⚠️ SCAM Alert!

Do not click this link!

The goal is to hijack your Fedi Account.

#Scam #Scammer #Fediverse #ActivityPub #Mastodon #Security #Misskey #PixelFed #PeerTube #MastoAdmin #FediAdmin #Admin #Administrator

Alt...

A screenshot of a user who tagged over 20 people with a sneaky URL

⚠️ Watch out for a new phishing trick on the Fediverse.

Don't click random short URLs in DMs or replies. These links are sneaky: they silently harvest your Fedi credentials in the background and instantly redirect you to a random website so you think it was just a spam link.

It looks like harmless spam, but it’s actually a full account takeover. Stay safe out there!

#Infosec #Fediverse #Mastodon #ActivityPub #Misskey #PeerTube #PixelFed #Security #MastoAdmin #FediAdmin #Administrator #Admin #Mod #Moderator

Week in Fediverse 2026-10-23

Servers

- Hubzilla v11.4.2
- TinyAP v0.2.1
- Iceshrimp v2026.5.4
- GoToSocial v0.22.3
- Wafrn v2026.10.02
- Castopod v1.15.6
- NeoDB v0.19.9.1
- Merp Relay v0.4.3
- NodeBB v4.16.4
- Loops Server v1.0.0-beta.15
- PieFed v1.8.6
- wanderer v0.21.1
- 5.0: A closer look (Mastodon)

Clients

- mlmym v26.4.1
- Summit v1.88.0
- RaccoonForFriendica v1.1.5

Tools and Plugins

- Analytodon v2.5.0

For developers

- Mastodon.py v2.3.2

-----

#WeekInFediverse #Fediverse #ActivityPub

Previous edition: https://mitra.social/objects/01a1464f-ff2a-7932-98fa-d2e25de0b63a

When I started with #ActivityPub for #WordPress, it was a small experiment. Now almost 4 out of 10 #Fediverse servers are WordPress sites, and it is still growing, slowly but steadily. Come and join us @activitypub.blog 🎉

https://fedidb.com/software?st=servers

Alt...

Screenshot of fedidb, that shows some stats of WordPress in the Fediverse.

Concerning #HolosSocial, I still believe it's an interesting project because it brought something new to the #Fediverse.

Not only because you run your #ActivityPub server on your device, but mainly because you can own your identity with your own domain name.

My mistake was making it easy to run the server on your device, but not to get your own identity.
That will be my challenge in the coming months.

PS: I have no funding for this project and I work alone, so yes, it takes time :)

Se não pode ter seu próprio servidor, preferencialmente que prestigiasse outros projetos compatíveis com #ActivityPub, poderia ter a conta em outro servidor comunitário. Ou então, pelo menos, pode aproveitar o fato de que esse computador dos outros, felizmente, também possibilita interação por uma variedade de clientes livres, já disponíveis para diversos sistemas operacionais. Use-os e, se quiser, adapte-os às suas necessidades. Isso é software livre.

Vamos aproveitar mais as vantagens das comunicações federadas com protocolos de livre implementação. A tentação de centralizar e uniformizar, mesmo esta rede planejada para ser diversa, pode ser grande, mas sejamos racionais.

@arcathrax I assume you mean those static site blogs? Well, it's trendy for the tech-savvy to use a static site generator rather than use WordPress, and considering the latest PHP vulnerability that affected WordPress too, can you blame them? (Full disclosure: I also jumped on this bandwagon and converted my former blog that was running on the #ActivityPub macroblogging software #WriteFreely - and turned out cumbersome to update - to a static site built with #BSSG. I like it better and I don't mind having to paste my text into the terminal.)

I'm reading through some of my #Mastodon post/repost/reply history to find something I thought I'd linked to a while ago.

I've noticed a couple replies seem to have lost the thread they replied to. Is that a bug with today's 5.0 update?

If I could "view source" on a post to see the underlying #ActivityPub event, I might be able to find the thread myself, but I guess the UI doesn't provide that? Anyone remember the API to fetch that? 🤔

As you know, I love animals. That's why I built #Pawfed: https://pawfed.org/

It is fully built on #ActivityPub and lets people share messages with #OpenStreetMap to help our animal friends: https://pawfed.org/how-it-works

I clearly cannot make it work on my own, and it hurts a bit to fail when everything is already done. If you want to join the project to promote it and validate messages, you are welcome.

In the picture, Haru the black cat found his home after 2 years in a shelter.

Alt...

Haru, a black cat, sits next to Tanos, a Belgian Malinois dog. Pika, a Senegal parrot, is in front of them.

https://github.com/macports/macports-ports/pull/35738

It appears as if GitHub's Continuous Integration checks have passed OK!

It's up to someone else with commit access to merge it.

Thanks to you, aleteoryx, Uilebheist, nowster, koru, daltux, pmjv and anyone else who may have contributed to this release whom I may have inadvertently overlooked!

Again, my apologies for the delay! Traveling without a laptop and then realizing I needed to rework MacPorts' Makefile.patch made this take a lot longer than I would customarily prefer as far as down streaming latency goes.

In unrelated news: Denver now has FOUR Wax Trax Records locations! Mile High DJ Supply's spot in Arvada has a turntable set up reminiscent of DJ Q*Bert's Octagon (facilitatin 4 skratch deejays jammin together with 8 turntables and 4 mixers feedin into one sound system). The Colorado Symphony's performance of compositions they commissioned by Joe Hisaishi was wonderful! Though, Hisaishi was apparently unable to travel to conduct. Here's hoping he will not have difficulties with future travel plans and will be conducting at the SF Symphony for "Hisaishi conducts Hisaishi" since I have a ticket to one of those three shows later this week.

#snac #MacPorts #OpenSource #ActivityPub #Mastodon #NoDatabaseNeeded
#NoJavaScript #NoCookiesEither #NotMuchBullShit #snacAnnounces

CC: @grunfink@comam.es

ICYMI: Learn how the Fediverse was built in the latest article from our series on public funding of open source

https://www.linux-magazine.com/Online/Features/How-the-Fediverse-Found-Parts-for-Its-Platforms?utm_source=flm

@nlnet @NGIZero @cwebber @Bonfire
#DigitalAutonomy #ActivityPub #Fediverse #OpenSource #community #FOSS

Alt...

© artemisdian, 123RF.com

I want to remember why the #fediverse exists.

Why did you choose to join and be here? :)

🙏 Pls boost for science

#askmastodon #askfedi #socialweb #activitypub

FediDB was originally created as a fediverse developer service, to help devs test against their software, or to verify others.

We spun that out into an invite only service with PubKit, and now I'm proud to announce it's rejoining FediDB!

The first component is Pub Explorer:

https://fedidb.com/tools/pub?q=https://mastodon.social/@Gargron&tab=json&explain=1

#FediDB #PubKit #ActivityPub #PubExplorer

There’s a bot for that

Five new fediverse accounts that post what FediDB sees: charts of the network, new software, new large servers, release adoption and the projects growing fastest.

fedidb.com/blog/2026/theres-a-bot-for-that

#FediDB #Bots #Fediverse #ActivityPub #OpenData

Alt...

A graph of active mastodon versions

You can now change your username on Loops ✨

#Loops #ActivityPub

Alt...

Loops username change

Alt...

Loops username change

So @blog is a homemade blog, built with a prototype of my laravel-activitypub package!

But, https://fedidb.com isn't Laravel, its a Nuxt v4 SSR javascript app.

The blog is hosted on the Laravel backend of FediDB, fedidb.org, but it leverages Laravel's domain routing feature to use `blog.fedidb.com` which the Nuxt app proxies the webfinger of.

Why? Because I can. 🤘

#FediDB #activitypub #laravel #nuxt

This blog is on the fediverse

Follow @blog@fedidb.com from Mastodon, Pixelfed or any fediverse app. Reply, like, boost or quote from wherever you are, and once a team member has reviewed your reply, it shows up here.

fedidb.com/blog/2026/this-blog-is-on-the-fediverse

#FediDB #Fediverse #ActivityPub

Alt...

A preview of this account from Mastodon.

A New Era

A new era for FediDB, and a lot more to do on it: sign in with your fediverse account to edit the wiki, claim your server, compare software feature by feature, and download our data.

fedidb.com/blog/2026/a-new-era

#FediDB #Fediverse #ActivityPub

Alt...

The fediverse, counted. Servers, software and stats across the open social web.

I'm going to try and keep a record of all the bugs, errors, and inconsistencies I've reported in #ActivityPub and #Mastodon documentation.

First up, how big are the limits on what you can federate?

Mastodon lists some limits in KB/MB, but others are just raw numbers. That might make sense for an ASCII world - but emoji complicate everything.

https://github.com/mastodon/mastodon/issues/40290

Hey, #Mastodon and #ActivityPub developers.

How much skew do you allow before rejecting a message?

I've just received something where the header is signed:
Mon, 31 Aug 2026 20:09:54 GMT

But the ActivityPub message was published:
Mon, 31 Aug 2026 19:58:36 GMT

That's a little over 10 minutes. Is that too much? Should I not care as long as the signature validates?

A weird #ActivityPub message from #Frendica.

Signed on 2026-09-01
Published on 2026-03-02

That's a skew of six months! The message type is "Undo" - so they're undoing a like they sent in March.

Is there *really* a worry about accepting requests like this? Given the message has been signed, what risk is there to replay attacks?

Bug report at https://github.com/friendica/friendica/issues/16150

🆕 blog! “Some updates to ActivityBot”

I couple of years ago, I developed ActivityBot - the simplest way to build Mastodon Bots. It is a single PHP file which can run an entire ActivityPub server and it is less than 80KB.

It works! You can follow @openbenches to see the latest entries on OpenBenches.org, and @colours for a …

👀 Read more: https://shkspr.mobi/blog/2026/03/some-updates-to-activitybot/
⸻
#ActivityBot #ActivityPub #mastodon #php

🆕 blog! “Some quick thoughts on Unit Testing ActivityPub”

I'll be radically honest here - I never really got the idea of "Test Driven Development". I'm much more of a "telnet into production and damn the consequences" kind of guy. Look, it's much more fun and my cardiologist recommends severe shocks every now and again.

The essence of unit testing is pretty…

👀 Read more: https://shkspr.mobi/blog/2026/10/some-thoughts-on-unit-testing-activitypub/
⸻
#ActivityBot #ActivityPub #php

⚠️ Protect your account.

1) You do not need an app to use Misskey or Mastodon. Your mobile browser works just fine.

2) You should not use your Fedi account to sign into another app or service.

3) You do not need to verify your Fedi account, and no one will ask you to do so. Any link claiming you need to verify yourself is a scam, and you should not click on it.

4) Your password should be unique. That means do not use the same password elsewhere.

5) Use a password manager and make your password long and complex. You will not need to remember your password if you use a password manager.

6) Enable 2-step verification to help secure your Fedi account.

7) Be mindful (careful) when clicking on any URL shared on the Fedi.

8) Apply this same logic to the e-mail address associated with your Fedi Account.

#Security #Fediverse #ActivityPub #Mastodon #Misskey #Android #iPhone #IOS

I said before that Accept should never be used outside of Follow interactions. Want to "accept" something? Introduce a new activity type, AcceptSomething.

But now I am fairly certain that Add and Remove should be avoided too, for similar reasons. They all look the same. To figure out what is happening, you may try to resolve target, but that doesn't help because all collections have either Collection or OrderedCollection type and usually there is no property indicating the purpose of the collection.

Hence, AddToMyCollection is much better than Add.

Add and Remove should only be used for representing side-effects: https://codeberg.org/fediverse/fep/src/branch/main/fep/fc48/fep-fc48.md#activities-and-side-effects

#ActivityPub

Post 2 of 2

Are those trolls, who you wanted to please, paying the bills?

I am not here to try to single out poor @stux. As I said, I think they're awesome! I think they deeply care about the Fediverse, and I think they deeply wish to be seen as a positive force within the Fediverse — as much as I try to be, someone who helps fund several Fedi sites.

No, my point is more of a cautionary tale.

In your efforts to please everyone and in your efforts to have a few lulz, you may be alienating the people who currently have the means to support your community.

This goes for all Fedi Admins. You're all so quick to hit that ban button at the smallest hiccup. Many of you do not even read the content on which you judge, and likely do not even read any appeals.

Recently, I was finally vindicated. But better late than never, I suppose.

But during this whole ordeal, I have not broken any rule, promoted zero hate speech, zero homophobia, zero transphobia, zero illegal content, and funded several Fediverse sites while being a moderator and administrator on a few more.

The one shortcoming I see, even among the best of us, is that some of you give in far too easily to please the mob, even when the mob is wrong!

So I ask again: Are those trolls funding your community?

NO, I do not believe funding a community should give you entitlement. All I am saying is that the lulz do not pay bills. And perhaps some of you should not be so quick to hit that ban button.

Post 2 of 2 / END

#Fediverse #ActivityPub #MastoAdmin #FediAdmin #Mastodon #Misskey #PixelFed #PeerTube #Administator #Admin #Moderator #Mod #PayPal #Donate

Tootik

A federated, text-based social network, written in Go, uses SQLite, with a Gemini frontend

https://github.com/dimkr/tootik

| #tootik #gemini #activitypub

Week in Fediverse 2026-10-16

Servers

- GoToSocial v0.22.2
- Hollo v0.9.23
- snac v2.96
- Funkwhale v2.0.12
- Vernissage Server v1.44.0
- FitPub v1.3
- Hometown v1.3.1
- yukimochi/Activity-Relay v2.0.12
- Iceshrimp v2026.5.2
- NeoDB v0.19.8
- Forgejo v0.17.0
- NodeBB v4.16.3
- PieFed v1.8.5

Clients

- IceCubesApp v2.1.6
- Mastodon Bird UI v4.7.3-2026-10-11
- RaccoonForFriendica v1.1.3
- chan-fe v0.5.0

Tools and Plugins

- Poduptime v6.3.3
- FediFetcher v8.2.3
- Enable Mastodon Apps v1.7.0 (WordPress plugin)

For developers

- DrFed v0.1.0
- Fedify v2.4.4

Articles

- Some quick thoughts on Unit Testing ActivityPub
- Threads and the Fediverse: The Threat That Wasn’t

-----

#WeekInFediverse #Fediverse #ActivityPub

Previous edition: https://mitra.social/objects/01a12226-89dc-7182-949d-94663546af6c

For a while back there I thought the best way to grow the #Fediverse was to get a few "celebrities" with 10 Million followers to join, and we could grow that way, but that's obviously a bad idea in hindsight.
We need to get 10 Million small communities, special niche interests, unique hobbies, philosophies, fan clubs to join us here.
If the nice celebrities want to join that's fine too.
#activitypub #mastodon

Has "Mastodon" become a category name, rather than a product / brand name? In a similar way "Jeep" became a category word for "all-terrain vehicle".

So often I see people use #Mastodon, where they refer more broadly to #fediverse. And I think "How about all the other fine #microblogging apps other than Mastodon?"

Look how many others there are: https://delightful.coding.social/delightful-fediverse-experience/#microblogging

What do you think: Has "Mastodon" become a category name?

#poll #SocialWeb #ActivityPub

Fediverse wiki on FediDB 🔥

https://fedidb.com/wiki/hello-world/history

#fediDB #fediverseWiki #activitypub

Does the dev.to platform use #activitypub? Does anyone know?

@devto

Community Notes for Servers, now available on FediDB, simply log in with your fediverse account and edit!

https://fedidb.com/wiki/servers/pixelfed.social

#FediDB #communityNotes #fediverse #activityPub

We will be phasing out communityDB in favour of a more accessible alternative, a fediverse native wiki that you login with your existing fediverse account.

#fediverse #activityPub #fediverseWiki #wiki

I think I would love to have a ActivityPub based Pinterest??!

Like being able to see things from specific networks.. No slop instances..

In the end it is kind of already there with pixelfed, but it comes down to a how it is presented.

#activitypub #federation #decentralised #pinterest

📸 Vernissage 1.44.0 is out! 🎉

What's new?
- Drag & drop photo uploads
- Workaround for broken uploads on iOS 27
- More cities and improved Spanish translations
- ActivityPub outbox support
- Aggressive SEO and AI crawlers blocked
- Option to disable AI features
- Bug fixes, updated libraries, and new E2E tests

Enjoy the update! ❤️
#Vernissage #ActivityPub #Photography

https://github.com/VernissageApp/VernissageServer/releases/tag/v1.44.0

#snac2 #fediverse #frugalfediverse

Accounts can be marked as cool; anytime a cool account posts something, a notification will be sent.

Fixed an issue in Direct Messages sent from the people page; these posts didn't explicitly mention the recipient, and that confused some implementations.

Fixed crash when sending an empty EmojiReact.

HTTP requests can now be forced to use IPv6 by setting the force_ipv6_requests configuration directive to true in server.json.

Fixed a socket buffering issue under OpenIndiana (contributed by aleteoryx).

Mastodon API: Added missing requested_by field in the relationships entrypoint (contributed by Uilebheist), implemented the followers entrypoint (contributed by Uilebheist), use Mastodon's RFC3339 format for markers (contributed by nowster), fixed posts with muted words not being filtered out, fixed editing of media alt texts.

Tweaked HTML to avoid elinks complaining about a missing '#top' fragment.

Fixed a bug that made deleting the notification email address impossible.

RSS timelines are now cached because fuckers hammer for them continuously (probably AI crap bots).

Added information to README.md on how to build and install on Illumos / OpenIndiana Hipster 2026.04 (contributed by aleteoryx).

Updated Russian, Brazilian Portuguese and Czech translations (contributed by koru, daltux, pmjv).

https://comam.es/what-is-snac

If you find #snac useful, please consider buying grunfink a coffee or contributing via LiberaPay.

#snacAnnounces #FrugalFediverse

Week in Fediverse 2026-10-09

Servers

- Hollo v0.9.22
- PieFed v1.8.0
- Mitra v5.11.0
- Mbin v1.11.0
- Catodon v26.10.0
- NeoDB v0.19.6.3
- NodeBB v4.16.2
- Lemmy Development Update September 2026

Clients

- Tusky v33.0
- Pachli v3.9.1
- IceCubesApp v2.1.4
- Summit v1.87.0
- Pixelfed Mobile App v2.0.0
- Aria v1.5.15

For developers

- Fedify security updates: 2.0.30, 2.1.26, 2.2.15, 2.3.10, and 2.4.0

Protocol

- FEP-4f18: ActivityPub Network Time

-----

#WeekInFediverse #Fediverse #ActivityPub

Previous edition: https://mitra.social/objects/01a0fe1a-a0fe-7d20-895a-b18c4561484c

Hashtag following also allow URLs to RSS feeds of ActivityPub objects (like e.g. https://mastodon.social/tags/ThankYouTuesday).

Users can now configure a webhook to receive an HTTP POST for every notification. This can be useful for implementing bots that react to activities, like autorepliers, chatbots or interactive textual games (see snac(1) for more information).

The number of pending follow confirmations is shown next to the "people" link.

Faster performance metrics (contributed by dandelions).

Improved lowercasing in hashtags (contributed by postscriptum).

A search-by-url tweak for implementations that return 200 for invalid webfinger queries (e.g. piefed).

Mastodon API: added follow confirmation endpoints, fixed collisions in attachment file names.

Fixed potential crashes in attachment uploads.

https://comam.es/what-is-snac

If you find #snac useful, please consider buying grunfink a coffee or contributing via LiberaPay.

#snacAnnounces #FrugalFediverse

Notifications are now shown in a more compact way (i.e. all reactions are shown just above your post, instead of repeating the post ad nauseam for every reaction).

New command-line option unmute to, well, no-longer-mute an actor.

The private timeline now includes an approximate mark between new posts and "already seen" ones.

Fixed a spurious 404 error in the instance root URL for some configurations.

https://comam.es/what-is-snac

If you find #snac useful, please consider contributing via LiberaPay: https://liberapay.com/grunfink/

#snacAnnounces

This release has been inspired by the song The Answers to the Questions by #Christabell and #DavidLynch.