Fediverse

cross-posted from: https://lemmy.zip/post/10361406

Thorough report about the recent Fediverse spam.

Related posts:

• We seem to be getting attacked. - https://lemmy.giftedmc.com/post/235816
• Solutions and origins of the spam wave currently hitting the Fediverse - https://feddit.cl/post/1883287
• Mastodon CVE Report - https://hachyderm.io/@maegul/111944073448637061
  • Remote User Impersonation and Takeover via Cache Poisoning - https://arcanican.is/excerpts/cve-2024-23832/discovery.htm
  • Remote user impersonation and takeover - https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw

An awesome new app just got released for free on itch.io, that lets Fedizens create their own MTG-style playing cards.

It's mostly about mastodon, but spammers also have hit Lemmy communities. This mastodon post contains solutions to mitigate the wave for admins, and also link to the origin of the thread. Turns out they're japanese kids from discord.

Mastodon CVE Report

Didn't expect the mastodon CVE report/account would kinda end up being about platform diversity on the fediverse (TLDR: only mastodon really had the problem, which was huge)

https://arcanican.is/excerpts/cve-2024-23832/discovery.htm

@fediverse

#CVE #mastodon #fediverse

We sat down and chatted with Shawn Grigson from Oliphant, who gave us a fascinating and detailed view of what crowdsourced community moderation looks like.

He weighed in on challenges and headaches, and a possible way forward for brighter and better things in the Fediverse.

As decentralized social networks become more popular, the way different protocols interact could set the stage for the future of the web.

https://dan.mastohon.com/@danhon/111925461009889302

more in thread + https://flic.kr/s/aHBqjBdZ8F

A few more examples:

Found via JWZ: Helpful Notices

I posted a callout earlier this week, and originally planned to use Guppe Groups.

After some feedback about gup.pe accessibility and ephemerality I've created a New Community here to discuss issues facing interop of the Article type object across the #fediverse

https://lemmy.ml/c/article_interop

Bridgy Fed made a splash earlier this week by announcing its latest progress in connecting the Fediverse to Bluesky and Nostr. Sadly, not everyone was welcoming.

We recently chatted with two of the devs involved with Bonfire. Honestly, they have some really amazing ideas about building a modular Fediverse platform that developers can build on for their own apps.

The Fedipact statistics are interesting

7% of active users committed to #fedipact - https://fedidb.org/current-events/anti-meta-fedi-pact

* How representative of the user base is this, or are admins gatekeeping here? A large survey would be good to clear that up.

* EG, Mastodon, relative to its userbase, seems the most "Meta friendly" with only 57% of fedipact users (but ~80% all users)

* Fractal of niche-dom? Fedi ~1% of social media, fedi-pact ~ 10% of fedi. So anti-meta-fediverse ~0.1%?

@fediverse
@fediversenews

A conversation is a collection of messages with a common context. The ActivityStreams specifications define both collections and contexts, but very little guidance is provided on how to use them effectively. This document specifies an Acti

At the end of 2023, we ran a census on lemmy.ca. Analyzing the data took a little longer than I thought it would, but the results are now available!

To see the post, you can do one of:

• Use this link: https://lemmy.ca/post/15125231
  • On mobile, your app should open it in your home instance
  • On desktop, you can use the InstanceAssistant extension to redirect the post
• Open !main@lemmy.ca and see the pinned posts

I didn't do a regular crosspost in case there is an error in the results. This way I only need to fix one post instead of many.

Hope you enjoy :)

In Germany there's an app called "Jodel", which is essentially like a localized reddit/lemmy. That means, you only see posts from people near you (the default is something like 10km, I think).

This is of course awesome for localized events, Craigslist style posts, or just discussions about local stuff.

I wondered, despite creating local communities on Lemmy or tags for your city, is there anything like it on the fediverse?

Decent Decentralisation

https://berjon.com/decent-imaginaries/

Good counter to the focus on protocols.

> a protocol needs to achieve two things: it needs to prevent the accumulation of power imbalances between parties … and it needs to make it easy for users to cooperate in building the the rules they want for how the protocol's operation affects them … the success of decentralisation and … of a democratic digital world **rides not only on liberation but also on organising**.

@fediverse

By @robin

This is the proposed FEP-61cf: The OpenWebAuth Protocol. OpenWebAuth is the “single sign-on” mechanism used by Hubzilla, (streams) and other related projects. It allows a browser-based user to log in to services across the Fediverse using a single identity. Once logged in, they can be recognised by other OpenWebAuth-compatible services, ...

#Seppo empowers you to publish short texts (and images yet to come) and to network in the Social Web. By renting commodity web space and dropping a single file. Without being subject to terms and conditions. Without having to fret about small print or tech lore. And without the need for an IT-consultant. But rather having a life.