Conversation

Notices

  1. i don't remember: has there been discussions about making gnusocial automatically create attachments/thumbnails from any links to images?

    Tuesday, 09-Jun-15 10:30:47 UTC from quitter.se
    1. that would at the same time make attachments federate.

      Tuesday, 09-Jun-15 10:31:43 UTC from quitter.se
      1. ↑ !gnusocial

        Tuesday, 09-Jun-15 10:34:51 UTC from quitter.se
        1. it could be a plugin, if site admins don't want their servers to fill upp with remote images

          Tuesday, 09-Jun-15 10:39:31 UTC from quitter.se
          1. as far as i can understand, downloading remote images and creating a local thumbnails would be reasonably secure, >

            Tuesday, 09-Jun-15 10:56:19 UTC from quitter.se
            1. > because i don't think any xss inside images (is that even possible in the first place..?) would survive the thumb crunching

              Tuesday, 09-Jun-15 10:56:26 UTC from quitter.se
            2. @hannes2peer making the local instance create & store thumbnails locally might be a bulletproof way—unless disk space gets tight

              Tuesday, 09-Jun-15 11:07:35 UTC from quitter.se
      2. @hannes2peer thumbnails for remote image attachments (AND # previews, worked in SN but currently broken) would be # #

        Tuesday, 09-Jun-15 10:42:28 UTC from quitter.se
        1. @mcscx oh, so maybe it's an easy fix then

          Tuesday, 09-Jun-15 10:45:19 UTC from quitter.se
          1. @hannes2peer [I'm talking abt ClassicUI] Remote thumbnails were working before btwn certain instances. E.g. quit.im previews in Quitter.se

            Tuesday, 09-Jun-15 10:49:21 UTC from quitter.se
            1. @mcscx quit.im is a special case since it embeds the image in the rendered html, which is considered unsafe in newer gnusocial, i think

              Tuesday, 09-Jun-15 10:51:47 UTC from quitter.se
              1. @hannes2peer it also worked/works btwn certain other instances, e.g. loadaverage previews were visible on @atarifrosch's old instance, iirc

                Tuesday, 09-Jun-15 10:55:45 UTC from quitter.se
                1. @hannes2peer …or the other way round. I don't recall exactly.

                  Tuesday, 09-Jun-15 10:56:45 UTC from quitter.se
                  1. @hannes2peer I think @yvolk aka @andstatus had an idea why previews of remote image attachments sometimes don't work in the GNUsocial web ui

                    Tuesday, 09-Jun-15 11:01:00 UTC from quitter.se
                    1. I remember we investigated the issue: Attachments (as a separate metadata with links to images... in

                      Tuesday, 09-Jun-15 17:17:13 UTC from loadaverage.org at 25°5'43"N 55°9'42"E
                      1. @andstatus thanks :-)

                        Tuesday, 09-Jun-15 17:47:09 UTC from quitter.se
                  2. On my old SN instance I could see attachements and YT video previews, yes. Would be great if this worked here on GS, too.

                    Tuesday, 09-Jun-15 11:00:08 UTC from social.stopwatchingus-heidelberg.de
        2. @hannes2peer imho <no expert> thumbnails in remote posts could work without federating the actual thumbnail files.

          Tuesday, 09-Jun-15 10:45:15 UTC from quitter.se
          1. @mcscx i guess, but since some intances are non-https that would make users on https do non-http requests, which browsers complain about

            Tuesday, 09-Jun-15 10:50:14 UTC from quitter.se
            1. @hannes2peer Images can be proxied in the same fashion as it's done in Red Matrix.

              Tuesday, 09-Jun-15 15:39:01 UTC from loadaverage.org