Home | Notifications | New Note | Local | Federated | Search | Logout
fedicat@fedicat@pc.cafe
The official account for the Fedicat fediverse iOS client available on TestFlight. I try to include other fediverse stuff to keep it interesting.
the website: https://fedicat.com/
daily builds on tesflight: https://testflight.apple.com/join/b6GatWTY
some code on codeberg: https://codeberg.org/technicat/fedicat
me, myself, and I: https://technicat.com/
Joined: 2026-04-16 05:05:56
117 notes, 1 following, 1 followers
fedicat@fedicat@pc.cafe (2026-05-20 02:42:00)
there should be a fediverse event called fedimania
fedicat@fedicat@pc.cafe boosted:
@Yehuda@turtleisland.social (2026-05-20 02:38:52)
Hooray!
https://TurtleIsland.social is now listed at Join Mastodon under the new #BIPOC topic - #Mastodon rocks!
#Native #Indigenous #BIPOC #TurtleIsland
>>---> https://joinmastodon.org/servers
---Attachments---
image: https://cdn.masto.host/turtleislandsocial/media_attachments/files/116/602/439/262/496/659/original/c4e9e792e938bcae.png
fedicat@fedicat@pc.cafe (2026-05-20 02:29:02)
https://joinmastodon.org/trademark
fedicat@fedicat@pc.cafe boosted:
@MastodonEngineering@mastodon.social (2026-05-20 02:25:39)
📬 Trunk & Tidbits: 04-2026 is now live! Featuring:
- What we’re building for server admins thanks to @sovtechfund
- @imanijoy did a demo, and other great demos at @fediforum
- New releases and what’s next from product
#MastoDev #MastoAdmin #Mastodon #TrunkAndTidbits
https://blog.joinmastodon.org/2026/05/trunk-tidbits-april-2026/
fedicat@fedicat@pc.cafe boosted:
@sabrinkmann@hachyderm.io (2026-05-20 01:58:29)
It took some night tinkering around, but I built a proof of concept with @fedify, with 1) a shop software that creates and sends offers/products, 2) to the following marketplaces. The marketplace aggregates these offers and all via activitipub, so in the fediverse.
You can find the proof of concept here: https://marketplace.playground.54gradsoftware.de/.
If you go to a shop software, you also can add products, and you should see in the marketplace the new product: https://shop-postcards.playground.54gradsoftware.de/
Every hour there is a reset in the db.
This is just a super simple example with no CSS and no auth, but just an example to test the new fedify vocabulary.
You can find more information in the repo: https://codeberg.org/54GradSoftware/economiverse
#fep0837
fedicat@fedicat@pc.cafe boosted:
@mosgaard@uddannelse.social (2026-05-19 20:25:28)
Language-question for releasing music:
Most of my old recordings are with danish lyrics, and I would like to share them online like i did on @mirlo with my childrens music already.
It seems odd to upload danish music to an english platform and use an english description, when the lyrics are only danish.
My Faircamp site is all danish, so it's not that useable by people not speaking danish.
People writing music with lyrics in other languages, what do you do?
Listeners, what do you think?
fedicat@fedicat@pc.cafe boosted:
@cheeaun@mastodon.social (2026-05-19 21:37:19)
@nileane #PhanpySocialDev has this now
---Attachments---
image: https://files.mastodon.social/media_attachments/files/116/601/273/507/308/327/original/75860855c5b2f52a.png
fedicat@fedicat@pc.cafe boosted:
@stegodon@stegodon.social (2026-05-20 01:15:45)
🦣 Stegodon v1.8.5 is here! This maintenance release brings updated dependencies for improved stability and security. Keep tooting from your terminal! #stegodon #fediverse #tui #golang
fedicat@fedicat@pc.cafe boosted:
@stefan@stefanbohacek.online (2026-05-20 01:09:46)
RE: https://sunbeam.city/@autonomic/116602054187133604
Bonfire really is cool! If you're looking to onboard an organization or your community into the fediverse, definitely check them out!
https://bonfirenetworks.org/apps/
fedicat@fedicat@pc.cafe boosted:
@FediVideo@social.growyourown.services (2026-05-19 23:08:15)
BLAG makes videos about sign painting, typefaces and related topics. You can follow their account at:
➡️ @sam
Don't worry if the account looks blank to you, it just means no one from your server has followed it yet. Follow it and the videos will start gradually showing up on your server too 🙂
If it does look blank, you can browse all their videos so far on their PeerTube page at https://video.bl.ag/a/sam/videos
#FeaturedPeerTube #SignPainting #Lettering #PeerTube
fedicat@fedicat@pc.cafe boosted:
@nathanlovestrees@disabled.social (2026-05-19 10:20:54)
mastodon’s best use is for popping in to share all the stuff you did while you weren’t on mastodon
fedicat@fedicat@pc.cafe boosted:
@Auster@thebrainbin.org (2026-05-17 04:08:32)
Are people backing up the fediverse?
#fediverse
Most fediverse platforms are run by common users, not entities with either monetary, commercial, political or geopolitical interests to keep the platforms alive. But that also means the instances could disappear when money gets tight, if the interest dies out, if there are technical difficulties that are hard to deal with, etc.
This brings me to the opening question, are people taking at least what they find relevant from the fediverse, and backing it up on web archival services, or at least backing up locally as screenshots, HTML/MHTML files, etc., so if their instance or the propagated contents die, at least there is a register the content ever existed?
@fediverse
fedicat@fedicat@pc.cafe boosted:
@hollo@hollo.social (2026-05-19 12:00:52)
Hollo security updates: 0.7.16 and 0.8.5
If you run Hollo, update to a patched release now. Hollo 0.7.16 and 0.8.5 fix several security issues in ActivityPub federation, the web admin UI, OAuth, and the transitive fast-xml-parser dependency.
On the federation side, three inbox handlers were missing authorization checks. Any remote actor could send a Delete to remove any cached post by IRI, an Update to overwrite or first-materialize a cached post under another actor's name, or a cross-origin Announce whose attacker-controlled embedded body materialized as someone else's post. The checks now differ by activity type. A Delete is ignored unless the deleter's origin matches the cached post author's origin. An Update is ignored unless the activity actor, the embedded object's id, and its attributedTo all share an origin. For Announce, Hollo no longer trusts attacker-supplied embedded content to create or overwrite the original post: unknown cross-origin objects are fetched from their canonical URL, and any newly cached object must have matching id and attributedTo origins. Separately, Follow, Like, EmojiReact, and Announce from a blocked actor were processed normally and still produced notifications; they are now silently dropped at the inbox.
On the web admin side, login and OTP cookies were set without HttpOnly, SameSite, or Secure, and state-changing forms had no Origin or Sec-Fetch-Site check. A single reflected XSS could exfiltrate the admin session, and a malicious page could submit a hidden cross-site form to disable 2FA, delete an account, or silently authorize a rogue OAuth application. The affected dashboard routes and POST /oauth/authorize now run Hono's CSRF middleware, and the login and OTP cookies now carry those attributes.
The transitive fast-xml-parser (carried in via the AWS SDK that backs S3 storage) is now pinned to patched versions, closing one critical and several high-severity advisories. Hollo also now uses constant-time comparison fo
fedicat@fedicat@pc.cafe boosted:
@reiver@mastodon.social (2026-05-19 07:14:05)
RE: https://mastodon.social/@reiver/116597841178183282
There is also the other question of — would the resume / CV be JSON-LD.
On one hand, if it was in JSON-LD, it would make it machine-legible similar to ActivityPub.
On the other hand, I don't think anyone is going to write JSON-LD (especially HTML embedded in a JSON string value) by hand. But, I do think some people will want to write their resume by hand.
It feels like user-experience is fighting with JSON-LD based machine-legibility.
#ActivityPub #ActivityStreams #FediDev #ProToGo #JSONLD
fedicat@fedicat@pc.cafe (2026-05-19 06:50:14)
tired of looking at blue links, trying underlines
---Attachments---
image: https://cdn.masto.host/pccafe/media_attachments/files/116/597/785/393/091/986/original/f236a5b6d1ed60e1.jpeg
fedicat@fedicat@pc.cafe boosted:
@admin@fedimeteo.com (2026-05-15 00:17:41)
FediMeteo now covers Indonesia
FediMeteo is expanding again. Indonesia is now covered, with dedicated Fediverse weather accounts for cities and places across the country.
Each account publishes local weather updates and forecasts, and can be followed from Mastodon, snac, Akkoma, GoToSocial, Misskey, Mitra, and other ActivityPub-compatible platforms.
To follow a city, search for its Fediverse username from your instance.
FediMeteo kini mencakup Indonesia
FediMeteo kembali berkembang. Indonesia kini telah masuk dalam cakupan FediMeteo, dengan akun cuaca Fediverse khusus untuk kota-kota dan berbagai tempat di seluruh negeri.
Setiap akun menerbitkan pembaruan cuaca lokal dan prakiraan cuaca. Akun-akun ini dapat diikuti dari Mastodon, snac, Akkoma, Misskey, dan platform lain yang kompatibel dengan ActivityPub.
Untuk mengikuti sebuah kota, cari nama pengguna Fediverse kota tersebut dari instance Anda.
Covered cities / Kota yang dicakup
Jakarta - @jakarta@id.fedimeteo.com
Serang - @serang@id.fedimeteo.com
Cilegon - @cilegon@id.fedimeteo.com
Tangerang - @tangerang@id.fedimeteo.com
Tangerang Selatan - @tangerang_selatan@id.fedimeteo.com
Bogor - @bogor@id.fedimeteo.com
Depok - @depok@id.fedimeteo.com
Bekasi - @bekasi@id.fedimeteo.com
Karawang - @karawang@id.fedimeteo.com
Subang - @subang@id.fedimeteo.com
Bandung - @bandung@id.fedimeteo.com
Cimahi - @cimahi@id.fedimeteo.com
Lembang - @lembang@id.fedimeteo.com
Sukabumi - @sukabumi@id.fedimeteo.com
Cianjur - @cianjur@id.fedimeteo.com
Garut - @garut@id.fedimeteo.com
Tasikmalaya - @tasikmalaya@id.fedimeteo.com
Banjar - @banjar@id.fedimeteo.com
Cirebon - @cirebon@id.fedimeteo.com
Indramayu - @indramayu@id.fedimeteo.com
Pangandaran - @pangandaran@id.fedimeteo.com
Semarang - @semarang@id.fedimeteo.com
Surakarta - @surakarta@id.fedimeteo.com
Salatiga - @salatiga@id.fedimeteo.com
Magelang - @magelang@id.fedimeteo.com
Tegal - @tegal@id.fedimeteo.com
Pekalongan - @pekalongan@id.fedimeteo.com
Purwokerto - @purwokerto@id.fedimeteo.co
fedicat@fedicat@pc.cafe boosted:
@dansup@mastodon.social (2018-05-26 13:38:38)
You know whats awesome about the fediverse?
Developers working together. This isn't a competition. Everyone wins.
fedicat@fedicat@pc.cafe boosted:
@dansup@mastodon.social (2026-05-19 00:47:24)
Dansup + FediCon + Keynote ✨
I'm thrilled to announce that I will be giving a keynote at FediCon for the second year in a row!
I'm so honoured to have this opportunity again, special thanks to @reiver
More details soon!
#FediCon #FediCon2026 #FediCon26
fedicat@fedicat@pc.cafe boosted:
@stefan@stefanbohacek.online (2026-05-18 23:58:29)
And Mastodon just recently celebrated its first decade.
https://stefanbohacek.online/@stefan/116238705583262747
We're getting old! It's nice, though.
fedicat@fedicat@pc.cafe boosted:
@dev@mediaformat.org (2026-05-18 09:15:53)
Posting from c2s
The WordPress ActivityPub plugin quietly released an amazing feature in version 8.1.0 back in April.
After a fair bit of testing, with various developers, including yours truly, Matthias @pfefferle added support for the #ActivityPub API.
https://activitypub.blog/2026/04/22/8-1-0-by-the-numbers/
This very post is written using a custom client I’m building 😉
fedicat@fedicat@pc.cafe boosted:
@blag@typo.social (2026-05-18 15:28:14)
Does anyone know how to allow the quoting of posts from @peertube?
I just tried to quote this post from my own PeerTube instance, but it says that's not permitted:
https://video.bl.ag/w/c1L6jN3AiQg9dCNoKgC5Fz
cc @FediTips
#PeerTube #QuotePost #AskFedi #FediTips
fedicat@fedicat@pc.cafe boosted:
@siliconsjang@siliconbeest.sjang.dev (2026-05-18 10:17:08)
Again, this service is to develop and test siliconbeest.
Soon, maybe in few days or something, I am going to make a MAIN siliconbeest service with new domain, (and yes, keep this service up and running) so you can use this service but also keep on eye on the new domain!
fedicat@fedicat@pc.cafe boosted:
@evan@cosocial.ca (2026-05-18 05:01:03)
For the #ActivityPubAPI, we need a profile of OAuth to use for accessing the actor's data. There's a suggested flow here:
https://github.com/swicg/activitypub-api/blob/main/OAuth%202.0%20for%20ActivityPub%20Activity%20Diagram.png
There's an example client here:
https://swicg.github.io/activitypub-api/examples/oauth/index.html
It tries discovery via RFC 8414 or getting the endpoints straight from the actor.
It then provisions a client ID using CIMD, FEP d8c2, or DCR (in that order).
It then tries to do an authorization code flow.
I'm interested in seeing it tested with more ActivityPub API servers.
#ActivityPub
fedicat@fedicat@pc.cafe boosted:
@liaizon@social.wake.st (2026-05-18 04:45:04)
The founder and three senior team members of Zulip are joining Anthropic:
Tim Abbott, Alya Abbott, Greg Price, and Alex Vandiver
And they are "donating the company" to a new non-profit #Zulip Foundation:
with the first three above as the board (plus Josh Triplett) and "Interim President" Kim Vandiver (notice the same last name as the other person who's joining Anthropic)
https://blog.zulip.com/2026/05/15/announcing-zulip-foundation/
via @mary_ext
fedicat@fedicat@pc.cafe boosted:
@FediFollows@social.growyourown.services (2026-05-18 04:52:39)
#Sport / #Sports accounts to follow:
🌐 GENERAL SPORT
@espn
@NBCSports
@SportingNews
@usatodaysports
@Yardbarker
@PlayersTribune
@BleacherNation
@SPOXcom (in German)
@Gazzetta (in Italian)
@RivistaUndici (in Italian)
@SportBuzz (in Portuguese)
@MDoficial (in Spanish)
@SPORTes2019 (in Spanish)
🎨 SPORT ART
@AlCreed
💸 SPORT POLITICS
@feed
🧮 SPORT DATA
@kpfssport
🏈 AMERICAN FOOTBALL
@index@duval22.com
@index@2stripescpd.com
@index@thebroncosblitz.com
@nflscores
@nfl_de (in German)
🇦🇺 AUSTRALIAN FOOTBALL
@AusFbAssocNA
🧵 1/5
fedicat@fedicat@pc.cafe boosted:
@annika@xoxo.zone (2026-05-17 17:46:26)
ok the custom hashtag icons in @TangerineUI are very cute :blobcatheart:
fedicat@fedicat@pc.cafe boosted:
@moshidon@floss.social (2026-05-17 23:04:43)
Yall, I am happy to say that quoting is now finally properly supported in Moshidon.
What does this mean?
You can now make quotes, quote as another account, and properly deal with them in general.
Now the only major thing to fix is the auto updater, which remains broken.
fedicat@fedicat@pc.cafe boosted:
@spraoi@tooting.ch (2026-05-18 00:44:55)
@evan Is there a descent test suite for the ActivityPub protocol right now?
I'm trying to debug federation between https://jura-biel-seeland.fedievents.ch/ and https://mobilisons.ch and https://tooting.ch, so two Mobilizon instances and one Mastodon instance.
I've found a couple of things, but they seem to have been abandonded for the most part. Maybe I'm not looking in the right place. Of course, I also have your AP example, but it really seems more like an example than a test tool.
fedicat@fedicat@pc.cafe (2026-05-18 02:15:28)
just noticed I broke some math rendering, fixed now
---Attachments---
image: https://cdn.masto.host/pccafe/media_attachments/files/116/591/042/779/594/093/original/425e784b3fde3769.jpeg
fedicat@fedicat@pc.cafe boosted:
@ozoned@btfree.social (2026-05-17 05:34:08)
I talk about the #Fediverse whenever I get a chance. The trick is being receptive, not pushy. Let them try it in their own time.
Only saying this because I now have two long time friends actively participating in the Fediverse where 6 months ago they had no interest.
One was even using an app with AP integration and didn't even know it.
Anecdotal? Absolutely! But our reality is built on our perceptions.
Very excited by this! 😄
Older Notes