Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

So, ein bisschen CSS später passt der Folgen-Button vom Activity-Pub auch zur Optik des Blogs.

General Discussion
7 3 0

Gli ultimi otto messaggi ricevuti dalla Federazione
  • @pixelschubsi @tris Yes, agreed. Tremendous value in reusing identities and login credentials. Big skepticism with regards to using AP as a protocol. One can probably kinda make it work… But why? What’s the benefit?

    read more

  • @daniel @tris I'm also genuinely surprised that people believe that ActivityPub, a protocol even named after its purpose, to publish activities, is a good protocol to pursue private instant messaging. The goals of those two couldn't be more detrimental.

    I do see a purpose of being able to reuse your "ActivityPub identities", which actually are just WebFinger identities. Maybe someone should specify how to discover XMPP accounts via WebFinger and push that as a solution for AP messaging?

    read more

  • @tris Soatak is an expert in cryptography. I’m not. I’m more than happy to stand on the shoulder of giants when it comes to E2EE. That’s why we used the Signal Protocol 10+ years ago for and are now looking towards . However, good, interoperable protocol design is so much more than just E2EE. And maybe I've learned a thing or two about protocol design in my career that they don’t necessarily know.

    read more

  • @tris there are three actively developed protocols for federated instant messaging (XMPP, Matrix, Deltachat). At least one of them is very open to new developers and new ideas and has a structure in place to collaboratively work on those ideas and bring various stake holders together. With no disrespect to that individual I don't see why there needs to be a forth protocol loosely based on ActivityPub.

    read more

  • @daniel Ah, fair, their work for E2EE Fedi looks interesting: https://github.com/fedi-e2ee/public-key-directory-specification

    read more

  • @tris two things: I already said in my follow up post that if someone wants to build their own clients on top of XMPP and prefers MLS over OMEMO, the XMPP community is very open to that. A protocol is much more than just the encryption. They would still benefit from all the other things XMPP has solved.

    A lot of what's in that blog post is ill-informed and bordering on disinformation and fear mongering.

    read more

  • @daniel Someone have to solve https://soatok.blog/2024/08/04/against-xmppomemo/ issues first

    read more

  • @jansenspott @mthie ich will mich nicht aus der Affäre ziehen, aber alles was wir mit dem Plugin machen ist: wir schicken eine Überschrift, eine summary, den content mit inline images und die Images nochmal als attachment. Dadurch kann jedes empfangende Netzwerk entscheiden was es am besten anzeigen. Ich schau mir das aber gerne im neuen Jahr nochmal an. Vielleicht finden wir ja mit den gotosocial devs eine schöne Lösung!

    read more
Post suggeriti
  • 0 Votes
    3 Posts
    3 Views
    セキュリティアップデート: Hollo 0.6.19 リリース FedifyのHTMLパースコードにおけるセキュリティ脆弱性に対応したHollo 0.6.19をリリースしました。 この脆弱性 (CVE-2025-68475) は ReDoS (正規表現によるサービス拒否) の問題であり、攻撃者がフェデレーション操作中に特別に細工されたHTMLレスポンスを送信することで、サービス停止を引き起こす可能性があります。悪意のあるペイロードは小さい (約170バイト) ですが、Node.jsのイベントループを長時間ブロックする可能性があります。 すべてのHollo運営者の皆様には、直ちにバージョン 0.6.19 へのアップグレードを強くお勧めします。 項目 詳細 CVE CVE-2025-68475 深刻度 高 (CVSS 7.5) 対応 Hollo 0.6.19 にアップグレード #Hollo #セキュリティ #fediverse #ActivityPub
  • 0 Votes
    1 Posts
    6 Views
    This week I added the ActiviyPub plugin to our college's WordPress blog server. It's a MultiUser server, so each group has their own independent blog hosted by the same WordPress install.People here don't post a whole lot however the student newspaper does post their articles there weekly.Just trying to do my part to increase the human generated content shared here in the Fediverse.Oh, and of course the server is dual stacked and available over #ipv6 #ActivityPub #WordPress
  • 0 Votes
    1 Posts
    10 Views
    ⚠️ Do not be HACKED !! 😱Software updates include not only new features but also critical security fixes. To keep your site secure and stable, ensure you always use the latest version.We frequently observe numerous sites across the Fediverse running very outdated versions of Mastodon or Misskey. Some sites are even using versions over a year old.Be the smart administrator and keep your site up to date.#Mastodon #Misskey #Fediverse #ActivityPub #PixelFed #PeerTube #InfoSec #Security
  • 0 Votes
    1 Posts
    16 Views
    Checking out Bonfire's latest release. This Federation Status dashboard is pretty cool. And get this - it's not just visible to admins - end users can see the same, just filtered to their OWN processes.That's really helpful if you're trying to debug an issue with another platform development team.#ActivityPub #Bonfire