Home | Notifications | New Note | Local | Federated | Search | Logout
Federated Timeline
コシヌケ1040@ksnk@pawoo.net (2026-03-26 22:21:44)
赤の他人に「お前」と言ふ人を見かけたら、関はってはいけない人と判断して予防的にブロックしてゐる。
俺はWebおよびSNSでの健全な言論を妨げる者には容赦しない。
🦉@aaa (2026-03-26 21:27:50)
外を見ると穏やかになれないけれど、寂しくては生きられない。
twitterのタイムラインは外が見えてその上寂しいからだめだ
warabi餅@w4rabimochi@misskey.io boosted:
@LONDOM@misskey.io (2026-03-26 20:39:10)
🌟🌟🌟
---Attachments---
image: https://media.misskeyusercontent.com/io/webpublic-0d8d35c4-32cc-47db-9457-2025cf75cc62.webp?sensitive=true
warabi餅@w4rabimochi@misskey.io (2026-03-26 20:42:33)
:ohuro_hairu::bathtub_oide:
Londom@LONDOM@misskey.io (2026-03-26 20:39:10)
🌟🌟🌟
---Attachments---
image: https://media.misskeyusercontent.com/io/webpublic-0d8d35c4-32cc-47db-9457-2025cf75cc62.webp?sensitive=true
wakest likes your bugs ⁂@liaizon@social.wake.st (2026-03-26 20:35:26)
Slop coded fediverse servers are multiplying I guess we need to start tracking this somewhere!? What happens when there are more AI generated server frameworks then human written ones? The do-ocracy of implementation first protocol inconsistency sorta wins right now but that brakes down when there are more bots making the call then humans
たかし@tak4 (2026-03-26 17:45:49)
今度、昔の記事を読み返して「言ひ過ぎたな」と思ふものには「悪口を含む」みたいな注意書きをつけよう
warabi餅@w4rabimochi@misskey.io (2026-03-26 17:41:23)
:sigo_owa::blob_dance3:
ささきち@ssk_chi@misskey.io (2026-03-26 17:41:07)
縦長の笑った口の形好きなんだよね…
うきた乳業🐮🍼@UkitaMilk@misskey.io (2026-03-26 16:24:56)
Misskey「何かありましたか？」
うきた「Xが逝ったよ…」
諏訪子@suwako@sns.076.moe (2026-03-26 12:42:51)
Mitra、XMPP、及びウェブサイトが全て約何時間オフラインになった
原因：停電
warabi餅@w4rabimochi@misskey.io (2026-03-26 12:15:01)
:ohiruyasumisskey__i::blob_wadaiko:
テレみ✨🔞 :irai_bosyuu_tyuu:@teremi@misskey.io (2026-03-26 10:14:07)
ミクさんに認知された！！！！
---Attachments---
image: https://media.misskeyusercontent.com/io/dee781a2-613a-4b53-9a24-ecddf63ef977.png
🦉@aaa (2026-03-26 09:06:12)
穏やかに。
ジエンP@gientoP@social.mikutter.hachune.net boosted:
@17lifers@hollow.raccoon.quest (2026-03-26 06:01:03)
#hatsunemiku #vocaloid #初音ミク #ミク https://safebooru.donmai.us/posts/11023680 - surprise! 🫶
ささきち@ssk_chi@misskey.io (2026-03-26 08:34:25)
ヨーグルトにバナナと鳥の餌みたいな穀物ときなこ+はちみつかけるとウマい:ai_umai:
ささきち@ssk_chi@misskey.io (2026-03-26 08:25:42)
:ohayoo::murakamisan_teruterubouzu:
川音リオ@KawaneRio@misskey.io (2026-03-26 07:55:00)
令和だ。
古き良き袴羽織等の着物は古着屋に賣り出され、民は皆お洋服お洋靴、洋袴に洋羽織許り。あと幾年號去れば古着屋からすらも着物が消𛀁、愈〻(いよいよ)我が母國の着物は儀式や非日常のみの傳統的衣裝と成り果てるのではないかと憂し思ふ。まぁ、覺𛀁られてゐるだけマシだと乞へ(cope)るのも救ひ手か。
warabi餅@w4rabimochi@misskey.io (2026-03-26 07:04:22)
:ame::murakamisan_teruterubouzu::murakamisan_teruterubouzu::murakamisan_teruterubouzu::murakamisan_teruterubouzu::murakamisan_teruterubouzu:
warabi餅@w4rabimochi@misskey.io (2026-03-26 07:03:49)
:ohayoo:
Reply to @Profpatsch@mastodon.xyz
silverpill@silverpill@mitra.social (2026-03-26 06:31:20)
@Profpatsch @smallcircles @phntWhat hasn’t been considered is the ability of multiple people to speak with “one voice” yet.Imageboards?
There was one that federated using ActivityPub: https://github.com/FChannel0/FChannel-Server
silverpill@silverpill@mitra.social (2026-03-26 06:19:12)
@smallcircles Fediverse is not like email because ActivityPub has many different message types. What kind of client API developers use is irrelevant.
17lifers@17lifers@hollow.raccoon.quest (2026-03-26 06:01:03)
#hatsunemiku #vocaloid #初音ミク #ミク https://safebooru.donmai.us/posts/11023680 - surprise! 🫶
Reply to @stefano@mastodon.bsd.cafe
silverpill@silverpill@mitra.social (2026-03-26 04:42:14)
@stefano @rayslava @mitra If some Mastodon API endpoint or field is missing, please let me know. I'll add it.
Reply to @Profpatsch@mastodon.xyz
silverpill@silverpill@mitra.social (2026-03-26 04:39:41)
@Profpatsch2. Activity-Level Origin Checks
Same-origin is checked rather than exact equality so that servers with multiple actors can sign on behalf of any of their actors — a common legitimate pattern.For incoming activities, consider checking exact equality. See FEP-fe34, section "Signatures":In order to minimize damage in the event of a key compromise or insufficient validation, consumers MUST verify that the signing key has the same owner as the signed object. Consumers MUST also confirm the ownership of the key by verifying a reciprocal claim.This is not strictly necessary, but would help if the origin server does poor job at validating user input.3. Embedded Object Origin Checks
Owner origin: the object's owner (actor for Activity subtypes, attributedTo for Notes/Objects) must be same-origin as the signing actor. Anonymous objects (no owner field) are accepted.In this case I also recommend checking owner ID equality, as a rule of thumb. Because origin servers implementing C2S API may fail to validate all embedded objects (which can be deeply nested).Response body size limitsYou may also need to limit the number of redirects and set a timeout. Some HTTP libraries have bad defaults.
By the way, I collect such recommendations in this guide: https://codeberg.org/ap-next/ap-next/src/branch/main/guide.md#network. Contributions are welcome!
@liaizon
あさなつくね@asanatukune@misskey.io (2026-03-26 01:44:43)
:wipppu:
---Attachments---
image: https://media.misskeyusercontent.com/io/2ca2208d-636b-4867-bc52-043aebc68620.webp?sensitive=true
warabi餅@w4rabimochi@misskey.io (2026-03-25 23:30:42)
:oyasumisskey:
Reply to @Profpatsch@mastodon.xyz
Beady Belle Fanchannel@Profpatsch@mastodon.xyz (2026-03-25 23:20:51)
@liaizon @silverpill I want to write a blog post on this at one point, but I don’t know if I missed anything or misunderstand things.
Reply to @Profpatsch@mastodon.xyz
Beady Belle Fanchannel@Profpatsch@mastodon.xyz (2026-03-25 23:19:29)
@liaizon fwiw I made & deployed some security improvements, the current security mechanisms are documented in https://codeberg.org/Profpatsch/Profpatsch/src/commit/249aa389a2023814b328af8fc795750fd28d995d/users/Profpatsch/activitypub-go/security.md
maybe @silverpill wants to take a look at whether this all sounds sensible?
Reply to @tak4
🦉@aaa (2026-03-25 18:54:15)
出汁に牡蠣味が出ておいしいですよね
Older Notes