julian
@julian.activitypub.space.ap.brid.gy
23 documents
0 likes
0 shares
Feb 2026 since
View on Bluesky
Federation Policies and limit/suspend/etc.?

Hi @thisismissem, apologies if this has been asked previously.

I noticed upon looking at the IFTAS blocklists that #severity is either silence or suspend. My feeling is that this aligns with Mastodon's usages, since they adopted the format Mastodon uses for shared blocklists.

Has the T&S TF put together a recommended list of levels for federation policies, and if so, do they align with…

Claude Is Not Your Architect. Stop Letting It Pretend.

A good architect’s most important skill isn’t designing systems. It’s knowing which systems not to build. It’s pushing back on complexity. It’s asking “why?” five times until the actual requirement emerges from the aspirational nonsense. It’s telling the CTO that their conference-inspired idea is a terrible fit for the team they actually have.

Claude will never do this. It’s trained to be…

FEP-baf5: Administrator Collection

This is the discussion thread for the draft FEP-baf5: Administrator Collection

This FEP introduces a mechanism for discovering the administrators of an ActivityPub instance. It extends the "Group Moderator" pattern from [FEP 1b12][1b12] and the "Application Actor" concept from [FEP 2677][2677] by defining an OrderedCollection of administrators referenced from the instance's application…

Question re: Origin Based Security Model (FEP-fe34)

I received a security vulnerability report regarding NodeBB's handling of Update and Delete activities.

tl;dr

  • NodeBB implementes FEP fe34, and treats Update and Delete activities as valid if the activity's actor and the object's attributedTo differ but the origins are identical.
  • e.g. @alice@example.org is allowed to federate Delete(Note) on @bob@example.org's…
Read more →
Multiple handles for Activity Intents

Hi @benpate@mastodon.social I've got a question about Activity Intents!

I'm implementing it now (as you noticed) and have run into an interesting issue. The wording of 3b86 suggests that the intents are distinct between users. That is, the end user inputs their handle , the handle is queried via webfinger, and supported Intents are returned.

However, the intents themselves don't…

Re: @peertube/http-signature

@chocobozzz@framapiaf.org I have a question for you... I'm seeing in Are we HS2019 yet? that Peertube and Misskey both use your package: @peertube/http-signature

NodeBB currently rolls its own cavage-12 support but and I did some preliminary research into updating to the latest HTTP Signatures draft, but quickly got overwhelmed.

For a variety of reasons, but mainly to avoid NIH, I'd consider…

Read more →
coveralls.io

So NodeBB tests have been failing for the past few days because coveralls.io is down.

Coveralls is a code coverage bot that is free for open source projects. We integrated it into our workflow years ago and it's been trucking along fine all these years.

While coveralls being down technically prevents us from running our tool to launch a new version, we could always just do it manually.

Their…

Read more →
Promoting NodeBB/fedi to city-scale organizations

@johannab@cosocial.ca asks:

NodeBB strikes me as the best aligned of the extant platforms for municipal governments. Here's a question for julian: is he prepared for, or interested in, a promotion program to city-scale organizations?

To which I answered, simply: "Yes."

Now that I have the time to expand on my answer:

Yes, absolutely! There is definitely a space for municipal city-scale…

Give Django your time and money, not your tokens

This article really resonated with me.

https://www.better-simple.com/django/2026/03/16/give-django-your-time-and-money/

Especially this part:

If you do not understand the ticket, if you do not understand the solution, or if you do not understand the feedback on your PR, then your use of LLM is hurting Django as a whole.

Django contributors want to help others, they want to cultivate…

Read more →

So now that I am now effectively priced out of upgrading my hardware...

Hopefully we'll see some additional attention turned towards software optimization.

I remember the day maybe a decade(?) or so ago, when Linux seemingly overnight improved their boot system to the point that a cold boot to desktop took something like 10 seconds, compared to Windows' 2+ minutes. Hopefully we'll see some…

Read more →
Sadly will have to miss FediForum this time around!

I'll be on a mini-break to Kelowna, BC for the week, so will be back in the swing of things only on the last day of the conference!

@j12t@j12t.social one of these days I'll do another demo.

@johannab@cosocial.ca say hello to my doppelgänger for me :laughing:

tags.pub clarification questions

Hey @evan@cosocial.ca, I'm watching your lightning talk at FOSDEM! I'm simultaneously glad it's less than 10 minutes, but sad it's not longer too :stuck_out_tongue_closed_eyes:

(Everyone else, want to watch it? Here it is)

Some questions I'm jotting down while I'm watching it [...]

Catodon federating deletes of objects it doesn't own

Hey @panos@catodon.rocks, now that I'm tracking errors encountered, I've got a bit more visibility into things that normally would've just been caught and ignored.

Today I received a Delete(Object) from Catodon associated with a user from catodon.rocks.

Two things:

  1. Its object referenced an item outside of catodon.rocks, and so it failed NodeBB's actor-object match check. Normally…
Native discovery of related tags (fedibuzz/tags.pub)

I was talking to my marketing guy about integrating a tags-based onboarding workflow for freshly installed forums.

The gist of it is, the forum admin adds a couple tags for the forum to globally follow, and achieves this via fedibuzz relay or tags.pub. Auto-categorization rules are automatically added and the forum starts receiving new (highly relevant!) posts through the magic of…

Read more →
Global tags and content discovery

There are a couple of parallel development efforts tackling the problem of hashtags. The main drawback is that while you can use them in your posts and search for them to find additional content, the reach and visibility of the hashtag is restricted to that of the instance's own visibility.

In other words, looking up a hashtag on your instance probably would not give you a complete view of the…

Book and Magazine suggestions?

Jonathan Haidt's been doing a media tour to promote his and Catherine Price's new book, _The Amazing Generation_.

After watching the duo's segment on _The Daily Show_ , it's inspired my wife and I to try a digital sabbath on Saturdays again.

Part of why it failed in the past (multiple times, I'm sad to say) was that we didn't have anything physical to read. We'd start making small concessions…

Read more →

Amused this morning because I discovered I can not load any content from eigenmagic.net, a Mastodon instance. My requests return 402 Payment Required, and attempting to ask the admin is futile because I cannot load their user (I get this emoji back when I query webfinger: 💰)

So... that's unfortunate. I'd love to learn what is happening (maybe it's an anti-AI/bot filter that is incorrectly…

Read more →
Combining groups and payments into a fedi-forward service for content creators

Unfortunately I was only able to join for the third and last day of FediForum, but the energy was quite strong even then!

There were some interesting discussions with @ozoned@btfree.social @reiver@mastodon.social and others (@johannab@cosocial.ca, @j12t@j12t.social, etc) about fediverse payments and growing the open social web — this spanned two session slots, actually!

One thing that came out…

Read more →
Reduced engagement due to Article type

NodeBB federates out Note or Article depending on the length of the content. While this by-and-large works, the article logic does not encourage as much discussion as expected because a summary is generated so as to provide something for microblog-style software to show (otherwise, it would only show the title (name) and a URL to the forum.)

That summary is limited to a maximum or 500…

Read more →
Federated private groups (Announce vs Add)

@sk@utsukta.org mentioned in another thread that the way Hubzilla and threadiverse software handle group discussions is incompatible.

It got me thinking about whether that is true. At its core both FEPs (171b and 1b12, respectively) rely on a central "distributor" node to send activities to recipients.

@silverpill@mitra.social did further comparisons in thr text of 171b itself:

Announce

Page 1