Hackers' Pub

Syntax	Description	Examples
`"` keyword `"`	Finds the string within quotes, including spaces. Case-insensitive. (Escape quotes inside with `\"`)	`"Hackers' Pub"`
`from:` handle	Finds content written by the specified user.	`from:hongminhee` `from:hongminhee@hollo.social`
`lang:` ISO 639-1	Finds content written in the specified language.	`lang:en`
`#` tag	Finds content with the specified tag. Case-insensitive.	`#HackersPub`
condition condition	Finds content that satisfies both conditions on either side of the space (logical AND).	`"Hackers' Pub" lang:en`
condition `OR` condition	Finds content that satisfies at least one of the conditions on either side of the OR operator (logical OR).	`#HackersPub OR "Hackers' Pub" lang:en`
`(` condition `)`	Combines the operators within the parentheses first.	`(#HackersPub OR "Hackers' Pub" OR "Hackers Pub") lang:en`

silverpill @silverpill@mitra.social

5/10/2025, 6:04:52 PM

Public

FEP-ae97 security audit: https://codeberg.org/fediverse/fep/pulls/595

I added a new section, "Security considerations", and a new requirement: compatible identifiers of server-generated keys MUST have the server's origin. Here's how that looks in practice:

https://mitra.social/.well-known/apgateway/did:key:z6MknVmyPtQmD2SaGnqyGgTVEqfqkkJJnY3YVKBmbzSUNCcX/actor

This FEP update goes together with two others:

- FEP-2277: ActivityPub core types - The VerificationMethod class has the highest priority now, because servers must be able to identify a verification method even if it has other class-defining properties (e.g. href).
- FEP-fe34: Origin-based security model - clarifying the base assumptions of the model

#fep_ae97

FEP-ae97: Security considerations

- Added "Security considerations" section. - Require actor keys to have server's origin.

codeberg.org · Codeberg.org

If you have a fediverse account, you can quote this note from your own instance. Search https://mitra.social/objects/0196bb5f-12d1-3577-98b3-70192426c7b8 on your instance and quote it. (Note that quoting is not supported in Mastodon.)