home.social

Search

289 results for “thisismissem”

  1. @thisismissem which part of "the framework around them" do you miss?

    Like if it's just the declarative DOM manipulation there are many dom-diffing libs. #lithtml #haunted #morphdom #virtualdom.

    #webcomponents

  2. @xChaos @thisismissem

    I've been a long-time advocate for #HumaneTechnology. Social coding commons adds something to that to become "humane and harmonious technology". Humane by default. #Humanity is an intrinsic value of the movement. And harmonious by #SocialCoding. Coding is social, and first of all deals with people coordinating to find solutions that align with and satisfy stakeholder needs. Coding happens somewhere in the process, an impl detail.

    A core principle of Social experience design is Sustainability, which is holistic in nature via the (adapted) Circles of Sustainability model. coding.social/blog/reimagine-s

    With this in place a #SX software solution will cycle through its Free software development lifecycle i.e. #FSDL, which drives a tailored development based on needs and lifecycle phase. coding.social/blog/reimagine-s

    Together this completely avoids a pure technology-driven development, ensuring Needs-driven development, and a natural NIMBY of inhumane technology and practices.

  3. RE: hachyderm.io/@thisismissem/116

    This is such an interesting thread as it exposes the friction between ATProtocol/ActivityPub. Clearly, there are some cultural issues.

    It's important to understand and I say this often to our own desktop projects - we are always stronger together than apart.

    We are not competitors. We are allies.

    Understandably we might compete on investment and volunteers but those sort themselves.

    #gnome #kde #linuxapps #activitypub #atprotocol

  4. Inspired by a question from @thisismissem.social, I wrote up a document describing how to apply DPoP (RFC9449) to the OAuth Device Flow (RFC8628).

    https://datatracker.ietf.org/doc/draft-parecki-oauth-dpop-device-flow/
  5. @ak474000 @tchambers @thisismissem @Vivaldi

    I confess, I hadn't considered browsers maintaining their own instances. I miss stuff.

    Just another example of the tipping point already passed.

    Decentralized Social Networking is here. Which protocols and implementations, together or separately, drive #TheNetwork 10 years from now is merely a detail.

  6. @reiver @thisismissem @mfru

    Here's the diagram btw: social.coop/@smallcircles/1161

    The problem of #SolidProject knowing what it is, is more an inherited problem of #LinkedData / #SemanticWeb knowing what it is.

    Semantic web always was "if only all information on the web were semantic and machine-readable, then...". And there it stopped. Presumably magic would happen.

    And perhaps it would. But to make such a big leap, a paradigm shift of the entire web, along the way you have inspire a whole lot of people to set the (r)evolution in motion and keep it going.

    If you look at what linked data is, it is a very low-level format. Nice if you have it, but now what are you going to build with it? There are some good application areas, but the case for linked data elsewhere is not a given.

    Still today there are regular discussions on 'what would be the killer app for Solid' or linked data in general. Saw some interest for LLM's fed semantic data to make them more deterministic. I'm not interested.

  7. @reiver @thisismissem @mfru

    I made a diagram yesterday that contrasts #ActivityPub and #SolidProject that is I think interesting to consider.

    In the past I've been very active on the Solid forum, and tried to get a collab going with #SocialHub community. A number of points that existed then, are still issues today I think.

    Like, though anyone could participate in the standards process via chat, the Solid team and Inrupt were not really interested in their community, hardly giving attention while people were building interesting stuff there.

    Also at the time basically all available code was Javascript, making Solid uninteresting or hard to access for other language devs.

    But I think biggest issue was that Solid didn't know what it was. It was positioned as 'personal data vault' on the landing page then (but not using this term), but was 'secretly' TBL's desire to reboot the #SemanticWeb. The new web would be all 'Solid apps'. But the adoption strategy for that didn't exist.

  8. Gathering the people involved till now in this #fediMarket question to create some impulse and general discussion about this topic.
    This is not a proposal but some thoughts and unfinished considerations, looking for some input or to become at least some output itself.

    As @thomas pointed out there is #flohmarkt, as it looks like coded by @[email protected] .

    It has apparently the goal to be all the contrary to a centralized system but aims to be more like a local give away, sales and advertisement platform. Actualy it's not an auction like platform, witch is quite an interesting take. Still looking thru the ccc-Media video presentation trying to get a grip on it. As of now I didn't get the local restriction. Not sure if the restriction is mend to be by IP of the users, the IP of the platform of users or just some kind of instance restriction.

    The #GNUtaler discussion in this topic points to the general issue not only about payment but also about the system of trust that can be or could be implemented.
    It is and was quite interesting to see how the #ebay concept didn't catch up in Latin America because there was way to much fraud and the only thing that could catch up was some kind of sales platform like #mercadolibre that actually turned out to become some kind of national advertisement platform for professional sellers.

    What did tho work in an astonishing way, and let's please leave aside for a moment some issues bitcoin does involve, is the concept #localbitcoins came up with, actually as well as the famous #Silkroad example. Sites that managed to create some kind of trustless exchange. The particularity of localbitcoins tho was that they invented a reference system where people actually even meet each other and backed up their existence by some how proving each others identity. Ultimately the reference and reputation system of localbitcoins, reputation out of completed transactions and comments about them, as well as in person verification, created a functional working environment, something that till today is looking for a match out there.

    All these a real critical issues. And perhaps not only for trade but to a certain extent for our #socialWeb, our #fediVerse itself. On one hand we have commercial transactions that can involve fraud and on the other personal information that also can be exposed to fraud and worth. In our decentralized setup this is even somehow more complicated as fraudsters can restart at any given moment from anywhere else, while at the same time reputation on mid and long term should and can matter.
    So, what we do have is on one hand the "real me" function implemented for example by mastodon, and on the other we do have the signing capabilities of blockchains themselves. In particular of #electrum wallets, a decentralized wallet system that was created and is implemented not only by bitcoin but a lot more blockchains that want to show off with a real simple decentralized #FOSS wallet system.
    To get this straight, this is not about any coin or acquisition of any coin at all, but the simple technical availability of installing a simple long standing proven decentralized FOSS software that has the capability to sign or prove the correctness of any kind of text string. Nobody needs to have a single cent of a coin, or connect to anywhere, to create a wallet and with it a wallet address that than can sign a text. In other words, any wallet address is an ID that can't be impersonated without the respective password.
    So, it doesn't matter where for example the ID "bc1qp8xla8me0ykkh5wzrvkjgtdnuma0galep9cedu" as a profile name shows up, or which profile claims to represent the ID "bc1qp8xla8me0ykkh5wzrvkjgtdnuma0galep9cedu", unless it is able to show off with a text, for example:
    "I do have access to the signing keys for this ID" signed correctly with that wallet address, that profile could be considered an impostor.

    To create show cases for this idea, for this concept, there is on one hand the friendica fediVerse site:
    inversion.tupambae.com/
    The profile "blockchain" for example uses the just mentioned specific ID:
    inversion.tupambae.com/profile…
    as some kind of "none human readable address".

    Than there is the site:
    1dhfsbbdpv4wshuyc6197nymcfeqqk…
    The subdomain name itself is a first generation bitcoin address that has been used on the web and even if the capital letter detail is not in use, references are found for example by google.
    That site hosts a project profile that again uses a bitcoin #SEGWIT address as an ID:
    1dhfsbbdpv4wshuyc6197nymcfeqqk…
    Actually the bc1 segwit system is not case senitive, in other words no capital letters in those ID's.
    That profile itself is a reference to a mastodon profile that uses it to claim it's "real me" identity as "btc SEGWIT verified":
    mastodon.uy/@tierranietos

    Again there is not only no need for to involve bitcoins or cents of bitcoins (satoshis) in this. Even bitcoin itself doesn't have to be used, as there are lot's of electrum wallets out there. They do tho only verify texts signed with the same coin wallet. There is for example a #namecoin electrum wallet, a first generation coin invented to create a decentralized URL system, as well as there is for example a #faircoin electrum wallet. Considering all the altcoins created out there, faircoin at least is/was an interesting option that apparently failed to a certain extent due to the intent or claim by some in the community to be tradable on exchanges.
    Again, this is not about any coin at all but about the fact that we do have simple unique ID's at hand we can verify and we can use to create reputation and or invent some system of trust and reference on desktop and mobile.

    Than there is the consideration of guaranties and identities in the middle that allow escrow as implemented by localbitcoins.
    This escrow issue would involve somehow coins/tokens, at least as some kind of guaranty until the transaction is finished. Be it as a general input to prove the seriousness of an involvement, an offer or even a publication. In terms of bitcoin itself, the second level segwit technology allows the creation of circles of trust without even publishing transactions to the main bitcoin #blockchain.

    @[email protected]
    @[email protected]
    @thisismissem @annewalk
    @resl @NGIZero

  9. Gathering the people involved till now in this #fediMarket question to create some impulse and general discussion about this topic.
    This is not a proposal but some thoughts and unfinished considerations, looking for some input or to become at least some output itself.

    As @thomas pointed out there is #flohmarkt, as it looks like coded by @[email protected] .

    It has apparently the goal to be all the contrary to a centralized system but aims to be more like a local give away, sales and advertisement platform. Actualy it's not an auction like platform, witch is quite an interesting take. Still looking thru the ccc-Media video presentation trying to get a grip on it. As of now I didn't get the local restriction. Not sure if the restriction is mend to be by IP of the users, the IP of the platform of users or just some kind of instance restriction.

    The #GNUtaler discussion in this topic points to the general issue not only about payment but also about the system of trust that can be or could be implemented.
    It is and was quite interesting to see how the #ebay concept didn't catch up in Latin America because there was way to much fraud and the only thing that could catch up was some kind of sales platform like #mercadolibre that actually turned out to become some kind of national advertisement platform for professional sellers.

    What did tho work in an astonishing way, and let's please leave aside for a moment some issues bitcoin does involve, is the concept #localbitcoins came up with, actually as well as the famous #Silkroad example. Sites that managed to create some kind of trustless exchange. The particularity of localbitcoins tho was that they invented a reference system where people actually even meet each other and backed up their existence by some how proving each others identity. Ultimately the reference and reputation system of localbitcoins, reputation out of completed transactions and comments about them, as well as in person verification, created a functional working environment, something that till today is looking for a match out there.

    All these a real critical issues. And perhaps not only for trade but to a certain extent for our #socialWeb, our #fediVerse itself. On one hand we have commercial transactions that can involve fraud and on the other personal information that also can be exposed to fraud and worth. In our decentralized setup this is even somehow more complicated as fraudsters can restart at any given moment from anywhere else, while at the same time reputation on mid and long term should and can matter.
    So, what we do have is on one hand the "real me" function implemented for example by mastodon, and on the other we do have the signing capabilities of blockchains themselves. In particular of #electrum wallets, a decentralized wallet system that was created and is implemented not only by bitcoin but a lot more blockchains that want to show off with a real simple decentralized #FOSS wallet system.
    To get this straight, this is not about any coin or acquisition of any coin at all, but the simple technical availability of installing a simple long standing proven decentralized FOSS software that has the capability to sign or prove the correctness of any kind of text string. Nobody needs to have a single cent of a coin, or connect to anywhere, to create a wallet and with it a wallet address that than can sign a text. In other words, any wallet address is an ID that can't be impersonated without the respective password.
    So, it doesn't matter where for example the ID "bc1qp8xla8me0ykkh5wzrvkjgtdnuma0galep9cedu" as a profile name shows up, or which profile claims to represent the ID "bc1qp8xla8me0ykkh5wzrvkjgtdnuma0galep9cedu", unless it is able to show off with a text, for example:
    "I do have access to the signing keys for this ID" signed correctly with that wallet address, that profile could be considered an impostor.

    To create show cases for this idea, for this concept, there is on one hand the friendica fediVerse site:
    inversion.tupambae.com/
    The profile "blockchain" for example uses the just mentioned specific ID:
    inversion.tupambae.com/profile…
    as some kind of "none human readable address".

    Than there is the site:
    1dhfsbbdpv4wshuyc6197nymcfeqqk…
    The subdomain name itself is a first generation bitcoin address that has been used on the web and even if the capital letter detail is not in use, references are found for example by google.
    That site hosts a project profile that again uses a bitcoin #SEGWIT address as an ID:
    1dhfsbbdpv4wshuyc6197nymcfeqqk…
    Actually the bc1 segwit system is not case senitive, in other words no capital letters in those ID's.
    That profile itself is a reference to a mastodon profile that uses it to claim it's "real me" identity as "btc SEGWIT verified":
    mastodon.uy/@tierranietos

    Again there is not only no need for to involve bitcoins or cents of bitcoins (satoshis) in this. Even bitcoin itself doesn't have to be used, as there are lot's of electrum wallets out there. They do tho only verify texts signed with the same coin wallet. There is for example a #namecoin electrum wallet, a first generation coin invented to create a decentralized URL system, as well as there is for example a #faircoin electrum wallet. Considering all the altcoins created out there, faircoin at least is/was an interesting option that apparently failed to a certain extent due to the intent or claim by some in the community to be tradable on exchanges.
    Again, this is not about any coin at all but about the fact that we do have simple unique ID's at hand we can verify and we can use to create reputation and or invent some system of trust and reference on desktop and mobile.

    Than there is the consideration of guaranties and identities in the middle that allow escrow as implemented by localbitcoins.
    This escrow issue would involve somehow coins/tokens, at least as some kind of guaranty until the transaction is finished. Be it as a general input to prove the seriousness of an involvement, an offer or even a publication. In terms of bitcoin itself, the second level segwit technology allows the creation of circles of trust without even publishing transactions to the main bitcoin #blockchain.

    @[email protected]
    @[email protected]
    @thisismissem @annewalk
    @resl @NGIZero

  10. Gathering the people involved till now in this #fediMarket question to create some impulse and general discussion about this topic.
    This is not a proposal but some thoughts and unfinished considerations, looking for some input or to become at least some output itself.

    As @thomas pointed out there is #flohmarkt, as it looks like coded by @[email protected] .

    It has apparently the goal to be all the contrary to a centralized system but aims to be more like a local give away, sales and advertisement platform. Actualy it's not an auction like platform, witch is quite an interesting take. Still looking thru the ccc-Media video presentation trying to get a grip on it. As of now I didn't get the local restriction. Not sure if the restriction is mend to be by IP of the users, the IP of the platform of users or just some kind of instance restriction.

    The #GNUtaler discussion in this topic points to the general issue not only about payment but also about the system of trust that can be or could be implemented.
    It is and was quite interesting to see how the #ebay concept didn't catch up in Latin America because there was way to much fraud and the only thing that could catch up was some kind of sales platform like #mercadolibre that actually turned out to become some kind of national advertisement platform for professional sellers.

    What did tho work in an astonishing way, and let's please leave aside for a moment some issues bitcoin does involve, is the concept #localbitcoins came up with, actually as well as the famous #Silkroad example. Sites that managed to create some kind of trustless exchange. The particularity of localbitcoins tho was that they invented a reference system where people actually even meet each other and backed up their existence by some how proving each others identity. Ultimately the reference and reputation system of localbitcoins, reputation out of completed transactions and comments about them, as well as in person verification, created a functional working environment, something that till today is looking for a match out there.

    All these a real critical issues. And perhaps not only for trade but to a certain extent for our #socialWeb, our #fediVerse itself. On one hand we have commercial transactions that can involve fraud and on the other personal information that also can be exposed to fraud and worth. In our decentralized setup this is even somehow more complicated as fraudsters can restart at any given moment from anywhere else, while at the same time reputation on mid and long term should and can matter.
    So, what we do have is on one hand the "real me" function implemented for example by mastodon, and on the other we do have the signing capabilities of blockchains themselves. In particular of #electrum wallets, a decentralized wallet system that was created and is implemented not only by bitcoin but a lot more blockchains that want to show off with a real simple decentralized #FOSS wallet system.
    To get this straight, this is not about any coin or acquisition of any coin at all, but the simple technical availability of installing a simple long standing proven decentralized FOSS software that has the capability to sign or prove the correctness of any kind of text string. Nobody needs to have a single cent of a coin, or connect to anywhere, to create a wallet and with it a wallet address that than can sign a text. In other words, any wallet address is an ID that can't be impersonated without the respective password.
    So, it doesn't matter where for example the ID "bc1qp8xla8me0ykkh5wzrvkjgtdnuma0galep9cedu" as a profile name shows up, or which profile claims to represent the ID "bc1qp8xla8me0ykkh5wzrvkjgtdnuma0galep9cedu", unless it is able to show off with a text, for example:
    "I do have access to the signing keys for this ID" signed correctly with that wallet address, that profile could be considered an impostor.

    To create show cases for this idea, for this concept, there is on one hand the friendica fediVerse site:
    inversion.tupambae.com/
    The profile "blockchain" for example uses the just mentioned specific ID:
    inversion.tupambae.com/profile…
    as some kind of "none human readable address".

    Than there is the site:
    1dhfsbbdpv4wshuyc6197nymcfeqqk…
    The subdomain name itself is a first generation bitcoin address that has been used on the web and even if the capital letter detail is not in use, references are found for example by google.
    That site hosts a project profile that again uses a bitcoin #SEGWIT address as an ID:
    1dhfsbbdpv4wshuyc6197nymcfeqqk…
    Actually the bc1 segwit system is not case senitive, in other words no capital letters in those ID's.
    That profile itself is a reference to a mastodon profile that uses it to claim it's "real me" identity as "btc SEGWIT verified":
    mastodon.uy/@tierranietos

    Again there is not only no need for to involve bitcoins or cents of bitcoins (satoshis) in this. Even bitcoin itself doesn't have to be used, as there are lot's of electrum wallets out there. They do tho only verify texts signed with the same coin wallet. There is for example a #namecoin electrum wallet, a first generation coin invented to create a decentralized URL system, as well as there is for example a #faircoin electrum wallet. Considering all the altcoins created out there, faircoin at least is/was an interesting option that apparently failed to a certain extent due to the intent or claim by some in the community to be tradable on exchanges.
    Again, this is not about any coin at all but about the fact that we do have simple unique ID's at hand we can verify and we can use to create reputation and or invent some system of trust and reference on desktop and mobile.

    Than there is the consideration of guaranties and identities in the middle that allow escrow as implemented by localbitcoins.
    This escrow issue would involve somehow coins/tokens, at least as some kind of guaranty until the transaction is finished. Be it as a general input to prove the seriousness of an involvement, an offer or even a publication. In terms of bitcoin itself, the second level segwit technology allows the creation of circles of trust without even publishing transactions to the main bitcoin #blockchain.

    @[email protected]
    @[email protected]
    @thisismissem @annewalk
    @resl @NGIZero

  11. Gathering the people involved till now in this #fediMarket question to create some impulse and general discussion about this topic.
    This is not a proposal but some thoughts and unfinished considerations, looking for some input or to become at least some output itself.

    As @thomas pointed out there is #flohmarkt, as it looks like coded by @[email protected] .

    It has apparently the goal to be all the contrary to a centralized system but aims to be more like a local give away, sales and advertisement platform. Actualy it's not an auction like platform, witch is quite an interesting take. Still looking thru the ccc-Media video presentation trying to get a grip on it. As of now I didn't get the local restriction. Not sure if the restriction is mend to be by IP of the users, the IP of the platform of users or just some kind of instance restriction.

    The #GNUtaler discussion in this topic points to the general issue not only about payment but also about the system of trust that can be or could be implemented.
    It is and was quite interesting to see how the #ebay concept didn't catch up in Latin America because there was way to much fraud and the only thing that could catch up was some kind of sales platform like #mercadolibre that actually turned out to become some kind of national advertisement platform for professional sellers.

    What did tho work in an astonishing way, and let's please leave aside for a moment some issues bitcoin does involve, is the concept #localbitcoins came up with, actually as well as the famous #Silkroad example. Sites that managed to create some kind of trustless exchange. The particularity of localbitcoins tho was that they invented a reference system where people actually even meet each other and backed up their existence by some how proving each others identity. Ultimately the reference and reputation system of localbitcoins, reputation out of completed transactions and comments about them, as well as in person verification, created a functional working environment, something that till today is looking for a match out there.

    All these a real critical issues. And perhaps not only for trade but to a certain extent for our #socialWeb, our #fediVerse itself. On one hand we have commercial transactions that can involve fraud and on the other personal information that also can be exposed to fraud and worth. In our decentralized setup this is even somehow more complicated as fraudsters can restart at any given moment from anywhere else, while at the same time reputation on mid and long term should and can matter.
    So, what we do have is on one hand the "real me" function implemented for example by mastodon, and on the other we do have the signing capabilities of blockchains themselves. In particular of #electrum wallets, a decentralized wallet system that was created and is implemented not only by bitcoin but a lot more blockchains that want to show off with a real simple decentralized #FOSS wallet system.
    To get this straight, this is not about any coin or acquisition of any coin at all, but the simple technical availability of installing a simple long standing proven decentralized FOSS software that has the capability to sign or prove the correctness of any kind of text string. Nobody needs to have a single cent of a coin, or connect to anywhere, to create a wallet and with it a wallet address that than can sign a text. In other words, any wallet address is an ID that can't be impersonated without the respective password.
    So, it doesn't matter where for example the ID "bc1qp8xla8me0ykkh5wzrvkjgtdnuma0galep9cedu" as a profile name shows up, or which profile claims to represent the ID "bc1qp8xla8me0ykkh5wzrvkjgtdnuma0galep9cedu", unless it is able to show off with a text, for example:
    "I do have access to the signing keys for this ID" signed correctly with that wallet address, that profile could be considered an impostor.

    To create show cases for this idea, for this concept, there is on one hand the friendica fediVerse site:
    inversion.tupambae.com/
    The profile "blockchain" for example uses the just mentioned specific ID:
    inversion.tupambae.com/profile…
    as some kind of "none human readable address".

    Than there is the site:
    1dhfsbbdpv4wshuyc6197nymcfeqqk…
    The subdomain name itself is a first generation bitcoin address that has been used on the web and even if the capital letter detail is not in use, references are found for example by google.
    That site hosts a project profile that again uses a bitcoin #SEGWIT address as an ID:
    1dhfsbbdpv4wshuyc6197nymcfeqqk…
    Actually the bc1 segwit system is not case senitive, in other words no capital letters in those ID's.
    That profile itself is a reference to a mastodon profile that uses it to claim it's "real me" identity as "btc SEGWIT verified":
    mastodon.uy/@tierranietos

    Again there is not only no need for to involve bitcoins or cents of bitcoins (satoshis) in this. Even bitcoin itself doesn't have to be used, as there are lot's of electrum wallets out there. They do tho only verify texts signed with the same coin wallet. There is for example a #namecoin electrum wallet, a first generation coin invented to create a decentralized URL system, as well as there is for example a #faircoin electrum wallet. Considering all the altcoins created out there, faircoin at least is/was an interesting option that apparently failed to a certain extent due to the intent or claim by some in the community to be tradable on exchanges.
    Again, this is not about any coin at all but about the fact that we do have simple unique ID's at hand we can verify and we can use to create reputation and or invent some system of trust and reference on desktop and mobile.

    Than there is the consideration of guaranties and identities in the middle that allow escrow as implemented by localbitcoins.
    This escrow issue would involve somehow coins/tokens, at least as some kind of guaranty until the transaction is finished. Be it as a general input to prove the seriousness of an involvement, an offer or even a publication. In terms of bitcoin itself, the second level segwit technology allows the creation of circles of trust without even publishing transactions to the main bitcoin #blockchain.

    @[email protected]
    @[email protected]
    @thisismissem @annewalk
    @resl @NGIZero

  12. Gathering the people involved till now in this #fediMarket question to create some impulse and general discussion about this topic.
    This is not a proposal but some thoughts and unfinished considerations, looking for some input or to become at least some output itself.

    As @thomas pointed out there is #flohmarkt, as it looks like coded by @[email protected] .

    It has apparently the goal to be all the contrary to a centralized system but aims to be more like a local give away, sales and advertisement platform. Actualy it's not an auction like platform, witch is quite an interesting take. Still looking thru the ccc-Media video presentation trying to get a grip on it. As of now I didn't get the local restriction. Not sure if the restriction is mend to be by IP of the users, the IP of the platform of users or just some kind of instance restriction.

    The #GNUtaler discussion in this topic points to the general issue not only about payment but also about the system of trust that can be or could be implemented.
    It is and was quite interesting to see how the #ebay concept didn't catch up in Latin America because there was way to much fraud and the only thing that could catch up was some kind of sales platform like #mercadolibre that actually turned out to become some kind of national advertisement platform for professional sellers.

    What did tho work in an astonishing way, and let's please leave aside for a moment some issues bitcoin does involve, is the concept #localbitcoins came up with, actually as well as the famous #Silkroad example. Sites that managed to create some kind of trustless exchange. The particularity of localbitcoins tho was that they invented a reference system where people actually even meet each other and backed up their existence by some how proving each others identity. Ultimately the reference and reputation system of localbitcoins, reputation out of completed transactions and comments about them, as well as in person verification, created a functional working environment, something that till today is looking for a match out there.

    All these a real critical issues. And perhaps not only for trade but to a certain extent for our #socialWeb, our #fediVerse itself. On one hand we have commercial transactions that can involve fraud and on the other personal information that also can be exposed to fraud and worth. In our decentralized setup this is even somehow more complicated as fraudsters can restart at any given moment from anywhere else, while at the same time reputation on mid and long term should and can matter.
    So, what we do have is on one hand the "real me" function implemented for example by mastodon, and on the other we do have the signing capabilities of blockchains themselves. In particular of #electrum wallets, a decentralized wallet system that was created and is implemented not only by bitcoin but a lot more blockchains that want to show off with a real simple decentralized #FOSS wallet system.
    To get this straight, this is not about any coin or acquisition of any coin at all, but the simple technical availability of installing a simple long standing proven decentralized FOSS software that has the capability to sign or prove the correctness of any kind of text string. Nobody needs to have a single cent of a coin, or connect to anywhere, to create a wallet and with it a wallet address that than can sign a text. In other words, any wallet address is an ID that can't be impersonated without the respective password.
    So, it doesn't matter where for example the ID "bc1qp8xla8me0ykkh5wzrvkjgtdnuma0galep9cedu" as a profile name shows up, or which profile claims to represent the ID "bc1qp8xla8me0ykkh5wzrvkjgtdnuma0galep9cedu", unless it is able to show off with a text, for example:
    "I do have access to the signing keys for this ID" signed correctly with that wallet address, that profile could be considered an impostor.

    To create show cases for this idea, for this concept, there is on one hand the friendica fediVerse site:
    inversion.tupambae.com/
    The profile "blockchain" for example uses the just mentioned specific ID:
    inversion.tupambae.com/profile…
    as some kind of "none human readable address".

    Than there is the site:
    1dhfsbbdpv4wshuyc6197nymcfeqqk…
    The subdomain name itself is a first generation bitcoin address that has been used on the web and even if the capital letter detail is not in use, references are found for example by google.
    That site hosts a project profile that again uses a bitcoin #SEGWIT address as an ID:
    1dhfsbbdpv4wshuyc6197nymcfeqqk…
    Actually the bc1 segwit system is not case senitive, in other words no capital letters in those ID's.
    That profile itself is a reference to a mastodon profile that uses it to claim it's "real me" identity as "btc SEGWIT verified":
    mastodon.uy/@tierranietos

    Again there is not only no need for to involve bitcoins or cents of bitcoins (satoshis) in this. Even bitcoin itself doesn't have to be used, as there are lot's of electrum wallets out there. They do tho only verify texts signed with the same coin wallet. There is for example a #namecoin electrum wallet, a first generation coin invented to create a decentralized URL system, as well as there is for example a #faircoin electrum wallet. Considering all the altcoins created out there, faircoin at least is/was an interesting option that apparently failed to a certain extent due to the intent or claim by some in the community to be tradable on exchanges.
    Again, this is not about any coin at all but about the fact that we do have simple unique ID's at hand we can verify and we can use to create reputation and or invent some system of trust and reference on desktop and mobile.

    Than there is the consideration of guaranties and identities in the middle that allow escrow as implemented by localbitcoins.
    This escrow issue would involve somehow coins/tokens, at least as some kind of guaranty until the transaction is finished. Be it as a general input to prove the seriousness of an involvement, an offer or even a publication. In terms of bitcoin itself, the second level segwit technology allows the creation of circles of trust without even publishing transactions to the main bitcoin #blockchain.

    @[email protected]
    @[email protected]
    @thisismissem @annewalk
    @resl @NGIZero

  13. For everyone creating communities (#Lemmy instances) or "magazines" on #Kbin instances be mindful of the very real deficiencies that exist related to moderation, as @thisismissem writes about here (hachyderm.io/@thisismissem/110). We're all both excited about the promise the #Fediverse brings and equally pissed at what is going on over on Reddit but there is real *danger* in growing communities using software that might not be ready for it. Read Emelia's post to gain more understanding of the potential pitfalls (and guidance around moderation). One thing I'll add is that botching this migration due to immature software could turn people off from the idea of Reddit-esque fediverse communities indefinitely.

    @jerry I'm certainly no expert on community creation/management much less moderating mid-large size communities but there are certainly others within the .infosec sphere (👀 @tweedge) who could weigh in. Maybe it would be helpful to post a guide of some kind (not saying *you* need to create it but you could help market it) which fairly warns #fedia and #infosecpub channel admins that moderation tools are lackluster and to tread carefully as they scale out. Happy to volunteer my own time/perspectives on adding something to a larger wiki for your various Fediversal properties as needed!

    #redditMigration #FediverseMigration

  14. Fortifying the Fediverse: Decentralised Trust and Safety 2024

    As 2024 comes to a close, it’s a fitting moment to reflect on a year of collaboration and innovation in trust and safety within the decentralised social web. This year has been one of growth for IFTAS and the fediverse community, marked by new initiatives, partnerships, and tools that strengthen the resilience and inclusivity of federated platforms.

    IFTAS Milestones

    We began the year with the release of our DSA Guide for Decentralised Services, offering practical insights to help decentralised platforms navigate the EU Digital Services Act. This resource has become essential for community leaders adapting to the latest regulatory requirements. In March, we introduced a suite of Personal Digital Safety Tools from Tall Poppy, designed to help community leaders safeguard themselves against doxing, harassment, and other online threats. This initiative supports the well-being of those at the forefront of creating safe spaces.

    In May, we proudly launched IFTAS Connect, a collaborative platform for moderators, administrators, and trust & safety teams. By fostering community-building and sharing resources, IFTAS Connect has become a key tool for improving moderation efforts across the Fediverse. We also introduced FediCheck, a transparency tool that helps users evaluate the policies and safety measures of various Fediverse servers. By making this information accessible, FediCheck empowers service administrators to make informed choices about the platforms they engage with.

    In October, our community demonstrated exceptional resilience during a large-scale spam attack on the Fediverse. This collective effort showcased the strength of our network and our ability to address challenges collaboratively.

    We welcomed three amazing contributors, Ted Han, Erin Kissane, and Andrés Monroy-Hernández, to our Advisory Board. Their expertise in open-source technology and digital governance strengthens our mission to build safer, more equitable online spaces.

    We stress tested our Content Classification Service, starting with tools to detect and combat child sexual abuse material. This marks a significant step forward in equipping moderators with resources to enhance community safety.

    We ended the year with the release of our annual Needs Assessment Report, gathering insights from 180+ services hosting over 4.3 million accounts across the open social web. The report highlights key challenges and opportunities, offering actionable recommendations to support moderators and administrators, and will guide our work in the coming year.

    The Ecosystem Expands

    2024 saw a range of non-profit organisational growth including the launch of the Social Web Foundation, dedicated to enhancing interoperability, safety, and governance across decentralised networks.

    As decentralised platforms grapple with the challenges of misinformation and disinformation, Newsmast emerged as a key player in combating these threats. The platform’s proactive approach to content verification and user education has set new standards for maintaining the integrity of information shared on federated networks. Their collaborative efforts with community moderators have been instrumental in promoting accurate and reliable discourse.

    Emelia Smith proposed and led the creation of the ActivityPub Trust and Safety Taskforce, whose first task will be an overview of current state of trust and safety on the Fediverse, followed by work on flags, blocks, and content labelling.

    Juliet Shen announced the creation of the Open Source Tooling Consortium at TrustCon, which can both contribute to, and learn from, the open source community building federated social networks.

    A New Social was launched to liberate people’s networks from their platforms, leveling the playing field across the open social web – with it’s first project to adopt and expand BridgyFed.

    We look forward to collaborating with these and other organisations as the network grows, seeking to reduce duplicative effort and leveraging the energy and commitment all these amazing people are bringing to the table.

    Platform Developers

    Two FediForum events highlighted a ton of new work in federated platforms.

    The Mastodon team is spearheading the Federated Auxiliary Service Provider specification, which is focussed on search and discovery for now but can open up a world of possibilities for trust and safety tooling. Mastodon 4.3 saw improvements in dealing with unwanted content, and Bonfire Networks undertook a range of activities to explore governance and moderation tooling as a foundation of their platform development.

    Fediseer continues to be a growing resource for Lemmy and Mastodon administrators, and fedi-safety is a novel tool that can classify genAI CSAM on Lemmy and potentially other services. Pixelfed introduced comment controls and enhanced spam classifiers.

    BlueSky introduced Ozone, an innovative moderation tool designed to support moderators in managing their communities. Ozone’s integration of advanced filtering systems makes it a standout contribution to the trust and safety ecosystem, powering several “composable moderation” projects on the Bluesky “ATmosphere” with the notable success of Blacksky, an AT Protocol implementation prioritising the community building efforts of marginalized groups; especially Bluesky’s community of Black users after which the project is named.

    Spritely is working on the next generation of decentralised tech, building on co-founders’ Jessica Tallon and Christine Lemmer-Webber’s experience co-authoring ActivityPub.

    Research and Writings

    Yoel Roth and Samantha Lai published “Securing Federated Platforms: Collective Risks and Responses“, which has become an essential resource for administrators and moderators. The report explores the shared vulnerabilities of decentralised networks and provides actionable recommendations for mitigating risks collaboratively. Its release has sparked important conversations about collective accountability and the role of communities in safeguarding the social web.

    Darius Kazemi and Erin Kissane published “Governance on Fediverse Microblogging Servers” – answering the question “What are the most effective governance and administration models in place on medium-to-large sized Fediverse servers?”

    Looking Ahead to 2025

    As we celebrate the progress made this year, we are energised by the opportunities that lie ahead. Reviewing the 2024 Needs Assessment we see our work expanding moderation tooling and providing new and enhanced resources to further strengthen and scale trust and safety in federated social networks. Wherever possible, we will endeavour to align with projects and participants that are similarly working to create #BetterSocialMedia

    We are committed to advancing trust and safety in the federated web. Together, with the continued support of our community and partners, we will build on the foundations laid in 2024 to create safer, more inclusive online spaces.

    To support our global community, we are translating our shared labels and definitions into multiple languages. We welcome any and all input in this collaborative effort, submit a few translations today!

    Recognising the emotional toll of moderation, we will adopt and adapt resources to support moderators dealing with traumatic content. We aim to offer comprehensive guidance on various regulatory frameworks, including the UK Online Safety Act, to assist administrators and moderators in building toward compliance.

    Our comprehensive Moderator Handbook is in the final stages of editing and will soon be available as a valuable resource for both new and experienced moderators. We plan to introduce hash and match services to identify and manage non-consensual intimate imagery and terrorist and violent extremist content, using platforms like StopNCII and GIFCT.

    You can track our in-progress and planned activities on our Activity Tracker page.

    We thank everyone involved and engaged in strengthening and scaling trust and safety in this exciting landscape, and look forward to achieving even greater milestones together in the coming year.

    Support the Social Web

    Almost everyone and everything mentioned above is supported by donations. If you believe in an open web that is safe and inclusive (not to mention ad-free and not in the habit of selling your data to the highest bidder) consider signing up for a subscription, or making a donation to any of these institutions and individuals who are working to ensure an open, democratic web for everyone in the world to enjoy. This is just a list of links for people and projects listed above, but there are hundreds more worthy of your support.

    #TogetherStronger

    #BetterSocialMedia #TogetherStronger

  15. Hey @thisismissem, I am super interested in #wakeOnLAN! I would like to use it to reduce consumption and switch off my own homelab sometimes.

    Do you have any tutorial/resources/documentation to share?

  16. #Hollo 0.6.0 is coming soon!

    We're putting the finishing touches on our biggest security and feature update yet. Here's what's coming:

    Enhanced #OAuth #security

    • RFC 8414 (OAuth metadata discovery)
    • RFC 7636 (#PKCE support)
    • Improved authorization flows following RFC 9700 best practices

    New features

    • Extended character limit (4K → 10K)
    • Code syntax highlighting
    • Customizable profile themes
    • EXIF metadata stripping for privacy

    Important notes for update

    • Node.js 24+ required
    • Updated environment variables for asset storage
    • Stronger SECRET_KEY requirements (44+ chars)

    Special thanks to @thisismissem for the extensive OAuth improvements that help keep the #fediverse secure and compatible! 🙏

    Full changelog and upgrade guide coming with the release.

    #ActivityPub

  17. @nichni

    Hej Danmark,
    Der er et #europæiskBorgerinitiativ, der opfordrer til et europæisk forbud mod såkaldte #omvendelsesterapier for at beskytte queersamfundet.
    I tider med stigende reaktionær tænkning er det altid udkanten af samfundet, der bliver angrebet først. Derfor er spørgsmålet også vigtigt for hetero-normative mennesker.

    Tag et kig på initiativet og støt det senest den 17. maj 2025.
    #Danmark har brug for mere støtte.
    Tak.

    #danpol #eupol #queerness #eci

    hachyderm.io/@thisismissem/114

  18. Trying to help @thisismissem close an issue I opened a year ago.

    Do people still accidentally block servers when they only mean to block a specific account?

    github.com/mastodon/mastodon/i

    #mastodon #fediverse #block #DomainBlock

  19. and the first vote for @nivenly members is up -> hachyderm.io/@nivenly/11201984.

    we plan on announcing the "nivenly fedi security fund experiment" later this weekend. preview: pay finders/contributors who find/close high/critical bugs in fedi software. we did a mini proof of concept and sponsored @thisismissem to ship a fix for a critical 9.9 score vulnerability in pixelfed, and now we're ready to expand a bit. more soon!

    #nivenly #hachyderm #fedisecurity

  20. and the first vote for @nivenly members is up -> hachyderm.io/@nivenly/11201984.

    we plan on announcing the "nivenly fedi security fund experiment" later this weekend. preview: pay finders/contributors who find/close high/critical bugs in fedi software. we did a mini proof of concept and sponsored @thisismissem to ship a fix for a critical 9.9 score vulnerability in pixelfed, and now we're ready to expand a bit. more soon!

    #nivenly #hachyderm #fedisecurity

  21. and the first vote for @nivenly members is up -> hachyderm.io/@nivenly/11201984.

    we plan on announcing the "nivenly fedi security fund experiment" later this weekend. preview: pay finders/contributors who find/close high/critical bugs in fedi software. we did a mini proof of concept and sponsored @thisismissem to ship a fix for a critical 9.9 score vulnerability in pixelfed, and now we're ready to expand a bit. more soon!

  22. and the first vote for @nivenly members is up -> hachyderm.io/@nivenly/11201984.

    we plan on announcing the "nivenly fedi security fund experiment" later this weekend. preview: pay finders/contributors who find/close high/critical bugs in fedi software. we did a mini proof of concept and sponsored @thisismissem to ship a fix for a critical 9.9 score vulnerability in pixelfed, and now we're ready to expand a bit. more soon!

    #nivenly #hachyderm #fedisecurity

  23. and the first vote for @nivenly members is up -> hachyderm.io/@nivenly/11201984.

    we plan on announcing the "nivenly fedi security fund experiment" later this weekend. preview: pay finders/contributors who find/close high/critical bugs in fedi software. we did a mini proof of concept and sponsored @thisismissem to ship a fix for a critical 9.9 score vulnerability in pixelfed, and now we're ready to expand a bit. more soon!

    #nivenly #hachyderm #fedisecurity

  24. @risottobias @thisismissem @reiver

    Ditto. I would love to implement a Web Annotation client in my work.

    Maybe we start tracking this with a hashtag? #WebAnnotations

  25. #フェディバース#精神的健康 上の問題を抱えている」: #Medium

    「私たちはフェディバースの #燃え尽き症候群 と精神的苦痛に取り組む必要があり、何かひどいことが起こる前に今すぐ取り組む必要があります。」

    medium.com/@thisismissem/the-f

    #Firefox のアドイン #TWP を使うと日本語で読めます。

    #prattohome