Home | Notifications | New Note | Local | Federated | Search | Logout
silverpill@silverpill@mitra.social
Developer of ActivityPub-based micro-blogging and content subscription platform Mitra. I help maintain the FEP repository and write my own FEPs too. Currently working on ActivityPub Next.
Code: https://codeberg.org/silverpill/
Matrix: @silverpill:unredacted.org
XMPP: silverpill@were.chat
$XMR: 48YM8jwJqDkeUvD38vepSXFeMZH1zsjbvGwTTuaNSSq6Q5GyeWaeiheAZUsSmNn72YdyLpw8geb4FL3opZfGbguJLUj8Mi9
XMR subscription: https://mitra.social/@silverpill/subscription
PGP: 0541 49E3 0F91 C6D7 8FFA C49C 955F 5A6E 2123 25F0
OMEMO fingerprint: 689a2fb0ec87a9481fb45cb7d8870da6aeb4d8247bd69a39017701133b901f04
Matrix (backup): @silverpill:poa.st
Joined: 2026-01-05 16:03:27
435 notes, 1 following, 0 followers
Reply to @silverpill@mitra.social
silverpill@silverpill@mitra.social (2026-05-20 04:07:53)
@caohuak @ozoramore_dev My matrix and xmpp clients show a bright thin line.
Reply to @BPFreeSpeech@mastodon.social
silverpill@silverpill@mitra.social (2026-05-20 03:28:49)
@BPFreeSpeech Did you build that platform? Are there plans to open source it? Or make it available to more projects?
@torproject @ooni @OpenArchive @unredacted @securedrop
Reply to @hollo@hollo.social
silverpill@silverpill@mitra.social (2026-05-20 03:22:49)
@hollo
A Delete is ignored unless the deleter's origin matches the cached post author's origin.
For Announce, Hollo no longer trusts attacker-supplied embedded content to create or overwrite the original post:
FEP-fe34 strikes again 🙂
Weren't those scenarios already covered in Fedify? https://github.com/fedify-dev/fedify/issues/440#issuecomment-3329739981
silverpill@silverpill@mitra.social boosted:
@torproject@mastodon.social (2026-05-20 00:21:17)
We've been working on a new way to fund internet freedom. In partnership with Funding the Commons, we are announcing a new participatory funding campaign designed to support critical digital infrastructure at a moment of systemic funding instability. Find out more here and join us in support! https://blog.torproject.org/fund-internet-freedom/
#FundInternetFreedom
---Attachments---
image: https://files.mastodon.social/media_attachments/files/116/601/915/598/936/818/original/e6527d14d587c3d9.png
Reply to @torproject@mastodon.social
silverpill@silverpill@mitra.social (2026-05-20 01:39:47)
@torproject Gitcoin meets Monero.
Good job.
Reply to @mradcliffe@nokoto.org
silverpill@silverpill@mitra.social (2026-05-19 23:00:39)
@mradcliffe I've sent a Like activity.
The server responds with 403 when request contains RFC-9421 signature.
Draft-Cavage version was accepted (202).
Reply to @mradcliffe@nokoto.org
silverpill@silverpill@mitra.social (2026-05-19 20:02:11)
@mradcliffe Does your instance support RFC-9421 verification?
Reply to @liaizon@social.wake.st
silverpill@silverpill@mitra.social (2026-05-19 19:50:35)
@liaizon Cool, I didn't know their 'meta' instance is federated
silverpill@silverpill@mitra.social boosted:
@nogajun@mastodon.social (2026-05-19 17:29:58)
XMPPとActivityPubとのブリッジだそう。XMPPもメッセンジャープロトコルからいろんなものに伸びてるから、こういうのはおもしろいね #activitypub #xmpp
Barbapulpe/xmpp-ap-bridge: XMPP / ActivityPub Bridge to chat between XMPP and the Fediverse.: https://github.com/Barbapulpe/xmpp-ap-bridge
Reply to @light@noc.social
silverpill@silverpill@mitra.social (2026-05-19 19:14:38)
@light I am specifically interested in transports. We have our own data model and authentication/authorization procedures (ActivityPub + FEP-ef61), the missing component is P2P networking.
Basically, I want to send activities to peers directly, without relying on FEP-ef61 gateways, and without leaking IP addresses.
@n0iroh @VeilidNetwork
silverpill@silverpill@mitra.social (2026-05-19 05:43:53)
https://www.iroh.computer/blog/tor-custom-transport
>Use iroh with Tor for anonymous connections
This is an interesting development. I don't want to choose between Tor and I2P, so a higher level p2p networking library that can use both networks simultaneously sounds like a great solution.
@n0iroh Do you plan to implement #I2P custom transport? Or perhaps you know someone who is working on it?
Reply to @trwnh@socialhub.activitypub.rocks
silverpill@silverpill@mitra.social (2026-05-19 03:31:59)
But do you distinguish between "id" as a property vs an id as a property's value? Do you authenticate one but not the other?
I don't understand the question. An object is being authenticated, not its id. I mean this procedure described in FEP-fe34:
https://codeberg.org/fediverse/fep/src/branch/main/fep/fe34/fep-fe34.md#fetching-from-an-origin
And if there isn't an AS2 representation do you conclude it's not authentic somehow?
Non-AS(AP) representation would not be a part of protocol. It is neither authentic nor unauthentic, it is an external resource.
Reply to @mkljczk@pl.fediverse.pl
silverpill@silverpill@mitra.social (2026-05-19 03:13:21)
@mkljczk I miss the times when mining monero in browser was considered a cool way to support website author.
Reply to @liaizon@social.wake.st
silverpill@silverpill@mitra.social (2026-05-19 03:10:54)
@liaizon And before that they bought Bun. Anthropic is a shit-test for open source projects.
Reply to @dmathieu@fosstodon.org
silverpill@silverpill@mitra.social (2026-05-19 02:30:41)
@dmathieu @mariusor Thank you, I successfully followed the actor.
Reply to @reiver@mastodon.social
silverpill@silverpill@mitra.social (2026-05-18 03:57:12)
@reiver There is nothing new. All kinds of decentralized social networks have been tried in 2010s, the clear winners are Fediverse and SSB. What happens if you try to combine the two? FEP-ef61
Reply to @Tak@gush.taks.garden
silverpill@silverpill@mitra.social (2026-05-18 03:20:02)
@Tak
rfc 9421
Would you like to do some tests? I've sent a request to your inbox with an RFC-9421 signature, the server is responding with 500 Internal server error.
Reply to @petitminion@socialhub.activitypub.rocks
silverpill@silverpill@mitra.social (2026-05-18 02:32:38)
absolute or relative identifiers
I think all identifiers should be absolute URIs. If we are talking about actor and collection IDs, ActivityPub requires them to be "publicly dereferencable URIs": https://www.w3.org/TR/activitypub/#obj-id
Relative identifiers are theoretical artifacts of JSON-LD processing that won't be understood by most ActivityPub implementations. The only exception is as:Public, short for https://www.w3.org/ns/activitystreams#Public, but even those are not universally supported.
-----
In the section "Privacy level", the FEP still refers to levels by name (followers and everyone): https://codeberg.org/petitminion/fep/src/commit/95fd73232dd1d8f95e6731ccb4ebbc79c5a2e330/fep/be68/fep-be68.md#privacy-level
Reply to @toddsundsted@epiktistes.com
silverpill@silverpill@mitra.social (2026-05-18 01:58:36)
@toddsundsted @mariusor What kind of interaction you're interested in?
I don't know how Mobilizon works, but you can follow @gancio actors who send Event objects. The object structure is similar to a usual Note.
@liaizon
Reply to @phnt@fluffytail.org
silverpill@silverpill@mitra.social (2026-05-17 21:10:42)
@phnt
>lightweight alternative
Like what, JSON?
Reply to @m0xEE@breloma.m0xee.net
silverpill@silverpill@mitra.social (2026-05-17 20:49:52)
@m0xEE @yggverse Unlike ATProto, Nostr was created by independent developers. Jack Dorsey started promoting it several years ago, organizing conferences and funding various projects. This continues to that day, for example recently he bought the Vine video service and paid people to rebuild it on Nostr:
https://techcrunch.com/2025/11/12/jack-dorsey-funds-divine-a-vine-reboot-that-includes-vines-video-archive/
Reply to @yggverse@mastodon.social
silverpill@silverpill@mitra.social (2026-05-17 20:27:36)
@yggverse I am developing Mitra Mini nomadic client. It is still in early stages, but it's usable, and there was even a successful experiment in pure peer-to-peer communication recently.
As far as I know, this is the only existing implementation of a client.
My thoughts on Nostr: https://mitra.social/objects/0186982f-b618-d6b8-29f8-f8926a8ff07a
tl;dr: the network architecture favors centralization and everything is controlled by Jack Dorsey and his clients. These predictions have held up pretty well.
The protocol is not bad... But Fediverse is better, bigger and its culture is far more interesting and diverse.
Reply to @dmathieu@fosstodon.org
silverpill@silverpill@mitra.social (2026-05-17 19:50:46)
@dmathieu @dmathieu I need to know what Follow activity is being accepted.
The object.id in Accept was https://mitra.social/users/silverpill#follows/1 but it is not a real ID.
Reply to @slumberingcat@calckey.world
silverpill@silverpill@mitra.social (2026-05-17 19:43:04)
@slumberingcat Quartz looks very promising. I wanted to explore SSGs written in Rust, but will likely switch to a different tool later.
Reply to @dmathieu@fosstodon.org
silverpill@silverpill@mitra.social (2026-05-17 06:57:16)
@dmathieu @dmathieu It sends an Accept activity with a wrong follow request ID.
Accept.object.id is not a real Follow activity ID.
Reply to @light@noc.social
silverpill@silverpill@mitra.social (2026-05-17 06:46:25)
@light Phanpy client has "Catch-Up" page which is an interesting step in the direction of non-chronological feeds. I am thinking about implementing something similar.
Reply to @mariusor@metalhead.club
silverpill@silverpill@mitra.social (2026-05-17 06:37:09)
@mariusor That's possible.
@target-uri is supposed to be an absolute URI. HTTP servers typically re-construct full URI using the Host and other headers. For example, I use this method: https://docs.rs/actix-web/latest/actix_web/dev/struct.ConnectionInfo.html#method.host
Hostname is resolved through the following, in order:
Forwarded header
X-Forwarded-Host header
Host header
request target / URI
configured server hostname
If I don't configure my reverse proxy to set these headers, the full URI will be incorrect, leading to verification failure.
Reply to @caohuak@moon.lonewolf.zone
silverpill@silverpill@mitra.social (2026-05-17 06:28:02)
@caohuak @ozoramore_dev You mean replacing empty space with a more descriptive UI element?
I thought the space is self-explanatory, but maybe I am wrong.
Never seen this feature in other fedi clients.
Reply to @grishka@mastodon.social
silverpill@silverpill@mitra.social (2026-05-17 06:22:01)
@grishka @dansup
>I can imagine a "minimal" server that implements c2s but almost no UX of its own though.
AKA generic ActivityPub server:
https://codeberg.org/fediverse/fep/src/branch/main/fep/fc48/fep-fc48.md
I think it's a cool concept, but nobody knows how well it will work in practice.
Reply to @toddsundsted@epiktistes.com
silverpill@silverpill@mitra.social (2026-05-17 06:02:25)
@toddsundsted It is not final yet, but the author did a good job at raising awareness among developers:
https://event-federation.eu/2025/04/23/progress-on-the-fep-for-event-objects/
Older Notes