ABBUC-Forum wieder eröffnet ...

Das ABBUC-Forum ist nun wieder für Mitglieder eröffnet.

Das Login für Nicht-Mitglieder muss ich nach den Sommerferien programmieren.

Es fehlen auch noch viele andere Funktionen, die werden nach den Sommerferien Stück-für-Stück eingebaut.

Bei Problemen meldet euch bitte unter internet@abbuc.de.

Es ist Urlaubszeit, daher können Antworten gerne mehrere Tage brauchen. Die ABBUC-Webseite und das Forum werden von ABBUC-Mitglieder in der Freizeit betreut.

Viel Spass

Carsten

Bevor ihr neue Artikel postet, prüft bitte das eurer Login-Name (seht ihr unten rechts) mit dem Namen im alten Forum übereinstimmt.

Wenn das nicht der Fall ist habt ihr keinen Zugriff auf eure Privaten Nachrichten und könnt alte Posts nicht mehr editieren.

Carsten

In my opinion you guys spent way too much time creating difficult solutions to problems only a smaller part of the Abbuc community encounters. Only a few dozen of members are using the forums and are visiting the Fujiama/Sommer Camp while 500 members are waiting for their magazines.

Ofcourse I respect every decision you guys are making, but in my opinion priorities should be different.

The Magazine had priority.

We worked first exclusively on the magazine, the magazine is always to highest priority.

Only after the magazines where send to the printer, I started work on the forum.

The delay with the magazine has to do with the time it takes to get all texts from the authors and having them corrected. That is just a lot of work.

Alternative would be to ship a much smaller magazine, but that creates frustration on the authors side as they have to wait longer until their articles are published.

Wie ist das neue Forum programmiert worden? PHP wolltest du ja vom Server (bzw. aus dem Forum) verbannen. Ich hätte ja schon Bock, noch etwas am CSS herumzudoktorn.

• ca. 1200 Zeilen Python "static-site-generator" welcher periodisch aufgerufen wird und die statischen HTML Seiten erzeugt
• Keine Datenbank, alle Daten liegen als Markdown-Dateien im Dateisystem und werden als HTML-Dateien gerendert
• NGINX Webserver, welcher die statischen Seiten ausliefert
• ca. 300 Zeilen Python für den Editor. Der Editor erzeugt neue Markdown-Dateien im Dateisystem, welche dann vom "static-site-generator" in HTML gerendert werden. Daher die bis zu 5 Minuten Wartezeit, bis ein neuer Post erscheint -- es müssen erst die HTML-Seiten gerendert werden. Das passiert derzeit alle 2 Minuten. Der "static-site-generator" arbeiten inkrementell und bearbeitet nur neue Dateien seit dem letzten Lauf. Der Job in optimiert und läuft in der Regel in unter 1 Sekunde durch.

Änderungen im CSS gerne mir zusenden. Ich werde aber erst nach dem ABBUC Summer Camp Änderungen am Forum und der Webseite vornehmen.

In "abbuc.css" sind die Styles für Webseite und Forum, im "forum.css" die Forum-Spezifischen Styles.

Änderungen werden erst unter https://beta.abbuc.de getestet.

Wer dort am Beta-Test teilnehmen möchte, sende eine E-Mail an internet@abbuc.de. Weiter geht es aber erst Ende August nach dem Summer-Camp.

My respect for Cas for writing his own forum software, but... erm... (I am Dutch) I cannot believe that there was absolutely no decent third part forum software available that could be used. Now much time has been spent on creating completely forum software, while the magazines are so much delayed. Plus what happens when Cas is not around anymore to support his own software.....

We evaluated multiple forum software solutions in the last two years. We've settled with Discourse, which seems to be the "tool of the decade" when it comes to discussion forums, everybody seem to migrate to Discourse these days.

Setting up Discourse is not a simple task, the Docker container is a beast of Postgres, Ruby, Redis and tons of hot glue scripts that hold everything together ... a nightmare to maintain.

The phpBB import scripts are currently broken.

It was very uncertain of we could bring up Discourse or any other software before my summer vacation.

So as a stop gap measure I decided to hack a "quick-and-easy" forum, just to be able to have something before my summer vacation. It took three days to create this forum, and one week of internal beta testing with selected ABBUC members.

We can still move to discourse or other forum software if we like, but at least we now have something that kind-of-works. It's not perfect, a lot of features are missing or are not finished (like the dates and the sorting). But it is much better than nothing.

From all the possible Forum software solutions that I've seen so far, this one has the best security design, as it is all just static HTML pages served by a NGINX webserver.

The only dynamic code that is executed is the approx. 300 lines of editor, written in Python Flask. 300 lines of python code is possible to reason about and to secure. In addition, the editor module is sandboxed inside a namespace (container), separated from the rest of the system.

Having just markdown files makes backups and restore simple.

@Fred_M

This forum software design also solves the issue that Discourse and other software has with the agressive KI scrapers, that bring down almost all solution that use dynamic scripting languages in the backend.

Admins then try to apply band-aid like Anubis that tries to block KI-scrapers with "Proof-of-work", but that hurts mostly real people and the scraper find a way around these blocks easily.

I'm not claiming this software has no security bugs. But the attack surface is low, and it is a "Unicorn", someone would need to spend resources to find security holes just for this single instance. For phpBB, Wordpress and Discourse, there are thousands of installations, so finding a security issue opens all of them at once.

Zur Info: ich bin vom 25.7. bis 2.8. komplett offline (kein Internet, kein Handy).

Bin auf dem "Drachenfest" (schaue hier --> https://www.youtube.com/watch?v=9d12bN83kig)

Wenn ich hier oder auf E-Mail nicht antworte, dann liegt das daran.

Ich ignoriere euch nicht.

Joachim Bassmann (DjayBee) hat die Schlüssel zum Königreich (= Server) und kann Sachen fixen, wenn notwendig.

In Notfällen kann der ABBUC-Vorstand mich erreichen.

Anhänge und Bilder dürfen derzeit nicht zu gross sein ... ca 500 KB, darüber gibt es ein Fehler 500. Muss ich noch fixen, nach dem Summer-Camp.

Vorher skaliert die Bilder bitte herunter.

@Fred_M

@Cas

Personally I think you are overreacting a bit. I know Germany is known for their privacy, for example the many years Google Streetview was not available for German places (but somehow almost everyone in Germany has a GMX (=Google) email address), but ruling out Wordpress and well known forum software is a step too far for me personally. Ofcourse Abbuc does not need to agree with my personal opinion. I was thinking about the support and solutions that are available when there are problems with these well known platforms. When you write your own software, support is almost non-existant especially when key players of Abbuc like you are not around anymore in the future. If there is a security breach and you are not around than we have a problem...

It is not about privacy, it is about security and other people not using our server infrastructure to attack other people on the Internet.

BTW: GMX is not Google, it is a brand of 1&1, a company in Karlsruhe/Germany and privacy-wise very different from Google.

For me (I can understand that people have different opinions) I don't mind if something that I posted on the Abbuc forum is leaked. It is mostly a public forum anyway. I don't know what personal data the Abbuc website has online. If it is just a user name, membership number and an email address, I don't see any problems if those data are leaked (I know, my personal opinion!). My email address has already been leaked several times (hack of a.o. Linkedin, Odido (formerly known as T-Mobile Netherlands), Twitter and 14 other international sites) and there is nothing I can do about that.

Privacy was not my concern. You are right, the public postings are public anyway. There is some data in private messages that is worth securing (people exchange passwords, bank accounts etc) because it is a "private message", they expect it to be secure.

The world has changed. People's data are not safe anymore, but Abbuc is a small user club that (I think) has no (financial) advantage to be hacked. Personally I would prefer to have as less as possible personal data hosted on the Abbuc website than trying to build a fence around it (what will never be possible).

We can be held liable of our infrastructure is being used to harm other people.

P.S. How did you embed the picture of the front cover of the magazine in your post? I tried to find the option to do that, but I could not find it. I was able to upload a picture as attachment but was not able to show it in the post itself.

Copy-and-paste from the clipboard :)

P.S.2 That 5 minute delay of publishing a post is not very practical...

It is usually 1 minute, it can be up to 5 minutes in the worst case.