Home | Notifications | New Note | Local | Federated | Search | Logout
Federated Timeline
naturaleza24@naturaleza24@mast.lat (2026-06-11 02:52:20)
#fotografie #nature #photography
---Attachments---
image: https://media.mast.lat/mast/media_attachments/files/116/727/081/931/283/369/original/16ac227891f4f75a.png
Phantasm@phnt@fluffytail.org (2026-06-11 02:22:45)
Didn't expect a dedicated foxes column to go so hard.
image.png
---Attachments---
image: https://upload.fluffytail.org/media/f7/ea/94/f7ea94d3fb5a93fec085287ee6bd8b07ebef4f2b9575620d2092f2e6794cf2bb.png?name=image.png
arce@arce (2026-06-11 02:20:01)
clouds disperse, dissolve
blades of grass look up
my feet get still
Reply to @phnt@fluffytail.org
silverpill@silverpill@mitra.social (2026-06-11 02:19:52)
@phnt Lol. Maybe it will be included in ActivityPub 1.1 at some point around the year 2040.
fedicat@fedicat@pc.cafe boosted:
@silverpill@mitra.social (2026-06-11 01:39:54)
I tried to implement the "standard" ActivityPub #C2S API in Mitra.
It's an interesting exercise, but I am not sure if I'll ever enable it by default. Permitting clients to publish arbitrary JSON is equivalent to allowing them to publish unsanitized HTML. This may be acceptable if you're an admin on a single-user instance, but it is a really stupid thing to do when there are multiple users.
Although it might be possible to validate activities using strict JSON schemas, that would require a lot of work. You may as well create your own API that will have none of those issues.
FEP-ae97 API is also tricky to implement, but at least it offers a genuine advantage over regular REST APIs: nomadic identity. Also, its security is more straightforward because portable actors and objects are namespaced by DIDs.
Reply to @silverpill@mitra.social
Phantasm@phnt@fluffytail.org (2026-06-11 02:16:59)
@silverpill The joke is that C2S Announces aren't defined in the spec.
Reply to @phnt@fluffytail.org
silverpill@silverpill@mitra.social (2026-06-11 02:16:06)
@phnt I only implemented C2S Likes so far. What's the deal with Announces?
The biggest problem with C2S is that objects and activities can be embedded in other activities. I already had some generic validators written for FEP-ae97 API, but classic C2S introduces a new challenge: IDs. It seems that the safest option is for all id properties with local origin to be recursively removed and then re-assigned.
fedicat@fedicat@pc.cafe boosted:
@technicat@universeodon.com (2026-06-11 02:11:58)
social media apps should have breathalyzer tests
technicat@technicat@universeodon.com (2026-06-11 02:11:58)
social media apps should have breathalyzer tests
Coro@Coro@mstdn.maud.io (2026-06-11 02:08:56)
> オルタナティブ歴史サンドボックスゲーム
Pax Historia
https://www.paxhistoria.co/
Reply to @silverpill@mitra.social
Phantasm@phnt@fluffytail.org (2026-06-11 02:02:32)
@silverpill
>Although it might be possible to validate activities using strict JSON schemas, that would require a lot of work. You may as well create your own API that will have none of those issues.
This is how Pleroma does it. Posts made via C2S all go through the object validators like any other post. Problem is that due to how some things are federated, an object validator made for validating incoming federation might not be sufficient for validating objects for outgoing federation and some additional checks are needed. Which is exactly how the different permission bypasses worked, which led to C2S being disabled by default. I don't think it's worth the added work and maintenance burden.
Also have you implemented C2S Announces ;)?
silverpill@silverpill@mitra.social (2026-06-11 01:39:54)
I tried to implement the "standard" ActivityPub #C2S API in Mitra.
It's an interesting exercise, but I am not sure if I'll ever enable it by default. Permitting clients to publish arbitrary JSON is equivalent to allowing them to publish unsanitized HTML. This may be acceptable if you're an admin on a single-user instance, but it is a really stupid thing to do when there are multiple users.
Although it might be possible to validate activities using strict JSON schemas, that would require a lot of work. You may as well create your own API that will have none of those issues.
FEP-ae97 API is also tricky to implement, but at least it offers a genuine advantage over regular REST APIs: nomadic identity. Also, its security is more straightforward because portable actors and objects are namespaced by DIDs.
Reply to @Hierarchy@mastodon.social
Gregory@grishka@mastodon.social (2026-06-11 01:03:31)
@Hierarchy @dansup in simple words, it's the type of website that keeps showing you spinners after your browser's UI tells you it's done loading. Instead of generating HTML on the server, it makes API requests from your browser and generates the page on your device. Because an SPA does more work than an old-school server-side-rendered dynamic website, it feels much slower, with no way around that.
Mastodon is an SPA as well.
fedicat@fedicat@pc.cafe boosted:
@mkljczk@pl.fediverse.pl (2026-06-11 00:49:48)
anyone already tried the nicolium deck? any opinions? it's available on the develop branch under /deck, so you can try it on https://pl.mkljczk.pl/deck (and you can add a link to the sidebar in settings)
i’d love to get some feedback
fedicat@fedicat@pc.cafe boosted:
@mitra@mitra.social (2026-06-10 23:29:16)
#Mitra v5.5.0
https://codeberg.org/silverpill/mitra/releases/tag/v5.5.0
https://codeberg.org/silverpill/mitra-web/releases/tag/v5.5.0
- List of followed groups, group timelines and the ability to post to a group. The list of groups can be accessed from the menu on your profile page.
- "Load conversation" item was added to the post menu (admin only). Unlike "Load replies", it loads an entire thread, not just replies to the selected post.
- Partial support for ActivityPub outbox POST (only Like activities, disabled by default).
nicole mikołajczyk@mkljczk@pl.fediverse.pl (2026-06-11 00:49:48)
anyone already tried the nicolium deck? any opinions? it's available on the develop branch under /deck, so you can try it on https://pl.mkljczk.pl/deck (and you can add a link to the sidebar in settings)
i’d love to get some feedback
Reply to @hos1miya@misskey.0sakana.xyz
:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-06-11 00:12:41)
喉終わるけど
:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-06-11 00:12:19)
日曜、川崎と立川の間に新宿挟めそうでアレ
:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-06-11 00:08:45)
日曜川崎見てみたら自席の両サイド埋まってた
Reply to @hos1miya@misskey.0sakana.xyz
:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-06-11 00:05:00)
平 日 午 前
---Attachments---
image: https://misskey.0sakana.xyz/files/webpublic-4a85b984-c4de-4a50-bc64-c5ed3bbfa460
きんけつ@dem_chobi@misskey.io (2026-06-11 00:04:12)
できた。今後体よくエッチな目に合ってもらうロリ、青葉ちゃんが。
RE: https://misskey.io/notes/anbmqmiefznm0886
---Attachments---
image: https://media.misskeyusercontent.com/io/9d84d976-f7f3-4bd4-88cd-1d33f685f265.webp
:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-06-11 00:04:03)
:meowsurprised:
---Attachments---
image: https://misskey.0sakana.xyz/files/webpublic-61230421-ea8a-4527-bf16-b3ba12045445
Reply to @silverpill@mitra.social
silverpill@silverpill@mitra.social (2026-06-10 23:54:49)
@joe It is now available in the UI, "Load conversation" in the post menu
:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-06-10 23:49:40)
地域の変わり者じゃなくて？
:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-06-10 23:37:09)
かぐやグッズって実質ヤチヨグッズなのでは？
:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-06-10 23:35:52)
Botだからね
:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-06-10 23:29:26)
ヤチヨの絵馬ストラップ、せっかくなら紐も紫が良かった
自分で変えるか…？
---Attachments---
image: https://misskey.0sakana.xyz/files/webpublic-f1d0bb6a-daee-4620-b59c-7eeda9cd7730
Mitra@mitra@mitra.social (2026-06-10 23:29:16)
#Mitra v5.5.0
https://codeberg.org/silverpill/mitra/releases/tag/v5.5.0
https://codeberg.org/silverpill/mitra-web/releases/tag/v5.5.0
- List of followed groups, group timelines and the ability to post to a group. The list of groups can be accessed from the menu on your profile page.
- "Load conversation" item was added to the post menu (admin only). Unlike "Load replies", it loads an entire thread, not just replies to the selected post.
- Partial support for ActivityPub outbox POST (only Like activities, disabled by default).
:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-06-10 23:25:32)
あるのがいけない！あるのがいけない！
---Attachments---
image: https://misskey.0sakana.xyz/files/webpublic-2873fd96-7c0e-4b75-8f14-92d23bdeaa89
:hosimiya_mion::star_stroke:@hos1miya@misskey.0sakana.xyz (2026-06-10 23:19:55)
コンプティークの付録ポスター:kusodeka:すぎる
Older Notes