Warum mache ich dann keine "richtige" CW?

Mastodon ist wie Twitter.

Ein Thread besteht aus Posts, Posts und noch mehr Posts. Es gibt nur einen Editor für alles. Damit kann man auch überall jederzeit eine CW dranhängen.

Das CW-Feld ist das CW-Feld. Und beinahe jeder auf Mastodon "weiß", daß das CW-Feld auf Mastodon als CW-Feld erfunden wurde. (Wurde es übrigens nicht. Siehe unten.)

Hubzilla ist nicht wie Twitter. Überhaupt nicht.

Hubzilla ist wie ein Blog. Oder wie Facebook. Wie eigentlich alles außerhalb des Fediverse, das nicht Twitter oder ein Twitter-Klon ist.

Auf Hubzilla besteht ein Thread aus genau einem Post ganz oben, und alle Antworten sind Kommentare. Wie Kommentare auf Facebook. Oder wie Blogkommentare.

Und genau wie auf Facebook und in jedem Blog da draußen gibt es für Kommentare einen anderen Editor als für Posts.

Was seit 2017 das CW-Feld auf Mastodon ist, ist auf Hubzilla schon seit 2015, also schon immer, ein Zusammenfassungsfeld. Im ganzen Fediverse ist es seit 2008 ein Zusammenfassungsfeld.

Dieses Zusammenfassungsfeld gibt's natürlich nur für Posts. Für Kommentare gibt's das nicht. Auf Facebook nicht, in Blogs auch nicht und damit auch nicht auf Hubzilla. Oder hast du schon mal einen Blogkommentar mit Zusammenfassung gesehen?

Warum überhaupt ein Zusammenfassungsfeld?

Weil Mastodon standardmäßig nur 500 Zeichen erlaubt. Man kann gar nicht soviel schreiben, daß das eine Zusammenfassung braucht.

Hubzilla erlaubt über 16,7 Millionen Zeichen. Im Grunde gibt's gar kein Zeichenlimit. Das ist kein Microblogging. Das war nie Microblogging. Das war schon kein Microblogging, als Mastodon mit seinen 500 Zeichen angekommen ist. Da kann man so lange Posts schreiben, daß die wirklich mal eine Zusammenfassung brauchen.

(4/6)

#Long #LongPost #CWLong #CWLongPost #LangerPost #CWLangerPost #FediMeta #FediverseMeta #CWFediMeta #CWFediverseMeta #Mastodon #Hubzilla #CW #CWs #CWMeta #ContentWarning #ContentWarnings #ContentWarningMeta

Warum jetzt die Hashtags mit "CW"?

Kennst du die Filter auf Mastodon? Kennst du "Mit einer Warnung ausblenden"?

Das erzeugt aus einem Schlüsselwort sowas wie eine CW. Auf deiner Seite als Leser. Ganz individuell nur für dich und nicht für alle anderen, die den jeweiligen Post bekommen haben.

Mastodon hat das erst seit Version 4.0, seit Oktober 2022. In Mastodons Kultur ist das nie angekommen. Das kennt auf Mastodon keiner.

Hier auf Hubzilla gibt's sowas schon länger, als es Mastodon überhaupt gibt. Hier war es schon immer Teil der Kultur.

Um aber so ein Filter auslösen zu können, braucht es im Beitrag ein entsprechendes Schlüsselwort. Beispiel:

#CWLong, #CWLongPost und #CWLangerPost = "CW: langer Post ( Zeichen)".

Wer meine Beiträge mit mehr als 500 Zeichen nicht sehen will, legt sich auf Mastodon ein Filter an mit "#CWLongPost". Wer sie wie bei einer CW nur hinter einem Button verborgen haben will, schaltet auf "Mit einer Warnung ausblenden".

#CWFediMeta und #CWFediverseMeta = "CW: Fediverse-Meta" = "CW: Jupiter Rowland schreibt wieder irgendwelchen verqueren Quatsch über Hashtags und wie sie auf Mastodon niemand jemals anwendet. Nichts davon ist auch nur in der Nähe von Mastodons Standards und Mastodons Kultur."

Und so weiter.

Da steht "CW" dran, damit klar ist, daß die für CWs da sind und quasi die Funktion von CWs übernehmen.

(3/6)

#Long #LongPost #LangerPost #FediMeta #FediverseMeta #Mastodon #Hubzilla #Hashtag #Hashtags #HashtagMeta #CWHashtagMeta #CW #CWs #CWMeta #ContentWarning #ContentWarnings #ContentWarningMeta

Warum brauche ich soviele Hashtags?

#Long, #LongPost, #CWLong und #CWLongPost für die, die meine Beiträge mit mehr als 500 Zeichen nicht lesen wollen. Und ich schreibe ständig mehr als 500 Zeichen.

#LangerPost und #CWLangerPost nochmal als Zusatz für deutschsprachige Nutzer, damit die verstehen, was es mit #Long, #LongPost, #CWLong und #CWLongPost auf sich hat.

#FediMeta, #FediverseMeta, #CWFediMeta und #CWFediverseMeta für die, die meine Beiträge über das Fediverse nicht lesen wollen. Weil:

• Bei mir ist das Fediverse nicht nur Mastodon.
• Bei mir ist das Fediverse auch nicht nur Mastodon mit anderen Sachen (PeerTube, Pixelfed) nachträglich als Extras angeklebt.
• Bei mir ist Mastodon nicht fully-featured.
• Ich kritisiere Mastodon offen.
• Ich schreibe ständig über Sachen im Fediverse, die keiner kennt, schon gar nicht als Teil des Fediverse.
  Und über Sachen, die viele lieber nicht im Fediverse haben wollen, weil die sich zu sehr anders verhalten als Mastodon. Also "falsch".

#Hashtag, #Hashtags, #HashtagMeta und #CWHashtagMeta für die, die meine Beiträge über Hashtags nicht lesen wollen. Weil Hashtags für mich nicht nur dazu dienen, die eigenen Beiträge leichter auffindbar zu machen, sondern auch dazu, Filter auszulösen. Etwas, was in Mastodons Kultur auch nicht vorkommt.

Ich schreibe auch noch über andere solche Sachen, die viele Mastodon-Nutzer nicht sehen wollen. Viele auf Mastodon wollen nichts sehen, was nicht auf Linie mit Mastodons Kultur ist.

Daher will ich ihnen eine Chance geben, diese Inhalte loszuwerden. Und zwar, ohne mich stummzuschalten, zu blockieren oder mir zu sagen, ich soll aufhören, so etwas zu schreiben (werde ich nämlich nicht).

(1/6)

#Mastodon #MastodonKultur #MastodonZentrizität #MastodonNormativität #Hubzilla

⁉️ #AskFedi

I want to look up specific people I followed with this #Mastodon account over the years. Since my following list has over 1,200 entries, it is undoable to open the fedi profile of each person one by one.

Is there a tool that allows me to load all these profiles into a single file or webpage, so I can quickscroll or do a search on keywords in the profile Bio texts?

I have a question about #Mastodon's "Mute Conversation" option.

Consider the following:

* I write a post.
* Alice replies to me.
* Bob replies to me.
* Chuck replies to Bob.

I click "Mute Conversation" on Chuck's reply.

Does that mute the *whole* conversation?
Does it just mute replies to Chuck's branch of the conversation?
Can I see further replies to Alice's reply?

(Poll in next post.)

Alt...

Mastodon's mute conversation button.

@argv_minus_one I think people are realising social is not what it suggests or supposed to be (according to me or the word "social").

*Because* #Fediverse is mostly *1-way posts AND no organising* towards #friendship / #forging / #voice #talk together.

= bland / limited #Mastodon etc.

#Admin+#Tech people do 0 human work (i.e. pioneering groups
- not just taking care of Tech).

Make sense, now or in the #future, that we realise...

Oh, this is #boring / mostly #ineffective. Invest in Users.

I made this post on my YouTube channel

#Mastodon #BlueSky #SocialMedia #Fediverse #RetroGaming

Help GYM have its own land for the demonstration gardens and more food production as well as Establishing a large tree nursery to get trees to donate to communities.
https://gofund.me/8da0ff4a0

#community #mastodon #crowdfunding #MutualAid #MutualAidRequest #Climate #ClimateChange #ClimateCrisis #ClimateDiary #climateemergency #nature #NaturePhotography #solarpunk #Agriculture #Sustainability #photography #fediverse #linux #skills #gardening #economy #farming #USA #uk #food @thechattygardener

Alt...

Gardening work in progress

It seems the Halloween theme on Retro Gaiden is universally liked!

A couple of reminders:

1. On November 1st, the Halloween theme will change to a more general Autumn theme. On November 27th, the Christmas theme goes live.

2. Mastodon version 4.8 (due to launch sometime in October) will likely break some of the custom CSS. Elements may not show properly or they might be in the wrong place, etc. I'll correct this ASAP when it happens.

#Mastodon #WebDesign #Halloween

🦣 Herds that roam apart still come down to the same waterhole to keep watch together.

Introducing Waterhole: an open-source collaborative moderation tool built specifically for Mastodon instances that manually review and approve signups.

As Fediverse communities grow or spam waves hit, registration queues can quickly become overwhelming. Waterhole gives your moderation team a shared, real-time workspace to review applicants efficiently without compromising server autonomy or applicant privacy.

✨ Key Features:
• 📋 Shared Queues: Pending registration requests mirror directly into Waterhole. Claim requests, filter them by risk, and coordinate review status in real time.
• 💬 Team Discussion: Leave internal notes and discuss applicants collaboratively before deciding.
• 🔍 Proactive Signals: Automated checks highlight known throwaway email providers, datacenter IPs, Tor exits, templated join reasons, and burst signup patterns.
• 🛡️ Collective Defense: Opt-in cross-instance alerts notify you when the same spammer or bot pattern is prowling around multiple herds. Sharing only behavioral tracks and signals, never private applicant details.
• 🔒 Full Server Autonomy: Approvals and rejections are dispatched directly back to your instance via your Mastodon Admin API. No automated bans or AI decisions. You always keep complete control over who joins your community.

Waterhole is 100% free software under AGPLv3.

🔗 Connect your Mastodon instance to our Waterhole:
https://waterhole.toot.io/about

💻 Explore the source code, documentation, contribute, or self-host:
https://github.com/tootio/waterhole

#Mastodon #Fediverse #FediverseAdmin #MastoAdmin #OpenSource #SelfHosted #Privacy

Alt...

Demo screenshot of Waterhole's registration queue

Alt...

Demo screenshot of Waterhole's registration detail page

Sorry, only minimally sorry XD

P.S., Yes #snac is good too. Very excited about #LittleFedi as well. Not so much into *key, *oma, or friendica, but not hating. Just not my thing. Cheers.

#Fediverse #Mastodon #snark

Alt...

Judgmental Volturi / Smug Vampires meme: Top caption: Me and my fedipeeps watching people on the fediverse complain about "Mastodon" stupid limitations/design choices... Bottom caption: ...from our GoToSocial instance

@evan Yeah but I have no money.

I don't really have big ambitions in life so I wanna build my own cabin and farm in the woods, live off the grid and ditch civilization cos I don't think anybody wants me around and that makes me feel like shit, so idk.

I'll never get mansion, a sports car, a big lawn, booming business, fame, whatever normal people want. Sounds boring.

I really wanna truly live alone, with my own dumb telly to watch cartoons and movies, a radio when I wanna listen to whatevs on the air. I also won't rely on the grid for power so big solar panels with big battery would be good.

#mastodon #solar #solarpunk #farming

What if open protocols operate just like natural ecosystems?

In this article from Silphium Design, we explore how decentralized networks mirror ecological resilience. When nodes federate via ActivityPub, diversity prevents single-point collapse and keeps digital communities sustainable.

Curious how digital ecology maps directly to the Fediverse? Check out the latest:
https://silphiumdesign.com/digital-ecology-in-the-fediverse-decentralized/

#Fediverse #Mastodon #ActivityPub #Decentralization #WebDev #OpenSource

Alt...

An AI representation of digital ecology.

Based on @Curia's infamous #Coyote ruling, the courts continue to chip away at the #DSA's conditional intermediary liability exemption.

This latest judgement from the #Frankfurt court in #Germany has a particularity though: AFAIK it's the first court ruling that explicitly mentions #Mastodon & #Bluesky to explain how platforms with non-algorithmic / chronological feeds are better shielded against liability.

https://ordentliche-gerichtsbarkeit.hessen.de/presse/fake-werbung

CC @je5perl @daphnek.bsky.social @whvholst

Is there a desktop Mac / web app for #Mastodon that lets you shunt all reposts/boosts into a different stream? I’d like to read updates just from people I follow and then skim through the reposts later. Like catching up and then reaching out.

Muting reposts from über-boosters feels like a nose/face cutting situation and I’d like the opportunity to dip in occasionally.

@smallcircles@social.coop but I agree that some do get confused by assuming that #Mastodon (a software), #Fediverse (an ecosystem), #ActivityPub (a protocol) are synonyms and some pedagogy is needed, especially to journalists who write about this. And especially if they are making comparison with other things that are not comparable (e.g. #Bluesky)

Follow us on #Bluesky and #Mastodon for #FreeSoftware #news and events: https://u.fsf.org/4cc #FSF

@smallcircles I'm mainly using #Mastodon in the browser. It works pretty well for me.

If I would have any suggestions, feature requests, or bug encounters, and they are important enough for me, I would report them in an issue tracker of the specific product. Hoping that the project would refer to the protocol or other meta level if that would be a better place to communicate.

#Build the Social #Mindset = fix people's #Logic.

Fixing the #Mindset = Fixing the #World.

Be Social, add caring 2-ways mindsets.

#Tech is not enough alone.

It needs to be more socially social (#develop people, not just #dev tech).

E.G. #Mastodon is software but they are not directly using it's people to #pioneer the #social side itself (on top of the cold #software).

People don't know how to socialise online, so need help.

Making #friends / #friendship = Improving #Mind #Trust

@christin for those sensible people that use Caddy, here's the config snippet for that:

```
@apiacct {
path /api/v1/accounts
not method GET
}

handle @apiacct {
respond "Go stick your head in a pig" 403
}
```

#mastodon #fediverse #mastoadmin

Morgen vertel ik op het festival voor de journalistiek in Deventer over open sociale media en de NRC-server. Voor wie in de buurt is...? https://www.nljf.nl #mastodon #ATProto #NRC

Alt...

poster met aankondiging van het panelgesprek in de bibliotheek van Deventer

If you could choose a default for REPLIES, working with only the existing visibility setting options, what would your default be?

It would be great to get significant numbers on this poll, so please boost. Thanks! #mastodon #feedback

Anyone have any recommendations for a mastodon (or activitypub) server that allows longer posts, say 3k or longer? Also looking for posting tech based content.

#mastodon #fediverse #activitypub

Come abbiamo fatto a ridurre drasticamente le richieste di registrazione degli spambot AI: una guida per amministratori di istanze Mastodon

https://gatti.ninja/posts/mitigazione-account-spam-su-mastodon/

#Mastodon #fediverso #registrazioni #spam

@luca

I think the "official EU" should have multiple instances; after all, it's the Fediverse. That, in itself, would make for a far more resilient and robust solution.

And yes, "official Canada" should (obviously) also have something similar.

As for people being on X, and elsewhere, the light doesn't shine equally on people of the planet 😎

@EUCommission @hpod16

#fediverse #mastodon #eu #europe #canada #federation

@xrobau

If only following #hashtags didn't override your #Mastodon language filters 😞

I've had to mute thousands of accounts posting in languages I don't understand to tame my timeline without giving up following the hashtags I want, & I still have to mute a dozen or more every day.

Every now & then I'm tempted to just unfollow certain tags ( #Fediverse above all), losing out on that content just so as not to have to deal with all the posts I don't understand.

Gratitude day 4: Vim

#SeptemberTheme #gratitude #blog #fediverse #mastodon #editors #terminals #vim
https://lazybea.rs/gd4-vim

Posting to Mastodon without hashtags is posting into a void. No algorithmic feed is coming to rescue the post. Two to four tags, every time. We learned that one slowly. #mastodon #fediverse #socialmedia

Quick heads-up for other Mastodon admins: this registration spam wave isn't over yet.

On lsbt.me, we first saw a flood of API registrations using Python/aiohttp. The telltale signs were usernames following the pattern bp plus 16 hex characters, and the sign-up reason was always "Automated protocol deliverability probe". A narrow block on that user agent stopped the first wave.

Today, however, five new registrations came in with the same usernames and the same sign-up reason. This time the bot simply identified itself as Chrome 126. That's exactly why a user agent is only useful as a short-term filter. It's a header the client can set to anything.

The requests go to POST /api/v1/accounts. This endpoint lets client apps create a new local account directly in the app. No app needs it for OAuth connections to existing accounts. #FediSuite doesn't use it either. It registers itself via /api/v1/apps, obtains consent via /oauth/authorize, and then works with a user token. Regular sign-up through the Mastodon website is also handled separately via POST /auth.

So I've completely disabled API account creation on lsbt.me. Web sign-up, OAuth, and existing clients keep working as before. Anyone who wants a new account just signs up once on the web as usual and can then use any client.

If you'd also rather not offer this optional native sign-up path, you can add the following to your Nginx server block, before the general location / block. The example assumes the @proxy location that many Mastodon Nginx configs already include:

location = /api/v1/accounts {
  limit_except GET {
    deny all;
  }
  try_files $uri @proxy;
}

This returns a 403 only for POST /api/v1/accounts. The read-only GET endpoint remains reachable. As always, run nginx -t afterwards and only reload once the test passes.

#Mastodon #Fediverse #MastoAdmin #FediAdmin #FediMod #FediBlock #Moderation #Registration #Spam #Nginx #SelfHosting #SysAdmin #ActivityPub

Attention #fediverse / #mastodon

We're entering #election season in the #USA. The #midterms

That means something for you:

You will see an increase in #trolls

Messages along the lines of

"Nothing ever changes, both sides the same, waah" #cynicism

And

"The candidate is unideal. Allow me to amplify and manufacture high holy outrage on the point" #perfectionism

All of which is designed to suppress the #left #vote and help #MAGA

You have been warned. Brace yourself

https://www.rfi.fr/en/international-news/20260915-russian-disinformation-campaign-sets-sights-on-us-midterms

@EUCommission Start by inviting them to your Mastodon instance.

#mastodon #foss #oss #privacy #openplatforms

Guide d’utilisation et tutoriel non-officiel de Mastodon en français:

➡️ https://www.didiermary.fr/sommaire-du-guide-mastodon

(C'est par @cybeardjm )

#FediTips #Mastodon #Français

The FediBlue Mastodon instance has been updated to Mastodon 4.7.2 which is a security update that temporarily disables HEIF support

https://mastodon.fediblue.de

#fediblue #mastodon #fediverse

#Mastodon v4.7.2 upgrade pending on TurtleIsland.social
#Native #Indigenous #BIPOC #Allies #TurtleIsland
https://github.com/mastodon/mastodon/releases/tag/v4.7.2

Dear #Fediverse and #Mastodon admins

currently there is a massive wave of spam registrations everywhere in the fediverse.

For mastodon, I have a solution that works for me:

Create new file /etc/nginx/conf.d/lsbt-registration-spam.conf:

  map "$request_method:$uri:$http_user_agent" $block_lsbt_registration_spam {
    default 0;
    ~^POST:/api/v1/accounts:Python/3\.[0-9]+\ aiohttp/ 1;
  }

Add to the server block in /etc/nginx/sites-available/mastodon:

  location = /api/v1/accounts {
    if ($block_lsbt_registration_spam) {
      return 403;
    }
    try_files $uri @proxy;
  }

@michaela @njakob @MikeGorden
#fediverse #mastodon #registrationspam #spam #registration #Automatedprotocoldeliverabilityprobe #lsbt

I’ve reached out to Baroness Benjamin to explain how her Bill that would require anyone running a social media platforms obtains a license from Ofcom, would impact someone running aMastodon instances in the UK https://bills.parliament.uk/publications/67647/documents/8738 . Will keep you posted if she replies. #Ofcom #mastodon #socialmedia #regulation

Gratitude day 2 - GAS

Have you ever bought something you did regret ?

#SeptemberTheme #gratitude #blog #fediverse #mastodon
https://lazybea.rs/gd1-gas

Cc: @rl_dane @gregmignard

Gratitude day 1 - Water

#SeptemberTheme #gratitude #blog #fediverse #mastodon
https://lazybea.rs/gd1-water

Cc: @rl_dane

I do think media files decay and vanish on mastodon as time passes... I'm not even mad about it. Makes the whole self-hosted community-owned model make a lot more financial sense to me.

#mastodon

Like most social networks, Mastodon is not end-to-end encrypted. If you're sending sensitive info it's better to use a separate end-to-end encrypted messaging app.

Mastodon itself warns you about this if you are sending a DM through the web interface (see the screenshot).

More info about the risks and how to mitigate them in the guide at:

➡️ https://fedi.tips/is-mastodon-end-to-end-encrypted

TL:DR - Main risk is your server admin reading your DMs, but they would need techy skills to do this.

#FediTips #Mastodon #E2EE

Alt...

Screenshot of writing a DM in Mastodon's web interface, there is a warning above the writing box which reads "Posts on Mastodon are not end-to-end encrypted. Do not share any sensitive information over Mastodon."

❗️ Spam accounts on #Mastodon #bpSpam

If you want to quickly select all accounts beginning with ‘bp’ in the admin panel (to suspend them), enter the following in the ‘Username’ field:

bp%

It’s also worth selecting ‘Active only’ under ‘Moderation’ in the form above to view newly registered accounts.

#FediMods #FediAdmin #Mastodon

The new Pixelfed app technically works with Mastodon to some degree, and 🤔

Nothing causes crashes because we made everything more resilient, but it would need work to officially support, as you can see from the html tags lol.

#pixelfed #mastodon

Alt...

The new Pixelfed app using a Mastodon account

Alt...

The new Pixelfed app using a Mastodon account

#Mastodon #Fediverse newbie advice:

Before you start following people, I strongly recommend:

Create an avatar and/or banner image.

Write a short bio.

Write some posts. Pin a couple of them.

Also, post with some tags, particularly the #Introduction tag (probably with one of those posts you pin).

This way, when people check who you are (if you follow them or they consider following you), they can see a hint of who you are (and that you are a "who" rather than a "what").

RE: https://mastodon.pnpde.social/@spielleitung/117242341921660658

This is the first use of database triggers I've seen for modifying #Mastodon behavior. It's a very clever idea!

The Linux mainline kernel itself contains AI code now. It's officially allowed as long as it's disclosed as such. Thus, you will have to avoid literally all servers running on Linux.

https://docs.kernel.org/process/coding-assistants.html

https://www.neowin.net/news/linus-torvalds-declares-massive-ai-fueled-code-surges-as-the-new-normal-for-linux/

NetBSD has very strict rules regarding AI-generated code. But it doesn't rule AI-generated code out out of principle because it's AI-generated; it only wants to be safe that nothing that's actually GPL-licensed is slipped in. So, if you're an 100%, ultra-hardcode anti-AI extremist, avoid what few servers run on NetBSD.

https://www.netbsd.org/developers/commit-guidelines.html

OpenBSD contains AI-generated code, too. And it has no official stance regarding it. So servers running on OpenBSD are taboo, too.

https://www.osnews.com/story/144935/openbsd-and-slopcode-raindrop-to-a-torrent/

FreeBSD has no stance on AI whatsoever that I could find. However, apparently, the FreeBSD community loves to integrate Claude Code into their systems for automation purposes:

https://aumont.fr/posts/claude-code-freebsd/

https://discoverbsd.com/p/8a7660c31b

But you'll also have to look at the userland, the Web server, the database driver etc.

MariaDB allows AI code. You can safely assume that all MySQL databases on Web servers out there are actually powered by MariaDB.

https://mariadb.org/governance/governance-ai-policy/

Oracle MySQL can integrate AI, so it's safe to assume it contains AI-generated code.

https://blogs.oracle.com/mysql/announcing-mysql-ai

PostgreSQL probably allows AI code, too. There are even tools for it.

https://github.com/timescale/pg-aiguide

SQLite is very popular amongst AI users while not having any rules on AI-generated code. Assume it to be tainted.

This leaves you with only one choice: Self-hosting a personal, single-user snac2 server because snac2 doesn't need any database whatsoever. In fact, snac2 is staunchly against AI. And it runs on NetBSD.

https://codeberg.org/grunfink/snac2

But then there's the Web server. Apache may allow AI-generated code if it has been reviewed and made sure that it does not contain anything that's incompatible with the Apache-2.0 license.

https://www.apache.org/legal/generative-tooling.html

nginx welcomes AI and advertises itself as ready for AI, and it takes no anti-AI-code stance. It's most likely already tainted.

https://www.f5.com/de_de/products/nginx.

This basically leaves you with no Web server guaranteed to be 100% free from AI-generated code to run snac2 on. But that doesn't matter because it's impossible to build a Web server devoid of any AI code to install snac2 on.

By the way: Mastodon itself explicitly allows AI code if it's disclosed as such, and if its contributor understands it.

https://github.com/mastodon/.github/blob/main/AI_POLICY.md

In other words, next to all Mastodon servers are running

• AI-generated Mastodon code
• on an AI-generated Web server
• with an AI-generated database driver
• on an AI-generated operating system kernel

Apparently there is a quite successful credential stuffing campaign targeting Mastodon. Not 10 minutes ago, I suspended an account taken over by someone in Estonia who started posting racist garbage and Telegram links.

Infosec.exchange has seen 5 of these today.

They all seem to be coming in from Telegram users.

** Will you all, PLEASE, enable 2FA on your accounts to prevent your accounts from being taken over! **

#mastodon #hearmesocial

Downgraded #Fedra and I never have that constantly interacting with unintended posts problem. It's already documented via the Github, I just couldn't stomach the bug. https://github.com/trypsynth/fedra/releases #Mastodon #Fediverse

The FediBlue Mastodon instance has been updated to Mastodon 4.7.1

You're searching for a new Mastodon server and are a FOSS interested and friendly person? Then look behind this awesome link: https://mastodon.fediblue.de

#fediblue #mastodon

#Mastodon voice messages?

"Make social vocal" ?

#Idea #suggestion #BOOST #dev

Voice #filters added for #privacy?
(like #TikTok funny voice masks but more human sounding?)

= voice messages + #masks / filters ?

(a risk but much more #progressive #P2P)

Protection with a voice 'mask'.

What do you think ?

(Text is limited = can't cover the human expression range like voice and for some text isn't possible / too hard).

Also #Jitsi (https://meet.osna.social/) + integrated voice #masks?

Israeli censorship seems to have taken control of Mastodon, too.
You are free to hashtag "nazi", "zionist", "fascist" and so on, but the hashtag "zionazi" is forbidden.

#zio*nazi #israel #masssurveillance #palantir #AIPAC #Elnet #ADF #netanyahu #masspsychosis #politics #freespeech #mastodon

One reason I post on #Mastodon but no longer on Twitter/X or their spin-off Bluesky. My complaint a year ago was marked spam, but it is a true testimony!

#censorship

I just noticed that, if I look up a #Lemmy or #Piefed community on #Mastodon, I'll get a profile page but no posts!

Is that a bug in Mastodon? Or is there no standard #ActivityPub protocol for fetching content from a person/group that you aren't already following?

I seem to recall Mastodon adding a “fetch content from the other server” feature recently, but it sounded like a Mastodon-specific protocol extension was involved. That's…not great. It really should be universal.

🆕 blog! “A reasonably practical guide to validating RFC 9421 HTTP Signatures for ActivityPub in PHP”

If you're reading this, you've probably been hitting your head against a brick wall trying to parse and decipher the new HTTP Signatures sent by Mastodon and other Fediverse servers.

This is a…

👀 Read more: https://shkspr.mobi/blog/2026/09/a-reasonably-practical-guide-to-validating-rfc-9421-http-signatures-for-activitypub-in-php/
⸻
#ActivityBot #ActivityPub #mastodon #php #webdev

"No posts here!" said Captain Obvious.

#Mastodon

Alt...

Snapshot from the Mastodon timeline of a fedizen that posted 83 toots, and the timeline box is a huge empty area, with only the text "No posts here!"

More than 60k followers on #Mastodon 🎉💪

What a great community ❤️

Connected to our latest post on how to turn off Gemini?!

Alt...

Screenshot of Tuta Mastodon profile

Can someone that's familiar with the details of FEP-044f (the one underlying Mastodon's quote posts) tell me if there's something I missed and there *IS* a way to ensure that malicious instances (or clients) aren't able to disregard the whole thing and just allow and present quoted posts without their original user's consent?

#fedidev #mastodon #mastodev #activitypub #fep_044f

I think the #RFC9421 HTTP Signature algorithm should be explicitly included in #Mastodon's requests.

Feedback welcome - especially those explaining politely why I'm a wrong about this.

https://github.com/mastodon/mastodon/issues/29905#issuecomment-5440336919

Hey, #Mastodon and #ActivityPub developers.

How much skew do you allow before rejecting a message?

I've just received something where the header is signed:
Mon, 31 Aug 2026 20:09:54 GMT

But the ActivityPub message was published:
Mon, 31 Aug 2026 19:58:36 GMT

That's a little over 10 minutes. Is that too much? Should I not care as long as the signature validates?

I am seeing reports of a small number of #GazaVerified accounts hounding people who have donated in the past with posts at the rate of “one every few minutes”.

This has to stop.

If you’re doing this, your servers will suspend your accounts and we will not step in to help nor will we reverify a new account.

This is harming everyone on #GazaVerified and the reputation of Palestinians in general and we won’t be tolerating it.

And the people who sympathise with the cause and have donated in the past do not deserve to be harassed in this way.

Please stop.

#Gaza #Palestine #mastodon #fediverse

sometimes later, i'm going to continue work on the #mastodon command line agent I've been working on for a while.
I need to work on it , and I plan on fixing a few bugs, and woof woof, meow meow.

the reason I haven't worked on n it is because I have other projects to work on at the same time

#FediMeta #FediverseMeta #CWFediMeta #CWFediverseMeta #Mastodon #ActivityPub

setup a new #opentelemetry collector in my #mastodon namespace, successfully shipping traces from the various components into #grafanaLoki as well as configuring traces from #agentgateway to Loki :)

Mankind (mostly) or machines (mostly) ?

Can you imagine a better #society with less-tech / less machines than today ?

(still having with plenty of tech & machines but not only the primary focus if we agree most in life are doing similar tech related things).

Becoming less-tech & having #people make friends using basic #tech? (only #Jitsi & 2+ people needed).

Seems simple. Make friends with ALL sectors with good people in them. Not just tech.

#mastodon #nginx logs -> json-formatted, bespoke logging operator flow to parse the json, properly ingested into #grafanaloki 💪 way to end the weekend :) still need to figure out alerts.

@Em0nM4stodon

I don't have to worry about a corp waking up one day and deciding that something I posted deserves to get my account deleted.

#Fediverse #Mastodon #AskFedi

Love machines.
Not growing people?

Pioneering people / social needs #Mastodon to have staff / people to back it and get people to really talk to each other (both light and DEEPER/RARE stuff).

Fund it if they have to as a better exchange (not machine development time, but social / #SOCIETY).

Thanks for hearing me out and even "let's do it" if you're interested in doing something / anything about it.

@renardboy For example #Mastodon = 100% great #software

but

Bringing people more socially up themselves = near-0

Mastodon as ' a bit better crowd than twitter who moved from there') is limited.

It's about #Pioneering people / principles UP!

Even forums (#phpBB) or #ICQ #AIM ~20 years again did better if people were driving / motivating it.

Maybe #Tech and #Money (#banks) go together well so people settled for diving banks pockets and power deeper and deeper.

It looks like the migration to this new instance was [mostly] successful. However it does appear I lost some followers and followees.

Note to fediverse app and ActivityPub maintainers: we really need one and only one schema and format, based on flat text lines or .csv, for importing, exporting, migrating profiles, posts, follow(ing) lists, etc. Too many cooks spoils the stew.

#Fediverse #ActivityPub #Mastodon

If you clean a vacuum cleaner, you are a vacuum cleaner.

If you push a lawnmower, you are a lawnmower.

If you #boost this toot, you are the algorithm.

#Mastodon #Fediverse

RE: https://rpi0w.stefanomarinelli.it/@stefano/01a0448d-c9e8-7b7e-a225-b22fc0333f0f

Mastodon is great. But littleFedi, snac, GoToSocial, Mitra, Akkoma, etc. - they all share a mission: make sure people will be able to self host their instances without investing a huge sum.

#Fediverse #Mastodon #littleFedi #snac #GoToSocial #Mitra #Akkoma

Mastodon has an optional translation system to translate posts in languages that you don't speak. To use it, just click on "Translate" below a post (on some apps the translate option may be in the post's ⋯ menu).

I've tried to answer common questions about Mastodon's translation feature in this guide:

➡️ https://fedi.tips/is-there-a-built-in-language-translation-system-on-mastodon

Let me know in the replies if I've missed your question.

#FediTips #Mastodon #Translation

man that is a dramatic difference #mastodon

The #EU is putting some money where their mouth is.
€1.48 million for pilot projects involving young people from different countries and backgrounds to development new European #SocialMedia platforms, focusing on user safety, mental health, privacy and ease of use. Building on #Fediverse or #ATProtocol

Deadline: 6 October.

https://digital-strategy.ec.europa.eu/en/library/presentation-materials-call-proposals-youth-driven-social-media-design

#Mastodon #EuropeanUnion #Youth

Alt...

A screenshot from a PowerPoint: Through co-creation under youth participation, design and test a Fediverse based/Authenticated Transfer (AT) Protocol-based social media platform that is targeted specifically at young EU citizens and is focused on user well-being and adapt a roll-out strategy based on market research and stakeholder consultation.

wew a lot more traffic after getting the #activitypub #relay online and doing #mastodon relay housekeeping :P

RE: https://dobbs.town/@bobcromwell/117164438687055192

this shagmaxxing content right here is why i’ve parked my ass at #mastodon and the #fediverse

Little Fedi looks like an interesting project! I also saw a toot earlier where it was showing a settings screen where someone disabled media without a description. https://littlefedi.org/ #AltText #Fediverse #ActivityPub #Mastodon

🆕 blog! “Some updates to ActivityBot”

I couple of years ago, I developed ActivityBot - the simplest way to build Mastodon Bots. It is a single PHP file which can run an entire ActivityPub server and it is less than 80KB.

It works! You can follow @openbenches to see the latest entries on OpenBenches.org, and @colours for a …

👀 Read more: https://shkspr.mobi/blog/2026/03/some-updates-to-activitybot/
⸻
#ActivityBot #ActivityPub #mastodon #php

I'm going to try and keep a record of all the bugs, errors, and inconsistencies I've reported in #ActivityPub and #Mastodon documentation.

First up, how big are the limits on what you can federate?

Mastodon lists some limits in KB/MB, but others are just raw numbers. That might make sense for an ASCII world - but emoji complicate everything.

https://github.com/mastodon/mastodon/issues/40290

#CrazyFediverseAnalogies

Hmm, I can't post a magnet-link here, even though the #ActivityPub supports that protocol: https://docs.joinmastodon.org/spec/activitypub/#sanitization

Neither via @phanpy nor via mastodon-web

The char-limit of my instance is 500, which is less than the particular magnet-link has. This seems to be the issue, the automatic validator doesn't treat it as only 23 characters like with https

Does anyone have the same issue and/or knows more ?

#Mastodon #BitTorrent

Even more HTTP Message Signature weirdness.

My server receives a lot of "Delete" requests from #Mastodon server.

Those requests are signed.

I try to validate the signature but… the user is deleted!

So I try to retrieve the user's Public Key at, for example, https://nrw.social/@Faxy.json#main-key but get an error.

I suppose an HTTP 410 is a pretty good indication that the user has been deleted. And I *might* have previously cached the key. But it does feel a *little* bit pointless.

So, I admit that filtering out instances simply because they use the `.cf` TLD can be unfair. After all, it's just a TLD — that's not enough reason by itself to filter an instance out.

So I took a closer look at the JSON file containing the hosts that were actually filtered.

And the overwhelming majority of the `.cf` hosts were:

`activitypub-troll.cf`

I'm not kidding. The screenshots show the actual JSON data I got, and they're only a tiny fraction of the full file. There were so many entries that even VS Code couldn't count them all.

To be fair, there may absolutely be legitimate `.cf` servers out there. I just couldn't manage to find them in this dataset.

But I think we can agree that filtering `activitypub-troll` hosts doesn't require blocking the entire `.cf` TLD. We can replace that broad rule with a much more specific one.

So, that's another improvement to make!

#activityPub #mastodon #fediverse #opensource

Alt...

This is a screenshot of my VSCode, and these are the results of "activitypub-troll.cf" in the log file. It says there are over 19999 of them.

Alt...

This is a screenshot of my VSCode screen, and this is just a repetition of "sub-domain.activitypub-troll.cf" got filtered due to using .cf tld.

What is a factual event from your life that seems unlikely or fantastical? Me, I once fell into quicksand.

#question #experience #story #fediverse #mastodon

RE: https://social.vivaldi.net/@thanksstevenkim/117154791519179296

A few people have asked where the “710,000 spam servers” number in my previous post came from, so I thought I should explain it more clearly.

First, I should clarify something: calling all of them “spam servers” was an oversimplification for the joke. A more accurate description would be hosts filtered out as likely spam/noise by my automated filter.

When I run `filter_spam.py` for the project, I get the following results. The script outputs in Korean because Korean is my native language, so I've translated the output here:

The actual filtering results are quite long, so I've moved them to the next post in this thread ⬇️

#fediverse #selfHosting #activityPub #mastodon #openSource

@rmblaber1956 I think people #respect money, which is why they vote similar in other countries.

They might not even like him but they follow / respect money (even if it's funny-money)/

#Moral #conscience or paying for others is not even in normal people's minds - and I've #tested a lot of people on #Mastodon and in my life. and as fairly as possible.

People don't want #responsibility or even run #basic things themselves. So give it up to #trump ed up types to then #blame them instead... #Sad.

.. out of 10 follow requests in the fediverse I reject about 8.

I reject user accounts that do not even have a profile or their own posts or their own media on their original server page, because I consider them to be of non-human origin until then.

What do I conclude from this?
Even here in the noble fediverse, "social media" shows itself to me as a bubble of vain appearances.
Hardly anything is authentic or truthful anymore and if you post here you make yourself suspicious of untruthfulness like everywhere else!

So how do we want to defend ourselves against this flood of social engineering???

Any suggestions???

#nobot #noai #socialengineering #socialMedia #fediverse #mastodon

Alt...

Social Media Bubble

FYI — Still having major issues with masto.ai very frustrating. I’ve gotten just about every error message there is.

#mastodon @stux @mastodonmigration

Does #Mastodon even use `contentMap` in posts (`Note`)? The #ActivityPub spec specifies a method for multilanguage posts in the form of `contentMap`, but does the rest of the #Fediverse even get to read it? Do posts that have `contentMap` but **not** `content` get to show at all?

Re: https://www.disruptiveconversations.com/2022/12/mastodon-tip-filter-languages-to-see-only-the-ones-you-understand.html

#i18n #l10n

I’ve been working on a small Fediverse project called "The Hitchhiker’s Guide to the Fediverse".

It started as a simple directory of Fediverse instances, but I’ve been gradually turning it into something more useful:

- discovering new instances through federation peers
- filtering suspicious/spammy hosts
- monitoring known instances over time
- automatically hiding servers that stay offline
- bringing them back if they recover
- keeping the whole thing updated with GitHub Actions

The monitored set is already around 27,000 instances, so I also had to rethink the collector to use bounded concurrency and checkpointing instead of checking everything one by one.

Still very much a work in progress, but it’s been a fun way to learn more about how the Fediverse actually behaves in the wild.

https://github.com/thanksstevenkim/the-hitchhikers-guide-to-the-fediverse

#Fediverse #ActivityPub #Mastodon #OpenSource #SelfHosting

This one special for #Mastodon peeps!! 🤣

Anyone else having issues with #mastodon? Super glitchy, extremely slow, crashing etc?

https://codeberg.org/ihabunek/tooi

Tooi is the successor to 'toot'. It is /way/ nicer so far.

In addition to being 'keyboard-driven' it also responds to the mouse pointer. This is efficient when using a keyboard with a touchpad.

#Fediverse #TUI #tooi #Mastodon #FreeSoftware