Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone
  1. Home
  2. Categories
  3. Uncategorized
  4. Betrifft #ActivityPub (#Wordpress)

Betrifft #ActivityPub (#Wordpress)

Moved Uncategorized
10 4 39
Log in to reply

Feed RSS
Betrifft #ActivityPub (#Wordpress)

Gli ultimi otto messaggi ricevuti dalla Federazione
@pierobosio@soc.bosio.info
Post suggeriti
  • fedify@hollo.socialundefined

    ### 🚨 Security Advisory: CVE-2025-68475

    Fediverso fedify fedidev security fediverse activitypub
    1
    1 Votes
    1 Posts
    6 Views
    fedify@hollo.socialundefined
    🚨 Security Advisory: CVE-2025-68475 A ReDoS (Regular Expression Denial of Service) vulnerability has been discovered in Fedify's HTML parsing code. This vulnerability could allow a malicious federated server to cause denial of service by sending specially crafted HTML responses. CVE ID CVE-2025-68475 Severity High (CVSS 7.5) Affected versions ≤1.9.1 Patched versions 1.6.13, 1.7.14, 1.8.15, 1.9.2 If you're running Fedify in production, please upgrade to one of the patched versions immediately. For full details, see the security advisory: https://github.com/fedify-dev/fedify/security/advisories/GHSA-rchf-xwx2-hm93 Thank you to Yue (Knox) Liu for responsibly reporting this vulnerability. #Fedify #ActivityPub #security #fediverse #fedidev
  • theotherbrook@sunny.gardenundefined

    Has anyone evaluated headless #activityPub servers?

    General Discussion activitypub
    1
    0 Votes
    1 Posts
    7 Views
    theotherbrook@sunny.gardenundefined
    Has anyone evaluated headless #activityPub servers? I'm thinking of something that could be used with Ghost subscriptions giving posting access to a site forum and blog comments. I suppose it doesn't have to be truly headless as long as there's some sort of authentication API.
  • nickbohle@mastodon.socialundefined

    Moin @pfefferle und @obenland

    Uncategorized wordpress actvitiypub
    2
    1
    0 Votes
    2 Posts
    5 Views
    pfefferle@mastodon.socialundefined
    @NickBohle @obenland das ist mir auch schon aufgefallen! Mastodon scheint jeden Post mit einem Link jetzt als „Quoted Post“ zu verarbeiten.
  • julian@community.nodebb.orgundefined

    Minutes from 4 September 2025 WG Meeting

    Forums and Threaded Discussions Task Force forumwg swicg activitypub
    1
    0 Votes
    1 Posts
    15 Views
    julian@community.nodebb.orgundefined
    Apologies in advance if I misrepresented anybody or missed any crucial bits of information. Jesse Karmani (jesseplusplus@mastodon.social), Ted Thibodeau Jr. (tallted@mastodon.social, and Julian Lam (julian@activitypub.space) in attendance Julian provided an update on adoption of FEP 7888 Both Piefed and Lemmy have adopted 7888, and will begin publishing resolvable context collections in their next release Jesse opened a PR to Mastodon, which received preliminary approval from Gargron@mastodon.social (ed. it was later merged, rolled back, updated, a new PR opened, which was then merged) This PR is the first of two planned pull requests. The first generates the outgoing context (the same as what Lemmy/Piefed have done recently) The seconds handles incoming contexts and backfills Jesse was asked whether it would conflict with existing reply-tree crawling methods, but the two are complementary. She expects additional discussion before the PR is opened. Julian noted that it would be helpful if statistics/analytics were gathered by the Mastodon team to see how conversation contexts and backfill works at scale; admits that existing implementations and testing has been small scale and may not reflect real-world usage. Julian noted that Lemmy's implementation (nutomic@lemmy.ml) does not paginate their resolvable context implementation. All objects are listed in one OrderedCollection Jesse noted that she followed Mastodon's pagination convention for collections. Context inheritance Julian asked for opinions on whether contexts were inherited in existing implementations. Notes that NodeBB inherits parent context, but checks further up the known parent chain for further contexts Julian admits that not everybody can and should do this, is also not sure anymore whether NodeBB actually does this. Julian notes the ideal implementation would be every object referencing their immediate parent, which would lead to the entire collection referring to the same context collection. Jesse: Decodon inherits immediate parent context only Ted: notes that this is a reinvention of inReplyTo Julian and Jesse note that there are marked differences between crawling the reply chain. A short discussion about how netnews and usenet handled reply chains was had. Julian notes that Lemmy will not inherit context. Every object will point back to its own server's context collection. This was a conscious decision by Nutomic as each instance is meant to consider its own representation of remote content as the canonical representation ActivityPub.Space Julian made a short shout-out to a new site called ActivityPub.Space, meant to be a hub for AP development discussions ("A federated space for ActivityPub discussions so that they don’t just get lost in ephemeral replies") A short double-back to NNTP and how they approach "eventual consistency" Ted: “Cloud of NNTP servers are all hosts of articles and replies.” Strictly speaking it’s not a reply tree as replies can be inReplyTo multiple parents