hey #fediverse what is the current #activitypub server that provides features similar to #mastodon or #pleroma that uses the fewest resources? Is there anything there that is good for single user instances?
I'm aware of GoToSocial and Honk but wondering what else is there.
Labeler - a self hostable, MRF inspired labeler service for ActivityPub
Create, or subscribe to 3rd party labeler servers you or your friends manage, and take advantage of a rich filter schema to define rules and actions to apply to incoming activities.
Loops will be the first service to support this new Pixelfed labs project ✨
Fixed regression in link verification code (contributed by nowster).
Added ipv6 support for the https frontend connection (contributed by hb9hnt).
New "Like by URL" operation (contributed by dheadshot).
Added support for a Mastodon-like /share link sharing URL, like the one provided by sites like https://mastodonshare.com/ and such. To be able to use it, you must reconfigure your https proxy to redirect /share to snac (see snac(8)).
New linux landlock (sandboxing) support for enhanced security (contributed by shtrophic). It's still a bit experimental, so you have to enable it explicitly by recompiling with the WITH_LINUX_SANDBOX directive (e.g. make CFLAGS=-DWITH_LINUX_SANDBOX).
Some search fixes regarding repeated matches.
The export_csv cmdline operation now exports the CSV files inside a user's export/ subdirectory instead of the current directory.
All CSV files to be imported must now be stored inside a user's import/ subdirectory instead of the current directory.
Mastodon API: more timeline paging tunings (contributed by nowster), post language selected in apps is properly set.
The command-line operation note new reads the LANG environment variable to set the post's language.
A new command-line operation, note_unlisted, allows posting "unlisted" or "quiet public" posts.
The maximum number of entries in users' RSS feeds and in outboxes can now be set via the max_public_entries variable in the server.json file.
This instance will be operated as a paid extension of Weird, costing $10/yr ($20/yr after beta).
All member subscriptions will go entirely to the AP instance hosters, which should be a team of at least 2-3 sysadmins & moderators tending to the instance part-time. This is expected to be a fairly low-volume instance since all members are paid (to begin with).
Hey @cwebber, love everything you're doing and wonder if it's possible to collaborate and showcase the amazing power of Spritely when integrated into a platform like Loops.
Some clarifications, and an explanation of why FEP-fe34 authentication is important:
>The processing of unauthenticated embedded activities is strongly discouraged. If such activities are not rejected by the consumer, a malicious conversation owner may be able to perform a cache poisoning attack and overwrite any actor or a post in consumer's local cache by sending a forged Update(Actor) or Update(Object) wrapped in an Add activity.
This is not difficult to do. Someone makes a post and says "hey everyone, join my new @group about <popular_topic>". People join and the next day Gargron is messaging them and asking to fund Mastodon's new Trust & Safety initiative by donating bitcoins.
Similar attacks might be possible against FEP-1b12 implementations that don't authenticate announced activities.
I believe that Starter Kits need explicit Opt-In inclusion.
There are too many examples of well intentioned services like these that end up getting abused
I've reached out to a few other #activityPub projects, and Lemmy for example stated that Communities are their primary use case for this, so I will be adding support for Community Starter Kits eventually!
Notice, these aren't Pixelfed or Loops Starter Kits, something this impactful belongs to the whole fediverse!
Conversation Containers are conceptually very similar to FEP-1b12: activities are sent to a conversation owner, who manages the conversation and synchronizes it between participants. Differences are mostly superficial and may disappear in the future.
I'm making exceptional progress and am wrapping up a few things before I prepare to launch this exciting new service!
ICYMI: I'm building an open source/self-hostable Starter Kit service that will allow fediverse users to safely build kits and share/use them with ease.
FEP-fe34: Origin-based security model has been published. It supersedes FEP-c7d3: Ownership and describes authentication of ActivityPub objects in simpler terms. I think ownership is still useful for authorization and access control, so that part was copied from FEP-c7d3.