Gravatar is not auto-refreshed


  • SockDev

    I changed my Gravatar two, three days ago. Everywhere I use it updated within seconds.

    Except here.

    I had to manually tell Discourse my Gravatar had changed.

    WTAFF‽‽‽‽‽


  • SockDev

    if it's any consolation i like the new one better.

    edit: also looks like rather than doing the correct thing and hotlinking gravatar discourse rehosted the avatar.

    :facepalm:



  • But just remember, RaceProUK despite having the MOST FEMININE AVATARS HUMANLY POSSIBLE is somehow male.


  • SockDev

    and there is a problem with this because....?



  • There isn't a problem with this, I just think it's fucking hilarious.


  • SockDev



  • I though Discourse didn’t use Gravatar anymore?
    http://what.thedailywtf.com/t/gravatar-is-on/261/36?u=vinduv

    EDIT: After checking, the Gravatar option is still there. I guess the only change which was made it that it’s off by default.


  • mod

    @RaceProUK said:

    I changed my Gravatar two, three days ago. Everywhere I use it updated within seconds.

    Except here.

    I had to manually tell Discourse my Gravatar had changed.

    WTAFF‽‽‽‽‽
    =======

    This is Discourse. Sounds like you were expecting too much.

    Edit: Bonus broken markdown in the quote!


  • SockDev

    still an option in user profile. but it doesn't actually use gravatar, it just pulls the gravatar locally.



  • @accalia said:

    it just pulls the gravatar locally

    That probably explains the delay, but... Why? Wouldn’t it be easier to just hotlink to Gravatar?


  • SockDev

    discourse!

    and the delay is likely indefinite. you probably do have to tell discourse to fetch the updated avatar.


  • SockDev

    http://what.thedailywtf.com/uploads/default/9309/7c298ac0d4934734.png
    What episode is that from?

    Oh yay, I broke Discourse twice in one post! First I broke quoting, and then image inlining!

    WOO!


  • SockDev

    @blakeyrat said:

    But just remember, RaceProUK despite having the MOST FEMININE AVATARS HUMANLY POSSIBLE is somehow male.

    Even better; the old one was just pretty, this one's flirtatious :smiley:



  • Why not just slap a giant vagina up there.


  • SockDev

    Because that's too obvious :P



  • Cause SFW is preferred on people's avatars?



  • How about some cheetah furry with one eye saying, "vote for me" and also it's copyright Christopher J Paulson or something I can barely read that. And it's ... sweating or something? Are those sweatdrops?


  • SockDev

    dunno. as usual GIS'd 'frystare' and picked one i hadn't used recently.


  • SockDev

    @locallunatic said:

    Cause SFW is preferred on people's avatars?

    not everywhere ;-)



  • It's the last panel from here: www.precociouscomic.com/archive/comic/2010/03/08



  • Did the word captions get mixed-up? Why do they all look so shocked in the penultimate panel when cheetah-thing is just repeating what she said in the first panel?


  • SockDev

    I don't know what you read, but I read an indictment of modern politics :stuck_out_tongue:



  • Yeah but it would have been like 1000 times more effective if he had just deleted the penultimate panel, which is both repetitive and confusing. I'm not coming away laughing, or informed, or feeling any emotion at all except confusion.

    Why wouldn't you put the "those who do not will be destroyed" next to the "So vote for me wink!"? That's the core of the joke.

    The whole thing really needs a rewrite, or this guy needs a better editor.



  • In the series the kids that looked shocked are (for the most part) not the ones that live in the gem stone estates neighborhood(s). The kids smiling/pondering are those in the neighborhood. It works much better in the storyline than by itself.



  • Ok that does make a bit more sense (I figured "Gem Stone Estates" was just the name of his entire fictional universe).

    But the guy still needs an editor. I've read his most current 10-15 strips, and they ain't much better-written. Although the most current does have a Twilight Zone reference that was moderately funny, even if the logic behind it makes no goddamned sense. ("Reading gives you a headache, so watch TV!?" Dafuq?)

    Look at that first panel. He could remove like ... 75% of those words (the entire first sentence is both useless and mostly-gibberish) and still convey the same joke. Which is "funny" I guess because their kid deliberately poured puke in apple cider and the parents are ok with that?


  • kills Dumbledore

    The author seems to think he's exceedingly clever. Look at all the super subtle nods to the Ebola epidemic and the overly wordy comics



  • Yeah. That newscaster dialog sounded like he was trying to do Subnormality. You ain't Subnormality, buddy.

    I doubt he'll write anything in his entire comics career better than this. I am a jerk.



  • @blakeyrat said:

    How about some cheetah furry with one eye saying, "vote for me" and also it's copyright Christopher J Paulson or something I can barely read that. And it's ... sweating or something? Are those sweatdrops?

    I'll be fucking damned, I've been thinking it's Meowth since day one.


  • Banned

    @RaceProUK said:

    I changed my Gravatar two, three days ago. Everywhere I use it updated within seconds.

    For very good reason, we care about your privacy and instead of sending gravatar regular beacons as you browse through Discourse sites we do not.

    So ... if you decide you want to update your gravatar ... go to your user profile, edit your avatar and hit refresh.


  • kills Dumbledore

    Not that I dislike the privacy issue (I signed up here with my.email+wtf@gmail.com to make sure Gravatar didn't get properly linked to my email address), but doesn't that remove most of the point of having a service that syncs your avatar across multiple services?



  • @sam said:

    So ... if you decide you want to update your gravatar ... go to your user profile, edit your avatar and hit refresh.

    The reasoning here seems solid, however it's contra the principle of least surprise, since that's not how most sites work with gravatar. Some text copy on the update avatar page explaining this would be a good idea.


  • SockDev

    @sam said:

    For very good reason, we care about your privacy and instead of sending gravatar regular beacons as you browse through Discourse sites we do not.

    There's protecting privacy, and then there's anal-retentive; this is the latter.

    It's not like Gravatar has a significant amount of my personal info anyway. All it has is my display name, a picture of a purple dragon-girl, a picture of a pink hedgehog, and a picture of some gemstones.



  • It has your Referer: headers though.

    @sam how about a scheduled job that checks Gravatar for updates every week or so? Would cover the case of people who forget to click the refresh button.



  • Or how about if people like Gravatar you don't be their nanny and mommy and nursemaid all-in-one and let them fucking USE Gravatar?

    Who the fuck are you to make my privacy decisions for me?



  • @riking said:

    It has your Referer: headers though.

    Generally, I am a privacy conscious person, but I fail to see what this accomplishes. If someone uses the same avatar for multiple sites, a Google Image search is all that is needed to get that information. Or am I missing something? I am honestly curious. The entire idea of Gravatar seems counter privacy, so I don't see the use case.


  • SockDev

    @riking said:

    It has your Referer: headers though.

    @sam how about a scheduled job that checks Gravatar for updates every week or so? Would cover the case of people who forget to click the refresh button.


    Or, here's a novel idea: since Referrer: is optional, don't send it.

    Oh, of course, that would be the correct thing to do. So it won't get done.


  • SockDev

    @RaceProUK said:

    Or, here's a novel idea: since Referrer: is optional, don't send it.

    Oh, of course, that would be the correct thing to do. So it won't get done.

    referrer is sent from the client not DC, at least if they're doing it properly it is. and the lay person doesn't understand referrer. of course the lay person doesn't tent to understand or use gravatar either.


  • area_deu

    @accalia said:

    refferer

    That's wronger than wrong™ ...


  • SockDev

    me fail english? that unpossible



  • If Dicksores is updating the avatar via Gravatar on behalf of the user, then it's the client so it has control over not sending the Referrer.
    That said, no-one using Gravatar is really going to be concerned about the privacy issues outlined above.


  • I survived the hour long Uno hand

    This sounds like it should be optional.


  • Banned

    see:

    I am open to a job that refreshes gravatars optionally, but the idea of doing 100k http reqs from the server every week is less appealing.

    @boomzilla totally open to improving copy


  • SockDev

    So the fact that Gravatar uses unsalted MD5 hashes is somehow less secure than all the plaintext versions of an e-mail address that are required for e-mails to actually get where they're going?

    And of course, as so many have already pointed out, if I was bothered by it, I wouldn't use Gravatar. So this is again a case of Discourse doing something totally different and unexpected because someone thinks they know better.


  • Banned

    sending beacons with unsalted hashes every 5 minutes to gravatar is terrible.

    webpagetest thinks it is terrible and warns about it, cause expiring images that are being used all the time every 5 minutes is kind of crazy.



  • @sam said:

    sending beacons with unsalted hashes every 5 minutes to gravatar is terrible.

    Discourse sends like 3 orders of magnitude more data that that every 5 minutes. The Gravatar traffic is a drop in the bucket.

    @sam said:

    webpagetest

    Who is that and why should they dictate what features of what software I might want to use?

    If people want to use Gravatar, they want to use Gravatar. It's none of your stinking business how Gravatar works, your software should obey the user's desires, not try to be some nanny "saving" them from some imaginary threat. You're not the boss of me.

    When we first got this forum, Gravatar was the only option. Now somehow it got into the shitcan pile and it's barely supported. WTF changed? Did Gravatar touch you in a private spot or something?


  • SockDev

    You can make all the 'justifications' you like; the fact is that Discourse is making life awkward while having zero effect on the user's privacy and security.



  • Does the server really have to talk to gravatar? Can't you just hotlink the image or something? That's how I assumed it worked. I've never used it.


  • Banned

    Yeah, that is the key reason its a privacy WTF.

    http://what.thedailywtf.com/t/gravatar-is-on/261


  • I survived the hour long Uno hand

    @boomzilla said:

    Can't you just hotlink the image or something

    Yeah, you can get anyone's gravatar at http://www.gravatar.com/avatar/HASH

    The problem is that HASH is an MD5 of their email address which is... something something... NSA... crypto... mumble mumble... it's bad mmkay!

    No idea what this "beacon" thing is about; I've never seen literally hotlinking an image on another domain being called an "image beacon". Usually that's about sending GET parameters to a server in order to initiate something or record something, not the basic principle of how images work on the internet. Is there some attempt at server-side caching this instead of letting the client do it like every other resource?



  • @sam said:

    Yeah, that is the key reason its a privacy WTF.

    But, I mean, didn't they decide it wasn't a privacy WTF for them by deciding to use it?

    They could sign off all of their posts with their email address, and it wouldn't be a privacy WTF.


Log in to reply
 

Looks like your connection to What the Daily WTF? was lost, please wait while we try to reconnect.