Email or username:

Password:

Forgot your password?
183 posts total
silverpill
Please boost if your immediate circle contains fediverse developers outside of Mastodon.

I'm trying to determine the scope of support for the Mastodon's platform "Move Account" activity across the fediverse. We intend to use this in the relatively near future to convert all of the streams repository's ActivityPub facing accounts to nomadic digital identities - without losing all of our ActivityPub friends in the process.

I'm certain we'll find a number of fediverse projects that don't support this activity and will require manual re-friending. If you have knowledge of any platforms which don't - please reply with the platform name so that this procedure is well documented and we don't have a lot of surprises and missing friends.  Thanks.
Please boost if your immediate circle contains fediverse developers outside of Mastodon.

I'm trying to determine the scope of support for the Mastodon's platform "Move Account" activity across the fediverse. We intend to use this in the relatively near future to convert all of the streams repository's ActivityPub facing accounts to nomadic digital identities - without losing all of our ActivityPub...
silverpill

Welcome @nomad, the first ever FEP-ef61 + FEP-ae97 actor.

It doesn't have S2S inbox yet, but it has C2S outbox and was created from a client. The client controls the identity key, can send signed messages to local users, and receive messages from them. I published the code here: https://codeberg.org/silverpill/fep-ae97-client

FEP-ae97 clients are not difficult to build, and I invite everyone to do so. C2S protocol is identical to S2S protocol, except you send activities to a local outbox instead of a remote inbox, and you pull activities from local inbox instead of listening for them online. The development version of Mitra already has necessary endpoints. FEP-ae97 spec needs to be updated though, I will do that soon.

#fep_ef61

Welcome @nomad, the first ever FEP-ef61 + FEP-ae97 actor.

It doesn't have S2S inbox yet, but it has C2S outbox and was created from a client. The client controls the identity key, can send signed messages to local users, and receive messages from them. I published the code here: https://codeberg.org/silverpill/fep-ae97-client

silverpill

It was discovered that mention of @nomad caused many servers to reject the whole message, because the Mention tag contained a raw 'ap' URL and not a compatible HTTP URL. Mastodon, Pleroma, probably many others too. This has been fixed

silverpill

Version 0.10.0 of #Fedify, an #ActivityPub server framework, has been released! Starting with this release, Fedify, previously distributed under AGPL 3.0, is now distributed under the MIT License to encourage wider adoption. Here are the major changes:

• In addition to RSA-PKCS#1-v1.5, Fedify now supports Ed25519 for signing and verifying the activities.
• FEP-521a: Multiple key pairs can now be registered for an actor.
• FEP-8b32: Implemented Object Integrity Proofs.
• Added Arrive and Question classes.

#fedidev

github.com/dahlia/fedify/relea

Version 0.10.0 of #Fedify, an #ActivityPub server framework, has been released! Starting with this release, Fedify, previously distributed under AGPL 3.0, is now distributed under the MIT License to encourage wider adoption. Here are the major changes:

• In addition to RSA-PKCS#1-v1.5, Fedify now supports Ed25519 for signing and verifying the activities.
• FEP-521a: Multiple key pairs can now be registered for an actor.
• FEP-8b32: Implemented Object Integrity Proofs.
• Added Arrive and Question classes.

silverpill

Ghost will be using the open source Fedify server framework to manage the activitypub bits and pieces of their service.

activitypub.ghost.org/day-4/?r

#FediDev #ActivityPub #Fedify #Ghost

silverpill

The star federation feature is now merged into forgejo and will be part of the next release version :-)
You can check out the PR that contains an overview over the new feature: codeberg.org/forgejo/forgejo/p

We also wrote a 'How To' which explains how to try out this feature: domaindrivenarchitecture.org/p

#forgejo #federation #fediverse

silverpill

Collections in ActivityPub are special, because they are not independent objects, but aggregations of activities. I think FEP-ef61 implementations should not add integrity proofs to them, but treat them as virtual objects whose representations are always server-generated. Re-signing collections and collection pages after every update is not practical.

#fep_ef61

silverpill

As a first step towards adding Object Integrity Proofs (FEP-8b32) to #Fedify, I've made it support #Ed25519 keys. I've also enabled multiple keys to be associated with an actor. For example, if you look at the actor from the Fedify Example Blog (fedify-blog.deno.dev/users/fed), you'll see that it has two public keys, one for RSA and one for Ed25519.

You can try it out in version 0.10.0-dev.190+4dffb89a.

jsr.io/@fedify/fedify@0.10.0-d

#fedidev #ActivityPub

As a first step towards adding Object Integrity Proofs (FEP-8b32) to #Fedify, I've made it support #Ed25519 keys. I've also enabled multiple keys to be associated with an actor. For example, if you look at the actor from the Fedify Example Blog (fedify-blog.deno.dev/users/fed), you'll see that it has two public keys, one for RSA and one for Ed25519.

silverpill

@hongminhee multi-valued publicKey is not widely supported. FEP-521a proposes another representation that doesn't break compatibility with existing software.

silverpill

The fastest non-Google controlled web rendering engine Servo is trying to compete with only $1.6k funding a month:
phoronix.com/news/Servo-Engine

Yes, they did have an NLNet grant, but that ran out.

If we want an alternative to Blink/Chrome, we need to fund it. This is a project where even a tiny regular amount could yield oversize returns:

servo.org/

#Servo #Rust #Blink #Google #Chrome

silverpill

Let's talk about object ownership in #ActivityPub

I'm writing a new FEP: https://codeberg.org/silverpill/feps/src/branch/main/c7d3/fep-c7d3.md

This topic is rarely discussed, but any server that doesn't implement ownership checks as described in this document is likely vulnerable to impersonation attacks.

silverpill

Google has started the 'Manifest V2 phase-out', which to put it in simple user-friendly words:

Google is phasing out features that make current adblockers work. uBlock Origin will not be able to block ads as effectively as before.

blog.chromium.org/2024/05/mani

Now, how to solve this? Well, there's one answer. Move to Firefox:
mozilla.org/en-US/firefox/new/

Firefox on Android is great as well, and supports adblockers as well!

Google has started the 'Manifest V2 phase-out', which to put it in simple user-friendly words:

Google is phasing out features that make current adblockers work. uBlock Origin will not be able to block ads as effectively as before.

blog.chromium.org/2024/05/mani

Now, how to solve this? Well, there's one answer. Move to Firefox:
mozilla.org/en-US/firefox/new/

Show previous comments
Flux

@thomastospace I did wish there were alternatives to Mozilla (that didn't suck), who seem more than happy to throw money at dumb things (businesses that don't exist, their executives and political speakers who have nothing to do with tech or the web) and being completely reliant on Google for their continued existence.

Oh and their recent privacy problems.

Martin Be

@thomastospace Well.. Except for Firefox people doesn't have very much different alternative choice to move to. Especially on the mobile platforms. I mean in the term of what the most browsers are based on. There are only few available web engines out there. Three if I am not wrong. Sadly we don't have anything else. That's very bad situation for us all.

silverpill

Please review and comment.
By abandoning i2p-zero and encouraging people to install I2P themselves, Monero will be set up for flexible long-term I2P support with very little maintenance burden.
Read more: repo.getmonero.org/monero-proj

Marek

@i2p Does this mean that I cannot currently use Monero via SAM with Java I2P or i2pd? Which API does Monero currently use?

silverpill
The FEDERATION.md was just updated and I removed mention of some of the historical hacks which have been since been standardised.  Still a couple of rough edges, but I've got a lot going on at the moment.  Look in the dev branch of the streams repository for the latest:

https://codeberg.org/streams/streams/src/branch/dev/FEDERATION.md
silverpill

Merged: https://git.pleroma.social/pleroma/pleroma/-/merge_requests/3654

>implementation of an upload system for attachments using IPFS.

Nowadays I think #IPFS is not the right choice (see FEP-ef61 for a better solution), but nevertheless, it is good that this topic is getting more attention

silverpill

If only there was a way to integrate peer to peer payments into federated social media without relying on Stripe and Google... Maybe someday it will be discovered!

https://mastodon.social/users/dansup/statuses/112489844955494674

silverpill

#Mitra v2.19.0
https://codeberg.org/silverpill/mitra/releases/tag/v2.19.0
https://codeberg.org/silverpill/mitra-web/releases/tag/v2.19.0

- Better support for Internationalized Domain Names.
- Custom emojis can be added by providing name and URL (using add-emoji command).

silverpill

ActivityConnect breaking change: identifiers of bridged objects are different now. They were percent-encoded but the set of allowed characters was not correct, and that has been fixed.

I doubt that anyone else is using it, but just in case, I recommend un-following all bridged actors and deleting them from local cache.

Go Up