I'm slowly working my way deeper into the technical side of activity pub. But I'm sure there's already plenty of you, who already made a deep dive.

What's a discovery you found most interesting or maybe even unexpected?

#fedihelp #activitypub #fediverse

#introduction

I'm Stephen, and I build Pavillion: an open-source events calendar where calendars follow and repost events from other calendars.

Libraries, nonprofits and venues publish on their own calendars. A town or chamber calendar follows them and hand-picks or auto-reposts their events onto one community-wide calendar.

Self-hostable, open code, early. If you run a community calendar, tell me what you need.

https://pavillion.social

#fediverse #activitypub #events

@jdlh I thought you might find this one interesting!

https://github.com/swicg/activitypub-webfinger/issues/46

#GloballyInclusiveHandles #ActivityPub #WebFinger #Unicode

Let's take a moment to explore the concept of my block list.

"Billy Bob" is like:

> "I like child porn and share photos and videos of child porn."

So naturally, Billy Bob ends up on the block list. But along comes "Mary Sue," and she is like:

> "I support Billy Bob, and I am going to like, share, and boost Billy Bob's post."

So naturally, Mary Sue ends up on the block list. Then along comes "John Doe," and he is like:

> "It is completely unfair of you to add Mary Sue to your block list! Mary Sue is not Billy Bob — and so what if she is liking, sharing, and boosting Billy Bob's child porn post? I do not believe anyone should use your block list, and I insist that people should block you instead."

A wise person sees the problem and knows why all of these people are now on the block list, and why anyone who claims the block list is unfair should also be on the block list. No one should be defending child porn, nor the individuals who like, share, and boost child porn posts, nor should they come to the defense of such individuals while denouncing both the block list and its creator.

I am applying this exact same logic to spammers and scammers. It is not a hard concept to understand, and it is not unfair either — unless you are pro-spammer and pro-scammer.

(Speaking personally, I see scammers as just as bad as pedophiles, because they too often prey upon the weak, vulnerable, and defenseless. Scammers are known to target the young, the elderly, and the disabled.)

https://gitlab.com/Fediverse-Express/Fediverse/-/blob/main/block_spam_scam_users.csv?ref_type=heads&plain=1

#Spam #Scam #Fraud #FediAdmin #MastoAdmin #Pedophiles #pedophile #FediBlock #Fediverse #ActivityPub #BlockList

disclaimer: gringos please be kind to brazilians arriving to the fediverse, we're having a huge exodus due to political interference from the united states (through meta/google/x), if you're mean to them i am gonna curse your entire bloodline or give you rabies through wafrn bitting system.

#fedi #fediverse #activitypub #mastodon #akkoma #sharkey #wafrn #pixelfed #uspol #brpol #brazil

The #EU #KIDSAct draft requires #ageverification for #Mastodon #instances, removing exemptions for small providers. Technical conflicts arise between #ActivityPub’s #publicaccess and #restrictedvisibility for minors. Costs and control issues affect #decentralisednetworks. https://www.heise.de/en/background/Age-verification-in-the-Fediverse-How-the-KIDS-Act-challenges-Mastodon-11474306.html?Fedizen.EU #Fedizen #Fediverse #ActivityPub #News

My presentation from a week ago, at #OmniOpenCon 2026 (Bucharest), is finally online and somewhat polished... The video is raw footage and my talk could only cover mostly #ActivityPub, but the complete text also dives a bit into #ATproto, not without deserved criticism.
https://fionescu.princeps-poesis.xyz/2026/10/23/the-nuts-and-bolts-of-decentralized-social-media/

⚠️ SCAM Alert!

Do not click this link!

The goal is to hijack your Fedi Account.

#Scam #Scammer #Fediverse #ActivityPub #Mastodon #Security #Misskey #PixelFed #PeerTube #MastoAdmin #FediAdmin #Admin #Administrator

Alt...

A screenshot of a user who tagged over 20 people with a sneaky URL

⚠️ Watch out for a new phishing trick on the Fediverse.

Don't click random short URLs in DMs or replies. These links are sneaky: they silently harvest your Fedi credentials in the background and instantly redirect you to a random website so you think it was just a spam link.

It looks like harmless spam, but it’s actually a full account takeover. Stay safe out there!

#Infosec #Fediverse #Mastodon #ActivityPub #Misskey #PeerTube #PixelFed #Security #MastoAdmin #FediAdmin #Administrator #Admin #Mod #Moderator

Week in Fediverse 2026-10-23

Servers

- Hubzilla v11.4.2
- TinyAP v0.2.1
- Iceshrimp v2026.5.4
- GoToSocial v0.22.3
- Wafrn v2026.10.02
- Castopod v1.15.6
- NeoDB v0.19.9.1
- Merp Relay v0.4.3
- NodeBB v4.16.4
- Loops Server v1.0.0-beta.15
- PieFed v1.8.6
- wanderer v0.21.1
- 5.0: A closer look (Mastodon)

Clients

- mlmym v26.4.1
- Summit v1.88.0
- RaccoonForFriendica v1.1.5

Tools and Plugins

- Analytodon v2.5.0

For developers

- Mastodon.py v2.3.2

-----

#WeekInFediverse #Fediverse #ActivityPub

Previous edition: https://mitra.social/objects/01a1464f-ff2a-7932-98fa-d2e25de0b63a

When I started with #ActivityPub for #WordPress, it was a small experiment. Now almost 4 out of 10 #Fediverse servers are WordPress sites, and it is still growing, slowly but steadily. Come and join us @activitypub.blog 🎉

https://fedidb.com/software?st=servers

Alt...

Screenshot of fedidb, that shows some stats of WordPress in the Fediverse.

Concerning #HolosSocial, I still believe it's an interesting project because it brought something new to the #Fediverse.

Not only because you run your #ActivityPub server on your device, but mainly because you can own your identity with your own domain name.

My mistake was making it easy to run the server on your device, but not to get your own identity.
That will be my challenge in the coming months.

PS: I have no funding for this project and I work alone, so yes, it takes time :)

Se não pode ter seu próprio servidor, preferencialmente que prestigiasse outros projetos compatíveis com #ActivityPub, poderia ter a conta em outro servidor comunitário. Ou então, pelo menos, pode aproveitar o fato de que esse computador dos outros, felizmente, também possibilita interação por uma variedade de clientes livres, já disponíveis para diversos sistemas operacionais. Use-os e, se quiser, adapte-os às suas necessidades. Isso é software livre.

Vamos aproveitar mais as vantagens das comunicações federadas com protocolos de livre implementação. A tentação de centralizar e uniformizar, mesmo esta rede planejada para ser diversa, pode ser grande, mas sejamos racionais.

@arcathrax I assume you mean those static site blogs? Well, it's trendy for the tech-savvy to use a static site generator rather than use WordPress, and considering the latest PHP vulnerability that affected WordPress too, can you blame them? (Full disclosure: I also jumped on this bandwagon and converted my former blog that was running on the #ActivityPub macroblogging software #WriteFreely - and turned out cumbersome to update - to a static site built with #BSSG. I like it better and I don't mind having to paste my text into the terminal.)

I'm reading through some of my #Mastodon post/repost/reply history to find something I thought I'd linked to a while ago.

I've noticed a couple replies seem to have lost the thread they replied to. Is that a bug with today's 5.0 update?

If I could "view source" on a post to see the underlying #ActivityPub event, I might be able to find the thread myself, but I guess the UI doesn't provide that? Anyone remember the API to fetch that? 🤔

As you know, I love animals. That's why I built #Pawfed: https://pawfed.org/

It is fully built on #ActivityPub and lets people share messages with #OpenStreetMap to help our animal friends: https://pawfed.org/how-it-works

I clearly cannot make it work on my own, and it hurts a bit to fail when everything is already done. If you want to join the project to promote it and validate messages, you are welcome.

In the picture, Haru the black cat found his home after 2 years in a shelter.

Alt...

Haru, a black cat, sits next to Tanos, a Belgian Malinois dog. Pika, a Senegal parrot, is in front of them.

https://github.com/macports/macports-ports/pull/35738

It appears as if GitHub's Continuous Integration checks have passed OK!

It's up to someone else with commit access to merge it.

Thanks to you, aleteoryx, Uilebheist, nowster, koru, daltux, pmjv and anyone else who may have contributed to this release whom I may have inadvertently overlooked!

Again, my apologies for the delay! Traveling without a laptop and then realizing I needed to rework MacPorts' Makefile.patch made this take a lot longer than I would customarily prefer as far as down streaming latency goes.

In unrelated news: Denver now has FOUR Wax Trax Records locations! Mile High DJ Supply's spot in Arvada has a turntable set up reminiscent of DJ Q*Bert's Octagon (facilitatin 4 skratch deejays jammin together with 8 turntables and 4 mixers feedin into one sound system). The Colorado Symphony's performance of compositions they commissioned by Joe Hisaishi was wonderful! Though, Hisaishi was apparently unable to travel to conduct. Here's hoping he will not have difficulties with future travel plans and will be conducting at the SF Symphony for "Hisaishi conducts Hisaishi" since I have a ticket to one of those three shows later this week.

#snac #MacPorts #OpenSource #ActivityPub #Mastodon #NoDatabaseNeeded
#NoJavaScript #NoCookiesEither #NotMuchBullShit #snacAnnounces

CC: @grunfink@comam.es

ICYMI: Learn how the Fediverse was built in the latest article from our series on public funding of open source

https://www.linux-magazine.com/Online/Features/How-the-Fediverse-Found-Parts-for-Its-Platforms?utm_source=flm

@nlnet @NGIZero @cwebber @Bonfire
#DigitalAutonomy #ActivityPub #Fediverse #OpenSource #community #FOSS

Alt...

© artemisdian, 123RF.com

I want to remember why the #fediverse exists.

Why did you choose to join and be here? :)

🙏 Pls boost for science

#askmastodon #askfedi #socialweb #activitypub

FediDB was originally created as a fediverse developer service, to help devs test against their software, or to verify others.

We spun that out into an invite only service with PubKit, and now I'm proud to announce it's rejoining FediDB!

The first component is Pub Explorer:

https://fedidb.com/tools/pub?q=https://mastodon.social/@Gargron&tab=json&explain=1

#FediDB #PubKit #ActivityPub #PubExplorer

You can now change your username on Loops ✨

#Loops #ActivityPub

Alt...

Loops username change

Alt...

Loops username change

So @blog is a homemade blog, built with a prototype of my laravel-activitypub package!

But, https://fedidb.com isn't Laravel, its a Nuxt v4 SSR javascript app.

The blog is hosted on the Laravel backend of FediDB, fedidb.org, but it leverages Laravel's domain routing feature to use `blog.fedidb.com` which the Nuxt app proxies the webfinger of.

Why? Because I can. 🤘

#FediDB #activitypub #laravel #nuxt

I'm going to try and keep a record of all the bugs, errors, and inconsistencies I've reported in #ActivityPub and #Mastodon documentation.

First up, how big are the limits on what you can federate?

Mastodon lists some limits in KB/MB, but others are just raw numbers. That might make sense for an ASCII world - but emoji complicate everything.

https://github.com/mastodon/mastodon/issues/40290

Hey, #Mastodon and #ActivityPub developers.

How much skew do you allow before rejecting a message?

I've just received something where the header is signed:
Mon, 31 Aug 2026 20:09:54 GMT

But the ActivityPub message was published:
Mon, 31 Aug 2026 19:58:36 GMT

That's a little over 10 minutes. Is that too much? Should I not care as long as the signature validates?

A weird #ActivityPub message from #Frendica.

Signed on 2026-09-01
Published on 2026-03-02

That's a skew of six months! The message type is "Undo" - so they're undoing a like they sent in March.

Is there *really* a worry about accepting requests like this? Given the message has been signed, what risk is there to replay attacks?

Bug report at https://github.com/friendica/friendica/issues/16150

🆕 blog! “Some updates to ActivityBot”

I couple of years ago, I developed ActivityBot - the simplest way to build Mastodon Bots. It is a single PHP file which can run an entire ActivityPub server and it is less than 80KB.

It works! You can follow @openbenches to see the latest entries on OpenBenches.org, and @colours for a …

👀 Read more: https://shkspr.mobi/blog/2026/03/some-updates-to-activitybot/
⸻
#ActivityBot #ActivityPub #mastodon #php

I said before that Accept should never be used outside of Follow interactions. Want to "accept" something? Introduce a new activity type, AcceptSomething.

But now I am fairly certain that Add and Remove should be avoided too, for similar reasons. They all look the same. To figure out what is happening, you may try to resolve target, but that doesn't help because all collections have either Collection or OrderedCollection type and usually there is no property indicating the purpose of the collection.

Hence, AddToMyCollection is much better than Add.

Add and Remove should only be used for representing side-effects: https://codeberg.org/fediverse/fep/src/branch/main/fep/fc48/fep-fc48.md#activities-and-side-effects

#ActivityPub

Week in Fediverse 2026-10-16

Servers

- GoToSocial v0.22.2
- Hollo v0.9.23
- snac v2.96
- Funkwhale v2.0.12
- Vernissage Server v1.44.0
- FitPub v1.3
- Hometown v1.3.1
- yukimochi/Activity-Relay v2.0.12
- Iceshrimp v2026.5.2
- NeoDB v0.19.8
- Forgejo v0.17.0
- NodeBB v4.16.3
- PieFed v1.8.5

Clients

- IceCubesApp v2.1.6
- Mastodon Bird UI v4.7.3-2026-10-11
- RaccoonForFriendica v1.1.3
- chan-fe v0.5.0

Tools and Plugins

- Poduptime v6.3.3
- FediFetcher v8.2.3
- Enable Mastodon Apps v1.7.0 (WordPress plugin)

For developers

- DrFed v0.1.0
- Fedify v2.4.4

Articles

- Some quick thoughts on Unit Testing ActivityPub
- Threads and the Fediverse: The Threat That Wasn’t

-----

#WeekInFediverse #Fediverse #ActivityPub

Previous edition: https://mitra.social/objects/01a12226-89dc-7182-949d-94663546af6c

Fediverse wiki on FediDB 🔥

https://fedidb.com/wiki/hello-world/history

#fediDB #fediverseWiki #activitypub

Does the dev.to platform use #activitypub? Does anyone know?

@devto

Community Notes for Servers, now available on FediDB, simply log in with your fediverse account and edit!

https://fedidb.com/wiki/servers/pixelfed.social

#FediDB #communityNotes #fediverse #activityPub

We will be phasing out communityDB in favour of a more accessible alternative, a fediverse native wiki that you login with your existing fediverse account.

#fediverse #activityPub #fediverseWiki #wiki

I think I would love to have a ActivityPub based Pinterest??!

Like being able to see things from specific networks.. No slop instances..

In the end it is kind of already there with pixelfed, but it comes down to a how it is presented.

#activitypub #federation #decentralised #pinterest

#snac2 #fediverse #frugalfediverse

Accounts can be marked as cool; anytime a cool account posts something, a notification will be sent.

Fixed an issue in Direct Messages sent from the people page; these posts didn't explicitly mention the recipient, and that confused some implementations.

Fixed crash when sending an empty EmojiReact.

HTTP requests can now be forced to use IPv6 by setting the force_ipv6_requests configuration directive to true in server.json.

Fixed a socket buffering issue under OpenIndiana (contributed by aleteoryx).

Mastodon API: Added missing requested_by field in the relationships entrypoint (contributed by Uilebheist), implemented the followers entrypoint (contributed by Uilebheist), use Mastodon's RFC3339 format for markers (contributed by nowster), fixed posts with muted words not being filtered out, fixed editing of media alt texts.

Tweaked HTML to avoid elinks complaining about a missing '#top' fragment.

Fixed a bug that made deleting the notification email address impossible.

RSS timelines are now cached because fuckers hammer for them continuously (probably AI crap bots).

Added information to README.md on how to build and install on Illumos / OpenIndiana Hipster 2026.04 (contributed by aleteoryx).

Updated Russian, Brazilian Portuguese and Czech translations (contributed by koru, daltux, pmjv).

https://comam.es/what-is-snac

If you find #snac useful, please consider buying grunfink a coffee or contributing via LiberaPay.

#snacAnnounces #FrugalFediverse

#Loops has entered #beta with #ActivityPub support, allowing users to connect with creators across the #fediverse. This means users can follow and interact with creators on platforms like #Mastodon and #Pixelfed, and vice versa. Loops has implemented several technical features to ensure smooth federation, including a shared inbox, HTTP signatures, and smart content representation. https://blog.joinloops.org/loops-joins-the-fediverse/?Fedizen.EU #Fedizen #Fediverse #ActivityPub #News

Hashtag following also allow URLs to RSS feeds of ActivityPub objects (like e.g. https://mastodon.social/tags/ThankYouTuesday).

Users can now configure a webhook to receive an HTTP POST for every notification. This can be useful for implementing bots that react to activities, like autorepliers, chatbots or interactive textual games (see snac(1) for more information).

The number of pending follow confirmations is shown next to the "people" link.

Faster performance metrics (contributed by dandelions).

Improved lowercasing in hashtags (contributed by postscriptum).

A search-by-url tweak for implementations that return 200 for invalid webfinger queries (e.g. piefed).

Mastodon API: added follow confirmation endpoints, fixed collisions in attachment file names.

Fixed potential crashes in attachment uploads.

https://comam.es/what-is-snac

If you find #snac useful, please consider buying grunfink a coffee or contributing via LiberaPay.

#snacAnnounces #FrugalFediverse

Notifications are now shown in a more compact way (i.e. all reactions are shown just above your post, instead of repeating the post ad nauseam for every reaction).

New command-line option unmute to, well, no-longer-mute an actor.

The private timeline now includes an approximate mark between new posts and "already seen" ones.

Fixed a spurious 404 error in the instance root URL for some configurations.

https://comam.es/what-is-snac

If you find #snac useful, please consider contributing via LiberaPay: https://liberapay.com/grunfink/

#snacAnnounces

This release has been inspired by the song The Answers to the Questions by #Christabell and #DavidLynch.