After a recent update, Firefox somehow stopped showing me the https:// part of the URL.
I’m not sure how, but if the same has happened to you, go to about:config and search for browser.urlbar.trimURLs and make sure that’s set to false.
https:// is back. 🙂
I set up Authentik in front of some of my self-hosted services recently. Authentik allows you to use 2-factor auth when logging into other services that support OpenID. The first one I tried was Immich, and the docs are pretty good.
The one thing they forgot to mention was that you had to set the scope in Authentik too. In the provider configuration, make sure that all of openid, email, profile are allowed.
Also, if you use Cloudflare to proxy your services, make sure Authentik isn’t proxied, or it will try to rewrite some of the HTTP headers used. Make sure your reverse proxy generates its own SSL cert too. You might be using a Cloudflare cert if everything is going through there.
Who said self-hosting was fun, eh?
A few weeks ago, I was attending a birthday party and wanted to take some photos. I have a Godox flash, and a remote, but I couldn’t get them to talk to each other and remembered it was a bit finicky.
Being in a hurry, I asked Perplexity how to set up the Godox TT685 as a remote flash with the X1T-S and I spotted this blog among the sources. This post about the Godox TT685 was there, and the AI summarised it pretty well, and I got the settings fixed.
One thing I hadn’t forgotten was keeping the TEST button on the X1T-S down while turning it on so it would work in “close range” mode. That was painful enough figuring that out.
Is the web dead yet? We’ve had walled gardens for decades, and they’re growing taller, and now AI agents are slurping down all our content. Apparently, adding the word “fucking” to a Google search query stops them showing a summary. What if I add “fucking” to every post when I detect an AI bot visiting? “I’m a fucking AI source” now am I?
Yes, yes, I used an AI to ask a question and found my blog there. I’m still complaining about it. Humans are weird.
I only recently found out why people sometimes comment “F” on Reddit threads. It comes from Call of Duty: Advanced Warfare (2014).
At one point, you walk up to a casket at a funeral and have to press F to pay respects to the fallen soldier.
As others on that Reddit thread said, I thought it had something to do with following a thread to get notifications. Just to prove how out of touch I am, it even has a Wikipedia page where the viral meme is described as iconic, but the authors of that page describe it well:
“Press F to pay respects” is an Internet meme that originated from Call of Duty: Advanced Warfare, a 2014 first-person shooter in Activision’s Call of Duty franchise. It originated as a set of instructions conveyed during an in-game quick time event at a funeral service. Widely mocked by critics and players due to its forced element of interactivity that was not perceived to be tastefully executed, the phrase would later become a notable Internet meme in its own right. It is sometimes used by Internet commenters to convey solidarity and sympathy, either sarcastic or sincere, in response to unfortunate events.
I never thought I’d be tagging a post with “Call of Duty” again, but here we are in 2025!
This guide made it pretty easy to update Apache2 so it uses http/2 rather than http/1.1. If you notice anything gone astray, please let me know!
There was no change in PageSpeed scores, but then it was pretty good already, thanks to Jetpack Boost!
This Cloudflare article is a good, high-level description of what it’s all about.
Netnewswire is an RSS reader for macOS and iOS devices. You know podcasts? Like that, but for reading.
RSS readers have been around for a long time, long before social media sites like Twitter and Facebook. They allow you to follow updates on your favourites sites, which could also include the personal sites of people you know. Twitter used to have RSS feeds, Facebook never did (AFAIR), but Mastodon sites (and other Fediverse services) do.
This blog has an RSS feed. You can follow my interesting posts there. Chances are, if you’re reading this, you already know all this.
Anyway, Netnewswire has a “Reader View” that will load entire posts in the reader, which is very useful if a site only shares extracts of their articles. Sometimes it doesn’t load the entire article, so you’ll need to visit the site anyway. It’s a convenient way to read without leaving the app when it works.
Oher RSS readers include the WordPress.com Reader, Feedly and many more. Wired has an overview of some, as does Zapier.
RSS won’t replace social media, it’s just another way to read the news.
1 second everyday records one second of footage every day and then builds up a compilation video when you’ve got enough video. Google Plus did something similar with their auto awesome video of the year too but I guess this will let me squeeze in a whole lot more!
I started a few days ago with the Android app and got a few clips of dinners, family and pets so far. Give it a go!
I have to admit that filling in the inactive account settings for my Google account gave me the shivers. There’s not much that would stop me logging into my Google account for more than 3 months. It would have to be one of the following:
None of the above are very appealing options but at least one is as inevitable as, err, taxes, so it must be faced.
I added a trusted contact and was then presented with a popup asking for a subject and email body. Writing that was unsettling but I hope more services do something similar. I’ve heard too many horror stories about Facebook accounts that have been frozen on the death of an account holder.
You can choose what data is or isn’t shared with a contact. Included is Latitude, which has tracked my whereabouts for the last 2 years and will continue to do so. It makes me wonder how my descendants will cope with the deluge of information. It may very well end up as an anonymous zip file on someone’s computer I guess.
The list won’t be frozen in time either. Do I add my siblings? What about my son when he’s older? What age? I should set a calendar reminder for his 18th birthday. I’ll have to warn those trusted contacts because Google sends an email and a text message when the account goes inactive. Like a letter from the grave.
I wanted to know what IP addresses were hitting my website. I’d done this before and it only took a moment or two to recreate the following commands. Still, here it is for future reference.
grep -v "wp-content" access.log|grep -v wp-includes|cut -f 1 -d " "|sort|uniq -c|sort -nr|less
This code:
You’ll probably find Google and Yahoo! bots near the top of the list, but I also found the “Jyxobot/1” bot was quite busy today.
This is weird, a huge number of POST requests started to hit the Shite Drivers website a few days ago. The requests came from lots of IP addresses and all requests went to the non existent /bc/123kah.php
The payload was an array that looked like this:
Array
(
[showed] =>
[clicked] =>
[version] => 2.6.2.4
[id] => c3b342beb6ad7adf39499e7a38f93c09f681611d
[tm] => 1266855758
[aff_id] => gooochi
[net_id] => gooochi
[safe] => 1
[exceed] => 2505,2507,2582,2597,2602
)
So I presume it’s the Gooochi malware referenced in this search for that word. Strange that the infected PCs hit my server though.
The traffic was never overwhelming but I decided to put a stop to it with a simple
in a .htaccess file. Much better than having WordPress serve up a 404 page.deny from all
I mentioned the 123kah.php file on Twitter and I’m not the only one to see these odd requests. I guess even malware has bugs! (which is all the more reason to keep your anti-virus software up to date if you use Windows)