### Hollo security updates: 0.7.15 and 0.8.3 If you run Hollo, update to a patched release now. A private network protection bypass in Fedify, the ActivityPub framework Hollo depends on, affects remote document loading. URLs with private IPv4 addresses encoded as IPv4-mapped IPv6 literals, such […]

### Fedify security updates: 1.9.10, 1.10.9, 2.0.16, 2.1.12, and 2.2.1 If you use Fedify, update to a patched release now. A private network protection bypass affects Fedify's remote document loading code. URLs with private IPv4 addresses encoded as IPv4-mapped IPv6 literals, such as `http://[ […]

I'm here at PyCon Busan 2026! I'm manning the Hackers' Pub community booth with @kodingwarrior and @2chanhaeng. Stop by and we'll give you some Hackers' Pub stickers!

파이콘 부산 2026에 왔습니다! @kodingwarrior 님, @2chanhaeng 님과 함께 Hackers' Pub 커뮤니티 부스 자리를 지키고 있습니다. 방문해 주시면 Hackers' Pub 스티커를 나눠드립니다!

釜山驛(부산역) 到着(도착)!

PyCon 釜山(부산) 가려고 서울驛(역) 왔는데 랩톱으로는 인터넷이 안 된다… 電波(전파)가 復雜(복잡)해서 干涉(간섭)이 甚(심)해서 그런가…?

Even though I've read all the messages in my Element X app, the number 1 in the red circle won't go away. It's really annoying.

**@小明@範例.測試, or, Fediverse handles in every language** is the proposal I just submitted to @COSCUP . Abstract: A person's handle is their name and address on the Fediverse. But despite people on using the Fediverse in many languages from all over the world, almost all handles are limited to […]

Just submitted a CFP to the Fediverse & Social Web track at @COSCUP 2026. The talk is titled _I just wanted ruby annotations: writing in dead scripts on the living fediverse_. Here's the abstract: > Koreans used to mix hanja (漢字; Chinese characters) into Korean prose, much as Japanese still […]

The CFP for our _Fediverse & Social Web_ track at @COSCUP 2026 closes in a week, on May 9. If you've been thinking about submitting, now's the time! RE: https://hackers.pub/@fedidevkr/2026/fediverse-social-web-track-at-coscup-2026-cfp

The CFP for our _Fediverse & Social Web_ track at @COSCUP 2026 closes in a week, on May 9. If you've been thinking about submitting, now's the time! RE: https://hackers.pub/@fedidevkr/2026/fediverse-social-web-track-at-coscup-2026-cfp

Drafting a proposal to add API support in #Fedify for the ActivityPub Media Upload extension, the SocialCG-incubated #c2s companion that lets clients upload media via a dedicated `endpoints.uploadMedia` endpoint, separate from the outbox. The sketched API mirrors the outbox listeners shipped in […]

**1,234,567,890** —韓國語(한국어)로는 「十二億(십이억) 三千四百五十六萬(삼천사백오십육만) 七千八百九十(칠천팔백구십)」인데, 쉼標(표)는 왜 千(천) 單位(단위)에 있을까요? 萬進法(만진법) 表記(표기)를 提案(제안)합니다: **12_3456_7890**. https://myriad-project.org/ko/

Two #activitypub fixes I submitted to #misskey are in the latest release. I am so amped to see this happen; I cannot emphasize enough how important it is for established #fediverse platforms to support the ActivityPub spec correctly. I love seeing this happen. Thank you Misskey for making the […]

What do you think about JSON-LD language maps for "preferredUsername"? I.e., preferredUsernameMap. "preferredUsernameMap": { "en": "hello", "fa": "درود", "ko": "안녕하세요 " } #fedidev #jsonld

Internationalisation of "handles" on the fediverse, fresh from #fediforum https://lists.w3.org/Archives/Public/public-swicg/2026May/0001.html @technical-discussion @hongminhee

Just submitted a CFP to the Fediverse & Social Web track at @COSCUP 2026. The talk is titled _I just wanted ruby annotations: writing in dead scripts on the living fediverse_. Here's the abstract: > Koreans used to mix hanja (漢字; Chinese characters) into Korean prose, much as Japanese still […]

@noellabo テストしていただけて嬉しいです。何か問題がありましたら、ぜひお知らせください。 Issue はこちらで管理しています： https://github.com/social-web-foundation/tags.pub/issues 特に日本語に関する国際化（i18n）の課題には注目していますので、気づいた点があれば教えていただけると助かります。

tags.pubをリレーに追加して、テストしています。 tags.pubは、基本的な仕組みはハッシュタグリレーと同じで、リレーとして公開投稿を受け取って、ハッシュタグ付き投稿を希望者に配送するサーバです。 特定のハッシュタグつき投稿を受け取りたい人は、tags.pubのハッシュタグに対応するアカウントをフォローすると、tags.pubに届いた該当ハッシュタグ付き投稿がブーストされてきます。（Announceアクティビティなのですが、リノートとかリピートとか実装毎に機能の名前が異なります） Social Web Foundationの設置しているサービスで、グローバルなハッシュタグ […]

Both Mastodon and Pixelfed seem to attach images as ActivityPub/ActivityStreams "type" = 'Document'. I would have expected "type" = 'Image'. 'Document' isn't wrong. It is valid. But, I would have expected the more specific type of 'Image'. #activitypub #activitystreams #fedidev

One of the reasons our project can't move to a CI/CD service other than GitHub Actions or a forge service other than GitHub is precisely because of npm and JSR's dependency on GitHub. If you want to use trusted publishing for your JavaScript packages on npm or JSR, you are forced to use GitHub […]

What if web-browsers could render the ActivityPub / ActivityStreams JSON-LD source-code into the document it represents? Fediverse clients can do it — why can't browsers? I previously created a small-net / small-web browser client named SpaceMonkey. It […] [Original post on mastodon.social]

The CFP for our _Fediverse & Social Web_ track at @COSCUP 2026 closes in two weeks, on May 9. If you've been thinking about submitting, now's the time! RE: https://hackers.pub/@fedidevkr/2026/fediverse-social-web-track-at-coscup-2026-cfp

The CFP for our _Fediverse & Social Web_ track at @COSCUP 2026 closes in two weeks, on May 9. If you've been thinking about submitting, now's the time! RE: https://hackers.pub/@fedidevkr/2026/fediverse-social-web-track-at-coscup-2026-cfp

@COSCUP 2026 **연합우주 & 소셜 웹 트랙** 발표자 모집 마감이 2주 앞(5월 9일)으로 다가왔습니다. 발표를 고민 중이셨다면 지금이 바로 기회입니다! RE: https://hackers.pub/@fedidevkr/2026/fediverse-social-web-track-at-coscup-2026-cfp-ko

Fedify 2.2.0 is out! This release finally adds client-to-server (C2S) outbox listener support, proper HTTP `410 Gone` responses for deleted actors via `Tombstone`, new integrations for SolidStart and Nuxt, and interoperability fixes for Lemmy and Pixelfed. Three new end-to-end tutorials also […]

Unless something comes up, #fedify 2.2.0 will be released today.

A quote translated from @bgl's saying: > Today, while talking with a software developer friend, we came up with something called the “First Principle First Principle.” It's literally the “First Principle” First Principle: many dev teams don't actually treat their first principles as truly […]

Several people on my timeline are suddenly talking about Linkin Park at the same time. What's going on?

If you'd like to preview the #tutorial I'm writing on building a small federated image sharing service, similar to @pixelfed, with @fedify and @nuxt, here it is: https://pr-731-0.fedify.pages.dev/tutorial/content-sharing If you'd like to give feedback after reading it, please leave a comment […]

Hollo 0.8.0 is out. The main additions: you can now run web and worker processes separately via `NODE_TYPE`, which helps on instances with large follower counts where federation load was slowing down API responses. Mastodon clients that support the 4.5 quote post API will now work with Hollo […]

My CLI parser library, Optique, got featured in this week's issue of Node Weekly! https://nodeweekly.com/issues/621

The official Hackers' Pub Android app has finally been released on Google Play! Android users of Hackers' Pub, please download the app here!

I added my first PR to Mastodon today! https://github.com/mastodon/mastodon/pull/38809 It's to add a notifications policy to filter notifications from bots; it's one of the big requests I've had for tags.pub. It turns out Mastodon has a really complete framework for filtering notifications, as […]

Every #typescript library I maintain uses Twoslash. I still haven't regretted it, even when Fedify's docs take nearly ten minutes to build. That wait is annoying. I keep paying it. For a TypeScript library, the type signature often does most of the explaining. I used to write sentences […]

[연합 우주 약점] 스펨, 불링 등 악성 계정에 대한 모더레이션이 인스턴스 별로 제각각이라는 점은 연합우주의 본질이기도 한데, 당하는 유저 입장에서는 약점이라고 생각하기 쉽다. 관대한 대형 서버나, 한국어 등 외국어를 못 읽는 개방 서버에서 만든 한국어 악성 계정들이 요즘 보이기 시작. 연합우주는 적극적으로 차단하며 사용할 필요가 있고, 추가적으로 모더레이션 신고를 해주시면 좋습니다. 연합우주가 블스 등과 브릿지 되면서 익명성 불링을 위해서 이용하는 X들이 늘고 있는 듯 하여 걱정입니다.

Hackers' Pub is now integrated with tags.pub. What this means is that public posts with hashtags will automatically be relayed to tags.pub, reaching a wider audience. Of course, if you have the `#NoTagsPub`, `#NoBot`, or `#NoBots` tag on your bio, your posts will not be relayed to tags.pub. Cc […]

@hongminhee So, I really appreciate that you are doing this work. I know it's hard, and it feels unrewarding, but it really matters, and it really helps the ecosystem. Please let me know if I can help out in these efforts. I hope that all of us in the ActivityPub community take these requests […]

@hongminhee I ran into things like this with Mastodon. I send valid AP activities but if I don’t encode them in a specific way, Mastodon silently ignores them. Like how it assumes the object of a Create activity must be inline and not a reference, but the actor must be a reference and not inline.

I hope more #activitypub implementations start properly handling JSON-LD documents in various forms, rather than using ad-hoc approaches like only allowing specific fields to accept both arrays and scalar values.

Here are my first issue and PR for #pixelfed: https://github.com/pixelfed/pixelfed/issues/6588 https://github.com/pixelfed/pixelfed/pull/6589

@crepels Hello. Thank you for creating ActivityPub.Academy. I've been finding it really useful. However, it seems like ActivityPub.Academy is down right now. Could you please check on it? Thanks as always for your help.

I think you could create a (certain type of) video game using the ActivityPub 'Question'. https://www.w3.org/TR/activitystreams-vocabulary/#dfn-question #activitiypub #activitystream #fedidev #games #videogames

An interesting thought has been floating around in my head lately. A single-user ActivityPub server device that's ready to use just by plugging in a power cord and an Ethernet cable. For just 200 dollars. Would you buy it?

mastodon.social is being DDoS'ed, and the rest of the Fediverse is fine.

I prefer to leave permalinks in commit messages or comments instead of just issue/PR numbers, because I'm constantly dreaming of escaping GitHub.

New from me: what makes social networks resilient? https://connectedplaces.online/reports/fr160-everyone-wants-servers-and-nobody-wants-servers/

I've gone as far as I can with ignoring nodeinfo. I hit a piece of software tonight that won't federate unless it gets to check your nodeinfo and compare your self-reported software title against its blocklist. Nevermind that `User-Agent:` and `Server:` exist, if you're eager for some […]

Today's small brag: I filed my first issue on the #lemmy project, and I'm oddly pleased that I reproduced it locally before opening it. https://github.com/LemmyNet/lemmy/issues/6465

Writing a #fedify tutorial on creating #threadiverse software…