← Feed

Posts

• Post #4460216

  @mapache@hachyderm.io you're right! We should get @jesseplusplus@mastodon.social out for the next FediCon (or FediMTL in Montreal!), and bring @johannab@cosocial.ca back.

• FediCon/FOSSY 2026 Live Thread

  @evan@cosocial.ca explaining that "the fediverse is quiet" is a bug, not a feature. Good thing we have a solution for it :smirk_cat: AP devs, fixing AP paper cuts one at a time

• FediCon/FOSSY 2026 Live Thread

  Can federated badges work? @mapache@hachyderm.io wanted to know.

• FediCon/FOSSY 2026 Live Thread

  This is the beginning of the live thread for FediCon/FOSSY 2026. Check back here for updates regarding the Fediverse track of FOSSY (Friday and Saturday).

• Post #4416395

  @mooooooo@qaf.men yes, you can. NodeBB and Piefed are two examples of software that send text/markdown. Misskey sends their own variant of Markdown

• Post #4395302

  Packing my COVID era face mask for my trip to Vancouver :eyes: How's the air quality been?

• Post #4282166

  27 slides and counting... going to dive into some technical stuff as usual! I keep saying I should generalize my talks, but alas, here I go again...

• Reflecting on the existence of httpsig.org

  httpsig.org is a site with one sole purpose, to advocate for the adoption of RFC 9421 HTTP Signatures. It has a "Libraries" tab that does exactly what it advertises, it lists a bunch of libraries for you to use so you don't have to roll your own. If you want to integrate AP today, but you don't want to roll your own everything, where do you go? Who do you ask? All I know is: Fedify → Typescript (thanks @hongminhee@hollo.social!) FedBOX → Go (thanks @mariusor@metalhead.clu...

• Edge case when backfilling topics

  When it comes to backfilling topics, NodeBB utilises what is called "context collection backfill" instead of reply-chain traversal. In a nutshell, instead of crawling up and down the reply tree one-by-one — kind of like what Mastodon does currently — it checks for a canonical source-of-truth in the context property. NodeBB supports both strategies, since not all objects contain context. I found a fun little edge case where if I start a topic, a reply is received, and that reply poi...

• Post #4170041

  Can WebFinger resolve subject to a different domain? My immediate assumption is yes, it can, because someone may use a specific domain merely as a gateway, and point to a different domain for resolution. e.g. https://activitypub.directory/.well-known/webfinger?resource=acct:julian@activitypub.space (note the different TLD) Resolving to: {"subject":"acct:julian@activitypub.space","aliases":["https://activitypub.space/uid/1","https://activitypub...

• Post #4096689

  @coffeegeek@flipboard.social I've had a lot of success with my V60 pourovers by discarding grounds before the full drawdown has completed. Much less bitterness. As far as I know this isn't standard practice, is it?

• SSO — selfie sign-on... goof god no.

  https://blog.google/innovation-and-ai/technology/safety-security/selfie-video-sign-in/

• NodeBB and RFC 9421

  I've been working (admittedly, with AI assistance) on HTTP signatures RFC 9421 support. The work will be done in stages. The first step is ensuring NodeBB can handle receipt of activities signed under the new standard (with adequate fallback to draft cavage-12). Afterwards NodeBB will begin sending out activities signed with both methods. Question re: double knock for AP devs who have implemented... is there a specific reason 9421-signed is sent first, and then cavage-12? My understand...

• Post #3812016

  The annual Social Web Operations Survey from IFTAS is open! With 50,000 active nodes federating we want the community's voice to be heard. Whether you're running a personal node, a relay, or a larger community, your feedback directly shapes the tools, resources and advocacy IFTAS takes on. The survey takes less than ten minutes to complete: https://tally.so/r/81MW6k @jaz@mastodon.iftas.org is looking for feedback especially from NodeBB instance admins, so if you have a NodeBB forum, he...

• FediCon here I come!

  It's official, the folks at FOSSY (or maybe it was just @reiver@mastodon.social wearing a FOSSY costume) approved my talk! Herding Cats: Two years of building on AP Lodging booked, ticket secured. Now just need to find a way cross-country to BC :sunglasses:

• Claude Is Not Your Architect. Stop Letting It Pretend.

  A good architect’s most important skill isn’t designing systems. It’s knowing which systems not to build. It’s pushing back on complexity. It’s asking “why?” five times until the actual requirement emerges from the aspirational nonsense. It’s telling the CTO that their conference-inspired idea is a terrible fit for the team they actually have. Claude will never do this. It’s trained to be helpful. Helpful means agreeable. Agreeable means you get an attaboy and a Jenga tower that passes for arc...

• Post #2773846

  Congrats @grishka@mastodon.social! You were doing this before AP integration in NodeBB was a spark in my eye. Well deserved :beers:

• FEP-baf5: Administrator Collection

  This is the discussion thread for the draft FEP-baf5: Administrator Collection This FEP introduces a mechanism for discovering the administrators of an ActivityPub instance. It extends the "Group Moderator" pattern from [FEP 1b12][1b12] and the "Application Actor" concept from [FEP 2677][2677] by defining an OrderedCollection of administrators referenced from the instance's application actor. The full draft can be read here.

• Post #2759350

  @mradcliffe@nokoto.org no problem, I'll email you tomorrow about this 😅

• Post #2745571

  Started working on bringing ActivityPub Polls to NodeBB :clipboard: First step is adding in separate handling of the Question object. Right now NodeBB treats it as a "Note-like" and renders it like a post :smile: 50% of the way there... will need to link it to nodebb-plugin-poll... One complication... the plugin ties votes to users. This data isn't reflected over-the-wire in AP, only the aggregate voter counts are shared :thinking_face: [...] https://github.com/NodeBB/nodebb...

• Re: @peertube/http-signature

  Thanks @Chocobozzz@framapiaf.org for the explanation. It does seem like the library is still usable. In a separate thread, @mradcliffe@nokoto.org mentioned that he had a PR/branch that introduced RFC 9421 support: https://nokoto.org/user/3/replies/317 It looks like you're the maintainer... would you be open to having that merged if someone (aka me) implements and tests it?

• Question re: Origin Based Security Model (FEP-fe34)

  @trwnh@mastodon.social ...! That sounds like a bug. They all came in after you mentioned the category.

• Post #2720650

  @airwhale@beige.party I was contractor to a team where we had to assign story points based on vibes. The PM took great pains to tell us story points are unitless and did not have parallels to effort, hours, etc. It was... something.

• Question re: Origin Based Security Model (FEP-fe34)

  I received a security vulnerability report regarding NodeBB's handling of Update and Delete activities. tl;dr NodeBB implementes FEP fe34, and treats Update and Delete activities as valid if the activity's actor and the object's attributedTo differ but the origins are identical. e.g. @alice@example.org is allowed to federate Delete(Note) on @bob@example.org's Note. The origin-based security model allows for moderator-style actions (third-party post editing and deletions) in t...

• Post #2715937

  @reiver@mastodon.social hmm, I don't much mind the "type": "Hashtag" bit. Additional specificity is helpful in the long-run I think. For example, tag contains hashtags, but it also contains mentions, "type": "Mention", so that actually makes sense. Additional stuff that falls under the rather general name "tag" could also fit. Tagging a location, tagging an Event, etc. This might also be what @evan was talking about, I didn't click...

• Post #2715840

  @Shini92@mas.to hah that's fair, different use cases for different people. I suppose many would find it beneficial. For me running a smaller project, this stuff is overkill. I wonder if there's a toggle to turn it off.

• Multiple handles for Activity Intents

  @benpate@mastodon.social said: But yeah, let’s add that into 3b86 as well. What kinds of parameters would you want to pass? Or, would you just want to write a PR? No, I think we'd want to KISS. If you upvote something with your fediverse account, and it doesn't "show" on the site that you upvoted, I think that's ok. The "you're exactly right" thing was an LLM joke :laughing: Okay. One-way 3b86 support is pushed to activitypub.space. Excuse the occasio...

• Multiple handles for Activity Intents

  @benpate@mastodon.social "You’re exactly right" triggered :scream: I think it's wise to be hesitant about it. I think a Create intent with inReplyTo does already mean "Reply", so right now I don't see any reason to introduce a new intent. I had a similar thought about unvoting, which is something NodeBB does but isn't captured by ActivityStreams. We had to map it to Undo(Vote). So I was wondering if Undo would make sense in 3b86, but the Undo Intent already ex...

• Re: @peertube/http-signature

  @Chocobozzz@framapiaf.org I have a question for you... I'm seeing in Are we HS2019 yet? that Peertube and Misskey both use your package: @peertube/http-signature NodeBB currently rolls its own cavage-12 support but and I did some preliminary research into updating to the latest HTTP Signatures draft, but quickly got overwhelmed. For a variety of reasons, but mainly to avoid NIH, I'd consider switching to a dependency. My question is: does your library support verification for non-h...

• Xeiaso blog: Amazonbot is finally respecting robots.txt

  About time! One down, twenty more to go (give or take 1000) https://xeiaso.net/notes/2026/amazonbot-respecting-robots-txt/ @cadey@pony.social does this mean default bot policy will now let them through? Neat.