Piero Bosio Social Web Site Personale

@julian @evan @smallcircles

> it seems a waste of resources to try to track it.

is it? did someone ask to receive updates of every single change? if not, then maybe. the level of detail is an open parameter here...

@deadsuperhero @general @julian @evan concept: attaching Applications to your inbox, each of which do their own thing. right now we have effectively monolithic apps that have exactly one "internal AP client" attached to the inbox.

@julian @deadsuperhero @evan POST outbox is the vision of C2S btw -- nodebb is a client in that regard, letting users publish activities of whatever they did on nodebb, to their activity stream.

i recently filed an issue on ap-api for "suggested activities" to improve the security issues with letting others POST to your outbox directly: https://github.com/swicg/activitypub-api/issues/53

@evan @julian@fietkau.social @julian@activitypub.space @smallcircles anyway, to address julian (not lam)'s question: what does Accept(Note) even mean? what does it entail? can you always assume it has to do something with a replies collection that may or may not be there?

@evan @julian@fietkau.social @julian@activitypub.space @smallcircles i guess you could hack it with inReplyTo on the Activity, if you assume responses always come after the thing they are responding to (although i could make a famous joke here about answering a question before it is asked).

@evan @julian@fietkau.social @julian@activitypub.space @smallcircles i think there needs to be a way to get a consistent event log in-order from the canonical/authoritative source. failing that, though, the least you could do is have your activities refer to each other in an obvious way. Undo(Accept(Follow)) lets you reverse-reconstruct what happened because all 3 activities are right there (hopefully fetchable!). so maybe Undo(Add) makes more sense than Remove; perhaps we say that the Remove is the result of the Undo?

@evan @julian@fietkau.social @julian@activitypub.space @smallcircles re: the Undo Accept thing vs Reject thing, using a Reject is prone to issues with out-of-order deliveries. if you send a Follow and get back an Accept and a Reject with the same published datetime, then are you currently a follower? what if the Reject came first but then you receive a later Accept? it makes it incredibly hard to reason about the distributed state machine, and leads to terrible desyncs when one side thinks you follow them and the other doesn't.

@evan @julian@fietkau.social @julian@activitypub.space @smallcircles and then there are replies, which in fedi currently require deep introspection of a Create.object.inReplyTo, which is information that may not be immediately available to you. so it leads to the unfortunately complicated situation where you don't actually know when you received a reply, because there is no Reply activity to be used as a notification -- you have the side effect without the activity.

@evan @julian@fietkau.social @julian@activitypub.space @smallcircles of course follows are a bit more stateful and complex, so it can be argued that we should actually allow for richer subscription management, similar to when you open a dashboard and manage which email notifications you want to receive. the subscription could be reified as a Follow activity, but the side effects and semantics are not exactly the same with what's in AP right now. (AP doesn't have a way to remove a follower; masto uses Reject without Undo Accept)

@evan @julian@fietkau.social @julian@activitypub.space @smallcircles personally i think three things happen generally, which could each be described by their own activity in succession:

1) the original Activity is posted.
2) you can Accept or Reject the Activity.
3) as a result, you can Add or Remove the Activity to the corresponding AP collection.

this holds for Like and Announce 1:1. Follow we currently Add the Follow.object instead, but i think we ought to store the actual Follow activity in a follows collection.

trying to render html from markdown is a trap tbh

probably the most succinct definition i can give of fascism is "the fetishization of order". that's what it all is rooted in, after all -- some natural order, or law and order, the discarding of any chaos by maintaining national purity against "degeneracy". in reality, chaos is freedom -- the result of free agents acting freely is highly unpredictable. so stability is enforced at the price of freedom, by maintaining a very strong and rigid state which maintains the nation's greatness and glory.

my lyft is 3 minutes away. i listen to a song that is 6:29 long. my lyft is 3 minutes away

@mansalia it's my mom's credit card site 🙃

@mansalia it provides no additional security benefits, and in this case actually led to security downgrade -- i had to use a 20 character random password instead of a 64 character one

hint: you should not be able to know this, let alone enforce it

"Your password must not contain the same character more than once." is an actual requirement i saw a few days ago

apparently i was born during a solar eclipse. not visible from where i was born, but still kinda metal when you think about it

@rimu @liaizon @silverpill it's like how a Follow might be automatically Accepted but you can't assume it will until you actually receive the Accept

@rimu @liaizon @silverpill no, you still need to respond to the activities. the bit you quoted is only a hint so clients know whether their activity will be accepted