https://www.openwall.com/lists/oss-security/2026/03/09/7
#Fediverse #ActivityPub #misskey #sharkey
CVE-2026-28431
CVE-2026-28432
CVE-2026-28433
Topics from outside of this forum. Views and opinions represented here may not reflect those of this forum and its members.
A place for majestic STEMLORD peacocking, as well as memes about the realities of working in a lab.

Rules
This is a science community. We use the Dawkins definition of meme.
Cantinho para os nerds.
Questo è lo spazio dedicato al Fediverso, l’alternativa libera, decentralizzata e federata alle piattaforme delle Big Tech. Un luogo per conoscere, usare e diffondere strumenti come Mastodon, Pixelfed, PeerTube e molte altre soluzioni etiche, dove la persona è al centro, non il profitto.
Usare Facebook, Twitch, YouTube, Instagram e simili vi trasforma in una sorta di giullari di corte: intrattenete il re (la piattaforma) sperando di ottenere qualche avanzo di attenzione, retweet o like rischiando sempre di essere messi da parte se non siete abbastanza “divertenti” o utili ai loro obiettivi. È come stare alla mercé di una corte virtuale, dove la vostra voce passa solo se ritenuta gradita. Il Fediverso quindi è la risposta concreta a un web diventato tossico e chiuso:
—.
Tutti i contenuti presenti su questo gruppo come l’immagine di copertina di @davidrevoy@framapiaf.org sono pubblicati con licenza CC BY-SA 4.0
Questo canale è dedicato a notizie e aggiornamenti sul fediverso e alla comunicazione di iniziative ed eventi che adottano il fediverso come strumento di diffusione sociale.
NB: gli utenti si assumono la responsabilità di ciò che scrivono; sono comunque vietati gli off topic, il linguaggio aggressivo e i contenuti illegali e pornografici.
Doxxing, trolling, sealioning, racism, toxicity and dog-whistling are not welcomed in AskLemmy. Remember what your mother said: if you can’t say something nice, don’t say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them
This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?
Please do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.
Just remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com. NSFW comments should be restricted to posts tagged [NSFW].
It is not a place for ‘how do I?’, type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.
Please don’t post about current US Politics. If you need to do this, try !politicaldiscussion@lemmy.world or !askusa@discuss.online
Reminder: The terms of service apply here too.
Logo design credit goes to: tubbadu
This is a forum category containing topical discussion. You can start new discussions by mentioning this category.
这里是公共留言板
关注我获取留言推送,提及可以分享到留言板。
Tips:
回复时删除引用可以避免打扰到关注留言板的大家 ~
频次限制:
每位用户 24 小时内可提及 10 条,包括回复,敬请留意
This is a public message board.
Follow me to receive message notifications, and mention me to share your messages on the board.
Tips: Removing mentions when replying can help avoid disturbing everyone following the message board ~
Frequency limit: Each user can make up to 10 mentions within 24 hours, including replies.
Technical discussion about ActivityPub-related topics.
Stay tuned here to hear more about new releases and features of NodeBB!
This is a community dedicated to discussing technical details related to ActivityPub.
We welcome developers familiar with the protocol!
This is a fictional community meant to enhance my creative skills as well as other people creative skills and to waste more time on Lemmy. Why? You might ask… Well, I had never seen any one apply this idea before and we are entering a age where a lot of stories is going to be AI-Generated. Why a king? Will, I need to be super motivated to engage, so hopefully this community stay alive. What is the content like here? This is probably going to be something like just me posting and shitposting+ roleplay/fiction stories and lore. Why should you join? You shouldn’t. This community might not be something that benefits you or even advance your creativity. You can treat that like unfinished unprofessional art work that is almost never going to be finished. I might delete this community later, I might not delete it who knows? But I really don’t want to surrender to AI and lose my creativity, so hopefully some people might enjoy role-playing as my minions and the friction create fire(Which is stories and lore). I want to stay weird, I don’t want to become another gear in the machine of life. Who knows maybe I click with someone in this community and we get something real. I don’t like bullshit and I don’t like to invite greatness that I am not worth, I just want to have a place that is super comfy to me. The world is getting ruined, people are getting more conservative, social media is being ruined and climate change is going full speed and we are in a loneliness epidemic. Most people are evil and rude and we are in the hopeless age. Fiction can fix all of that and more. In case that after you read all of this and you became interested for a reason or another, you can subscribe.
This is a community where pro kingdom citizens can come to embrace their only king.
Rules:
Alô bateria!!! Essa comunidade é para discutir sobre o mundo acadêmico no geral, desde ideias mais cabeçudas e conceituais até que aplicativo você usa pra organizar as suas leituras. Além disso são bem-vindas divulgações acadêmicas, concursos, processos seletivos, oportunidades. E, claro, desabafos com as agruras do mundo acadêmico, fiquem a vontade, esse espaço é nosso!
Comic Strips is a community for those who love comic stories.
The rules are simple:
Web of links
A friendica forum page for audioVisual edition.
We support: kdenlive, gimp, inkscape, OBS studio, audacity, aegisub, VLC, freeplane
Discussion and announcements related to the SWICG Forums and Threaded Discussions Task Force.
This profile is a discussion forum category and shares content from users who post in its discussions.
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.
Rules:
Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.
No low-effort posts. This is subjective and will largely be determined by the community member reports.
Resources:
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
Focused discussion related to ActivityPub integration in NodeBB
Topics about installing, maintaining, moderating a fediverse instance, and more.
Discussion and Questions for the Forum and Threaded Discussions Task Force. For meeting dates and times, check the SWICG Calendar
General non-specific discussion about ActivityPub-related topics.
Memes about the Fediverse.
Other relevant communities:
A community to talk about the Fediverse and all it’s related services using ActivityPub (Mastodon, Lemmy, Mbin, etc).
If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!
Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration)
A world of content at your fingertips…
Think of this as your global discovery feed. It brings together interesting discussions from across the web and other communities, all in one place.
While you can browse what's trending now, the best way to use this feed is to make it your own. By creating an account, you can follow specific creators and topics to filter out the noise and see only what matters to you.
Ready to dive in? Create an account to start following others, get notified when people reply to you, and save your favorite finds.
Register LoginThat feeling you want to block hf.space on your server but you realize that the way your domain blocks are implemented in Smithereen, you can only block a server that has known actors, not an entire domain with all its subdomains... Time for new #Smithereen features I guess.
Introducing PortaFed — cryptographic account portability for #ActivityPub
When your server shuts down, your identity and posts are gone.
PortaFed fixes this with a MigrationProof: a Merkle commitment
over your full export, signed by your ed25519 key, verifiable
by any destination server without contacting the origin.
No blockchain. No registry. No core spec changes.
Spec + Rust implementation:
https://codeberg.org/portafed/portafed
Feedback welcome — especially from server maintainers.
Prof @Adrianogallina ma che fine ha fatto https://untempoperpensare.wordpress.com/ ? Ha smesso di scrivere? Lo sa che puó collegare il sito al fediverso? https://m.youtube.com/watch?v=t4pmWufYRr0&pp=ugMGCgJpdBABugUEEgJpdMoFFXdvcmRwcmVzcyBhY3Rpdml0eXB1YtgHAQ%3D%3D
Lo fece tempo fa @WhiteJolly con il suo @get-backs.com ma adesso si è preso una pausa… chissà perchè 
Last week I had 69 followers… today, the followers count is up to 267! A few days ago, the ActivityPub for WordPress plugin updated to v8.0.0, last weekend I get another try to move followers from my Mastodon account to this site, I had been trying that for months with absolute zero success… but at last I hit the jackpot! The move was not perfect, as 65 followers are still on Masto and not around here (although I think I can figure why), let’s see if they are added in next days.
This space is my portfolio and personal site so I publish notes on books, movies, comics, series, local activities and events; a lot of that is redacted in spanish and some in english. Also, I share all the artwork I stop posting on my former Fediverse profile, for example, the sketches from this post (part of an upcoming guide to create Mastodon profiles).
@thegreenparty is likely the party on #activitypub with the most followers. They should tell their siblings to post on open social media as well. Preferably Mastodon, but I guess Threads is better than nothing. Or maybe not..
With ActivityPub / ActivityStreams...
To me, it feels like there should have been something that is a common parent of both 'Object' and 'Link'.
That just had the "name", "nameMap", and "preview" fields (along with "id" and "type, of course) — since that is what 'Object' and 'Link' share in common.
I'll just call this common parent: 'Entity'.
...
It could have even been an opportunity to talk about how to handle unknown types.
Sharkey.Feddit.Social更新完毕!
2025.4.6 "Security fixes 2, electric boogaloo"
This PR fixes several security issues that will be disclosed in further detail at a future date.
fd36256b 2025.4.6 Created 5 hours ago by julia's avatar
https://sharkey.feddit.social
https://activitypub.software/TransFem-org/Sharkey/-/releases/2025.4.6
https://sharkey.team/notes/ajka8rybkjf80061
https://transfem.social/notes/ajkq30j9wury01jb
When someone asks me what the #Fediverse, #Mastodon or #ActivityPub is I'll use this illustration from UNIX Review, April 1985.
¿Sabían que Lemmy, la plataforma de agregación de noticias y foros del Fediverso, fue lanzada originalmente en febrero de 2019 como una alternativa descentralizada y de código abierto a Reddit?
Desarrollada por Dessalines y Nutmic, esta herramienta utiliza el protocolo ActivityPub, lo que permite que diferentes instancias de Lemmy interactúen entre sí y con otros servicios como Mastodon o Friendica. A diferencia de las plataformas centralizadas, Lemmy permite que cualquier usuario con los conocimientos técnicos necesarios aloje su propio servidor, manteniendo el control total sobre los datos, las políticas de moderación y la administración de la comunidad sin depender de una estructura corporativa única.
El crecimiento exponencial de la red ocurrió a mediados de 2023, tras los cambios en la política de precios de la API de Reddit, lo que provocó una migración masiva de usuarios hacia el Fediverso. Técnicamente, Lemmy está escrito en el lenguaje de programación Rust para el servidor y utiliza el framework Actix, mientras que el front-end está desarrollado en Typescript con Inferno. Esta arquitectura permite un manejo eficiente de recursos y una alta velocidad de respuesta en comparación con otras plataformas de microblogueo. Actualmente, la red cuenta con miles de comunidades activas organizadas por temáticas que van desde el software libre hasta la fotografía, consolidándose como el principal nodo de foros federados a nivel global.
#Lemmy #Fediverso #ActivityPub #SoftwareLibre #Tecnología #Descentralización
Made a revised version of my older social media protocol comparison post:
https://nate.mecca1.net/posts/2026-03-08_microblogging-protocols-v3/
And, of course, a meme to go along with it.
#activitypub #nostr #bluesky #blogpost #blog
Moin Julian.
Ich hatte mich letztes Jahr schon einmal mit Deinem "WebFinger Split-Domain Canary"-Aufbau beschäftigt, um meine Implementation darauf abzuklopfen.
https://correct.webfinger-canary.fietkau.software/
Leider habe ich Dich seinerzeit nicht kontaktiert, daher versuche ich gerade, mein Gedächtnis wieder aufzufrischen.
Geht es Dir im Wesentlichen darum, daß man bei einem Webfinger-Lookup das "subject"-Feld vergleicht und ggf. einem Redirect folgt und ein zweites Webfinger-Lookup durchführt? Oder noch etwas anderes?
Irgendwie scheine ich Dein Setup nicht vollständig zu durchschauen...
Ich nutze zur manuellen Überprüfung jetzt schlicht einmal https://webfinger.net/
Ein #Webfinger auf canary[at]correct.webfinger-canary.fietkau.software liefert ein passendes Subject, hier wären also die Informationen zu entnehmen, d.h. für #ActivityPub der Eintrag unter dem Typ "application/activity+json".
Ein Webfinger auf canary[at]wrong.webfinger-canary.fietkau.software liefert eine abweichende Subject-Angabe, so daß man canary[at]correct.webfinger-canary.fietkau.software abfragt, wenn man dem Redirect folgt.
Auch canary[at]webfinger-canary.fietkau.software zeigt im Subject auf die correct-Subdomain.
Allerdings zeigen alle drei Webfinger-Einträge im Self auf https://wrong.webfinger-canary.fietkau.software/canary - wie soll die Abfrage auf https://correct.webfinger-canary.fietkau.software als Ergebnis landen?
Und nebenbei, wie hast Du den Implementationsstatus geprüft? Mit einem Testaccount auf entsprechenden Instanzen?
Freue mich über Feedback... 
I’ve quite enjoyed making my photos website (https://photos.qassim.uk) an activitypub actor, @photos@qassim.uk. ActivityPub has its critics, but overall, this just feels like how the web SHOULD be. #photography #activitypub #mastodon
Hello #Fediverse! 
I'm the founder of Synapse Labs, and we're building the infrastructure layer for the "Agentic Web."
️
We focus on 0ms dedicated relays for @base and Farcaster to solve hub latency for AI agents. Also working on Volenti Partners for on-chain consent verification.
Looking to connect with #ActivityPub devs, #Web3 builders, and anyone obsessed with #decentralization. 🧠
️
#introduction #BuildOnBase #Farcaster #SelfHosting #OpenSource #SynapseLabs #DevOps #Base #Aiagents
I wish #ActivityPub was a "pull" protocol instead of a "push" protocol. The way it works, whenever you take an action, it sends that action to all followers. I would prefer if it simply stored them and then let each follower pull them when they see fit.
That would introduce latency and more async comms as your messages wouldn't pop up into someone elses feed until their software fetch the data, but I think it would make it easier to self host.
RE: https://framapiaf.org/@aldil/116149917732689524
Il manquait un partenaire d'importance dans notre newsletter de mars. C'est corrigé pour la version web (dispo via #rss #activitypub ). Cela le sera en avril pour la #mailing_list .
> #Wikipedia25 : Wikipedia fête ses 25 ans avec des événements à retrouver sur l’agenda du Libre avec les mots-clés #Wikipedia et Wikipédia.
> #Wikiconcours de mars 2026 : deux mois pour améliorer une sélection d'articles en équipe !
Fireside Fedi 78** **- Digital Necropolis: A Lich’s Quest Through Abandoned Internet History
Special thank you to @lich_silvae@masto.fediverse.games !
**Watch the full VOD:** tubefree.org/w/x2DbU44XVkkw6...
**Explore more episodes:** tubefree.org/a/ozoned/video-channels
Subscribe to the RSS feed so you never miss a future deep‑dive.
**Subscribe via RSS:** tubefree.org/feeds/videos.xml?videoChannelId=5934
**Podcast feed:** tubefree.org/feeds/podcast/videos.xml?videoChannelId=5934<span class="invisible"> #FiresideFedi #FiresideChat #Podcast #VideoPodcast #Fediverse #Fedi #ActivityPub #BSKY #DecentralizedSocial #OpenSocialWeb #Community #TechCulture #FutureOfSocial #TechTalk #DevCommunity #CodingFun
</span>
I've written a fully complete #ActivityPub server in 64KB.
What's the smallest *entirely self-hosted* PDS for #ATProto?
gitlab.com/edent/activi...
Terence Eden / ActivityPub-Sin...