Search results

Hey! Wanna get a sneak peek at our research project ‘Fediverse Integration into (EU) Public Administration’…?? — Expect ‘A Fantastic FediVariety Circus’ !!!

@FOSDEM Sat 31/01 - Start 15:40 - End 16:00 - Room H.2215 (Ferrer)

fosdem.org/2026/schedule/event

And FULL peek on our research at

NOAW unconference — CfP!
Submit a topic! Get aboard!

"Nodes on a Web: The Fediverse in/for Public Institutions”
Thu/Fri 19/20 March 2026, Amsterdam!

fedivariety.org/unconference

0

Hey! Wanna get a sneak peek at our research project ‘Fediverse Integration into (EU) Public Administration’…?? — Expect ‘A Fantastic FediVariety Circus’ !!!

@FOSDEM Sat 31/01 - Start 15:40 - End 16:00 - Room H.2215 (Ferrer)

fosdem.org/2026/schedule/event

0
0

@Mastodon

Stop describing the fediverse is Mastodon!

The social platform Fediverse is a collection of volunteer driven knots connected with open source protocols. Protocols are mostly free open source software. Developed by volunteers. Mastodon is one collection of software.

You should promote other software for fediverse also. To keep the idea and the stability of the federated Fediverse.

0

@fedicat @reiver@reiver ⊼ (Charles) :batman:

Unserious of sorts..

How about letting - guided along by some protocol experts to formulate good prompts - maintain and evolve the open standard specs based on all the info the AI has sucked up from all the FOSS projects that are implementing .

(Note that I am wary of AI for a whole host of reasons, mostly all relating to its disruptive introduction and its potential dehumanising effect, eroding social cohesion and connection between people.)

0
0

Fediverse & AI Coding Tools & Vibe Coding

...

I noticed 2 or 3 people lately using AI coding tools to create Fediverse software.

2 of them even seemed to be Vibe Coding.

...

I have been programming for over 30 years. I am probably not going to Vibe Code, but —

I wonder if we should help them.

There are tools we (Fediverse developers) could create to make it so others could Vibe Code Fediverse apps.

0
0
0

Fediverse & AI Coding Tools & Vibe Coding

...

I noticed 2 or 3 people lately using AI coding tools to create Fediverse software.

2 of them even seemed to be Vibe Coding.

...

I have been programming for over 30 years. I am probably not going to Vibe Code, but — I do recognize that it can be empowering to non-programmers

mastodon.social/@reiver/115639

...

0
0

RE: mastodon.social/@fediverserepo

It does feel like has been frozen in amber, maybe this will help. I'm hoping developers get involved or its very hard to see how things will change.

Especially the Live Online Account Portability stuff which just has from the get go.

0
0

2/

To handle public-key cryptography safely, often a user should be able to have multiple public-keys.

For example, a user might have a different public-key on each device, rather than sharing public-keys.

A user might delegate to a 3rd party — and there may be a delegated versus non-delegated public-key distinction.

Key-rotation is also often necessary for safety reasons.

Etc.

...

3/

All that requires that a Fediverse user can have multiple public-keys specified for them.

...

Although w3id.org/security/v1 seems to allow for multiple public-keys —

I wonder how much Fediverse software could actually handle multiple public-keys (rather than just one)?

(And, don't just assume one public-key?)

How mucg Fediverse software could handle public-keys changing over time?

Etc?

0

2/

To handle public-key cryptography safely, often a user should be able to have multiple public-keys.

For example, a user might have a different public-key on each device, rather than sharing public-keys.

A user might delegate to a 3rd party — and there may be a delegated versus non-delegated public-key distinction.

Key-rotation is also often necessary for safety reasons.

Etc.

...

0
0
0

While working on , I noticed something about how handles object access. When a remote server requests a followers-only post or DM with a valid HTTP Signatures (draft-cavage) from an authorized actor, Misskey still returns 404 instead of the content. It seems Misskey only checks the visibility field (public/home) without verifying the signature at all.

takes a different approach—when is enabled, it validates the HTTP Signatures and returns the content if the requesting actor has permission. I think it would be beneficial if Misskey could adopt a similar mechanism, since it would better respect the access control semantics that ActivityPub intends. Has anyone else run into this, or are there specific reasons Misskey handles it this way?

Fedifyを開発していて気づいたことなんですが、MisskeyのActivityPubオブジェクトへのアクセス処理について少し疑問があります。リモートサーバーから、アクセス権限のあるアクターの有効なHTTP Signaturesを含むリクエストでフォロワー限定投稿やDMにアクセスしようとしても、Misskeyは内容を返さずに404を返すようです。どうやらMisskeyはHTTP Signaturesを検証せず、visibilityフィールド(publicとhome)だけを確認しているようです。

Mastodonの場合、authorized fetchを有効にすると、HTTP Signaturesを検証して、リクエストしているアクターに権限があれば内容を返します。MisskeyもMastodonのような仕組みを採用してくれたら、ActivityPubが意図しているアクセス制御のセマンティクスをより適切に尊重できるんじゃないかと思います。他の方も同じようなことに気づかれたことはありますか?それとも、Misskeyがこのような処理をしている特別な理由があるのでしょうか?

0

While working on , I noticed something about how handles object access. When a remote server requests a followers-only post or DM with a valid HTTP Signatures (draft-cavage) from an authorized actor, Misskey still returns 404 instead of the content. It seems Misskey only checks the visibility field (public/home) without verifying the signature at all.

takes a different approach—when is enabled, it validates the HTTP Signatures and returns the content if the requesting actor has permission. I think it would be beneficial if Misskey could adopt a similar mechanism, since it would better respect the access control semantics that ActivityPub intends. Has anyone else run into this, or are there specific reasons Misskey handles it this way?

0
0
0
0
0

Mastodon is a black hole. ActivityPub Academy receives my notes, Mastodon accepts them and ignores them. That's a bit annoying. In the meantime, I've remembered the mention speciality, which I'll probably never understand. You can only federate if you adapt to the peculiarities of Mastodon. The spec is ActivityPub, but federation is unfortunately Mastodon.

0

The new W3C Working Group is not that. Or not just that. It's a "Social Web" Working Group and includes maintenance of ActivityPub, WebSub, Activity Streams, Activity Vocabulary, MicroPub, Linked Data Notifications, Webmention, and LOLA specifications. Maintaining all these disparate specs in one WG seems like it will lead to similar results as the first time this was tried (not great). What's that saying about doing the same thing repeatedly and expecting different results? 🙃

0

The new W3C Working Group is not that. Or not just that. It's a "Social Web" Working Group and includes maintenance of ActivityPub, WebSub, Activity Streams, Activity Vocabulary, MicroPub, Linked Data Notifications, Webmention, and LOLA specifications. Maintaining all these disparate specs in one WG seems like it will lead to similar results as the first time this was tried (not great). What's that saying about doing the same thing repeatedly and expecting different results? 🙃

0
0
0

🏃‍♂️ Building - federated activity tracking for the Fediverse

Think Strava, but:
✅ Federates with Mastodon
✅ Self-hosted
✅ Your data, your rules
✅ Apache licensed

Thanks @javahippieTim Zöller for the inspiration!

🛠️ Java + Quarkus + Vert.x + ActivityPub
🌐 open-pace.com
💻 github.com/myfear/open-pace

Post a run → friends on Mastodon see it
Own your miles, share your journey

Contributions welcome. Let's build in the open!

0
0
0
0
@silverpill In a hilarious twist of fate, this gives (streams) and Forte an unfair advantage. They're nearly identical, they have the same maintainer, but they're two separate implementations, also seeing as Forte uses ActivityPub for nomadic identity, and (streams) doesn't and still uses its own Nomad protocol for it.

Since Mitra appears to implement (streams)/Forte features one by one and cast them into FEPs, that's three implementations already. Two if nomadic identity via ActivityPub is involved. And if Hubzilla happens to have it, too, we've got up to four implementations.

Yes, ActivityPub is only an optional add-on on Hubzilla and (streams), but an implementation is an implementation. And whatever they do on Nomad that federates has to get out through ActivityPub one way or another.

It'd be even more hilariously skewed, hadn't Mike discontinued the five apps between Hubzilla and (streams) on New Year's Eve 2022.

CC: @slyborg @Evan Prodromou @Connected Places @ArneBab @Alex Chapman

#Long #LongPost #CWLong #CWLongPost #FediMeta #FediverseMeta #CWFediMeta #CWFediverseMeta #ActivityPub #Hubzilla #Streams #(streams) #Forte #Mitra
0
0

@evanprodromou @cwebberChristine Lemmer-Webber I've tried to dive deep into Activity Pub as an option to make this: codeberg.org/maikelthedev/spar and I keep finding walls where the protocol fits but Mastodon, the software, doesn't, so I'm here asking you both directly:

> Is there an actual reference ActivityPub implementation?

The stochastic parrot is telling me the closest is GoToSocial but I can't obviously trust an LLM. I went all over the activitypub.rocks/, checked all the tools there, skim read pages and pages, watched many videos and still can't figure if there's such thing as a reference version. Is there such a thing?

1

So one tricky aspect I had to solve with Loops is how we use a hashid of the snowflake id for videos, comments and replies in public links, but also deference them to their full ActivityPub permalink.

I built a `matchUrlTemplate` helper that uses regexes to match our url schemas in a way that supports `/v/abcdefg1-` and `/ap/users/1/video/1234567890` links.

It works great, and I will be bringing this to Pixelfed to improve federation support ✨

github.com/joinloops/loops-ser

0

in , an remote actor have an optional icon object, which essentially it's the actor's avatar metadata.

but in api, the icon object doesn't carry an "id" field in itself, so i cannot correctly map this icon into a more generic "attachments" table (because it requires the presence of id field) in my local instance when i import the remote actor.

some ppl created icon as jsonb to facilitate this non-generic "icon" field.

which isn't a great solution in its api design.

0
0
0

ActivityPub standardization is back! The just announced a new Working Group to evolve and and related standards! This is extremely good news. It's not like all the world's federated social media protocol problems were already solved! lists.w3.org/Archives/Public/p

0
0
0

ActivityPub standardization is back! The just announced a new Working Group to evolve and and related standards! This is extremely good news. It's not like all the world's federated social media protocol problems were already solved! lists.w3.org/Archive...

0

:fediverse: :activitypub: がもうちょっと一般化するために自分にできることないかなあということを最近考えてる。

そもそもそんなことを実現する力は自分にはないし、 :mastodon: とかがソーシャルメディアのメインストリームになるべきだともあまり思ってないけど、
いつか時代が多少の後押しになり、また自然と注目が集まるときがポツポツとあるだろうという気はしており、その時まで大きくなりすぎずともこれが続いていてほしいなという気持ちは結構強くある。

メールとか :rss: みたいに流行り廃りとは多少距離を取りつつ、しっかり標準技術として世の中に生き残って欲しい :vivaldia_5:

1

What would be optimal maximum number of poll options in ?

(Note: the participative polls, Google Doodle style, would be great for eg. negotiating meetings... but I understand the technical difficulties and risks and it is not supported by just now ...)

0

New Social Web Working Group at W3C

Evan Prodromou @evanprodromou@socialwebfoundation.org

Today the W3C standards organization announced a new working group to advance the ActivityPub and Activity Streams standards. The Social Web Foundation, as a W3C member organization, will be participating in the group. The working group's goal is to release a backwards-compatible iteration of each specification in Q3 of 2026. Activity Streams was released in 2017, and ActivityPub was released in early 2018. Since that time, the experience of hundreds of implementers and millions of users has […]

Read more →
0
0
2
0
0
1
0
0
0
0

follow-up question: Thanks to @silverpill I made progress with my "Follow" request sent to Mastodon. After fixing a few more issues my current error message from Mastodon is:

"Could not refresh public key pub.saar.social/user/achim/key"

This URL returns my full profile having type "Person", which also contains the public key. The type "Person" is also used in the AP book by @evanEvan Prodromou which I use as a reference.

[...]

0