Really well written and description of the problem that @roomy.space is working on: how to leverage decentralized identity that doesn’t follow the PDS-origin path. Exposes a lot of edges in the atmosphere that need polish. Really love auth separated from PDS here.

Something I've been meaning to write for a while, about a few places where I wish that Bluesky/ATProto had gone just a bit further. www.mythik.co.uk/social/so-ne...

Ooooh! ID-JAG or OAuth Identity Assertion JWT Authorization Grants looks interesting: https://www.ietf.org/archive/id/draft-ietf-oauth-identity-assertion-authz-grant-01.html #oauth

Apropos of nothing, a moderation list bsky.app/profile/over...

The Mercator projection if it weren’t cropped (click to view full size)

I may have just broken the minds of ActivityPub developers at #fediforum, but the question I posed was "what happens if we do this differently? What other ways of building the Fediverse are there? Why are we building monolithic applications?" The first half of the session was very much so an […]

Personal data storage is an idea whose time has come: Data Ownership as a conversation changes when data resides primarily with people-governed institutions rather than corporations. blog.muni.town/personal-dat...

A glimpse into the Bridgy Fed monitoring dashboards. Pretty conventional mix of infra, OS, and app level metrics. Note the delay numbers. When you do something in one network, how quickly do we bridge it across? We pay a lot of attention to that, we try hard to keep it as fast as possible!

Facebook will never die as long as there is no alternative to private groups.

I have created a bot that will give you an absurd compliment if you mention the username @absurdcompliments.bsky.social

Making the internet better doesn't start by saying "let's not change what they did at the toxic place" Yeah it's risky and it could totally flop, but no chance I want to go down with we tried nothing and we're out of ideas

We've been hard at work for the last month on a new @roomy.chat architecture that we hope will get us into production: A Brief History of Roomy's Architectures blog.muni.town/brief-histor... I'm very excited about the new design and the performance that we're showing on our initial tests!

> Blacksky proves that communities can build alternatives when given the technical foundations. The question is not whether a protocol meets some standard of decentralisation, but whether it facilitates and enables communities to create their own places.

Along with the much needed gesture of unity, the other big takeaway from Emelia’s open letter is that it inadvertently exposed a tiny minority of disproportionately powerful dissenters as the root cause of division in the open social web. Most of us are getting along just fine.

Recently there has been a lot of dividing & heated discourse about ActivityPub and AT Protocol. Yesterday at the Social Web CG meeting, I proposed releasing a statement on this discourse, you can read the full statement here: github.com/swicg/genera... #activitypub #atprotocol #atproto #SocialWeb

I was asking @paoramen.com if he could add atproto logins to his awesome fika.bar (social bookmarks) and apparently it uses Hanko for auth so.. Any #go and #oauth savvy dev out there wanna help onboard a great app (and potentially many more) on to the atmosphere? 🙏 github.com/teamhanko/ha...

Speaking of IETF involvement, I’d love to see the OAuth implementers from the atproto team get involved in the specification process of GNAP (essentially OAuth 3.0, I’m told). Good opportunity to upstream their divergent OAuth specs to accommodate decentralization. www.rfc-editor.org/rfc/rfc9635

LETS GO!

“The S in MCP stands for security.” — a reminder from @bmann.ca #ProtocolsForPublishers

I have colleagues and fellow travelers who use AI tech that I find deeply objectionable. Yet we’ve all been born into the original sin of abusive technology, so the best anyone can do is run that technology against its own power structure and challenge its foundation. blog.erlend.sh/non-consensu...

Despicable people having a laugh in their new CONCENTRATION CAMP #TooAngryandDisgustedtoHashtag

Authorization servers vs resource servers in OAuth, and how they apply to BlueSky: www.mythik.co.uk/2025/Jun/29/...

Test message from a new experimental PDS instance! The PDS is hosted with: - Docker - Flatcar Linux - Traefik - Portainer A little bit off the beaten path as far as hosting instructions, but it was actually really easy to setup! I'm really happy with how simple it was. 🥳

Apparently the Parliament petitions site won't accept one that's directly related to a state visit from you-know-who ... but there's always this one instead: petition.parliament.uk/petitions/72...

Router is how you say the name of the tool that cuts fancy holes and grooves and shit in wood. Router is how you say the name of the thing that distributes the horrors to devices.

Archaeologist and (out of practice) human remains specialist here. No, they did not.

Roomy alpha-3 is out! blog.muni.town/roomy-chat-a... While there are lots of additions inside, it's sorta an intermediary release as we're still finishing up a significant backend transition, but this was a good opportunity to talk a bit about how @roomy.chat relates to its sibling project Weird.

Does your Bluesky PDS support Mastodon? Mine does*. 😋 #atproto #atdev #activitypub

Gods, what? Just ... no.

most of security research is repeatedly asking "why can't you just do [thing]?" until the answer does not begin with "because ..."

Some random thoughts on FedCM + ATProto. No particular conclusions - just some jotted-down notes, really. www.mythik.co.uk/social/fedcm...

i think atp as a migration-capable identity layer and atp as a data pubsub protocol are two separate guys. it would be cute to have an off-protocol group messenger with Noise protocol / MLS esque privacy properties that used PDS OAuth n domain handles n shit . like a bsky dot chat but good

While working on some performance benchmarks, I was struck by how easily the numbers can be misleading. Wrong measurement code, client configuration, workload design, or server settings can completely distort the results. Don't trust performance numbers easily. Always measure one level deeper.

Just heard #beer referred to as "amber fortification" I can absolutely get behind this description 😊🍺🏰

With everything we now know about emerging indie instances and the account-migration affordances of atproto, it really doesn’t feel like a risky endeavor any longer to start off ones PDS journey with Bluesky-net. I feel quite comfortable onboarding all Social Web newcomers to @bsky.app rn🧵

First swifts of the year! Screechy little gits, but I still love them. ;)

a network thats split up into separate and independent components that can be reused by other parties is just so fucking cool especially now that were at the point these components can be chained together: you can take blacksky's relay, feed it into appviewlite, and connect that to deer

Periodic reminder: we still don't have a comprehensive threat model for social software. We need one! Out of everything I want as a social software developer, a real threat model might be at the top of the list. It would help *so much*.

Both ATProto and Anthropic's MCP spec are picking OAuth as their auth layer. Both have highly distributed endpoints with many participants, where pre-registration isn't feasible. I pulled together notes and links on this bmannconsulting.com/notes/atprot...

Happy Beltane dear Skeeties x #pagan

Vorga Blk MTL Less offensive than most of the political partys in my country.

We’re pretty much ready to fully hand the reins over to whoever wants to set up our merch operation on our behalf, as long as they’d make sure to find a sufficiently eco-friendly provider for such a thing; I believe there are a handful of B-corp certified merch companies to choose between now..

Vampire caught unawares by sudden British heatwave. 🧛‍♂️🌞

How should "Québécois" be translated into English? Quebecian? Quebecese? Both of them seem very awkward. Or should we just leave it as it is, and adopt it as a loan word? It would be far from the first, after all.

most atproto people: yea, we kinda just like atproto, but lots of us use activitypub too and honestly just hope it works out for everyone most activitypub people: if you don't do decentralized exactly like i personally defined it in my mastodon post 4 years ago then it isnt decentralized nerd

Been thinking about how we could support access-controlled blobs in ATProtocol. Right now, all blobs are public - anyone can fetch them with a CID. But what if we could gate them? #atproto #atdev 🧵

Maybe I'll start to show up on blue.mackuba.eu/directory/pd... now that I've got a shiny new did:plc identifier of my very own!

This wasn't addressed to me, but it seemed like a good prompt to share my latest feelings on DID PLC, which I recently found out was not as bad as I thought. Get ready for a small epic. ✍️