Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

I am periodically upset that ActivityPub does not mandate a closed json-ld context for all objects.

General Discussion
21 3 46

Gli ultimi otto messaggi ricevuti dalla Federazione
Post suggeriti
  • 0 Votes
    1 Posts
    7 Views
    Fediverse account backups via 3rd party FOSS servicePersonal Archive Node (PAN) is quite brilliant, its compatible with most fediverse software already, and uses a dual strategy for data backup, with one being adaptable to most fediverse software via adapters.While not exactly ideal, PAN solves the issue of unforseen instance shutdowns in a short term fashion, while paving the way for a long term, more efficient solution ✨More details soon.#PAN #ActivityPub #PersonalArchiveNode
  • 0 Votes
    1 Posts
    5 Views
    Fedify 1.10.0: Observability foundations for the future debug dashboard Fedify is a #TypeScript framework for building #ActivityPub servers that participate in the #fediverse. It reduces the complexity and boilerplate typically required for ActivityPub implementation while providing comprehensive federation capabilities. We're excited to announce #Fedify 1.10.0, a focused release that lays critical groundwork for future debugging and observability features. Released on December 24, 2025, this version introduces infrastructure improvements that will enable the upcoming debug dashboard while maintaining full backward compatibility with existing Fedify applications. This release represents a transitional step toward Fedify 2.0.0, introducing optional capabilities that will become standard in the next major version. The changes focus on enabling richer observability through OpenTelemetry enhancements and adding prefix scanning capabilities to the key–value store interface. Enhanced OpenTelemetry instrumentation Fedify 1.10.0 significantly expands OpenTelemetry instrumentation with span events that capture detailed ActivityPub data. These enhancements enable richer observability and debugging capabilities without relying solely on span attributes, which are limited to primitive values. The new span events provide complete activity payloads and verification status, making it possible to build comprehensive debugging tools that show the full context of federation operations: activitypub.activity.received event on activitypub.inbox span — records the full activity JSON, verification status (activity verified, HTTP signatures verified, Linked Data signatures verified), and actor information activitypub.activity.sent event on activitypub.send_activity span — records the full activity JSON and target inbox URL activitypub.object.fetched event on activitypub.lookup_object span — records the fetched object's type and complete JSON-LD representation Additionally, Fedify now instruments previously uncovered operations: activitypub.fetch_document span for document loader operations, tracking URL fetching, HTTP redirects, and final document URLs activitypub.verify_key_ownership span for cryptographic key ownership verification, recording actor ID, key ID, verification result, and the verification method used These instrumentation improvements emerged from work on issue #234 (Real-time ActivityPub debug dashboard). Rather than introducing a custom observer interface as originally proposed in #323, we leveraged Fedify's existing OpenTelemetry infrastructure to capture rich federation data through span events. This approach provides a standards-based foundation that's composable with existing observability tools like Jaeger, Zipkin, and Grafana Tempo. Distributed trace storage with FedifySpanExporter Building on the enhanced instrumentation, Fedify 1.10.0 introduces FedifySpanExporter, a new OpenTelemetry SpanExporter that persists ActivityPub activity traces to a KvStore. This enables distributed tracing support across multiple nodes in a Fedify deployment, which is essential for building debug dashboards that can show complete request flows across web servers and background workers. The new @fedify/fedify/otel module provides the following types and interfaces: import { MemoryKvStore } from "@fedify/fedify"; import { FedifySpanExporter } from "@fedify/fedify/otel"; import { BasicTracerProvider, SimpleSpanProcessor, } from "@opentelemetry/sdk-trace-base"; const kv = new MemoryKvStore(); const exporter = new FedifySpanExporter(kv, { ttl: Temporal.Duration.from({ hours: 1 }), }); const provider = new BasicTracerProvider(); provider.addSpanProcessor(new SimpleSpanProcessor(exporter)); The stored traces can be queried for display in debugging interfaces: // Get all activities for a specific trace const activities = await exporter.getActivitiesByTraceId(traceId); // Get recent traces with summary information const recentTraces = await exporter.getRecentTraces({ limit: 100 }); The exporter supports two storage strategies depending on the KvStore capabilities. When the list() method is available (preferred), it stores individual records with keys like [prefix, traceId, spanId]. When only cas() is available, it uses compare-and-swap operations to append records to arrays stored per trace. This infrastructure provides the foundation for implementing a comprehensive debug dashboard as a custom SpanExporter, as outlined in the updated implementation plan for issue #234. Optional list() method for KvStore interface Fedify 1.10.0 adds an optional list() method to the KvStore interface for enumerating entries by key prefix. This method enables efficient prefix scanning, which is useful for implementing features like distributed trace storage, cache invalidation by prefix, and listing related entries. interface KvStore { // ... existing methods list?(prefix?: KvKey): AsyncIterable<KvStoreListEntry>; } When the prefix parameter is omitted or empty, list() returns all entries in the store. This is useful for debugging and administrative purposes. All official KvStore implementations have been updated to support this method: MemoryKvStore — filters in-memory keys by prefix SqliteKvStore — uses LIKE query with JSON key pattern PostgresKvStore — uses array slice comparison RedisKvStore — uses SCAN with pattern matching and key deserialization DenoKvStore — delegates to Deno KV's built-in list() API WorkersKvStore — uses Cloudflare Workers KV list() with JSON key prefix pattern While list() is currently optional to give existing custom KvStore implementations time to add support, it will become a required method in Fedify 2.0.0 (tracked in issue #499). This migration path allows implementers to gradually adopt the new capability throughout the 1.x release cycle. The addition of list() support was implemented in pull request #500, which also included the setup of proper testing infrastructure for WorkersKvStore using Vitest with @cloudflare/vitest-pool-workers. NestJS 11 and Express 5 support Thanks to a contribution from Cho Hasang (@crohasang@hackers.pub), the @fedify/nestjs package now supports NestJS 11 environments that use Express 5. The peer dependency range for Express has been widened to ^4.0.0 || ^5.0.0, eliminating peer dependency conflicts in modern NestJS projects while maintaining backward compatibility with Express 4. This change, implemented in pull request #493, keeps the workspace catalog pinned to Express 4 for internal development and test stability while allowing Express 5 in consuming applications. What's next Fedify 1.10.0 serves as a stepping stone toward the upcoming 2.0.0 release. The optional list() method introduced in this version will become required in 2.0.0, simplifying the interface contract and allowing Fedify internals to rely on prefix scanning being universally available. The enhanced #OpenTelemetry instrumentation and FedifySpanExporter provide the foundation for implementing the debug dashboard proposed in issue #234. The next steps include building the web dashboard UI with real-time activity lists, filtering, and JSON inspection capabilities—all as a separate package that leverages the standards-based observability infrastructure introduced in this release. Depending on the development timeline and feature priorities, there may be additional 1.x releases before the 2.0.0 migration. For developers building custom KvStore implementations, now is the time to add list() support to prepare for the eventual 2.0.0 upgrade. The implementation patterns used in the official backends provide clear guidance for various storage strategies. Acknowledgments Special thanks to Cho Hasang (@crohasang@hackers.pub) for the NestJS 11 compatibility improvements, and to all community members who provided feedback and testing for the new observability features. For the complete list of changes, bug fixes, and improvements, please refer to the CHANGES.md file in the repository. #fedidev #release
  • 0 Votes
    1 Posts
    6 Views
    Short video isn't the villain, it’s just how we share our lives today. More people are capturing and sharing raw, human moments than ever before, and that’s beautiful ✨The problem isn't the format; it's the surveillance and toxicity built into the big platforms.We’re trying to keep the joy (sharing + remixing + community) and ditch the stuff that harms people (manipulative feeds, creepy tracking, lock-in). https://joinloops.org/why-loops-matters#Loops #TikTok #ActivityPub
  • 0 Votes
    1 Posts
    12 Views
    Destroying Autocracy – November 13, 2025Welcome to this week’s “Destroying Autocracy”.It’s your source for curated news affecting democracy in the cyber arena with a focus on protecting it. That necessitates an opinionated Butlerian jihad against big tech as well as evangelizing for open-source and the Fediverse. Since big media’s journalism wing is flailing and failing in its core duty to democracy, this is also a collection of alternative reporting on the eternal battle between autocracy and democracy. We also cover the cybersecurity world. You can’t be free without safety and privacy.FYI, my opinions will be in bold. And will often involve cursing. Because humans. Especially tech bros. And fascists. Fuck ’em.The Programmer’s Fulcrum is the future (and smaller) home for a fusion of Symfony Station and Battalion. Its tagline is Devs Defending Democracy, Developing the OMN.You can sign up now and for 2025 get an email with links to and featured articles for each week’s Symfony Station Communiqué and Battalion “Destroying Autocracy” post along with their featured articles. And you’ll be set with TPF after the fusing.We are posting on the Fediverse now at @thefulcrum @thefulcrum.dev and original website content will start in 2026.Featured Item(s)Wrekage/Salvage writes:Once you’ve seized the tools of political life to build communal power, it’s hard to forget what a hammer feels like in your hand.Bonfire Networks is a tiny software org that has spent the past couple of years building a framework for communities on the open social web. At the end of last week, they released Bonfire Social, a microblogging app.Like Mastodon, Bonfire Social runs on ActivityPub, but it takes differently opinionated approach to sociability.(It has) features I (and many others) have been advocating for in Fediverse software for years, often while people explained at length that such things simply could not be implemented.Most exhilarating to me, though, is that they aren’t just building another microblogging app. They’re making a toolkit for internet community software that is healthy and good and designed around real human needs from the start.As they put it in their crowdfunding campaign, they’re making building blocks for communities on the open social web.Sparks fly upTotal awesomeness that needs to blow up. We will cover (and support) Bonfire extensively on The Programmer’s Fulcrum.We start and end with good news to make the middle bearable.The response to Russia’s War Crimes, Techno Feudalism, and other douchebaggeryThe Kyiv Independent reports:Ukraine slaps new sanctions on Putin’s team and propagandist publishersRadio Free Europe reports:EU ‘Democracy Shield’ Aims To Counter Russian DisinformationOpen Web Advocacy has:Tim Berners-Lee On Apple’s Browser Engine Ban and Web AppsHeise reports:Office alternative from Germany by Ionos and Nextcloud is now availableGreat.Speaking of Germany, The Guardian reports:ChatGPT violated copyright law by ‘learning’ from song lyrics, German court rulesMeta could face millions in fines for not signing content deals in AustraliaDigital Rights Bytes asks:Can the government read my text messages?404 Media reports:Judge Rules Flock Surveillance Images Are Public Records That Can Be Requested By AnyoneTechCrunch reports:Wikipedia urges AI companies to use its paid API, and stop scrapingBrookings says:We should all be LudditesPreach brother.Poynter reports:As independent newspapers disappear, a secretive alliance fights to save themNeutralOpen Knowledge shares:Open letter: Harnessing open source AI to advance digital sovereigntyThe Ringer has:How Catastrophic Is It If the AI Bubble Bursts? An FAQ.The Evil Empire (AKA Autocracy) Strikes Back404 Media reports:DHS Gives Local Cops a Facial Recognition App To Find ImmigrantsTechCrunch reports:Why a lot of people are getting hacked with government spywareLawmakers warn Democratic governors that states are sharing drivers’ data with ICEEuractiv reports:EU’s red tape bonfire puts AI ahead of privacy protectionNOYB reports:EU Commission internal draft would wreck core principles of the GDPRThe Guardian reports:The EU has let US tech giants run riot. Diluting our data law will only entrench their power.Tech giants vow to defend users in US as spyware companies make inroads with Trump administrationFreedom of the Press Foundation reports:Kansas county pays $3M for forgetting the First AmendmentPariah StatesBleepingComputer reports:APT37 hackers abuse Google Find Hub in Android data-wiping attacksBitDefender reports:Russian hacker admits helping Yanluowang ransomware infect companiesThe Register reports:UK asks cyberspies to probe whether Chinese buses can be switched off remotelyKrebs on Security reports:Google Sues to Disrupt Chinese SMS Phishing TriadBig MediaThe Columbia Journalism Review has:Editorial Independence Means Technological IndependenceThe Open Media Network peeps.The Guardian reports:EU investigates Google over ‘demotion’ of commercial content from news mediaBig TechAnd:Big Tech’s control freak era is breaking itself apartThe Techno Anarchist Manifesto lists tools to help you avoid most of this AI horseshit.Lies, damned lies and AI: the newest way to influence elections may be here to stayJesus.Digital colonialism: the new frontier of Latin American dependency.A side effect of techno feudalism.PC Mag reports:Asking ChatGPT About Affairs or Abortion? Be Careful, Marketers Are Peeking at Your PromptsCybersecurity/PrivacyThe Register reports:OWASP Top 10: Broken access control still tops app security listIEEE Spectrum reports:Your AI Agent Is Now a Target for Email Phishing. New tools can help thwart the attacks.Like bitcoin, if you use this shit you deserve what you get.DarkReading reports:Orgs Move to SSO, Passkeys to Solve Bad Password HabitsGlassWorm Returns, Slices Back into VS Code ExtensionsCheck out VS Codium friends.BleepingComputer reports:Police disrupts Rhadamanthys, VenomRAT, and Elysium malware operationsFediverseElena Rossini shares:The rebellion will be federated – 2025 editionA New Social has:Bonfire and A New SocialBonfire explains:Matters of care – why Bonfire maintenance comes first.Comciencia has:A comunicação da ciência no FediversoLaura Hargreves shares:Growing My Own Little Fediverse: The Joy of Going Further Down the Rabbit HoleInside My Matrix: How I Reclaimed Messaging from the CloudTechCrunch reports:Threads targets podcasters with new features, aiming to become the home for show discussionsBTW, fuck Threads.Slightly Decentralized Social MediaThe Dabbler has:Chicken Caesars: they’re messing with your Bluesky feedTechCrunch reports:Jack Dorsey funds diVine, a Vine reboot that includes Vine’s video archiveHmm, this is built with Nostr.CTAs (aka show us some free love)That’s it for this week. Please share this edition of Destroying Autocracy.Follow me on the Fediverse. Or this site via the button in the footer. Or via RSS. Or even our future home in 2026, if you want a head start.Keep fighting!Ringleader, BattalionReuben Walker Follow me on the Fediverse#activitypub #ai #autocracy #bigJournalism #bigTech #bluesky #bonfire #bridgyfed #democracy #fascism #fediverse #matrix #stopChina #stopIsrael #stopRedAmerica #stopRussia #supportUkraine #technoanarchism #technofeudalism #threads #xmpphttps://battalion.mobileatom.net/?p=3838