FA+
Shop
Spring Update
11 years ago
General
🏳️🌈💖Enjoy the site? Please consider supporting us via the links below!💖🏳️🌈
⭐ FA+ ⭐ SHOP ⭐ KO-FI ⭐
Journal Start
== Registration Re-Opened
Due to recent issues with spamming we were forced to close registration on the site. We're happy to announce that registration has been re-opened, and to combat the issue we've tightened security against using "disposable" email addresses during sign-up.
== Phoenix Update
Work on the Phoenix site re-coding project continues, and we hope to have some new screenshots and progress updates in the near future. We're still laying down the ground work on the project and developing the backbone.
One thing we can share: the Phoenix Project WILL be Open Source. We are moving towards an open source model for the site and the community, and to allow others to use (and contribute) code to the final product.
https://github.com/FurAffinity
== FA United
This year, we're hosting FA Live -- an art show re-designed from the ground up. What's FA Live? An interactive art show with +watches, +faves, shoutboxes and even profiles for the artists themselves! Attendees will be able to +fav art, and entries with the highest number of +favs will allow artists a chance to win prizes and super-spiffy rewards! More to be announced soon.
Dealer's Den tables are still available.
http://www.faunited.org
== Banner Update
anti-dark-heart has made an amazing new banner which we're happy to use to welcome the arrival of Spring! Although, given the recent weather conditions we're not really sure what Spring is anymore.
Due to recent issues with spamming we were forced to close registration on the site. We're happy to announce that registration has been re-opened, and to combat the issue we've tightened security against using "disposable" email addresses during sign-up.
== Phoenix Update
Work on the Phoenix site re-coding project continues, and we hope to have some new screenshots and progress updates in the near future. We're still laying down the ground work on the project and developing the backbone.
One thing we can share: the Phoenix Project WILL be Open Source. We are moving towards an open source model for the site and the community, and to allow others to use (and contribute) code to the final product.
https://github.com/FurAffinity
== FA United
This year, we're hosting FA Live -- an art show re-designed from the ground up. What's FA Live? An interactive art show with +watches, +faves, shoutboxes and even profiles for the artists themselves! Attendees will be able to +fav art, and entries with the highest number of +favs will allow artists a chance to win prizes and super-spiffy rewards! More to be announced soon.
Dealer's Den tables are still available.
http://www.faunited.org
== Banner Update
anti-dark-heart has made an amazing new banner which we're happy to use to welcome the arrival of Spring! Although, given the recent weather conditions we're not really sure what Spring is anymore.
♥Thank you .3.
♥
Tongue emote. ;p
I HAVE NO IDEA WHY
C-C-C ComboBreaker!
nice guys finish lastNice!
/noose.
Setting: 1:1
Output: Male Hispanic, 42 years old, 100kg, 188cm tall. Subject was very confused and agitated. Subject attacked security personnel. Subject terminated.
YO BUT LIEK NOT REALLY
IM NOT EVEN FUCKING CHRISTIAN.
BUT I HAVE TO POST IT ALL.
It is the destiny, of which I am the master of.
Looking forward to see how the Phoenix update will be
I didn't understand the FA Live thing?
Damn, I wish I had one day of that! This week is the first time we've had over 30 weather in Idk how long! xD
Alright, sounds good to me! You go tell mother nature that we've made this deal, and I'll bet she'll get right on it. xD
Well then :TGranted, since I already have an account here the issue is kind of moot, but for others who may wish to join in the future it could be an issue.
Maybe make it change halfway through spring, this artist is a sweetheart and deserves her work to be showcased.
hurray.
It's going to be like the offline Facebook, MyFace from "The League". I hope I don't get attacked by the Bobbum Man at FA United.
_
/o`\
_\| |
`#, <_
'#, `\
'#. /
`
RIP ASCII art Mothra.
On the bright side, I'm looking forward to an updated FA. I see nothing wrong with the current one, but I'm not an IT guy.
I was just thinking last night "I'm done with this winter and all the snow." I didn't even want to look at the old banner lol!
Don't get me wrong, the banner that just got replaced is one of the best banners I've seen, but I'm done with the snow!
The FA online artshow sounds like a great point to top things off, everyone can have a chance to participate in viewing artist's great works and also getting to vote on what they found to love the most.
Only have one question I guess though. Will it showcase various artistic styles and there to be votes based in catagories and such?
Love the banner- dayuuummm background painting skills!
Just had a quick suggestion/question - Though Im not sure how hard it is to change the banner- A few years ago it changed at least once a month regularly if not more-and especially holiday themed ones!!! It would be great to showcase a larger variety of banners or a sort of public showcase for ones to either look at or vote on? Just some food for thought. Not trying to be complainy or pushy in any way but it really helps get an artist out there and its pretty daunting to spend time on an awesome banner with such a little chance that it actually gets used.
:)
Oh and also yay for github and open source!
I hope the banner situation improves too. It can be really demotivating.
*lays down in the grass watching the clouds in the sky go by*
This is good news. Security through obscurity has shown to not be the best way to go.
I just hope you can get the performance you need from that.
Point is it's clearly not spring. =P
Think of it as giving others time to review the code to prevent something bad from happening sometime in the future. And, of course, we won’t make mistakes. ;)
Exactly what I was saying.
I do hope this means that if someone DOES find flaws (it happens) this time around there will actually be someone /listening/ to people saying it exists, and we don't have the problems of the past happen again with people exploiting the code to force the point....
Because that was really annoying.....
I really think Hell would freeze over before that, and I'm not talking about Hell, MI. That place is frozen over half of the year.
Not that I expect Project Phoenix to really go anywhere. This is the first we have heard of it and all we get is a "We're still working on it." Not exactly keeping us up to date with details.
Sorry, I just don’t see where you’re coming from here. We’re not exactly amateurs; Phoenix is going to be held to a high security standard. We’re confident enough in it that we don’t have to rely on an obscure black box to maintain that security.
anubiis_werewolf wrote:Not that I expect Project Phoenix to really go anywhere. This is the first we have heard of it and all we get is a "We're still working on it." Not exactly keeping us up to date with details.
Actually, Phoenix was announced in January, and the fact of the matter is that we are still working on it. The last endeavour of this size was Ferrox, and that lasted from June of 2006 to September of 2009 – without even finishing (regretfully). It also had a bigger team size. I’d say we’re doing pretty well, all things considered…
Of course, the point of this is that you don’t have to take our word for it. You can watch yourself, because it’s open-source.
if you are doing pretty well, what has been done? No one has said anything and we were suppose to get regular updates
I looked at the site you linked but it is an unsafe site. Not a good sign when this site holding the site info sets off security software.
Publicity of code doesn’t have much bearing on security. When it does, it’s usually positive. Take Linux, for example.
anubiis_werewolf wrote:I looked at the site you linked but it is an unsafe site. Not a good sign when this site holding the site info sets off security software.
Er, which site would that be? GitHub?
Github and the link in the description, Both unsafe sites
I'm no computer guy, but Linux isn't exactly new and unknown.
Now back to your regular discussion with CamperSander.
As for the open source code for the website, it doesn't mean a thing in a hacker's eyes, if they want the sourcecode they can just get it even if it's not open source, what this helps is making it easier to find errors and holes in the code so that they get fixed earlier and better.
Please, for the love of god stop arguing about matters that you know NOTHING about...
Just because I haven't heard of Linux doesn't make me stupid.
Explaining to them does not work apparently. -_-
So I have never heard of Linux or used the program.
Just because you know something I don't doesn't make me stupid. You really are quite rude.
Also, Linux can be one of the most secure systems in the world!
And not only that, most web servers in the world run on it because of its security and stability, even when the code is open source! The thing is secure! :3
Everyone can contribute to make the code better and more people can check if said thing has flaws or not. Instead of having a team of 10 (just to give you an example) to test and fix things you can end up having thousands of people doing the same thing and all of them working in the same direction!
Okay, completely lost. Sorry. How does that make it any better?
Linux's code is open, there are a good number of distributions (all with different flavors) and a good number of them are really secure (specially for those who want to focus on that). Same goes with PHP (which is also open source and is used in pretty much everywhere.
You may think that security is achieved by hiding the code of the inner workings of a website so that would-be attackers don't know how to attack. This is called Security Through Obscurity and is considered the weakest kind of security.
The security achieved when you open the source code is different.
To crack a website, you need to exploit either a flaw in the code or deceive a system administrator. If the code is visible to everyone, everyone can see the _flaws_ in the code and correct them. If a program has no flaws (no bugs, no inconsistent security policies, etc.) then it can't be cracked; of course, in reality, all software except the most trivial programs have exploitable flaws, but open source encourages people finding the _obvious_ flaws, and correcting them to avoid obvious exploits. In a system where you're trying to achieve security by obscurity, these obvious flaws will tend to be overlooked, and one day will be discovered by someone dishonest, and once that happens and an exploit is released, hell breaks loose (this is what used to happen with old versions of Windows).
I hope you understand now how Open Source helps make software more safe.
For a simple analogy, a safe box is safe even if you know exactly how it works, because you don't know the combination anyway.
Some of the largest software developers in the world host code publicly on Github including Microsoft, Worldpay and PHP to name just a few.
Don't worry, this is not some radical idea without precedence.
Another benefit to open source, aside from security concerns, is the longevity of the project. Open source projects commonly persist and evolve even with the departure of their founder or original developers. It's easy for people to come and go from open source projects. I've personally been involved in several over the past decade. Most of them just keep on trucking even as people come and go (although I suppose I do have to apologize for the Fedora incident!).
Apparently you do not know Dragoneer's track record of "not pissing someone off".
With open sourcing, you have a LOT more people familiar with the code who can preemptively recognize weaknesses or respond rapidly and effectively to newly discovered ones. An exploit could be found right after FA's team goes to sleep, and the community of coders could have a solution ready and waiting by the time they wake up. They probably won't be quite that fast, but it's the potential that exists when the vast sea of good guys are free to examine and communicate. Open sourcing tips the balance of talent vs. talent firmly in the good guys' camp.
the Chrome browser is also (mostly) open source. so is Android. so is Wikipedia, so is Reddit. so are the programming languages and all the other tools used to build all of these things.
making your source code available isn't really like leaving your back door open. on the contrary, hiding your source code is like throwing a huge tarp over your house, then hoping nobody peeks under it to see whether your doors are locked.
look how much FA has been attacked even without being open source. without the source code, anyone can still attack, but no one can help directly.
the only reason to keep code hidden, imo, is to keep anyone else from running it.
Also looking forward to sneak peaks with Pheonix. I'm curious to see what tweaks and changes there are besides GUI. Just curious, is it more of a refinement of the current system graphically, or complete ground up? (I realize the screenshot last time was radically different, but I'm thinking more in terms of gallery.)
Exciting times to be a member!
Everything you see here and now will be remade in the new version with newer features added and a much better codebase in which to run the site.
From what is said in all this, this rebuild is to make FA; faster, better, more secure and more efficient.
Granted, as a lot of people are I'm not getting my hopes up, but am looking forward to eventually seeing the haters proven wrong!
Well I know the Phoenix dev-team is a small group at the moment, but because it's going to be open source, there are plenty of people who are willing to help out and bring it to life.
The staff know there are people willing to help.
We experienced sun, snow, rain, more sun, more snow, more rain, some rain-snow mix, and that was all just today!
Well, bbcode is doing okay. Maybe it could cheer you up! https://github.com/FurAffinity/bbcode
Hint: it's STILL SNOWING
https://scontent-b-lga.xx.fbcdn.net.....76576417_n.jpg This is a picture I took outside my bf's house today.
The hiiills are aliiiive~ With the sound of muuuuusiiiiiiic~
just sayin'
Nice banner.
All I care about is the new banner.
PLEASE make a mobile version of this site. And just update the site to something more suitable for 2014. Geez.
I would very much like a good mobile version since I will occasionally check FA while at work, just to see what messages I got, and of course, I can't use their intranet for obvious reasons. However, I have heard a story or two of furs who got fired from their jobs for browsing furry porn on FA at work.
But really? I mean, I'm not surprised, but wow XD
Though there's, of course, the other thing that it's just rude. Hence I didn't do it much on campus and absolutely not in class.
Though it's just so I can check for message updates every few hours, that's it. I don't plan on, well, you know. :P
Like... do they just make one and send it somewhere?
Live art show? This I am interested in since I want to do FAU's art show! How will that work though will you be using FA like adding all he user info or what?
but one is of course the one thing on most peoples minds. folders, so they can separate their art and make it easier to find.
a flagging system, since I have on many occasions found items strewn through out FA where artwork is incorrectly labeled as general when it should be adult and what not. would also work for stolen art.
those are two ideas that would seem very reason able to have.
as for he others... well something like an IRC for groups like tech support or something, or the ability to customize once own page with there own backgrounds.
Not much to go on in the repo at the moment but it looks like you'll be using this to the brunt of the work seeing as it sis above PostgreSQl and Redis. Just wondering what brought you to the decision to use these languages over more of the more (generally) robust current web technologies like .NET MVC and SQL? You pushing for performance and event handling?
Interested to know as I work as Web Developer.
Well, PostgreSQL is still SQL, and we’ll be using Redis mainly for caching. As for the choice of Node.js… that’s just how it ended up, I suppose. The three of us current developers all have experience in it. We’re certainly pushing for performance, though – not to say that it’s the best in that regard either, far from it.
Why not .NET MVC specifically? Well, the app would either run on Mono or a Windows Server, neither of which are terribly attractive. Plus, I personally don’t really want to use that kind of IDE =)
(Something easy to use, robust, and performant…? We might use Haskell for that. It might be what the CDN will be built in. It might be what the CDN is already built in. Hmm.)
Wow... god speed and I wish you the best of luck. =P (seriously though, I do. I look forward to seeing Project Phoenix bring some much needed updates to the site).
Still curious about the choice of Node.js though. I have seen places where it's quite a useful tool but writing a while server side application in a interpreted and non-strongly typed language. Looking forward to seeing what can be done with it.
Yes. We picked the language that we’d used before. =)
Kira_Namida wrote:[…] server side application in a interpreted and non-strongly typed language.
Well, V8 is really a JIT compiler; the distinction between “interpreted” and “compiled” isn’t really all that meaningful, depending on how one applies it. But it is a dynamically-, loosely-typed language, yes. And I look forward to it too!
Choice of Node does seem... odd, I'll admit, but it is a fairly good framework if pretty new
Hee-larious.
Looking at migrate.js makes me question the choice of NodeJS yet again. It's 21st damned century and I see SQL queries in the code. With so many lovely callbacks 10 levels deep.
And you guys are saying that using ASP.NET MVC is a bad idea because Windows Server isn't "attractive".
I... I don't have enough hands and faces to express my emotions.
Hardly! But as it took some convincing to get this thing open-sourced, the commit log isn’t really… publishable. I’m prettying things up on the side. And actually implementing migrations as we go along.
Athari wrote:Looking at migrate.js makes me question the choice of NodeJS yet again. It's 21st damned century and I see SQL queries in the code. With so many lovely callbacks 10 levels deep.
Is there anything wrong with SQL queries? If it pleases, though, we are using an ORM. Just not to create tables. (See also: alembic. Using that with SQLAlchemy is a paragon of good mapping practice, isn’t it? Well, you’re going to see raw SQL in its migration files. C’est la vie.)
Athari wrote:And you guys are saying that using ASP.NET MVC is a bad idea because Windows Server isn't "attractive".
Yes
I'm mostly C#/PHP/client JS dev, I don't have serious experience with Python, so Alembic doesn't say much to me.
Raw SQL queries isn't the only issue. I see crazy amounts of callbacks. Even with Promise, it looks horrible. I see that there's no ordering of migrations. I see one-letter and two-letter abbreviations. I see migrations data stored in files, which means no transactions on part of the data. I see magic constants.
Maybe it's acceptable to write code like this in Node.js, but it's not in .NET. Yes, I'm spoilt with async-await which is how asynchrony should be done. But this code looks weird for the sake of looking weird. If this is how Node.js is supposed to be used, I know I'll avoid it like plague.
A week, slightly less.
Athari wrote:I'm mostly C#/PHP/client JS dev, I don't have serious experience with Python, so Alembic doesn't say much to me.
Alembic
Athari wrote:I see crazy amounts of callbacks. Even with Promise, it looks horrible.
Well.
Athari wrote:I see that there's no ordering of migrations.
There’s one migration so far, with an exports.base of null; the next one will have an exports.base of users-and-submissions. That determines the order.
Athari wrote:I see one-letter and two-letter abbreviations.
There is one one-letter abbreviation. It is “m”. It is okay. I’ll change it if you like. There are no two-letter abbreviations except for “fs” and “pg”, which are module names. And “id”, which is an example of a good abbreviation.
Athari wrote:I see migrations data stored in files, which means no transactions on part of the data.
migrate.js uses a transaction for each migration.
Athari wrote:Maybe it's acceptable to write code like this in Node.js, but it's not in .NET. Yes, I'm spoilt with async-await which is how asynchrony should be done. But this code looks weird for the sake of looking weird. If this is how Node.js is supposed to be used, I know I'll avoid it like plague.
Okay
uvu!
> And contribute
> Contribute
> CONTRIBUTE
Like the last team tried to contribute?
Will we be having a Zaush taped to our ear, insulting us as we work?
Because we all know it JUST wouldn't be the same.
HA.
HA HAH.
I made a funny.
And then you have people posting biblical verse and the screenplay for Titanic
If it's not broken, don't fix it.
I can disrespect him for the decisions he makes that lead to bad code being written and retained, but in the end that problem still boils down to the core fault: Ego. He runs FA to be a big important guy who gets gifts and admirers and sycophants, but his pursuit of these attentions causes him to reward incompetent and disliked people with positions of authority, to blithely ignore conflicts of interest, and to make administrative decisions based on whim and fits of pique.
I'd just rather people have their priorities straight. if he's a shit person feel free to tell the world offsite, where it's perfectly within FA rules to do so. But onsite, the only thing i can consider permissable by FA rules to post is how terrible his coding skills may be and how much of a bad idea it is to let him manage it. Plus it'd be more apt because who the hell wants another broken website
I used to play with programming when I was little, and I learned an important lesson: Computers aren't smart -- they're fast. One bad line of code or one hardware fault or corrupt storage device and our modern marvels can screw up millions of times a second!
That also means that Neer has basically stated that he has Adam's back no matter what he does in the future, too. If and when he uses his status to harass, humiliate, or try to intimidate FA users, he will be supported by the administration. They will ignore TTs, ban vocal victims, and delete evidence to protect him because Friendship is Magic and Ethics are What the Hell Are Ethics?
so do that. spam groups and shit, I don't care, just don't break an anti-drama rule and then cry cause you broke it. I didn't cry when I got hit by staff for dumb shit like that. He's certainly not saying "hey, nobody better tell anyone thing, or i'll ban you", and he's not saying "go rape people, i'll defend you", or any of that shit.
For fuck's sake people i do shitty innocent callout journals on people i don't even mention by name and I STILL have to delete those, what the fuck makes you so special? Just obey the rules!
No TTs are being deliberately ignored, and no one has been banned for speaking out about their experiences with anyone else - people have been suspended for some things said in connection to this issue, yes, but so would they have been if they'd said the same things in the same way about anyone else. If (general) you speak out and there's administrative action as a result, it's because you violated CoC in the way you did so.
As for the Zaush thing I never said it was a conspiracy so much, just that the values of this site are mixed up. It's a problem that could have very easily have been avoided, and frankly since this is such a community based site that the more care should be taken to makes sure the user base feels comfortable to use the site....something that many people currently don't.
Tickets and Phoenix are completely unrelated. The Phoenix devs are doing their thing, site admins are doing our thing, and if Phoenix eg includes a way to consolidate tickets about the same issue, it'd probably end up saving more time than it'd waste, even taking into account any growing pains the new backend might suffer.
We're working on the ticket backlog and making some headway. There's still more to be done, of course, but we'll keep chipping away.
It's like I said to a friend. If Linus Torvalds turned out to be some kind of psycho rapist/murderer with human skins hanging from hooks in his basement, would everyone just up and stop using linux? Probably not.
Look at people who step down from positions of power whether in government, business or organisations . Its done because keeping them is bad public relations, bad publicity and raises concerns for those who use the services and turns some people away.
It may not be a social job, but its a job with a place of power above users and ability to handle said users information.
I recommend you read up on a few things. The sad part is Encyclopedia Dramatica isnt trolling with its page about fA, that's a very disturbing thought to have.
I will however give the admins my thanks in not removing posts in this journal, which could be deemed slightly confrontational
And no, it doesn't give them the ability to handle user information. you didn't understand their job at all.
I do fully understand. Iv worked in database projects that have both software and Web based database access. You're extremely naive in thinking he's going to hav no administration privileges or access to the database. Curiously are you describing the use of open source as garbage or whatever gets made is going to be garbage?
Get back to me when you have some web & database project knowledge.
I hadn't heard that. Do you have a source for it?
When there are so many indications (from Neer himself, from a note to him that was never intended to be public, from other women who allege harassment, from Adam's insulting tweets about it, &c.) that he may be a sexual predator, I don't think it's hysterical or malicious at all to be angry and demand that he not be granted special access and privileges on FA. It's not my business to convict him, get him banned from FA, or otherwise chased out of town by an angry mob.
How convenient. It's also convenient that there is not one screen cap of this supposed confession on the internet. Unless you can provide your 100% proof, allow me to call bullshit.
(Sorry, reminds me of the "Sound Of Music" meme.)
I use a similar protection on my website prevent spam account
Depending of how the guy do you can reduce over 50% the spam account
....
APRIL FOOLS! WE JUST UPDATED THE BANNER AND REENABLED REGISTRATION (CAUSE WE COULDNT FIGURE OUT HOW TO STOP PEOPLE FROM MAKING BOT ACCOUNTS) AHAHAHHAHAHAHAHAHHA YOU THOUGHT THIS WAS A REAL UPDATE HAHAHAHAHHAHAHAHAHAHAHAHA!:
Stay classy FA.
to me that sounds like.... "we don't have the team or the means to do this, but surely we can get by with some charity programming provided free by some of the tech-savvy users who really want to see this site survive"
also, thanks for giving an attention whore permission to watch-spam us all.
Obviously care more about overall site traffic than the individuals who want this to be an ART site.
That, and I believe it really is going to improve the previously-nil chance that there will actually be an update at all.
but then the staff is gonna pat itself on the back and take credit for finally changing when they DIDN'T EVEN, they just finally stood aside to let others increment things.
i guess it's a win/win?
UNLESS they just care about overall site traffic. in that case it makes complete sense.
https://github.com/skibs/supporthub.....nity.github.io
https://github.com/skibs/main.supporthub.phoenix
https://github.com/skibs/supporthub.bbcode
The fact you can register multiple accounts to the same email is a glaring exploit and has been around for a very long time. It was never a matter of "if" it was going to be abused, it was "when", and even now it has not been fixed and is still open to attack.