@julian @trwnh @thisismissem Server operators can read all private messages. Strict ID check is not completely useless, because it might prevent leaks in case of a software bug, but it doesn't provide any additional security guarantees
silverpill@mitra.social
Posts
-
Does the instance actor have special privileges? -
Does the instance actor have special privileges?@julian @crepels @jdp23 @jdp23 It is not special, but it has same origin as person-actor. If you accept origin-based security model, there is little practical difference, and you can grant access to an instance actor or to any other actor on that server.
-
Quoted posts>How that is represented via ActivityPub is probably detailed in some FEP
FEP-e232? I think you can add
content
orsummary
property to FEP-e232 link to represent HTML content of a quote -
Minutes from 3 October 2024 WG Meeting -
@silverpill That'll do - thanks.I'm sure I saw some discussion relating specifically to collections - but maybe it wasn't in an FEP. -
Re: 400e, 7888, and conversation containers@trwnh @mikedev @julian If a relevant authority makes a claim about an object, I have no reason to not believe it. The default assumption is full representation, so if object is signed, or embedded within another object of the same origin, I wouldn't fetch it. Unless it is known to be partial - and that can be indicated by a special property, or can be required by some specification (as FEP-400e does).
-
Re: 400e, 7888, and conversation containers@trwnh @mikedev @julian This object design pattern (partial embeddings) can be used in other situations too. We can use a new property like
partial: true
do indicate partial representations:Partially embedded objects
Sometimes object is not embedded fully and only a few of its properties are included. One example of this practice can be found in FEP-400e which requires objects on a wall to have a target property that contains an “abb…
SocialHub (socialhub.activitypub.rocks)
-
Re: 400e, 7888, and conversation containersContext
helps with identifying thetarget
. When I receive anAdd
activity, I need to know what collection is being modified. Is it afeatured
collection, acontext
, or something else?One solution is to keep an index of all known collections and search through it every time Add is received.
Another solution would require cooperation from producers, but I think it is a bit cleaner: embed partial representation of atarget
and use specific type there, likeContext
, instead ofCollection
. Then, as a consumer, I can simply checktarget.type
instead of searching fortarget.id
in my collection index. -
Re: 400e, 7888, and conversation containers -
Re: 400e, 7888, and conversation containers@julian @erlend_sh Thank you, this is the correct link. The URL in my post leads to AP object, I forgot that Discourse doesn't redirect when you view those in the browser. It also doesn't seem to support Update activities
-
`Update(Note)` quirkpublished
property can exist on activities too. Some implementation already does this but I don't remember which one -
Re: 400e, 7888, and conversation containersThere is a draft of Conversation Containers FEP: https://codeberg.org/silverpill/feps/src/branch/main/171b/fep-171b.md
And I've come up with a plan for FEP-400e and FEP-1b12 convergence: https://socialhub.activitypub.rocks/ap/object/e9b7fb34c4af9291b9b98095e661789d -
@julian@trwnh @jesseplusplus @julian I'm also working on a FEP, it is based on Conversation Containers and FEP-7888: https://codeberg.org/silverpill/feps/src/branch/main/171b/fep-171b.md
Still not sure about outbox and collection-actor thing. I'll try to implement Conversation Containers and obtain an informed opinion
-
Am wondering if it'd make sense to have a dedicated Reply activity, such that a reply becomes Reply(Note) instead of Create(Note)@mikedev draft: https://codeberg.org/silverpill/feps/src/branch/main/171b/fep-171b.md
It is based on the original text, but I added several clarifications, and also some new requirements:
- Compatibility with FEP-7888
- The recommended type of collection isContext
- Using FEP-c7d3 framework for authenticationBut it still should be compatible with your implementation. If it will diverge in the future, I'll pick a different name
-
Relaxing treatment of non-notes by Mastodon@jenniferplusplus @samsethi @julian Pleroma uses
Listen
activities to display "currently listening" status: https://docs-develop.pleroma.social/backend/development/API/pleroma_api/#get-apiv1pleromaaccountsidscrobbles
I think this activity can also be used for counting podcast listeners. -
Pre-Alpha ActivityPub-related bug reports@trwnh @evan @erincandescent @julian +1 for forward chron, that way you can start displaying posts without fetching the whole thread
-
Pre-Alpha ActivityPub-related bug reports@julian I reported this to you because one user asked me by "why I can't discover this NodeBB thread from my instance?". I think this is going to happen quite often across the Fediverse.
Maybe in the future we will figure out how to deal with these collections, but right now this leads to a bad user experience -
Pre-Alpha ActivityPub-related bug reports@julian Another report: when NodeBB generates an
Announce(Create)
activity, the ID ofAnnounce
has wrong origin. Here's an example:{ "@context": "https://www.w3.org/ns/activitystreams", "actor": "https://community.nodebb.org/category/30", "id": "https://mitra.social/objects/01920059-5b7c-203f-fc4e-285ec442c032#activity/announce/1726582718443", "object": ... "type": "Announce" }
ID indicates that activity has originated on my server, but this is not possible
-
Pre-Alpha ActivityPub-related bug reports@trwnh @julian Because it is not clear how client should display this collection. Searching for URL is a common UI pattern: user expects to see a post or a profile as a result (this is not unique to Mastodon).
Server can attempt to fetch the first item in a collection, but NodeBB's FEP-7888 collection doesn't identify itself as a "thread". It has "OrderedCollectionPage" type and properties that many other collections also have
-
Pre-Alpha ActivityPub-related bug reports@julian The URL of this topic is https://community.nodebb.org/topic/17867/pre-alpha-activitypub-related-bug-reports
When I make a request with AP Accept header, the server responds with aCollection
. Technically, this is not wrong, but I think most people would expect a top-level post (Note / Article) when making such request