Andreas Gohr

Blogger, open source developer, maker, human from Berlin.

Public Key

npub1n3k66y76p0rudcaw80wahrc25r4x4g0k0ywfetzelw8sax2sug5sec89nh

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsfcmddz0dqh37xuwhrhhwm3u92p6n258m8j8yu43vlhrcwn9gwy2gpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qaxfl49

Publishing to

relay.ditto.pub

Author Public Key

npub1n3k66y76p0rudcaw80wahrc25r4x4g0k0ywfetzelw8sax2sug5sec89nh

Show more details

Last Notes

2026-07-13 21:09:00 GMT

- reply

@nprofile…zx3a next stop: the UK 😜

2026-06-26 09:04:03 GMT

- reply

Okay, after looking into this, the severity level (critical) was not misrepresented, it was total and utter bullshit. The "researcher" merely described a very complicated way to use the user registration form.
Some of the various "security websites" that hope to gain traffic by reposting CVE reports are now leading with the headline "DokuWiki allows remote attackers to execute arbitrary code" - a claim not even the original "researcher" made.
Did I mention that the entire CVE system is a total shit show?

2026-06-26 09:04:03 GMT

my dudes (it's always dudes). when someone asks a question on the internet and you don't know the answer. Just fucking ignore it. "helpful guessing" is not helpful. the internet is a big place - there is a good chance someone will actually know the answer. if you want to be helpful, just boost the question.

2026-06-26 09:04:03 GMT

god I hate the CVE system so much.
just discovered another CVE against DokuWiki that was a) never reported and b) totally misrepresents the severity level.
any dork can register a CVE in minutes, but disputes by the actual maintainers can take months or are just ignored.
and then there are "security researchers" who seem to have decided that their job is to collect CVEs like Pokémon...
it's such a shit show

2026-06-22 02:20:08 GMT

What's missing: a "remind me later" option for Android notifications.
I really want to swipe away this signal notification from my mum, but I will forget about it if I do.
Edit: I just got told there's an option for that. It might be "Allow notification snoozing". Though I am not sure it's what I want. Does it simply suppress all notification from the same app for some time? Or does it really just pop up the same notification after the snooze is over? We'll see.

2026-06-02 21:59:01 GMT

- reply

congrats @nprofile…zx3a! that's an awesome achievement 👏

2026-06-02 21:59:01 GMT

- reply

@nprofile…zx3a I spot a freekey keyring! good choice 🙂

2026-06-02 21:59:01 GMT

I might have given in and bought a #xteink x4 e-reader.
There seem to be a million different #crosspoint forks. Which one are you using and why?

2026-06-02 21:59:01 GMT

- reply

@nprofile…zx3a what are you syncing against with kosync? and do you have wifi turned on permanently for that or just sync occasionally on-demand?

2026-02-04 01:56:07 GMT

- reply

@nprofile…4x07 stellst du das extra in Rechnung? Weil wenn nicht, dann mach es doch einfach und schick beide prints mit ner kleinen Notiz. Der/die Kundin hat weiterhin die Wahl, kann aber einfacher entscheiden und du musst nicht auf die Antwort warten.

2025-12-16 22:53:11 GMT

one of them is not like the others...
https://fedi.splitbrain.org/fileserver/013DGS4XRNRZTWPDP5Q2MKSHZR/attachment/original/01KD08HKMH23T5E92ABG38JAYT.png

2025-12-16 22:53:11 GMT

@nprofile…p9dw danke dir! 🤗

2025-12-02 02:06:25 GMT

ahh it's one of the days where being an open source maintainer is fun.
https://github.com/dokuwiki/dokuwiki/pull/4557#issuecomment-3606174287

2025-12-02 02:06:25 GMT

Over the weekend I had to implement a bot blocker for #DokuWiki (see https://phpc.social/@dokuwiki/115718031689877459)
I just ran a script over the log files to see who is never getting through the bot check, expecting lots of smaller search engine spiders. But no, it seems really like 99% of bots are trying to mask as a end user browsers like Chrome, Safari, etc.
When you group the results by IP, you can see that they tried dozens of different user agent strings, sometimes with a seemingly random version number.
A handful also tried common search engine identifiers (Google, Yahoo...). Good thing I am letting those in via their published IP ranges rather than by user agent.
#bots
https://fedi.splitbrain.org/fileserver/013DGS4XRNRZTWPDP5Q2MKSHZR/attachment/original/01KCGSM1RQANCH71V8MSM4NST9.png

2025-12-01 15:34:47 GMT

I did my first #nixos update. It went well.
https://www.splitbrain.org/blog/2025-12/01-my_first_nixos_upgrade

2025-10-28 18:18:29 GMT

I'm on a business trip. People keep asking me about my @nprofile…vmar laptop. They're surprised when I tell them not to consider a #frameworkcomputer anymore thanks to their shitty politics. Folks expected much better from them, especially because - in their mind - framwork was out there to make the world a slightly better place...

2025-10-13 22:40:58 GMT

My wife says I need a new office chair (currently using an Ikea Markus). What are you folks using and how happy are you with it?
#officefurniture #officechair #rtwelcome

2025-10-13 22:40:58 GMT

My crow for today's #cosytober2025 looks a bit like a parrot, but I could not figure out how to fix it.
cc @nprofile…wkv5
https://fedi.splitbrain.org/fileserver/013DGS4XRNRZTWPDP5Q2MKSHZR/attachment/original/01K805MQ2JRZ85WDVZT4XFSZ6X.png

2025-10-10 06:30:47 GMT

Another color prompt for #cosytober2025, so here's something pink.
cc @nprofile…0we4
https://fedi.splitbrain.org/fileserver/013DGS4XRNRZTWPDP5Q2MKSHZR/attachment/original/01K76EKW1MJE7Q8601W1GVZ140.png

2025-10-05 04:59:18 GMT

At first I was stumped at what to draw for "sprinkles" but a web search saved me.
#cosytober2025
cc @nprofile…0we4
https://fedi.splitbrain.org/fileserver/013DGS4XRNRZTWPDP5Q2MKSHZR/attachment/original/01K719P1ASZ46Z41ZC970945AT.png

2025-09-29 22:27:23 GMT

Today's #cosytober2025 came out pretty good I think.
cc @nprofile…0we4
https://fedi.splitbrain.org/fileserver/013DGS4XRNRZTWPDP5Q2MKSHZR/attachment/original/01K6MKGZT1FZHQRE4ETYT8NBTW.png

2025-09-29 22:27:23 GMT

Let's try something new. I'm not great at drawing, but that shouldn't stop me trying. So this year I'll try to participate in #cosytober2025 - we'll see if I can keep up the pace.
Here's day 1 - "comfy"
drawn on my Viwoods E-Ink tablet
https://fedi.splitbrain.org/fileserver/013DGS4XRNRZTWPDP5Q2MKSHZR/attachment/original/01K6FADW80NSVJ54HKZ925EEC9.png

2025-06-06 09:52:51 GMT

Is there an online service based on Open Streetmap where I can define a region, add a bunch of pins and labels and export the whole thing as static image?
#osm

2025-05-06 01:52:00 GMT

quest marker?
https://fedi.splitbrain.org/fileserver/013DGS4XRNRZTWPDP5Q2MKSHZR/attachment/original/01JVD2D7N7NHJFGHFDSE19T5VH.jpeg

2025-04-29 17:08:52 GMT

tonight a water mains broke and much of east #Berlin (easily a million people or more) had no water for several hours and the only place there was any official information to be found was on fucking Twitter? Come on, how hard is it to put this on the water company's website?

2025-04-04 19:07:52 GMT

so @nprofile…gm3c just made me aware of #MeshTastic and now I am intrigued. As far as I understand there are different frequencies used in different regions. Am I correct that 868Mhz is the one that I want in Europe (Germany)? Is any of my European followers into MeshTastic and can recommend some hardware? (I am reading up on it in parallel but would love to hear personal experiences)

2025-03-14 22:46:28 GMT

It's time to finally get rid of #disqus for my blog comments. But what to use?
Must haves:
1) disqus import
2) self hosted, preferably using sqlite or trustworthy cheap hosting
3) good anti spam measurements
4) platform agnostic via JavaScript embed
Nice to have:
a) support for external comments (web-mentions, fediverse replies)
b) multi-site support
I don't want to roll my own. What is everyone else using?

2025-03-14 22:46:28 GMT

remember when I asked for a replacement for #disqus and then ranted about how none of the available solutions would also integrate with #mastodon?
Well shit. I did it again and scratched my own itch and barfed out another open source project.
Introducing: Meh..
https://www.splitbrain.org/blog/2025-03/26-meh_another_comment_system
* single install serves as many sites as you want
* can be used in static websites (it's lightweight web components in the frontend)
* imports Disqus
* fetches Mastodon replies as comments
* supports different languages (so far en, fr, es, de)
* probably has bugs
#opensource #opensourcesoftware #comments
https://fedi.splitbrain.org/fileserver/013DGS4XRNRZTWPDP5Q2MKSHZR/attachment/original/01JQA399FACCFYV2YTSPBP1FW0.png

2025-03-14 22:46:28 GMT

- reply

@nprofile…7v9l fuck. what are they building? an airport?

2025-03-14 22:46:28 GMT

best compliment received today:
I like you quite a bit more than I like potatoes
Like, even fries