Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone
  1. Home
  2. Categories
  3. Technical Discussion
  4. Mastodon may expose followers-only posts to public.

Mastodon may expose followers-only posts to public.

Technical Discussion
12 7 1
Log in to reply

Feed RSS
Mastodon may expose followers-only posts to public.

Gli ultimi otto messaggi ricevuti dalla Federazione
  • julianundefined
    julian

    I'm looking into federating out deletion of contexts because in NodeBB the concept of a topic is a discrete entity, not tied to the posts contained within. Deleting the top-level post would not alter the topic in any way, except perhaps that the next oldest reply is suddenly promoted to top-level, which is odd.

    Conversely, in ActivityPub, there either is no concept of a context (threaded objects only), or merely the suggestion of one as a view (current implementations of resolvable contexts). I'm hoping to move this more towards contexts as discrete entities with their own activities.

    read more
  • wakest ⁂undefined
    wakest ⁂

    @julian love to see the reports of cross project colab!

    read more
  • silverpillundefined
    silverpill

    @elvecio Further investigation showed that this wasn't a Mastodon's fault. There was some weirdness on behalf of the originating instance.

    Mastodon server received a post addressed to public and I received a post addressed to followers.

    read more
  • citcundefined
    citc
    @silverpill
    For superior control of your content, suggest to use hubzilla
    read more
  • elvecioundefined
    elvecio

    @silverpill One thing that has always been different in Mike's software is that only authorized people can see non-public things. It is of little use to have the right address for the image, video, or file (as instead happens and happened in Mastodon Diaspora and others - almost all of them). In the software created by him, you cannot see even if you have an address/id or whatever you like.

    read more
  • silverpillundefined
    silverpill

    @julian Well, it's public now. But it wasn't when I posted :)

    read more
  • FinchHaven sfbaundefined
    FinchHaven sfba

    @silverpill

    "Mastodon may expose followers-only posts to public. Is it a feature or a bug?"

    I hate to break this to you, but I'm seeing this on a v4.4.3 instance in my /home only because of the you've used, which I

    Don't know if this is good news or bad news, or none of the above

    cc @kopper

    read more
  • Phantasmundefined
    Phantasm
    @silverpill It breaks FO, so this is a feature.
    read more
@pierobosio@soc.bosio.info
Post suggeriti
  • Helgeundefined

    Good morning Fediverse.

    Technical Discussion
    1
    0 Votes
    1 Posts
    0 Views
    Helgeundefined
    Good morning Fediverse. Should direct HTML links, i.e. the a tag, to ActivityPub objects have the type application/activity+json? I'm thinking here about an embedded external reply. The link resolves to an ActivityPub object, whose id corresponds to the link's target.
  • mradcliffeundefined

    People are Starter Packs

    Technical Discussion activitypub fediverse
    3
    0 Votes
    3 Posts
    0 Views
    mradcliffeundefined
    Thank you, @julian.One thing I am concerned about is how that affects forums and communities.But then I think, so what if a NodeBB forum or PieFed community wanted to highlight people because those people represented the values of that community (even if they were not necessarily a part of it)?This is something that no forum software that I am aware of does because we always think of forums as only something we join into.And it is so amazing to me that the FediVerse and the social web movement could provide a forum or group the opportunity to grow in the opposite direction—sending people outwards for new shared experiences.
  • FenTigerundefined

    Interesting new DID method: "did:self"

    Technical Discussion activitypubdev fedidev
    1
    0 Votes
    1 Posts
    0 Views
    FenTigerundefined
    One consequence of trying to separate identity hosting from the other components of the system is that it makes the other components harder to bootstrap. If I run just one component of my instance in isolation, how can I authenticate to it in order to configure/manage/test it, if I don't have an identity that I can use?The answer might be to use a did:self identifier. The flow would look something like Management CLI tool generates a JWT describing a did:self identifier, and stores the private key locally Admin uses scp or something to copy this JWT to the right place on the server The server now has the ID's public key and so the CLI tool can prove that it "owns" the identifierWhich seems like a reasonable fix for the classic problem of "how do you create the first user", and also a useful fallback for when the system is too badly borked to be able to look up real identities.Another interesting property of did:self is that seems to be possible to add extra metadata, such as a human-readable name, to the ID, by using standard JWT claims - without needing the data to appear in the DID document.Of course these identities will only be visible to the server they're copied to, not to the whole network, but that shouldn't be a major problem.(Cue the peanut gallery, with their suggestions of "it's easy, just do so-and-so", because everything looks easy when you take it out of context...)#ActivityPubDev #FediDev
  • evanundefined

    Flow control

    Technical Discussion
    8
    1 Votes
    8 Posts
    9 Views
    Rimuundefined
    Currently whenever a POST is sent to an inbox the response body is ignored. The http status code is checked for errors but that's it. Perhaps some more complex information about the state of the receiving ingress queue could be conveyed in the body.