Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

Bonfire shared inbox usage

Technical Discussion
5 3 20

Gli ultimi otto messaggi ricevuti dalla Federazione
  • @haitchfive

    I don't think it was me, but — it seems interesting.

    https://github.com/ha1tch/quertfy

    .

    read more

  • @reiver Did you and I discuss queryfy a while ago, or was it one of my other projects?

    Just wondering whether I owe you a heads up since queryfy has been bumped up to v0.3.0

    read more

  • With ActivityPub / ActivityStreams...

    To me, it feels like there should have been something that is a common parent of both 'Object' and 'Link'.

    That just had the "name", "nameMap", and "preview" fields (along with "id" and "type, of course) — since that is what 'Object' and 'Link' share in common.

    I'll just call this common parent: 'Entity'.

    ...

    It could have even been an opportunity to talk about how to handle unknown types.

    read more

  • @soapdog@toot.cafe hmm... just thinking aloud here.

    You posit in another post that the network effects inflate exponentially:

    > Push models are resource hogs that approach exponential growth in a large network like the fediverse

    That's not true. If you post a message then it sends a copy to each follower. That's linear growth. If you collapse recipients via shared inboxes you can reduce that further.

    If you're referring to the torrent of requests that happen if your post is shared (the "thundering herd" problem) then that's actually a PULL happening from those requesting instances!

    Secondly, in a pull model of AP, you would need to continually poll servers of all your followers so as to approach a real-time effect. You'd be polling servers over and over again, and many of them would have nothing new, with so much wasted traffic.

    If your expectations include semi real-time updates, the push model is much more performant, in my humble opinion.

    read more

  • @evan @mariusor @silverpill i think we probably need to revisit the user story of creating multiple objects at once, or more accurately, the user story of minting and binding multiple identifiers at once.

    read more

  • read more

  • @evan @mariusor @silverpill re: ids though the RDF ecosystem (and jsonld) doesn't use "null", it uses blank node identifiers (those prefixed with _: are special cased by the prefix expansion algorithm). this can allow for "transient" activities or "anonymous" objects (and the graph data model auto assigns _:b1, _:b2 and so on when "id" is missing; the canonicalization algorithm assigns _:c14n0 and _:c14n1 and so on)

    this is maybe not the best way to create replies collections though...

    read more

  • @evan @mariusor @silverpill although note that i think nightpool is of the opinion that POSTing a non-activity to the outbox is an at-risk behavior and should be deprecated, because the "implicit Create" behavior has to somehow know whether or not the body of the POST is an Activity or not, and we never actually define how to know this, so it is too likely that the server will accidentally wrap activities in a Create if some inference fails.

    read more
Post suggeriti
  • 0 Votes
    2 Posts
    7 Views
    @wjmaggos@liberal.city I think that thinking of "anything" being boostable is both weird and expected at the same time. We hold these thoughts in our heads concurrently because it was how the web-at-large (indieweb notwithstanding) worked. What I mean is... A news article isn't a discrete resource shared on a common social web — such a construct does not exist outside of the Fediverse. ... but news articles are littered with "share via..." buttons that sort of approximate the experience.
  • 0 Votes
    3 Posts
    21 Views
    セキュリティアップデート: Hollo 0.6.19 リリース FedifyのHTMLパースコードにおけるセキュリティ脆弱性に対応したHollo 0.6.19をリリースしました。 この脆弱性 (CVE-2025-68475) は ReDoS (正規表現によるサービス拒否) の問題であり、攻撃者がフェデレーション操作中に特別に細工されたHTMLレスポンスを送信することで、サービス停止を引き起こす可能性があります。悪意のあるペイロードは小さい (約170バイト) ですが、Node.jsのイベントループを長時間ブロックする可能性があります。 すべてのHollo運営者の皆様には、直ちにバージョン 0.6.19 へのアップグレードを強くお勧めします。 項目 詳細 CVE CVE-2025-68475 深刻度 高 (CVSS 7.5) 対応 Hollo 0.6.19 にアップグレード #Hollo #セキュリティ #fediverse #ActivityPub
  • 0 Votes
    8 Posts
    19 Views
    @krafting you can explore without an account, we just simply limit it. Mastodon does this too.
  • 0 Votes
    1 Posts
    10 Views
    Speed demo by fauno, @f@sutty.nl, and Mauve, @mauve@mastodon.mauve.moe, at FediForum March 2024 https://fediforum.org/2024-03/