Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

[Read in full on NHAM]

Fediverso
1 1 11

Gli ultimi otto messaggi ricevuti dalla Federazione
  • Important announcement, especially for BSD Cafe friends who don’t have a local account.

    Over the past few days I noticed that, when browsing some public pages on our Mastodon server (especially the federated timeline, meaning posts coming from other instances as well), certain content could appear without a CW and in some cases it was pornographic, illegal, or generally not suitable for a general audience.
    The problem is that this was visible even to users who were not logged in, which effectively made BSD Cafe a gateway to that content. Also, some media files are cached on our server, so it could look like BSD Cafe is the source of it.

    For this reason I had to make a decision: I have disabled the ability for non-logged-in visitors to view posts coming from other instances.
    This way, anyone visiting BSD Cafe without an account will only see BSD Cafe local content, helping us avoid potential issues, including legal ones.
    Some of you (from other instances) thought you had been blocked because you could no longer see your posts here, but that is not the case: your posts are still fully visible to local users, as usual.

    I have also re-enabled (at least for now) hashtag browsing, since BSD Cafe is one of the most well federated instances for BSD-related content and it would be a shame to lose that. However, I may reconsider this decision if it leads to problems.

    Let me know if you notice anything unusual.

    read more

  • @CathyBikesBook I've settled on Tusky. There's also alternative web frontends that can be used as PWAs like Phanpy that are quite interesting feature wise

    read more

  • @blag if you liked something, like it. If you think others might be interested in it, or should see it, boost it. If you have something to say, reply to it. This is my strategy.

    read more

  • @emsquared Absolutely! I still prefer Elk on desktop.

    read more

  • @candide Still got love for Elk BTW. Used it for a long while but Phanpy has that X factor.

    read more

  • @candide ah great. Glad you are getting on with it. Bit quirky at first but it works really sickly. The catchup feature is the secret weapon. Enjoy.

    read more

  • @emsquared Thank you for the Phanpy recommendation! I've been using it for a few days now and I absolutely love how it handles boosts! I thought it being a PWA would be an issue, but it actually works out really nicely. I like it even more than my previous favorite web app, Elk.

    read more

  • @stefan @cheeaun unfortunately I don't have any information on that (and we don't track specifics so it would be difficult to comment I think; will ask some folks about it though)

    read more
Post suggeriti
  • 1 Votes
    1 Posts
    6 Views
    🚨 Security Advisory: CVE-2025-68475 A ReDoS (Regular Expression Denial of Service) vulnerability has been discovered in Fedify's HTML parsing code. This vulnerability could allow a malicious federated server to cause denial of service by sending specially crafted HTML responses. CVE ID CVE-2025-68475 Severity High (CVSS 7.5) Affected versions ≤1.9.1 Patched versions 1.6.13, 1.7.14, 1.8.15, 1.9.2 If you're running Fedify in production, please upgrade to one of the patched versions immediately. For full details, see the security advisory: https://github.com/fedify-dev/fedify/security/advisories/GHSA-rchf-xwx2-hm93 Thank you to Yue (Knox) Liu for responsibly reporting this vulnerability. #Fedify #ActivityPub #security #fediverse #fedidev
  • 0 Votes
    1 Posts
    8 Views
    Now witness the power of this fully operational Fediverse!https://shkspr.mobi/blog/2025/11/now-witness-the-power-of-this-fully-operational-fediverse/How can you measure the popularity of a social network site? Perhaps by counting the number of active accounts, or the quality of the discourse, or even how many people reply to your witty memes.Me? I prefer to look at how many people visit my blog from each site. It is an imperfect measure - and a vain one - but lets me know where I should be spending my time. No point posting on a network which is just bots talking to each other, right?Earlier this year I built a stats-counter for my blog. Every time someone clicks from a website which links to my blog, it records that visit in a database. I get to see which blog posts are doing numbers, and where those numbers came from.Until fairly recently, the Mastodon social network didn't send referer details. I thought that reduced the visibility of the network and lobbied for it to change. As various Mastodon servers upgrade, and admins opt-in, it is becoming more apparent just how much traffic originates from the Fediverse.Over the last few weeks, here's how many people have clicked from BlueSky and Mastodon to one of my blog posts.TotalSource1,607bsky.app752mastodon.socialAt first glance, it doesn't look good for our elephantine friends, does it? The butterfly sends over twice the traffic. Game over!But, of course, while Mastodon.social is the biggest instance - it is far from the only one. What happens if we slide down the long tail? Here's all the Mastodon-ish instances which sent me over 10 clicks.TotalSource193phanpy.social120 android-app://org.joinmastodon.android/106infosec.exchange62mas.to59mstdn.social55social.vivaldi.net49wandering.shop48fosstodon.org33mathstodon.xyz27mastodon.online26mastodon.scot24app.wafrn.net19indieweb.social18social.lol17tech.lgbt17toot.wales16en.osm.town16feditrends.com14mstdn.ca14piefed.social12wetdry.world11c.im11mastodon.nl51 Sites sending < 10 clicksAh! Add them all up and you get a grand total of 1,773 visitors from Mastodon-powered sites. That's more than BlueSky.Now, there are some obvious caveats to the data:I have a smaller follower count on BlueSky than I do on Mastodon.My posts may appeal more to one demographic than another.People may have strict privacy controls which suppress the true volume of visitors.There's no way to measure how long someone spends reading my posts.RSS and newsletter visitors aren't counted.Clicks from apps may not always show a referer.Some people may be on multiple services.Fediverse users can follow the post directly, so don't need to visit the site to read it.And yet… no matter how you slice it, Fediverse servers are sending as much traffic as BlueSky!I think this is brilliant. Web services should be able to scale from small to big - and each ActivityPub-powered site helps power the open Internet.Just for completeness, this is how Reddit, Facebook, LinkedIn, Twitter, and Lemmy do over the same period:TotalSource1,158reddit.com585 android-app://com.reddit.frontpage/76facebook.com76https://old.reddit.com/r/programming/56https://www.reddit.com/r/programming/52youtube.com41t.co38https://old.reddit.com/r/todayilearned/comments/1nsw7f4/til_in_mongolia_instead_of_a_street_address_a/31linkedin.com27 android-app://io.syncapps.lemmy_sync/27https://www.reddit.com/r/todayilearned/comments/1nsw7f4/til_in_mongolia_instead_of_a_street_address_a/22https://old.reddit.com/r/programming/comments/1n96ftn/40_years_later_are_bentleys_programming_pearls/22lemmy.ca17 android-app://com.linkedin.android/16lemmy.dbzer0.com14feddit.org11https://www.reddit.com/r/programming/comments/1n96ftn/40_years_later_are_bentleys_programming_pearls/10discuss.tchncs.de10l.instagram.com8lemmy.blahaj.zone6https://www.reddit.com/r/GrapheneOS/comments/1m2l84b/considering_making_the_switch_does_google_pay/6reddthat.comIf you add up all the Lemmy instances, they send about as much traffic as Facebook and LinkedIn combined. That's not a huge surprise - those platforms hate anyone clicking away to the wider web.Twitter is basically the Dead Internet. I'm no longer on there, but I do occasionally search it to see who is sharing my posts. The popular posts I write get shared a lot - sometimes by accounts with huge followers - yet there are no comments or retweets and barely and clicks.I don't do Instagram or Threads, and that might be reflected in their low numbers. But I'm not active on YouTube either - yet people there occasionally link back to me.Final ThoughtsFirstly, my stats only represent my site. Your site might be very different.Secondly, I've ignored search engine traffic, big blogs, newsletters, and other sources.Thirdly, and most importantly, this isn't a competition! The desire for a "winner-takes-all" service is dangerous and disturbing. An ecosystem is at its most vibrant when there are multiple participants each thriving in their own niche.I want a thousand sites, running a hundred different software stacks, some of which only serve a dozen people, or even a lone participant.Diversity is strength.#activitypub #bluesky #fediverse #mastodon #statistics
  • 0 Votes
    1 Posts
    13 Views
    BadgeFed Unconference Participant – FediForum June 2025 The verified Badge was issued to @Anca Mosoiu This badge recognizes active participation in the BadgeFed Unconference session held during FediForum's June 2025 event. BadgeFed is an initiative dedicated to exploring and advancing decentralized digital credentials within the Fediverse. This session brought together innovators, educators, enthusiasts, curious raccoons, and technologists to collaboratively shape the future of open badges and verifiable credentials in decentralized networks. Earning Criteria: To earn this badge, participants must have: * Attended the BadgeFed Unconference session at FediForum June 2025. * Actively engaging by asking questions, commenting, leading discussions, or engaging meaningfully in collaborative activities. * Demonstrated a commitment to advancing decentralized credentialing systems within the open social web.. Issued on: 06/07/2025 15:44:41 Accepted On: 06/07/2025 20:12:41 Verify the Badge here. #badgefed #openbadges #fediforum #fediverse #activitypub #IssuedByBadgeFed #_BadgeDrop
  • 0 Votes
    1 Posts
    13 Views
    Cool full house @cbase in the Mainhall.#fediday @berlinfediday #fediverse