that I’ve forgotten most git cli commands.
Unless you can collapse branch merges your git tree visualizer is inferior.
https://marketplace.visualstudio.com/items?itemName=mhutchie.git-graph

2024-12-02 13:53:11 UTC

Form values from event variable
https://codepen.io/lil5/pen/jENPvJd?editors=1011
Junior #js framework devs will use a reference to each input el. Did you know that you can retrieve input directly from the form submit event?
#webdev

2024-12-02 09:13:17 UTC

Anyone know of a good email service? (Sending out auth emails)
Currently I’m forced to advise clients to use AWS, but I’d rather use a service that’s not supporting a billionaire’s lifestyle.
#WebDev #reccommendations #DevOps

2024-12-01 20:25:19 UTC

- reply

bookmarked, I’ll take a look. ⭐️

2024-12-01 20:16:52 UTC

- reply

ooo does it have a name for me to find this on mw websites?

2024-12-01 20:03:25 UTC

@npub1qc8…nxsr do you know how well #MagicWormhole deals with spotty internet connections, on a large transfer?

2024-12-01 10:23:02 UTC

- reply

dependents if the hashtag is followed much or not, half the posts in my home view are from hashtags I follow, find a couple new interesting posts from that to justify the rest.

2024-11-30 22:03:47 UTC

- reply

what type of plant is that?

2024-11-29 12:26:03 UTC

- reply

no comment
https://cdn.fosstodon.org/media_attachments/files/113/566/223/614/498/300/original/0bd486d68bd302ec.jpeg

2024-11-29 12:22:20 UTC

- reply

I’ve seen that in archived presentations
As a rule qrcodes must display the url below it
Nevertheless qrcodes are a great step forward compared to manually typing out links *shudder*

2024-11-29 10:08:17 UTC

- reply

I wish golang had Objective-C's nonnull

2024-11-29 10:05:52 UTC

- reply

https://github.com/abice/go-enum
You'll thank me later

2024-11-29 10:04:55 UTC

- reply

text-green-600 dark:text-green-300
If you replace the text with: s/Tailwind developers/Junior on a custom scss project/

2024-11-29 10:01:28 UTC

- reply

I like to use golang for backend because it has strict typing (Typescript is great but your still running JavaScript) and its lightning fast compile times.
For injesting data into a database or running mission critical calculations go beats js.
As long as you use something that takes care of the boilerplate (Gin, sabre/lo) go can be very easy to pickup.

2024-11-29 09:39:43 UTC

- reply

Ended up using Borg + Syncthing
https://fosstodon.org/@lil5/113562867139773657

2024-11-28 22:10:35 UTC

- reply

I ran it as root and added chown on after_everything
This allowed me to synchronize the backup using #syncthing
Thanks, borgmatic is the best!

2024-11-28 11:23:54 UTC

#BorgBackup Would I be able to run (as root) a local backup, then chown the destination afterwards?

2024-11-28 09:09:53 UTC

Is there a way to automate #magicwormhole transfers where the other side is already trusted by default? Or should I be using #Tailscale / #Syncthing for this?

2024-11-27 09:17:30 UTC

- reply

it’s naive to think that opensourcing Chrome would help, you’re missing the Chrome addons backend, the blatant power misuse; advising people on Google search to use chrome, the Chrome app default installed on android phones (enforced by Play Store guidelines)

2024-11-27 09:00:13 UTC

- reply

magic wormhole
https://github.com/psanford/wormhole-william

2024-11-27 08:29:44 UTC

- reply

I’ve built an auth server that uses email as backup.
With the ability to remove either your current passkey or all from your account
Creating a new passkey is a simple: receive email with login link, click link, create passkey.
https://example.stupidwebauthn.site