Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

It makes me sick that Trump's truth.social social media platform is based on a fork of Mastodon.

General Discussion
6 3 0

Gli ultimi otto messaggi ricevuti dalla Federazione
  • From its conception, #Enigmatick has leaned heavily on the /inbox and /outbox endpoints for client operations. There are some /api endpoints, but I avoid that were I can shoehorn operations into the #ActivityPub specification and #ActivityStreams vocabulary.

    While typical operational activities are fairly well accounted for, administration is a weak point. For example: I haven't identified a clear way to use the currently described mechanisms for an administrative user to pull up and manage instances or actors on a server.

    I've relied on CLI tools (e.g., ./enigmatick --help) to manage some of that. And in some cases, I know how to manipulate data in my database, so I haven't worried too much about building tooling. But I'd like to ship something that other folks can use to share in my efforts, so I've been thinking about how to model those activities in an ActivityPub-esque way to use in the Svelte UI.

    ActivityPub Messages

    To that end, I'm now using Block and Delete activities sent from the client to the server outbox to manage the blocking of instances and purging of data.

    { "@context": [ "https://www.w3.org/ns/activitystreams", { "ek": "https://enigmatick.social/ns#", "Instance": "ek:Instance" } ], "id": "https://enigmatick.social/activities/550e8400-e29b-41d4-a716-446655440000", "type": "Block", "actor": "https://enigmatick.social/user/system", "object": { "type": "Instance", "id": "https://spammy-instance.example" } }

    In practice, my client does not generate the id, but that attribute is generated by the server and the Activity is stored alongside other typically federated activities. These local Block activities are not federated out to other servers; they are intended solely for local server management.

    The Block activity is sent as a message signed at the client by a user with administrative privileges on the server. Enigmatick's user authentication is unique (i.e., I use a separate set of encryption keys for client-signing executed by a wasm module in the browser). That can be a topic for a future article.

    That the actor as the system Application user is important. That is used by the server to establish the scope of this action as system-wide, not just for a single user. The system actor is discoverable in the nodeinfo metadata.

    I'm using a typed object rather than just an id reference. This is so that I can use this same flow for blocking and purging Actor objects (i.e., the type would be Person, Service, or Application).

    The purge action is similar, using the Delete activity.

    { "@context": [ "https://www.w3.org/ns/activitystreams", { "ek": "https://enigmatick.social/ns#", "Instance": "ek:Instance" } ], "id": "https://enigmatick.social/activities/550e8400-e29b-41d4-a716-446655440000", "type": "Delete", "actor": "https://enigmatick.social/user/system", "object": { "type": "Instance", "id": "https://spammy-instance.example" } }

    The term, "delete" is a bit of a misnomer in this case as it applies to the instance specifically. The instance will remain, but the objects, activities, and actors associated with that instance will be fully deleted (i.e., not set to Tombstone).

    Collection Endpoints

    To facilitate the UI operations, I've created two new collection endpoints on my server: /instances and /actors. These endpoints provide typical ActivityPub Collection objects.

    { "@context": [ "https://www.w3.org/ns/activitystreams", { "Instance": "ek:Instance", "activitiesCount": "ek:activitiesCount", "actorsCount": "ek:actorsCount", "blocked": "ek:blocked", "ek": "https://enigmatick.social/ns#", "lastMessageAt": "ek:lastMessageAt", "objectsCount": "ek:objectsCount" } ], "type": "OrderedCollection", "id": "https://enigmatick.social/instances", "totalItems": 7702, "orderedItems": [ { "type": "Instance", "id": "https://example-instance.name", "blocked": false, "created": "2025-12-16T16:56:33Z", "lastMessageAt": "2025-12-16T16:56:33Z", "actorsCount": 0, "objectsCount": 1, "activitiesCount": 0 } ], "first": "https://enigmatick.social/instances?max=9223372036854775807", "last": "https://enigmatick.social/instances?min=0", "next": "https://enigmatick.social/instances?max=1765657395402834" }

    I've added some extensions in the @context to account for a few non-standard attributes.

    That collection is used by the UI.

    The Enigmatick instances UI showing the most recently discovered instances from the enigmatick.social server

    Collection Discovery

    nodeinfo is a common protocol used for discovering information about ActivityPub-speaking servers. I've extended my use of that to facilitate client-discovery of these new endpoints using the metadata object contained in the nodeinfo JSON.

    "metadata": { "actor": "https://enigmatick.social/user/system", "adminActors": "https://enigmatick.social/actors", "adminInstances": "https://enigmatick.social/instances", "domain": "enigmatick.social", "url": "https://enigmatick.social" } Final Thoughts

    As I'm reading through this, I see some opportunities for refinement. I should probably be using OrderedCollectionPage instead of OrderedCollection for my collection endpoints. I'm sure there are other tweaks to be made.

    read more

  • Agreed that forums are definitely needed, and the energy NodeBB has brought to the Fediverse has been very welcome indeed! The coexistence is often smooth but sometimes quite clunky (although of course that's true for ActivityPub platforms in general).

    Specifically for the deletes, I had also run into problems where they weren't getting propagated everywhere. Not sure if there's a similar thing happening here; If I recall correctly, the issue I was experiencing related to unsigned fetches.

    @julian

    read more

  • @klu9 @eyeinthesky

    Having multiple servers connect to each other is Federation.

    Having multiple independent servers (regardless of whether they connect to each other or not) is Decentralization.

    ...

    TS is an independent server — thus, it with others form Decentralized social-media.

    TS does not connect to other servers — thus, not Federated.

    read more

  • @reiver @eyeinthesky

    I'm afraid I'm not knowledgeable enough to understand the difference

    read more

  • @klu9 @eyeinthesky

    TS removed the Federation — not the Decentralized.

    read more

  • @reiver @eyeinthesky

    Isn't the key technical difference between & regular that TS removed the decentralization?

    read more

  • @eyeinthesky

    For better or worse, he is also probably the most successful example of a politician embracing and using decentralized social-media.

    read more

  • I'd say that forums are definitely welcome and needed on the Fediverse, and can coexist well with microblog platforms like Mastodon.

    ActivityPub.Space is proof of that!

    We straddle both the microblogs and threaded discussions.

    Spam is taken care of just like everywhere else: Delete activities.

    read more
Post suggeriti
  • 0 Votes
    1 Posts
    12 Views
    实例(ControlNet Social Space; 简称CSS)搭建的告一段落了,稍微总结一下:1. 选型阶段(#ActivityPub 生态对比)先稍微 review 一下现在已有的 #fediverse 平台,选择以 ActivityPub 作为协议的平台,毕竟联邦的话还是得尽可能有更多人用才行。类似于用于实时通讯的 matrix。然后评估了 #Mastodon / #Pixelfed / #Pleroma / #Misskey / #Sharkey 等,确认不同实现可互联互通(Pixelfed ↔ Mastodon 等)。然后偶然得知 #Threads 也是Fediverse中的一员。然后,研究“主域 abc.xy 显示身份、实例跑在 social.abc.xy”的可行性。结论是这样不靠谱,所以放弃了。。最终决定考虑到Sharkey比起Misskey有一些不错的feature就选了Sharkey。2. 部署与运行按官方文档与 docker compose 在用 #Unraid 系统的 #NAS 上部署 Sharkey。邮件服务器使用free-tier的#Resend 。然后还稍微折腾了一下如何设置管理员。3. 联邦互动与内容获取学会了站内搜索关注远端用户(用 @user@domain 或贴对方资料页 URL 解析)。然后是关注 Threads 用户的实操(前提对方开联邦)。但是这时候实例里没有什么联合,时间线完全没东西,就考虑有没有订阅别人一整个时间线的方法,好像不太可行。4. 存储与图片体积了解到 Misskey/系每用户默认 100 MB 网盘,附件都会落地到服务器(非纯外链)。而且没办法通过引用外链来渲染图片。试了一下本地上传+压缩,发现会自动压缩到webp,勉强还行。6. 二步验证(2FA)故障 & 解决刚才开启 2FA 后出现“authentication failed”,连恢复码也无效,日志报:Endpoint: i/change-password ... {"message":"authentication failed", ...}尝试各种排查均失效,最后只能直接改数据库里的,把 2FA 关掉,然后再重新绑定 2FA和passkey。7. 默认不显示在线状态发现这个需要在用户设置里修改,并且没找到如何让用户默认就是显示的,只能先放弃了。8. 注册与邀请码觉得发放多个一次性邀请码麻烦,想找可重复使用的邀请码。结果发现不行,只支持一次性的,感觉除非自己之后魔改一个web服务用于自动发放邀请码并且自动填写,不然想分享到别的群里,确实有点难度。也没有那种私人邀请的链接。TODO: 未来感觉还是有很多可以做的1. 能够自动探索别的实例的某些方法,找到一些有意思的用户去follow。2. 部署一个chat agent用于增强活跃度,但是又不能感觉像是纯骚扰,如何设计是个问题。3. 做一个方便remote follow的工具
  • 0 Votes
    10 Posts
    35 Views
    @cmdr_nova yeeeeeeeesss!!!
  • 0 Votes
    3 Posts
    22 Views
    @thisismissem@activitypub.space Ah, I seem to have misread the code. I was confused by Mastodon serving its own instance actor from /actor. Thanks for the clarification!
  • 0 Votes
    10 Posts
    65 Views
    julian@activitypub.space I am subscribed to 4 relays: https://relay.minecloud.ro/actor https://relay.publicsquare.global/actor https://relay.infosec.exchange/actor https://rel.re/actor I did have others added that sat at 'Pending' for days (I guess some relay admin are not monitoring requests), but they have been removed.