World

An interesting topic for debate. I totally support and understand the genesis here, but my question is, how do you realistically enforce it? I suspect there is typically an age barrier of sorts, but how to do you circumvent the obvious, such as lying about your age in order to access?

https://news.sky.com/story/australia-passes-social-media-ban-for-under-16s-13262282

Hello Mark,

Hope you’re doing well! Got a quick security question for you. I have a website that runs on Apache with Cloudways hosting, and we’re using APIs in PHP files. Recently, I noticed some random users accessing the APIs with URLs like domain.com/file.php?data=xxxx?, which seems like an attempt to misuse the server.

Could you suggest a way to protect my server so only authorized requests can access these APIs?

Thanks a lot!

I wanted to create a DEV instance of sudonix, so went ahead and registered sudonix.dev, installed NodeBB, then recovered the database.

All good - apart from the fact that I consistently got the dreaded csrf invalid message…

Here’s the log extract

2022-03-21T14:15:25.859Z [4571/91294] - info: Initializing NodeBB v1.19.5 https://sudonix.dev
2022-03-21T14:15:27.761Z [4571/91294] - info: [socket.io] Restricting access to origin: https://sudonix.dev:*
2022-03-21T14:15:27.858Z [4571/91294] - warn: [plugins] "@nodebb/nodebb-plugin-user-level" is active but not installed.
(node:91294) Warning: Accessing non-existent property 'padLevels' of module exports inside circular dependency
(Use `node --trace-warnings ...` to show where the warning was created)
2022-03-21T14:15:28.637Z [4571/91294] - warn: [plugins/load] DEPRECATION The hook filter:router.page has been deprecated as of v1.15.3, and slated for removal in v2.1.0. Please use response:router.page instead. The following plugins are still listening for this hook:
  * nodebb-plugin-write-api
2022-03-21T14:15:28.724Z [4571/91294] - info: [plugins/spam-be-gone] Settings loaded
2022-03-21T14:15:28.734Z [4571/91294] - info: [reputation-rules] settings loaded
2022-03-21T14:15:28.925Z [4571/91294] - info: [api] Adding 4 route(s) to `api/v3/plugins`
2022-03-21T14:15:28.936Z [4571/91294] - info: [router] Routes added
2022-03-21T14:15:28.947Z [4571/91294] - info: NodeBB Ready
2022-03-21T14:15:28.948Z [4571/91294] - info: Enabling 'trust proxy'
2022-03-21T14:15:28.950Z [4571/91294] - info: NodeBB is now listening on: 0.0.0.0:4571
2022-03-21T14:15:47.488Z [4571/91294] - error: [plugin/iframely] Could not parse embed: Failed to lookup view "partials/iframely-widget-card" in views directory "/home/sudonix.dev/nodebb/build/public/templates". Url: https://sudonix.com/topic/233/nodebb-welcome-message-with-logo-footer-change/3?_=1645445273209
Missing translation "2factor:title" for language "en-GB"
Missing translation "qanda:topic_solved" for language "en-GB"
Missing translation "qanda:topic_solved" for language "en-GB"
Missing translation "qanda:topic_solved" for language "en-GB"
Missing translation "qanda:topic_solved" for language "en-GB"
Missing translation "qanda:topic_unsolved" for language "en-GB"
Missing translation "qanda:topic_solved" for language "en-GB"
Missing translation "qanda:topic_solved" for language "en-GB"
Missing translation "qanda:topic_solved" for language "en-GB"
Missing translation "qanda:topic_solved" for language "en-GB"
Missing translation "qanda:topic_solved" for language "en-GB"
Missing translation "qanda:topic_solved" for language "en-GB"
Missing translation "qanda:menu.solved" for language "en-GB"
Missing translation "qanda:menu.solved" for language "en-GB"
2022-03-21T14:15:48.899Z [4571/91294] - error: POST /logout
invalid csrf token

Tried clearing cache, no dice. Tried incognito mode, no dice.

After some significant head scratching, it suddenly dawned on me that the cookie domain would need to be reset as this is a PROD database replica in a new domain.

To do this.

1. Open the mondogb console
2. Select your database - in my case use sudonixdev;
3. Issue this command db.objects.update({_key: "config"}, {$set: {cookieDomain: ""}});
4. Restart nodebb

Problem solved - able to login

Hi All,

We’ve recently implemented clustering for NodeBB which, owing to the nature of the configuration, and the need to use redis to validate session data, you may not be able to login.

To work around this issue, simply clear your browser cache and then attempt the login again. If you don’t really want to clear your entire cache, it’s possible just to clear one site:

1. Go to https://sudonix.com
2. Press F12 to load the browser tools
3. Press and hold the refresh button in your browser

4. Choose “Empty cache and hard reload”
5. Disable F12 developer tools
6. Login again

This works for any Webkit (Chome) backed browser. Other browsers may differ slightly.

Thanks

Facebook never learns and clearly doesn’t think the various privacy laws created to protect individuals apply to them. Yet another example of Facebook thinking it can break rules and never be brought to account.

This is a blatant breach of privacy and shouldn’t go unpunished in my view. Will be interesting to see how Facebook tries to squeeze out of this one.

https://news.sky.com/story/meta-fined-for-forcing-users-to-agree-to-personalised-adverts-12779859

What’s the best email client? As you can see from my other threads I’m trying to make changes to my digital life (android phone).

https://sudonix.org/topic/678/most-privacy-security-focused-password-manager/9

https://sudonix.org/topic/679/which-vpn-do-you-currently-use/6

I’m trying to get away from Gmail, does anyone have any suggestions of a good email provider?

I currently use Proton’s Password manager, it’s got me thinking Protons ethos is security first focused, but are there any other password managers people recommend?

I currently have a few passwords and 2FAs stored in Microsoft Authenticator that I haven’t taken over to Proton and I’m looking to find a password manager to move these to.

Currently using Proton VPN, enjoying using it, works as it should and I find it best for my android device.

So, which VPN are you currently using right now?

VPN:

Why you’re using it?:

If you’re a Bowie fan, then the title of this post might mean something to you If not, sorry - obviously wasted…

The main point of this post is to advise you of some changes that are happening within the platform. Over time, Sudonix has evolved (in a good way of course) and has attracted readers and new members alike across the world. Whilst the below stats are not in the millions, it does show modest growth which is always assuring given the nature of what is on offer here.

Based on the increasing number of new users, I wanted to improve the overall look of Sudonix and make it more appealing to the eye. Some of you may have already noticed the changes, or, as in the case of @Madchatthew, been hit with some odd-looking effects that mean you have to choose another theme, and then re-select the one you were using before. Thankfully, most of this work has now been completed, but these changes do have an impact on your daily usage as below

• Support for multiple themes is going to be reduced - to the point where there will only be three. Light (Luminate), Dim (Dusk), and Dark (Tenebrous). The real reason for this is that, as @crazycells keeps telling me, “less is more” and I’m becoming a fan of that paradigm. Having a lot of themes also means a lot of maintenance, which is something I’m looking to avoid. If you use Dark Mode on your device, you’ll get issued with Tenebrous. If you use Light Mode (native), then you’ll get issued with Luminate. I am going to be removing the dropdown swatch and replacing this with a simple 3-way toggle (or something like that).

• Font sizes have been reduced. The point here is that on a mobile device, these are a bit too large for my liking, so they have been scaled back on desktops to 98%, and 95% on mobile devices. The dominant font (Poppins) will remain as it’s a firm favourite and works well on all devices.

• The look and feel experience has also changed. I’ve adapted something of a “Material” view which is on by default (currently, it cannot be disabled, but I will include this ability if desired as I helped write something similar for @DownPW some time ago). This uses outline instead of border which is much easier to work with (under the guise of CSS) as it does not increase the element size, but simply adds a “wrapper” around it. Other “soft” changes have made their way into this release, and are subtle in nature, but will certainly improve the overall experience.

There are a ton of other changes, but some of these are either under-the-hood, or subtle enough that they go unnoticed - one such example is a change to OGProxy (only CSS) that alters the rendering order making it faster, and aligning to what other sites are doing in terms of how the card is presented. There are numerous colour changes too, which typically attract new naming conventions which won’t be available under your session unless you change themes or clear your browser cache.

I’m hoping most of this will simply pass most users by - but, do let me know if that is not the case.

Hi Mark,

I’d like some help customising two forums running NodeBB please if possible.

I wish to change the colours of the buttons below.

And how can I change the board stats widget to look similar to this…

As always, thank you! .

I am curious as to what everyone uses for a text messaging app? I am currently using Google Messages app. I know a lot of people use Whats App and there is Facebook Messenger that you can send text messages through. I am wondering what a good texting app would be to use to have the security and not have the big tech companies fingers in all the messages that you send back and forth.

I installed iOS 18 this morning on the work iPhone.

And this is an “update”?

This image springs to mind

Who the hell designs these? It looks awful!

It’s not everyday I come across one site that seems to have everything I need, but this morning, I stumbled across this gem

https://it-tools.tech/

This site is the work of Corentin Thomasset, a fullstack web developer based in Lyon, France. I’d strongly recommend you at least stop by and check out the tools on offer. I personally use most of them on a daily basis, so perfect for me.

@JAC I also note that the Nothing community uses Flarum…

Hello,

I wanted to mastering a PC in 24H2 with my personnal settings, apps, etc…

I did as usual :

• I configure my PC with new installation of 24H2 with Official 24H2 ISO, I install my apps etc…
• I boot on the official Windows ISO 24H2,
• I launch a capture to obtain my install.wim file with WinPE and DISM tools,
• I reboot then I create an ISO file with this new install.wim file, the ADK, ocsdimg.exe and the official Windows 24H2 ISO.

Everything works but as soon as I use this Custom ISO to install o na new PC or this same machine, I go through the formatting of the partitions and as soon as I start to install, after 10% I get an error message with no sense.

This install.wim work if I create the ISO with an 23H2official ISO.

An idea???

Hope its ok to do a test here of how Sudonix does youtube embeds, as I think this side uses the ns plugin.
From my recall, ns has better functionality than the currently recommeded plugin.
I dont know why the ns plugin isnt whitelisted?
@phenomlab, out of interest, do you know who coded the ns plugin?

For this test, I picked a slightly relevant video!
Test1: a youtu.be link

Those of you who regularly visit the NodeBB forums have problably noticed this

https://community.nodebb.org/topic/18279/native-push-notifications-support-for-nodebb

And as a result, this new commit

https://github.com/NodeBB/NodeBB/commit/aa060d31d130cd54d18cd8dc2f25ba7de58f4fea

@julian now has the native push notifications working, and as a result, Sudonix now has them also - see screenshot of how to enable this feature here

As you can see, you need to enable the notification before it will work. There is a test button located underneath the slider switch (although not present in this screenshot) and this will enable you to test to make sure it is working.

Quoting Julian

I’m particularly excited about this new development because it opens the door for richer integration between NodeBB and the push notifications themselves.

With (probably) every iteration prior, when you clicked on the notification, it likely opened a new window. With direct access to the Push API and service worker, we can now accurately detect whether the site is already open (in another tab), and open it there.

In the future, we’ll also be able to add in things like icons, pictures, and custom actions, right from the notification itself.

One particular nice-to-have is the ability to update notifications. Being able to merge notifications (like they already do in NodeBB) or potentially rescind notifications would be a nice step forward in usability as well.

This works very well in my testing - however, if you use NordVPN, it does not work at all unless you disable the VPN. I have an open ticket with them presently to see if there is in fact any workaround.

I have taken the decision to now disable nodebb-plugin-ntfy as with the 4.0 train, this plugin is considered legacy.

Hi Mark,

I’m trying to find the RSS feed of a website but having no joy.

Do you have any tips or tricks or particular routes you take when finding an RSS feed?

Thanks .

The solution is to delete windows and throw away the software and install Linux haha - I keed I keed. I worked for a company years ago. It was a call center for Orbitz I think, where you can setup your own flights on their website. They also did a call center for American Airlines or Delta I can’t remember which one. I was in the IT department. It was me and another person that did everything. Whenever a pc would have issues and troubleshooting steps wouldn’t work to fix it, I would have to sit there and manually reinstall windows and all of the software and waste at least a couple of hours because the company wouldn’t let me use an imaging software. Which would have saved a lot of time per machine. It seemed like a regular occurrence that I would have to reinstall windows. Such a pain.

Hello,

I am on Sudonix.org and have noticed the following issues and wanted to make sure you knew about them. See the screenshots. When starting a new post or replying to a post, the preview portion is transparent and doesn’t have a more solid background.

It also looks like the tool bar for the editor is transparent as well.

I hope this helps. Thank you!