Search results

0
0

Is there such a thing as an spamfilter?

The already has a very heterogeneous software landscape. I'm reading about proposals to add support to as well. But one problem would be common to every implementation: Spam.

And just like MTAs don't each implement their own spam filtering and instead rely on rspamd and spamassassin, I feel like some middleware should exist for ActivityPub as well.

0
0

After months of struggling with the “zombie post” issue on Hackers' Pub—where deleted posts wouldn't disappear from remote servers—I had a sudden hypothesis today. As I dug into it, I realized it's a structural issue with Fedify's MessageQueue system: Create(Note) and Delete(Note) activities can be delivered out of order, causing remote instances to receive Delete(Note) before Create(Note).

The fix will likely require API changes, so this will probably need to wait for 2.0.0.

2

Fediverse Politics, Meta®

Who gets to define the next standard?

> the Working Group requires participants to either be a paid W3C member or to be an Invited Expert. There are only two organisations that are active in the fediverse that are a paid member of the W3C: Meta and the Social Web Foundation. With the Social Web Foundation also receiving funding from Meta [...]

web.archive.org/web/2026011700

(Via archive.org because connectedplaces didn't respond to lynx over Tor.)

0
0
0

Moin @cosmos4uDaniel Fischer, kann ich deinem Blog skyweek.wordpress.com eigentlich auch direkt von hier aus folgen? Welches Handle wäre das?

Wie es gehen müsste, darüber schreiben heise.de/news/Von-WordPress-di (👋 @mhoMartin Holland )

wordpress.com/de/support/teil-

wordpress.com/de/plugins/activ

pmueller.de/wordpress-mit-dem-

johannesmairhofer.de/blog/word

Besonders spannend dabei "Eine der leistungsstärksten Funktionen ist die Möglichkeit, Interaktionen aus dem gesamten Fediverse zu empfangen und anzuzeigen. Wenn jemand auf Mastodon oder einer anderen Fediverse-Plattform deinen Beitrag kommentiert, wird der Kommentar direkt im Bereich für WordPress-Kommentare angezeigt. So entsteht eine nahtlose Unterhaltung zwischen deinem Blog und dem weiteren Fediverse."

0

"Implementing ActivityPub looks simple at first—it’s just JSON over HTTP, right? Then you hit JSON-LD context resolution, HTTP Signature verification that fails on some servers but works on others, and specs spanning hundreds of pages that every implementation interprets differently.

I’ll cover type-safe vocabulary, comprehensive signature support, framework-agnostic design, and the CLI toolchain—plus production stories from Ghost, Hollo, and Hackers’ Pub." -@hongminhee洪 民憙 (Hong Minhee) :nonbinary:

0

We have the pleasure of having @hongminhee.org@bsky.brid.gy洪 民憙 (Hong Minhee) who will give a presentation about @fedify@hollo.socialFedify: ActivityPub server framework "an opinionated framework for TypeScript that handles the protocol plumbing" It is an open free event and everyone is welcome!

RE: https://bsky.app/profile/did:plc:kb4wpu3bfjfvljfjsrt5nxlk/post/3md75oh5umxo2

0
0

On February 3rd (very soon!) I am hosting another [BERLIN FEDERATED NETWORK EXPLORATION CIRCLE] at @offline. It's a chance to meet and talk with people who are interested in the & networking & exploration & circ---you get the idea.

We have the pleasure of having @hongminhee洪 民憙 (Hong Minhee) :nonbinary: who will give a presentation about @fedifyFedify: ActivityPub server framework "an opinionated framework for TypeScript that handles the protocol plumbing"

It is an open free event and everyone is welcome!

BERLIN FEDERATED NETWORK EXPLORATION CIRCLE
BEFENEC? BEFENEEXCI?
we have 洪 民憙 (Hong Minhee) all the way here from 
Korea with a presentation about Fedify, a fediverse
library they have been building that is now powering
the federation of things like Ghost and Hackers' Pub

come join us offline
at offline
Lichtenrader Str. 49
Berlin
1
0
2

Hey! Wanna get a sneak peek at our research project ‘Fediverse Integration into (EU) Public Administration’…?? — Expect ‘A Fantastic FediVariety Circus’ !!!

@FOSDEM Sat 31/01 - Start 15:40 - End 16:00 - Room H.2215 (Ferrer)

fosdem.org/2026/schedule/event

And FULL peek on our research at

NOAW unconference — CfP!
Submit a topic! Get aboard!

"Nodes on a Web: The Fediverse in/for Public Institutions”
Thu/Fri 19/20 March 2026, Amsterdam!

fedivariety.org/unconference

0

Hey! Wanna get a sneak peek at our research project ‘Fediverse Integration into (EU) Public Administration’…?? — Expect ‘A Fantastic FediVariety Circus’ !!!

@FOSDEM Sat 31/01 - Start 15:40 - End 16:00 - Room H.2215 (Ferrer)

fosdem.org/2026/schedule/event

0
0
0
0

@Mastodon

Stop describing the fediverse is Mastodon!

The social platform Fediverse is a collection of volunteer driven knots connected with open source protocols. Protocols are mostly free open source software. Developed by volunteers. Mastodon is one collection of software.

You should promote other software for fediverse also. To keep the idea and the stability of the federated Fediverse.

0

@fedicat @reiver@reiver ⊼ (Charles) :batman:

Unserious of sorts..

How about letting - guided along by some protocol experts to formulate good prompts - maintain and evolve the open standard specs based on all the info the AI has sucked up from all the FOSS projects that are implementing .

(Note that I am wary of AI for a whole host of reasons, mostly all relating to its disruptive introduction and its potential dehumanising effect, eroding social cohesion and connection between people.)

0
0

Fediverse & AI Coding Tools & Vibe Coding

...

I noticed 2 or 3 people lately using AI coding tools to create Fediverse software.

2 of them even seemed to be Vibe Coding.

...

I have been programming for over 30 years. I am probably not going to Vibe Code, but —

I wonder if we should help them.

There are tools we (Fediverse developers) could create to make it so others could Vibe Code Fediverse apps.

0
0
0

Fediverse & AI Coding Tools & Vibe Coding

...

I noticed 2 or 3 people lately using AI coding tools to create Fediverse software.

2 of them even seemed to be Vibe Coding.

...

I have been programming for over 30 years. I am probably not going to Vibe Code, but — I do recognize that it can be empowering to non-programmers

mastodon.social/@reiver/115639

...

0
0

RE: mastodon.social/@fediverserepo

It does feel like has been frozen in amber, maybe this will help. I'm hoping developers get involved or its very hard to see how things will change.

Especially the Live Online Account Portability stuff which just has from the get go.

0
0

2/

To handle public-key cryptography safely, often a user should be able to have multiple public-keys.

For example, a user might have a different public-key on each device, rather than sharing public-keys.

A user might delegate to a 3rd party — and there may be a delegated versus non-delegated public-key distinction.

Key-rotation is also often necessary for safety reasons.

Etc.

...

3/

All that requires that a Fediverse user can have multiple public-keys specified for them.

...

Although w3id.org/security/v1 seems to allow for multiple public-keys —

I wonder how much Fediverse software could actually handle multiple public-keys (rather than just one)?

(And, don't just assume one public-key?)

How mucg Fediverse software could handle public-keys changing over time?

Etc?

0

2/

To handle public-key cryptography safely, often a user should be able to have multiple public-keys.

For example, a user might have a different public-key on each device, rather than sharing public-keys.

A user might delegate to a 3rd party — and there may be a delegated versus non-delegated public-key distinction.

Key-rotation is also often necessary for safety reasons.

Etc.

...

0
0
0

While working on , I noticed something about how handles object access. When a remote server requests a followers-only post or DM with a valid HTTP Signatures (draft-cavage) from an authorized actor, Misskey still returns 404 instead of the content. It seems Misskey only checks the visibility field (public/home) without verifying the signature at all.

takes a different approach—when is enabled, it validates the HTTP Signatures and returns the content if the requesting actor has permission. I think it would be beneficial if Misskey could adopt a similar mechanism, since it would better respect the access control semantics that ActivityPub intends. Has anyone else run into this, or are there specific reasons Misskey handles it this way?

Fedifyを開発していて気づいたことなんですが、MisskeyのActivityPubオブジェクトへのアクセス処理について少し疑問があります。リモートサーバーから、アクセス権限のあるアクターの有効なHTTP Signaturesを含むリクエストでフォロワー限定投稿やDMにアクセスしようとしても、Misskeyは内容を返さずに404を返すようです。どうやらMisskeyはHTTP Signaturesを検証せず、visibilityフィールド(publicとhome)だけを確認しているようです。

Mastodonの場合、authorized fetchを有効にすると、HTTP Signaturesを検証して、リクエストしているアクターに権限があれば内容を返します。MisskeyもMastodonのような仕組みを採用してくれたら、ActivityPubが意図しているアクセス制御のセマンティクスをより適切に尊重できるんじゃないかと思います。他の方も同じようなことに気づかれたことはありますか?それとも、Misskeyがこのような処理をしている特別な理由があるのでしょうか?

0

While working on , I noticed something about how handles object access. When a remote server requests a followers-only post or DM with a valid HTTP Signatures (draft-cavage) from an authorized actor, Misskey still returns 404 instead of the content. It seems Misskey only checks the visibility field (public/home) without verifying the signature at all.

takes a different approach—when is enabled, it validates the HTTP Signatures and returns the content if the requesting actor has permission. I think it would be beneficial if Misskey could adopt a similar mechanism, since it would better respect the access control semantics that ActivityPub intends. Has anyone else run into this, or are there specific reasons Misskey handles it this way?

0
0
0
0
0

Mastodon is a black hole. ActivityPub Academy receives my notes, Mastodon accepts them and ignores them. That's a bit annoying. In the meantime, I've remembered the mention speciality, which I'll probably never understand. You can only federate if you adapt to the peculiarities of Mastodon. The spec is ActivityPub, but federation is unfortunately Mastodon.

0

The new W3C Working Group is not that. Or not just that. It's a "Social Web" Working Group and includes maintenance of ActivityPub, WebSub, Activity Streams, Activity Vocabulary, MicroPub, Linked Data Notifications, Webmention, and LOLA specifications. Maintaining all these disparate specs in one WG seems like it will lead to similar results as the first time this was tried (not great). What's that saying about doing the same thing repeatedly and expecting different results? 🙃

0

The new W3C Working Group is not that. Or not just that. It's a "Social Web" Working Group and includes maintenance of ActivityPub, WebSub, Activity Streams, Activity Vocabulary, MicroPub, Linked Data Notifications, Webmention, and LOLA specifications. Maintaining all these disparate specs in one WG seems like it will lead to similar results as the first time this was tried (not great). What's that saying about doing the same thing repeatedly and expecting different results? 🙃

0
0
0

🏃‍♂️ Building - federated activity tracking for the Fediverse

Think Strava, but:
✅ Federates with Mastodon
✅ Self-hosted
✅ Your data, your rules
✅ Apache licensed

Thanks @javahippieTim Zöller for the inspiration!

🛠️ Java + Quarkus + Vert.x + ActivityPub
🌐 open-pace.com
💻 github.com/myfear/open-pace

Post a run → friends on Mastodon see it
Own your miles, share your journey

Contributions welcome. Let's build in the open!

0
0
0
0
@silverpill In a hilarious twist of fate, this gives (streams) and Forte an unfair advantage. They're nearly identical, they have the same maintainer, but they're two separate implementations, also seeing as Forte uses ActivityPub for nomadic identity, and (streams) doesn't and still uses its own Nomad protocol for it.

Since Mitra appears to implement (streams)/Forte features one by one and cast them into FEPs, that's three implementations already. Two if nomadic identity via ActivityPub is involved. And if Hubzilla happens to have it, too, we've got up to four implementations.

Yes, ActivityPub is only an optional add-on on Hubzilla and (streams), but an implementation is an implementation. And whatever they do on Nomad that federates has to get out through ActivityPub one way or another.

It'd be even more hilariously skewed, hadn't Mike discontinued the five apps between Hubzilla and (streams) on New Year's Eve 2022.

CC: @slyborg @Evan Prodromou @Connected Places @ArneBab @Alex Chapman

#Long #LongPost #CWLong #CWLongPost #FediMeta #FediverseMeta #CWFediMeta #CWFediverseMeta #ActivityPub #Hubzilla #Streams #(streams) #Forte #Mitra
0
0

@evanprodromou @cwebberChristine Lemmer-Webber I've tried to dive deep into Activity Pub as an option to make this: codeberg.org/maikelthedev/spar and I keep finding walls where the protocol fits but Mastodon, the software, doesn't, so I'm here asking you both directly:

> Is there an actual reference ActivityPub implementation?

The stochastic parrot is telling me the closest is GoToSocial but I can't obviously trust an LLM. I went all over the activitypub.rocks/, checked all the tools there, skim read pages and pages, watched many videos and still can't figure if there's such thing as a reference version. Is there such a thing?

1

So one tricky aspect I had to solve with Loops is how we use a hashid of the snowflake id for videos, comments and replies in public links, but also deference them to their full ActivityPub permalink.

I built a `matchUrlTemplate` helper that uses regexes to match our url schemas in a way that supports `/v/abcdefg1-` and `/ap/users/1/video/1234567890` links.

It works great, and I will be bringing this to Pixelfed to improve federation support ✨

github.com/joinloops/loops-ser

0

in , an remote actor have an optional icon object, which essentially it's the actor's avatar metadata.

but in api, the icon object doesn't carry an "id" field in itself, so i cannot correctly map this icon into a more generic "attachments" table (because it requires the presence of id field) in my local instance when i import the remote actor.

some ppl created icon as jsonb to facilitate this non-generic "icon" field.

which isn't a great solution in its api design.

0
0
0

ActivityPub standardization is back! The just announced a new Working Group to evolve and and related standards! This is extremely good news. It's not like all the world's federated social media protocol problems were already solved! lists.w3.org/Archives/Public/p

0
0
0