Hey, what does everyone think about the #fediverse and/or #activitypub alternatives to #facebook, like #Friendica? I think there's something else that's a #facebookAlternative out there too, but I forget the name. I like Mastodon a lot (obviously), but another fedi site, #Lemmy, a #redditalternative, is a little lackluster.
I've been debugging some signature problems with #Pixelfed this evening and just discovered the root cause. Using the param
accessors on a rocket::request::Request
strips the "
characters from the header strings. That causes a verification string from Pixelfed to look like this:
(request-target): post /user/jdt/inbox
host: enigmatick.social
date: Mon, 20 Jan 2025 03:29:29 GMT
digest: SHA-256=tvVdCEGSoxNEj7oVFAP605tc/SddUSK7TvqoI51qAsI=
content-type: application/ld+json; profile=https://www.w3.org/ns/activitystreams
user-agent: (Pixelfed/0.11.9; +https://pixels.jdt.io)
However, Pixelfed signs a string that looks like this:
(request-target): post /user/jdt/inbox
host: enigmatick.social
date: Mon, 20 Jan 2025 03:29:29 GMT
digest: SHA-256=tvVdCEGSoxNEj7oVFAP605tc/SddUSK7TvqoI51qAsI=
content-type: application/ld+json; profile="https://www.w3.org/ns/activitystreams"
user-agent: (Pixelfed/0.11.9; +https://pixels.jdt.io)
Note the content-type
differences. For cryptographic purposes, that's a deal breaker.
I spent some time reading the Pixelfed source code and mocking up the verification routines to finally arrive at that discovery. Adding the double quotes manually allows the verification to be successful.
I'll look up the specifications in a second, but #lazyprogrammer question: is that a problem at Pixelfed or in Rocket? Are HTTP headers supposed to be stripped of double quotes?
#Rust #RustLang #ActivityPub
Is there a #Fediverse equivalent of #SoundCloud yet? And if not, does anyone want to help me build one?
#AskFedi #AskFediverse #SelfHosting #ActivityPub #FederatedSoftware
Came across this bug when trying to follow friends from Pixelfed on Mastodon. This may be a temporary bug, but I can't currently search for Pixelfed users or their posts via URL here on Masto.
For example, searching in Masto for https://pixelfed.social/MntyFrsh or https://pixelfed.social/p/MntyFrsh/782806558053364014 brings up no results.
but...
searching for users and posts from other Masto servers like https://ravenation.club/@mntyfrsh or https://ravenation.club/@mntyfrsh/113819880809063280 works as it should.
#pixelfed #mastodon #fediverse #activitypub
Anyone up for a "pub" crawl? What's in your #fediverse ?
#activitypub #mastodon #pixelfed #loops #lemmee #bookwyrm #peertube
#socialmedia #technology #tech
@magnus919@toot.brandyapple.com @magnus919@fosstodon.org there are some #activitypub design for small scale deployments such as gotosocial https://github.com/superseriousbusiness/gotosocial#oidc-integration or honk https://humungus.tedunangst.com/r/honk
@noupside.bsky.social @zephoria.bsky.social
yes but the #bluesky structure doesn't provide the independence that the fedi does. like you said, if it becomes really important and somebody can mess with it, they will. the web/email model of #ActivityPub is proven, the relays of #ATproto are not.
@magnus919@fosstodon.org Continuing from my personal instance account, which almost no one is likely to see.
I think this also underscores how important it is to make it easier for individuals and small friend groups to run their own instances without having to cosplay as systems engineers.
Mastodon itself is probably too far gone down the geek hole for that to ever happen.
But #ActivityPub is an open protocol. Hopefully someone (more qualified than me) tilts at this windmill.
自分だけのActivityPubを作りたいけど、何から始めれば良いのか分からないですか?Fedifyの公式チュートリアル「自分だけのフェディバースのマイクロブログを作ろう!」を読んでみてください!
자신만의 #ActivityPub 구현을 하고 싶지만, 어디서 시작해야 할지 모르겠나요? #Fedify 공식 튜토리얼인 〈나만의 연합우주 마이크로블로그 만들기〉를 읽고 따라해 보세요!
Want to build your own #ActivityPub implementation, but don't know where to start? Read and follow #Fedify's official tutorial, Creating your own federated microblog, and get started!
Bluesky vs. Mastodon:
character limit: BS 250 ; Mast 500
bots/thirst trap/annoying-marketing follows needing to be blocked: BS constant ; Mast almost never
able to migrate instances: BS promised but not reality at all ; Mast YES, can do
able to easily link up with other Fediverse platforms: BS, no ; Mast YES
George Takei: BS yes ; Mast yes
controlled by a non-profit foundation: BS NO (crypto-bro VC infused already in fact) ; Mast YES
#socialmedia #fediverse #bluesky #activitypub #mastodon