12 ms·
This website is hosted on Bluesky
- tr1ll10nb1ll 2y agounrelated probably, but it made me realize how I don't really see Hugo/Jekyll type websites anymore.
- edm0nd 2y agoWe use Github to Jekyll to host a few websites. Works awesome.
- hipadev23 2y agoHow do you even know? Don't those both just generate static html?
- thesdev 2y agoIt says "Powered by Hugo" at the bottom of the page.
- tr1ll10nb1ll 2y agoFooter. also Jekyll/Hugo sites use generator so you can mostly find it in the meta generator tag. Next.js sites are also a super easy find like this.
- veqq 2y agoYou can trivially remove it e.g. `disableHugoGeneratorInject = true` in `config.toml`.
- zahlman 2y agoI see plenty of blogs generated from Markdown with tools like that. Has something overtaken Hugo and Jekyll in that space?
- aryonoco 2y agoIf you like JS/TS, then Astro. I maintain a blog on Hugo but also host a couple of Astro ones. I think Hugo is great but to my eyes at least Astro has more active development behind it, and I also enjoy it more (probably because I know Typescript more than golang)
- dangerlibrary 2y agoI just use mkdocs for everything.
- dv35z 2y agoHave you found a decent bare bones starter theme? I've been using MkDocs Material, and I find the theme too complicated (HTML etc) - hoping to find a super simple one that looks decent - plain - and is a good base for theming / styling. Thanks & take care.
- dangerlibrary 2y agoI use the readthedocs theme: https://www.mkdocs.org/user-guide/choosing-your-theme/#readthedocs https://www.mkdocs.org/user-guide/choosing-your-theme/#readt... Not sure if that fits the bill for you, but I like it.
- dv35z 2y agoThis looks interesting - thank you!
- teitoklien 2y agoI build my own with Jinja2 templates my custom python script + mistune library to parse markdown to html, and a YAML file in similar format to Hugo (the previous generator i used to use) I found building my own custom one with python3, much more freeing in all sorts of interesting ways, I also exposed the static site generator with a FastAPI based API to auto build my website from my notes, my cooking recipes, database records, financials, git commits, etc to build me a private protected website (via nginx auth) from anywhere, whether via sending a text message to my telegram bot, or running a Shortcuts command on my iPad, or just directly running a command from my terminal. It took barely a day to setup, and allows me to run interesting custom extensions in all sorts of interesting ways, and builds me a personal website curated to my interest, where the primary viewer is supposed to be me. and it exposes a public barebones website with barely any content for everyone else. One of these days I think i’ll expose more of it to the world.
- simonw 2y agoI was curious as to the security context this runs in: curl -i 'https://porcini.us-east.host.bsky.network/xrpc/com.atproto.sync.getBlob?did=did:plc:j22nebhg6aek3kt2mex5ng7e&cid=bafkreic5fmelmhqoqxfjz2siw5ey43ixwlzg5gvv2pkkz7o25ikepv4zeq' Here are the headers I got back: x-powered-by: Express access-control-allow-origin: * cache-control: private vary: Authorization, Accept-Encoding ratelimit-limit: 3000 ratelimit-remaining: 2998 ratelimit-reset: 1732482126 ratelimit-policy: 3000;w=300 content-length: 268 x-content-type-options: nosniff content-security-policy: default-src 'none'; sandbox content-type: text/html; charset=utf-8 date: Sun, 24 Nov 2024 20:57:24 GMT strict-transport-security: max-age=63072000 Presumably that ratelimit is against your IP? "access-control-allow-origin: *" is interesting - it means you can access content hosted in this way using fetch() from JavaScript on any web page on any other domain. "content-security-policy: default-src 'none'; sandbox" is very restrictive (which is good) - content hosted here won't be able to load additional scripts or images, and the sandbox tag means it can't run JavaScript either: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/sandbox https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Co...
- nightpool 2y agois the default-src necessary if you're using sandbox or is it redundant?
- johncolanduoni 2y ago`sandbox` doesn’t affect making requests via HTML (images, stylesheets, etc.).
- deleted 2y ago[deleted]
- nightpool 2y agoRight, but what would be the security impact of that compared to just plain HTML? I guess it allows for some form of view counting or IP exfiltration, but other than that anything you can do with an external request you could do with an embedded data URI.
- bbor 2y agoPretty awesome! Convenience link to the fascinating github issue linked at the bottom, featuring Bluesky celebrity pfrazee: https://github.com/bluesky-social/atproto/issues/523 https://github.com/bluesky-social/atproto/issues/523 I have a lot of hope for AT. I'm sure there's lots of smart people on HN that have done great things with the Fediverse, but this whole paradigm just seems more sustainable + realistic. Basically it gives us centralization by default, but with real decentralized support when you need it / for power users.
- jazzyjackson 2y agoAs far as sustainability goes I'm hoping for a better business model than "accept funds from Blockchain Capital" [0], some return on investment in mirroring the firehouse. I can muse, a Discord alternative where some users pay to host longer videos (current limit is 60sec [1]) or Patreon where a relay takes a cut in exchange for managing access/decryption keys, or Bandcamp or some other kind of social marketplace - as it is theres no reason I couldn't do this, it is an open platform after all. [0] https://www.blockchaincapital.com/blog/bluesky-13m-users-and-growing-our-investment-in-blueskys-re-imagined-social-network https://www.blockchaincapital.com/blog/bluesky-13m-users-and... [1] https://bsky.social/about/blog/09-11-2024-video https://bsky.social/about/blog/09-11-2024-video
- bbor 2y agoYeah I’m also worried about profitability, tho not particularly concerned about that particular investor, personally; all VCs are inherently amoral profit generators. They are a “benefit corporation” like anthropic, which gives them some leeway to deny shareholder requests in the name of public good. Which is nice! In general I feel like social media is in the perfect spot for a huge shakeup as display ads breathe their last breath. Even if Google wins/draws out its Display Ads antitrust case and successfully implements some new interest-tagging system, I think anyone with a calculator and a newspaper subscription can read the leaves at this point; people are concerned about their data, and the money it generates is peanuts compared to more traditional advertising schemes. All of this is of course not even mentioning what I think intuitive algorithms will do (cynical or no, there’s lots of credentialed scientists saying that AGI (!!) is within reach in the coming decade, if not the coming few year). All that to say: I feel like they can find a way to make it work. Revenue doesn’t need to be as high anyway if you a) don’t have 1000 devs optimizing Display Ad A/B tests all day, and b) have the support of the open source community.
- bargainbot3k 2y ago[flagged]
- steveklabnik 2y agoIn what sense?
- bargainbot3k 2y ago[flagged]
- ziddoap 2y ago>Not sure why my parent comment was flagged. I guess when you can’t formulate a response, you flag and downvote? Is that the HN way? It was a vague and negative one-liner, with no indication of what you were insinuating or why you think that way, from a brand new account. If you spent 30 more seconds to expand on what history you were referring to and why you think history is repeating, it would not have been flagged.
- bargainbot3k 2y ago[flagged]
- noirbot 2y agoWhat is there to respond to? "This thing may happen at some point in the future" isn't insight or commentary. I can formulate a response, but it's already required more thought and effort than you seemed to have put into your comment. Engagement farming and bait isn't what HN is generally for.
- leoc 2y agohttps://bsky.app/profile/leocomerford.bsky.social/post/3l7v6x2w56v26 https://bsky.app/profile/leocomerford.bsky.social/post/3l7v6... To help the hard of clicking, this time I have pasted it all for you: Leo R. Comerford @leocomerford.bsky.social Why was it decided not to build on any existing content-addressable networking system (IPFS or whatever)? November 1, 2024 at 12:39 PM Leo R. Comerford @leocomerford.bsky.social · 23d (Not implying that this was the wrong decision, it’s a genuine question.) dan @danabra.mov · 23d actually not sure i can answer this well. paging @bnewbold.net or maybe @why.bsky.team (who worked on IPFS btw) dan @danabra.mov · 23d my guess is that we’d want data hosting to be under direct control of the user (same as web hosting) rather than peer-to-peer, want instant deletion/edits at the source, need ability to move to a different host or take content down, need grouping into collections. not sure how much IPFS could adapt dan @danabra.mov · 23d we do use some pieces from IPFS through (aside from the actual peer to peer mechanism) bryan newbold @bnewbold.net · 4mo you can basically ignore it, we don't use "IPFS" proper anywhere. there are strong social connections, and we borrow some tech components like CIDs (flexible hash/digest syntax) and DAG-CBOR (more-deterministic subset of CBOR, good for signing+hashing) Bumblefudge @bumblefudge.com · 1d yeah this is all accurate. bluesky remixed a lot of IPFS components and patterns in interesting ways, but the monolithic global IPFS network (with chatty DHT distribution) wouldn't make sense here, BS made an infinitely more efficient/performant distribution of bytes tailored to its use case. Bumblefudge @bumblefudge.com · 1d FWIW the IPFS foundation is working on making IPFS more modular and easily remixed for future BlueSkies, but it's a big task decomposing the monolith and reorienting the documentation and ergonomics... [a second reply to the first skeet:] Uai @why.bsky.team · 23d As far as im concerned (and i led ipfs development for a number of years) we are using ipfs, just a specific streamlined implementation of it. All your repo data can be imported into an ipfs node and addressed via cid Uai @why.bsky.team · 23d We dont use libp2p because for a consumer mobile app we didnt want to futz with nat traversal and connectivity and the like, but its definitely possible to build a p2p version of bluesky
- echelon 2y ago"skeet" is such a terrible term for this. It's like mastodon "toot"s. Using bodily functions as core infra terminology is off-putting and feels like a bit like a juvenile boy's club. I get that some people find it funny, but it alienates people. We should just call these "posts". Same thing with names like CockroachDB and GIMP.
- steveklabnik 2y agoAh this is super cool! I’ve been thinking about doing this with my website, but was going to leverage the whtwind lexicon, since my site is mostly a blog. But for the front page, and anything else, I may have wanted something else. This is more of an unstructured approach, which is cool because it needs less specialized tooling. It has the disadvantage of being… well, just a blob. No semantic information there.
- pfraze 2y agoAppreciated Daniel reaching out to the team about this! Hosting blobs is one of those things that will inevitably go through iterations as we understand the abuse vectors more and more, but for now it's really fun to see this kind of usage in action. The PDS is meant to be a database host in the same sense that a webserver is a website host.
- sebmellen 2y agoAre you ever going to bring back Beaker Browser? Used to love playing around with that! Didn't realize you'd gone on to Bluesky, very neat.
- pfraze 2y agoThanks! Probably won’t revive it, but it was a great experience. Wrote some notes on it here: https://github.com/beakerbrowser/beaker/blob/master/archive-notice.md https://github.com/beakerbrowser/beaker/blob/master/archive-...
- moritonal 2y agoCongrats on finding a role at Bluesky. Beaker was such an amazing project to follow, that experience must be so useful.
- nileshtrivedi 2y agoDoesn't the potential for abuse reduce when content is linked through user's own domain rather than a particular appview like bsky? Bsky already supports a user's domain ALIASed to redirect.bsky.com: https://bsky.app/profile/jacob.gold/post/3kh6rnpdzmp2v https://bsky.app/profile/jacob.gold/post/3kh6rnpdzmp2v
- philipwhiuk 2y agoIf people use BlueSky as a magnet link for illegal content it will quickly become a problem.
- starkruzr 2y ago
- Retr0id 2y agoThe CSP headers didn't used to be there, which I used to pop an alert(), way back. (at the time there was also a MIME whitelist, but that whitelist included image/svg+xml, which allows script execution)
- la64710 2y agoI think the AT protocol is versatile in that users can acces each others data once authenticated without any centralized service (granted the aggregators and some other things may still be centralized).
- jazzyjackson 2y agoIs there any auth necessary to pull data from a PDS? I know the main relay is a public firehouse so I would be surprised, but maybe the PDS can put relay servers on an allowlist?
- anon7000 2y agoAs far as I can tell, all content on ATProto is fully public without auth
- unshavedyak 2y agoDoes it federate or anything? Wonder what up to date summaries exist of it’s capabilities
- jazzyjackson 2y agoIf by federate you mean "is stored on content addressed, signed merkle trees that can be mirrored and served from more than one domain" then yes Also it's uh, atproto.com
- irusensei 2y agoSo the recent push to artists to move there to protect their rights against AI training is not only false but a trap since anyone can point their cannons to train data on Bluesky.
- h4x0rr 2y agoAnyone else feels like this will be abused for phishing and/or malware distribution?
- remram 2y agoI don't see how. This is a direct link to the author's bluesky server (PDS) so of course it is controlled by them.
- benatkin 2y agoLack of moderation combined with an offical-sounding domain name. This would have to get the user to follow a link or call a phone number or something though. These are plausible. It's too bad the content-security-policy can't prevent following links.
- extraduder_ire 2y agoBluesky seems to use a lot of totally different domain names for each part of their infrastructure, maybe for this reason. e.g. this one is bsky.network While they're nowhere close on volume, they're certainly beating microsoft in terms of the rate they're adding similar looking official URLs.
- deleted 2y ago[deleted]
- whywhywhywhy 2y ago> bsky.network Shortening your brand to 4 letters when your chosen TLD is the same length as your full brand name is such a weird choice.
- extraduder_ire 2y agoI think the linked blogpost is the first time I've seen that URL used anywhere user-facing. (other than the status page) bsky.<TLD> is already used for other user-facing URLs though.
- edavis 2y agoIf this sort of thing interests you, check out atfile: https://github.com/electricduck/atfile https://github.com/electricduck/atfile
- skybrian 2y agoI'm wondering whether a third-party PDS implementation should support other protocols as well. Would a combined git/PDS repo make any sense at all? (That is, it's a PDS, but it also implements enough of git to do read-only access via git commands.) What other protocols would make sense?
- anacrolix 2y agohttps://github.com/anacrolix/btlink https://github.com/anacrolix/btlink
- erlend_sh 2y agoI guess pkdns is a newer, actively maintained version of the same thing? https://github.com/pubky/pkdns https://github.com/pubky/pkdns
- hi_hi 2y agoCould some awesome person possibly summarise any limitations or use cases where this might not work well? The example provided is quite basic static text, so I'm wondering if there's a reason for that?
- slowhadoken 2y agoWhenever I hear about Bluesky I think about Jack Dorsey quitting their board and asked people to stay on Twittet/X. https://amp.theguardian.com/technology/article/2024/may/07/jack-dorsey-quits-bluesky-board-urges-users-stay-elon-musk-x-twitter https://amp.theguardian.com/technology/article/2024/may/07/j...
- crabmusket 2y agoWhat do you think about it? What I remember about that whole affair is that I'd really respected Jack for starting Bluesky, allowing it to be independent of Twitter (and Jay deserves a heaping of credit for pushing that!), and then losing that respect when he seemed to totally misunderstand what Bluesky had gone on to achieve. https://www.techdirt.com/2024/05/13/bluesky-is-building-the-decentralized-social-media-jack-dorsey-wants-even-if-he-doesnt-realize-it/ https://www.techdirt.com/2024/05/13/bluesky-is-building-the-... Jack was pushing Nostr at the time which... seems ok if you're into that. But his arguments in his interview with Mike Solana really didn't make sense to me.
- strogonoff 2y agoBluesky’s attitude seems logical and their reasoning aligns with my thoughts exactly. If techdirt’s article is to be believed, Dorsey’s departure has to do with going from an extreme to an extreme—from a traditional social monolith to a pure protocol—whereas Bluesky chose to pursue not only the protocol, but also “the app” as the face of that protocol for the ordinary user, and let’s face it: the ordinary user does not really care about protocols. My speculation about him suggesting people “stay on Twitter” is that Nostr (which he apparently is invested in now) and Twitter are orthogonal, so there is no conflict there, but Bluesky competes with both. Not a Bluesky user (the invite-only period has put me off for a while), but if they do not compromise on the protocol part (and there are no shenanigans unfolding, who knows, maybe Dorsey found something) their attitude seems to me to be the most reasonable for a mainstream social platform.
- apitman 2y agoWhat's your issue with invite-only periods? Is there a better way to throttle signups while you scale a system early on?
- SAHChandler 2y agoI'm very hopeful for the possibility of using bluesky for blob data. A friend and I had considered looking into storing DOOM WADs on bluesky so that "map packs" could be shared in the same way posts are. Follow an account, a list, or a starter pack, and you could theoretically modify GZDoom or some other client to know how to search and view any WADs posted by those accounts. Like how the Steam Workshop works, except it's via bluesky. :D
- dev0p 2y agoSo, basically using Bluesky as an RSS feed for arbitrary data? Kind of?
- pests 2y agoRSS is already an RSS feed for arbitrary data. :D I joke but RSS does work for his use case just as well minus the distributed/federated points.
- Rick76 2y agoThis is a cool idea, are you thinking of self-hosting this or on their servers? Have they mentioned anything about any guidelines for what their blob storage can be used for? I know doom is small and that's a great idea, a workshop is a perfect example of how this can be used. I'm just wondering if this can be abused to outsource large server space.
- verdverm 2y agoLook into Lexicon on https://atproto.com https://atproto.com You can define custom records for basically anything A PDS would be a point in the network that decides if abuse is happening, also a place where competition can occur
- deleted 2y ago[deleted]
- neuroelectron 2y agoWhat's the license for the Bluesky data btw? Is it something free to mirror and train LLMs on?
- phs318u 2y agoBased on https://bsky.social/about/support/tos#user-content https://bsky.social/about/support/tos#user-content , I would answer yes. While it's not expressly called out (permitted or forbidden), my reading of the above would indicate that it's not forbidden per se, and probably permitted ("Modify or otherwise utilize User Content in any media. This includes reproducing, preparing derivative works, distributing, performing, and displaying your User Content."). I believe training an LLM falls under "utilize" and "preparing derivative works".
- jamilton 2y agoThat's about your user content, not others'.
- anon7000 2y agoSo the ToS explicitly says Bluesky does NOT own your data. However, data on AT Proto is fully public and it’d be trivial for someone to extract the data for AI to train. For example, this app shows you entries hosted on the protocol: https://atproto-browser.vercel.app/at/nytimes.com https://atproto-browser.vercel.app/at/nytimes.com
- willscott 2y agoOne of the points that is made is that since the PDS that's being interacted with here is part of a 'Personal Data Server' rather than the Bluesky product, it ends up able to offer infinite free data storage. This seems like one of the things that might be part of the references the bluesky team has made at time to introducing a subscription service - providing more space / bandwidth / higher quality video on your PDS seems like the type of hosting that could be offered at a premium tier.
- hk1337 2y ago> 'Personal Data Server' rather than the Bluesky product If I understood correctly, the PDS was hosted on Bluesky. I assume it could be hosted somewhere else, so yeah it could be interacted with more than Bluesky.
- rsynnott 2y agoThere should really be a name for this phenomenon; put basically anything on the internet, and sooner or later people will try to host arbitrary files on it.
- Suppafly 2y ago>and sooner or later people will try to host arbitrary files on it. I'm pretty sure that's a key reason that google accounts are limited to 15gb now until you pay for more storage. When it was unlimited there were all these opensource projects coming up with ideas to backup your filesystem to gmail and such which got even worse when Drive came about. These free services need to foresee that that will be an issue and put in some basic limits.
- Jerrrry 2y agoInner Platform effect https://en.wikipedia.org/wiki/Inner-platform_effect https://en.wikipedia.org/wiki/Inner-platform_effect
- superzamp 2y agoThere's already "parasitic computation" so we could probably go for "parasitic data storage"
- miningape 2y agoJohnson's Law: The more attention something receives, the bigger it's area of impact becomes.
- marcosscriven 2y agoI thought that was the Streisand effect?
- kingofheroes 2y agoThe Streisand is "the more you try to hide something, the bigger its area of impact becomes".
- genem9 2y ago“Hosting websites” has been possible on nostr for some time already with npub.pro …
- the-chitmonger 2y agoI wasn't around for this specific era, but the way users of BlueSky are able to dive deep into technological waters reminds me of how people talk about learning HTML for the first time while using MySpace. Social media is a more saturated market now than before, but I wonder if we'll see a new generation of programmers sprout from BlueSky.
- athrowaway3z 2y ago> 14-minute read I see a dozen links I suspect are required reading to try out new ideas. With HTTP/HTML you can show somebody who knows only the most basic Python, or any other PL, how to build a server from scratch in those 14 minutes. I'm convinced we need hash-addressable communication protocols to redefine the relationship we have with the tech-giants, and stop them exploiting our communities. I'm not convinced the ATProtocol has hit the mark well enough to kick start a revolution like HTTP did.
- floor_ 2y ago[flagged]
- crowcroft 2y agoMySpace and old forums walked you up a ladder of abstraction from, I'm adding some text into a box and it shows up on the webpage -> I'm adding some images as well -> I'm adding some BBCode/Markup and now things look really custom -> I'm writing HTML and CSS -> I'm writing complete scripts. Bluesky does the first step and then it's a great big leap from there imo.
- layer8 2y agoSomeone implementing a file hosting service on top of Bluesky would explain a steep growth in user accounts. ;)
- consumer451 2y agoThis video has nothing to do with Bluesky, but I think it provides a more likely explanation. Don't let the title fool you, it covers more than bots. https://www.youtube.com/watch?v=GZ5XN_mJE8Y https://www.youtube.com/watch?v=GZ5XN_mJE8Y
- paulvnickerson 2y ago[flagged]
- TheHypnotist 2y agoIf what you are saying is even true (a quick google showed it's not), this seems like it's likely a specific case of moderation and not censorship.
- diggan 2y ago> Bluesky has demonstrated a strong eagerness to censor content based on political ideology Can you demonstrate where/when this has happened? I've been on Bluesky since 2023 and yet to see any concrete examples of people getting banned for saying anything like that. I've seen plenty of examples of users getting a ton of pushback from others when saying something like that, and ending up on block lists that others can (optionally) subscribe to, but never seen anyone permanently banned over it.
- nerdjon 2y agoI would be very curious how exactly this is being said and if it is just simply stating an "opinion" or if it is being used as a way to attack people and purposefully start a fight. If it is the later 2, than them being "eager" is a good thing since that just feeds to toxicity and is a major reason that people have been pushing to move away from Twitter in the first place. Even the first one I can understand since I really struggle to figure out why you would feel the need to repeat this if it was not an attempt to stir up an argument. > I would be very reluctant to store anything important there. Regardless of the reason, you should always be reluctant to store anything important on a platform you don't own. Focusing on this particular topic as the reason however is really just trying to start an argument that does not need to happen.
- aniforprez 2y agoObvious trolling attempt aside, on the topic of uploading files to third party platforms, people should have really learned their lesson when uploading files to Discord and using that as a CDN and Discord completely killing that and hundreds of thousands of links by adding timeouts to the files hosted on their servers. It's really annoying because there are a bunch of mod servers that refuse to put their files anywhere else and so many links were completely lost to the ether. Now you need to join so many servers just to get files and it gets very annoying very fast. Please just use a file hosting solution or make a website.
- srg0 2y agoMy first reaction was like -- wow, a site that runs on a reverb pedal.
- code_for_monkey 2y agothis website has the toan
- deleted 2y ago[deleted]
- hk1337 2y agohttps://atproto.com/guides/glossary https://atproto.com/guides/glossary How exactly is the personal data server used? Examples and such? The link gives a nice high level explanation but I still am not sure of its purpose.
- rpastuszak 2y agoJust a (very unserious) reminder that you can host +7kb of data in a single tweet using data URIs + gzip. Here's Pong (HTML + JS) and the Epic of Gilgamesh: https://x.com/rafalpast/status/1316836397903474688 https://x.com/rafalpast/status/1316836397903474688 (brought to you by the ad tracking pixel parameters ignoring the tweet length limit) More links + the "Twitter CDN" editor™: https://sonnet.io/projects#:~:text=Laconic!%20(a%20Twitter%20CDN) https://sonnet.io/projects#:~:text=Laconic!%20(a%20Twitter%2...
- hiop 2y agoThe recent API changes in Strava reminded me of how limited our access is to the data stored on their platform. As a dominant player in the fitness space, they could gradually lock features behind a subscription wall. While this might raise privacy or safety concerns, could the AT Protocol be a suitable platform for storing GPX or FIT files?
- d-lo 2y agoI’d love a federated Strava replacement. Unfortunately I don’t believe that the AT Protocol supports private or limited visibility posts yet, which I think is a pretty key feature for Strava’s use case.
- brw 2y agoOnce atproto has first party support for private records I'm definitely expecting a massive increase in interest. It would open so many doors and is probably the main thing holding back many potential use cases as of now.
- alpb 2y agoRight now it's the only page under site:bsky.network if you search for that. Hilarious and awesome! https://www.google.com/search?q=site%3Absky.network https://www.google.com/search?q=site%3Absky.network Daniel is a great hacker.