Home | Notifications | New Note | Local | Federated | Search | Logout
Federated Timeline
philip@philip@gotosocial.wittamore.fr boosted:
@adele@social.pollux.casa (2026-05-10 22:55:24)
You want to export your timeline, a specific tag, a list of followed accounts... in your pocket for an offline reading ?
#SmolFedi permits it now!
#XteinkX4 #Xteink #KOReader #epub #ebook
demo instance source/install
---Attachments---
image: https://social.pollux.casa/fileserver/01574KDB89ZFE0EB8QWKD4F6F8/attachment/original/01KR92QNG6J0ATF4SSNSDEF1GE.png
Hollo :hollo:@hollo@hollo.social (2026-05-10 23:42:19)
Hollo security updates: 0.7.15 and 0.8.3
If you run Hollo, update to a patched release now. A private network protection bypass in Fedify, the ActivityPub framework Hollo depends on, affects remote document loading. URLs with private IPv4 addresses encoded as IPv4-mapped IPv6 literals, such as http://[::ffff:7f00:1]/, could pass URL validation even though they refer to private or loopback addresses.
Hollo uses Fedify to fetch remote ActivityPub documents and related resources. An attacker who can make your Hollo instance fetch an attacker-controlled URL may be able to bypass the private address checks that are intended to reduce SSRF (Server-Side Request Forgery) risk.
All Hollo versions up to and including 0.7.14 and 0.8.2 are affected. Patched releases are 0.7.15 for the 0.7.x series and 0.8.3 for the 0.8.x series. For full technical details of the underlying vulnerability, see the Fedify security announcement.
For 0.7.x deployments, update to 0.7.15:
docker pull ghcr.io/fedify-dev/hollo:0.7.15
For 0.8.x deployments, update to 0.8.3:
docker pull ghcr.io/fedify-dev/hollo:0.8.3
After pulling the new image, restart your Hollo container. If you deploy from source, pull the corresponding release tag and restart.
Thanks to Changkyun Kim (@me) for the report and responsible disclosure to the Fedify project.
If anything is unclear, ask below.
Reply to @philip@gotosocial.wittamore.fr
tobi is writing bugs :terminal_cursor:@dumpsterqueer@gts.superseriousbusiness.org (2026-05-10 21:30:51)
@philip it'll be included in the next release
Coro@Coro@mstdn.maud.io (2026-05-10 23:25:28)
GitHub のコメントって埋め込み出来るんだ。
Fedify: ActivityPub server framework@fedify@hollo.social (2026-05-10 23:13:33)
Fedify security updates: 1.9.10, 1.10.9, 2.0.16, 2.1.12, and 2.2.1
If you use Fedify, update to a patched release now. A private network protection bypass affects Fedify's remote document loading code. URLs with private IPv4 addresses encoded as IPv4-mapped IPv6 literals, such as http://[::ffff:7f00:1]/, could pass validatePublicUrl() even though they refer to private or loopback addresses.
Fedify uses validatePublicUrl() when fetching remote ActivityPub documents and related resources. An attacker who can make a Fedify server fetch an attacker-controlled URL may be able to bypass the private address checks that are intended to reduce SSRF risk.
All versions up to and including 2.2.0 are affected. Patched releases are 1.9.10, 1.10.9, 2.0.16, 2.1.12, and 2.2.1.
For Fedify 1.x, update @fedify/fedify:
npm update @fedify/fedify
yarn upgrade @fedify/fedify
pnpm update @fedify/fedify
bun update @fedify/fedify
deno update @fedify/fedify
For Fedify 2.x, update both @fedify/fedify and @fedify/vocab-runtime:
npm update @fedify/fedify @fedify/vocab-runtime
yarn upgrade @fedify/fedify @fedify/vocab-runtime
pnpm update @fedify/fedify @fedify/vocab-runtime
bun update @fedify/fedify @fedify/vocab-runtime
deno update @fedify/fedify @fedify/vocab-runtime
After updating, redeploy. If you run other Fedify-based servers, update those too.
Thanks to Changkyun Kim (@me) for the report and responsible disclosure.
If anything is unclear, ask below.
Adële 🐁!@adele@social.pollux.casa (2026-05-10 22:55:24)
You want to export your timeline, a specific tag, a list of followed accounts... in your pocket for an offline reading ?
#SmolFedi permits it now!
#XteinkX4 #Xteink #KOReader #epub #ebook
demo instance source/install
---Attachments---
image: https://social.pollux.casa/fileserver/01574KDB89ZFE0EB8QWKD4F6F8/attachment/original/01KR92QNG6J0ATF4SSNSDEF1GE.png
:meow_bop:ぺこん:miumiuchan_jump:@pekon@misskey.io (2026-05-10 22:39:31)
:meowbaka: #メイドの日
---Attachments---
image: https://media.misskeyusercontent.com/io/6c84aae6-f8f6-4b93-aa57-aa944eda7f3d.webp
Reply to @fedicat@pc.cafe
wakest likes your bugs ⁂@liaizon@social.wake.st (2026-05-10 22:21:14)
@fedicat @cheeaun oh wow your fast! I guess you have the first mobile app to support this feature huh!?
Coro@Coro@mstdn.maud.io (2026-05-10 21:59:30)
そういえば手縫いで刺繍に挑戦したことがあり、地獄でした。(東亜重工のロゴをパーカーに刺繍しようとした)
Reply to @Coro@mstdn.maud.io
Coro@Coro@mstdn.maud.io (2026-05-10 21:58:11)
このシリーズ、実質百合なんじゃないか？
Reply to @dumpsterqueer@gts.superseriousbusiness.org
philip@philip@gotosocial.wittamore.fr (2026-05-10 21:47:36)
@dumpsterqueer
Thanks for the heads up! Returning a heads up for #smolfedi which is currently my favorite gotosocial client.
https://codeberg.org/adele/smolfedi
pixelfed@pixelfed@mastodon.social (2026-05-10 21:28:51)
Did you know Pixelfed supports embeds?
https://dansup.github.io/pixelfed-embed
Michael Kratzenberg 📢@kratzen@berg.mobilecourant.org (2026-05-10 21:10:15)
Nerbo from the Andromedan Galaxy has zero mentions in the Files.
Trump is mentioned every other page.
We're releasing the wrong files.
#AlienFiles #UFOGOV
Michael Kratzenberg 📢@kratzen@berg.mobilecourant.org boosted:
@ProgressivePower@newsie.social (2026-05-10 21:05:12)
When?
---Attachments---
image: https://assets.newsie.social/media_attachments/files/116/550/186/554/241/882/original/d124dc9dc7257c4c.jpg
ProgressivePower@ProgressivePower@newsie.social (2026-05-10 21:05:12)
When?
---Attachments---
image: https://assets.newsie.social/media_attachments/files/116/550/186/554/241/882/original/d124dc9dc7257c4c.jpg
Reply to @cheeaun@mastodon.social
Chee Aun 🤔@cheeaun@mastodon.social (2026-05-10 20:57:40)
the collections page should…. probably render the profiles like Pokémon cards too 😂😂 (very apt for Phanpy too)
---Attachments---
image: https://files.mastodon.social/media_attachments/files/116/550/156/821/399/588/original/caa523eb8583009d.png
philip@philip@gotosocial.wittamore.fr (2026-05-10 19:56:16)
Pretty happy with #gotosocial so far, although having a small standalone instance, I miss the capability to add a #relay like in #snac2 which enhances interactions and visibility. I believe planned for GTS but what I've found so far is a bit vague.
dansup@dansup@mastodon.social (2026-05-10 19:17:11)
I spent 7 years working on Pixelfed almost every day, and in the past 18 months we've went from 200k users to over 1 million!
Some could argue the break after FediCon to build Loops was a mistake, but the fediverse needed a solid short video platform and I didn't want to force that on Pixelfed.
Now this summer belongs to Pixelfed.
Stay tuned, I want to improve the web and mobile apps for the next million or ten million new Pixelfed members 🚀
#Pixelfed
Gabriele Svelto@gabrielesvelto@mas.to (2026-05-10 19:14:09)
I had heard about the CloudFlare job cuts, what I had not realized is that after announcing them the company lost over 23% of its value in one sitting. I guess the trick of announcing job cuts to pump up your stock doesn't work anymore.
---Attachments---
image: https://media.mas.to/media_attachments/files/116/549/735/976/650/705/original/3983c8ccf9914111.png
dansup@dansup@mastodon.social (2026-05-10 19:11:13)
Love the feeling of working on Pixelfed again after taking a break to build Loops.
The community on Pixelfed is straight up goals, so many vibrant photographers from around the world sharing moments we love to see.
The lack of influencers is refreshing.
naturaleza24@naturaleza24@mast.lat (2026-05-10 18:50:40)
#fotografie #nature #photography
---Attachments---
image: https://media.mast.lat/mast/media_attachments/files/116/549/656/436/512/723/original/d4c523da1a503120.png
naturaleza24@naturaleza24@mast.lat (2026-05-10 18:49:32)
#fotografie #nature #photography
---Attachments---
image: https://media.mast.lat/mast/media_attachments/files/116/549/651/904/133/271/original/28f742615a38851e.png
naturaleza24@naturaleza24@mast.lat (2026-05-10 18:47:43)
#fotografie #nature #photography
---Attachments---
image: https://media.mast.lat/mast/media_attachments/files/116/549/645/068/235/251/original/53446cc8b2059be5.png
naturaleza24@naturaleza24@mast.lat (2026-05-10 18:46:00)
#fotografie #nature #photography
---Attachments---
image: https://media.mast.lat/mast/media_attachments/files/116/549/638/236/452/340/original/50e8a58b5e482230.png
naturaleza24@naturaleza24@mast.lat (2026-05-10 18:43:25)
#fotografie #nature #photography
---Attachments---
image: https://media.mast.lat/mast/media_attachments/files/116/549/628/042/295/840/original/d38e30c02b6fa28c.png
naturaleza24@naturaleza24@mast.lat (2026-05-10 18:41:56)
#fotografie #nature #photography
---Attachments---
image: https://media.mast.lat/mast/media_attachments/files/116/549/620/947/433/850/original/78706d57ad6a7597.png
Adële 🐁!@adele@social.pollux.casa boosted:
@Savon_qui_flotte@eldritch.cafe (2026-05-10 02:15:53)
Hello ! Je donne 2 billets de #train (un aller et son retour) :
- de Marne-la-Vallée Chessy à Marseille le 12/05 à 7h22
- de Marseille à Marne-la-Vallée Chessy le 19/05 à 18h27
Merci pour les retoots, ça fera peut-être des heureux·ses et ces places ne seront pas perdues !
Vernissage@vernissage@mastodon.social (2026-05-10 18:05:15)
Today we released a new version of #Vernissage, and I’d like to share a brief look at what’s coming next.
Before the summer holidays, we plan to implement hashtag following and prepare all app strings for translation, then publish them in a translation system so the community can help. During the summer, we’ll focus on push notifications for the iOS app and keep crushing the currently reported bugs. After the holidays, we hope to release multilingual support in both the iOS and Angular apps. 😊
Vernissage@vernissage@mastodon.social (2026-05-10 18:02:24)
Today we released #Vernissage 1.36.0 🎉
The biggest change is support for pinning photos to your user profile, synchronized with other Fediverse platforms that support the "featured" collection. This release also includes smaller fixes, such as better error logging and improved status parsing to HTML with hashtags. The iOS app has been submitted to Apple for review and should be on your phones soon.
Thank you to everyone supporting and helping the project! 💚😊
---Attachments---
image: https://files.mastodon.social/media_attachments/files/116/549/466/446/651/440/original/8e17186bacc846ff.png
image: https://files.mastodon.social/media_attachments/files/116/549/466/759/440/617/original/ff8243f603eea045.png
image: https://files.mastodon.social/media_attachments/files/116/549/467/107/189/393/original/7d82d95a46f3e688.png
image: https://files.mastodon.social/media_attachments/files/116/549/467/499/768/860/original/694e8a30d440a3ca.png
ささきち￤C108 1日目ｰ東イ20a@ssk_chi@misskey.io (2026-05-10 17:17:38)
無事に帰宅:blobcat_dotadota_walk::tadaima:
Older Notes