Piero Bosio Social Web Site Personale

セキュリティアップデート: Hollo 0.6.19 リリース FedifyのHTMLパースコードにおけるセキュリティ脆弱性に対応したHollo 0.6.19をリリースしました。 この脆弱性 (CVE-2025-68475) は ReDoS (正規表現によるサービス拒否) の問題であり、攻撃者がフェデレーション操作中に特別に細工されたHTMLレスポンスを送信することで、サービス停止を引き起こす可能性があります。悪意のあるペイロードは小さい (約170バイト) ですが、Node.jsのイベントループを長時間ブロックする可能性があります。 すべてのHollo運営者の皆様には、直ちにバージョン 0.6.19 へのアップグレードを強くお勧めします。 項目 詳細 CVE CVE-2025-68475 深刻度 高 (CVSS 7.5) 対応 Hollo 0.6.19 にアップグレード #Hollo #セキュリティ #fediverse #ActivityPub

🚨 Security Advisory: CVE-2025-68475 A ReDoS (Regular Expression Denial of Service) vulnerability has been discovered in Fedify's HTML parsing code. This vulnerability could allow a malicious federated server to cause denial of service by sending specially crafted HTML responses. CVE ID CVE-2025-68475 Severity High (CVSS 7.5) Affected versions ≤1.9.1 Patched versions 1.6.13, 1.7.14, 1.8.15, 1.9.2 If you're running Fedify in production, please upgrade to one of the patched versions immediately. For full details, see the security advisory: https://github.com/fedify-dev/fedify/security/advisories/GHSA-rchf-xwx2-hm93 Thank you to Yue (Knox) Liu for responsibly reporting this vulnerability. #Fedify #ActivityPub #security #fediverse #fedidev

Week in Fediverse 2025-12-19Servers- Mbin v1.9.0- stegodon v1.4.3- PeerTube v8.0.1- ActivityPub for WordPress v7.8.0- Ktistec v3.2.4- Manyfold v0.130.0- Wafrn v2025.12.03- Misskey v2025.12.1- Gancio v1.28.2- appy v0.4.0- Loops v1.0.0-beta.6- PieFed v1.3.8- NodeBB v4.7.1- Enigmatick ActivityPub C2S- A year in Hubzilla development- Photografedi: An ActivityPub powered photo sharing website! Inspired by Flickr and PixelfedClients- PeerTube Mobile v2.0- Voyager v2.42.0- Blorp v1.10.1- Interstellar v0.11.1Tools and Plugins- feed2fedi v3.4.1Articles- Announcing Key Transparency for the Fediverse- Adding a NSFW filter to Images on Writefreely- Ghost's ActivityPub Integration Feels Half-Baked- holos.social - How It Works- Implementing Encrypted Messaging over ActivityPub- Fediverse Report - #147-----#WeekInFediverse #Fediverse #ActivityPubPrevious edition: https://mitra.social/objects/019b1423-50e8-e8c5-d918-9946b14bb67e

@macfrancGrazie per averci fornito questo strumento così potente! Ora dovremo utilizzarlo il più possibile affinché se ne diffonda la conoscenza e una tale opportunità venga sfruttata da tutti.@fediverso

If it exposes sockets to the Internet, it should be contained. Not by Docker but by Podman. #rootless @mapache

@jansenspott @herrjemineh @kaffeeringe oh! das muss ich mir gesondert nochmal anschauen!

Translating ActivityPub newly added strings into Italian. The stable release. #ActivityPub #WordPress

@mapache@hachyderm.io it looks amazing! I really wish I could attend.

@atarifrosch @activitypub.blog @about.iftas.org There’s no intention to exclude ClassicPress. Our resources are limited, so we don’t actively test with it, but I’m happy to fix issues when possible... or, even better, merge PRs that resolve them.

@informapirata @fediverso Sulla faccenda hashtag del fediverso vs. tag di WordPress, devo aggiungere una dritta che ho scordato. Il post di ActivityPub funziona così: se dalle impostazioni si setta "automatico", lui di default prende [title] [excerpt] [permalink] [tags] non credo ci sia bisogno di spiegare in modo non-tecnico cosa siano queste variabili. Se, come scritto nel post precedente, io rimuovo il tag dal post (e dall'elenco tags) perché inutile per il resto del sito, questo non mi entra nel post che poi passa nel fediverso una volta pubblicato.Quindi, nel migliore dei casi, si lascia l'excerpt vuoto sostituendolo con uno-due paragrafi seguito da un blocco "altro", o qualunque sistema si voglia usare per il "leggi di più"... Se non trova il riassunto (excerpt) lui prende la prima parte. Che è meglio strutturare con una intro sintetica e gli hashtag, poi c'è anche un flag nelle impostazioni blocco, che te lo fa vedere o meno questo excerpt quando apri il sito.Dopodiché da WordPress -> tags (a seconda del plugin SEO) gli si toglie l'indicizzazione a quel povero tag solitario, e sul sito eventualmente si linka la risorsa esterna più accreditata a quell'evento specifico. Ma io rimango sempre dell'idea comunque di non usare troppi tag, di non perdere nella qualità e organizzazione dei contenuti, per star dietro ai trend che ancora poco e ti mordono le dita dei piedi.

Frequently /me [from DE] thinks about #Datensparsamkeit The officially best [en] explainer is https://martinfowler.com/bliki/Datensparsamkeit.html@mfowler I became a Carteret Islands person once.Looking at my shell neclace.My wish for christmas is that you read it and carefully think about all the things you publish in terms of accessibility but also formats and size.An example:For @clemensg I did the yearly #ActivityPub #Atlas - it comes with millions and millions of geohashed places for OSM, wikidata, official sources and, well openaddresses [.io] They publish primarily in texts with lines of geojson.The whole planet is about 46 GB … … …An exmple:DE in this "format" is about 3.2 GBDE in CSV would be maybe 1.5 GB If we normalize and publish it compressed, it is [incl geohashes] about 800MB. If we now compress the geohashes, expanding it clientside the 3.2 GB becomes 250 MB …Maybe we can't save tons of powerplants like banning bitcoin would.But together we can save lots of energy.#geojson 💣

We're very excited to announce that we're sponsoring Protocols for Publishers - @team - in London.As well as helping support the event, @saskia will be joined by Siddhartha from The Bristol Cable to talk about building a social app for a local community, with their local news publisher.Find out more here: https://protocolsforpublishers.com/london-2026/#ProtocolsForPublishers #ActivityPub #SocialWeb #Fediverse #SocialMedia #Mastodon #Event #London

Read about #Encyclia by @jfietkau and plans to bring more #OpenScience to our #fediverse https://discuss.coding.social/t/my-current-goals-for-activitypub-and-academic-data/750There are multiple other #ActivityPub projects that share interests to connect more tightly the academic world to the #SocialWeb. Backed by #NGI0 @nlnet funding there is the very promising @bonfire and #Plaudit in earlier rounds (#WebMentions, not fedi).We should align on #OpenStandardshttps://encyclia.pubhttps://bonfirenetworks.orghttps://plaudit.pub#SX #Socialcoding

Week in Fediverse 2025-12-12Servers- Wafrn v2025.11.02- Gush! v0.0.27- stegodon v1.4.0- Akkoma v2025.12- Mastodon v4.5.3- PeerTube v8.0- Lemmy v0.19.14- Ktistec v3.2.3- Misskey v2025.12.0- NeoDB v0.12.5- Vernissage Server v1.26.0- flohmarkt v0.14.0- shops v0.1.8- Trunk & Tidbits, November 2025 (Mastodon)Clients- Pachli v3.2.4- Mastodon for iOS v2025.09- Interstellar v0.11.0- Chihu v1.16.0Tools and Plugins- PeerTube livechat plugin v14.0.2- FediFetcher v7.1.17- Poduptime v5.6.2For developers- Library progress report #3 (GoActivityPub)Articles- Why don't recommend to implement ActivityPub from scratch- Fediverse Report – #146-----#WeekInFediverse #Fediverse #ActivityPubPrevious edition: https://mitra.social/objects/019af042-e877-53d8-b10f-999a2fe9147d

Le fédivers, un réseau social libre et résistantEntrevue que j'ai réalisé avec @evan, le Montréalais à l’origine de la création du protocole ActivityPub, un élément technique central du fédivers. Publiée dans le no 103 de la @revueababord .https://carnet.delbecque.org/2025/12/11/le-fedivers-un-reseau-social-libre-et-resistant/#fédivers #fediverse #Activitypub #polqc #canadapol

Whoop Whoop! 🚀 Das #ActivityPub-Plugin für #WordPress bekommt lokales Caching für die Avatare!https://github.com/Automattic/wordpress-activitypub/pull/2610

Deployed @writefreely to https://notes.zef.pub can also be followed via @zef@notes.zef.pubAll content published with a fresh (prototype level) #SilverBullet library (as promised): https://github.com/zefhemel/silverbullet-libraries/blob/main/WriteFreely.md#selfhosted #activitypub

mstdn.jp や #fedibird では .mp3 の音声ファイルがインライン表示されるのに、mastodon.social でインライン表示されないのはどうしてだ？贈る側のJSONの問題かな？#WordPress のプラグイン #ActivityPub の抜粋ではなく全コンテンツを送る設定の投稿なんだけど…。

I finally got set up with a #bookwyrm account. Very similar to #goodreads or #storygraph but is federated and on #activitypub. Just got done adding backlog of previous read books, looking forward to using it more!https://bookwyrm.social/user/strongthany

https://activitypub.space/category/2/general-discussionThis site should be boost#activitypub