how do people stop spam (without captcha / cloudflare / akismet)

File encryption with a browser.

I've been exploring the #WebCryptoAPI and I'm impressed!

When combined with the #FileSystemAPI, it offers a seemingly secure way to #encrypt and #store files directly on your device. Think #localstorage, but with #encryption!

I know #webapps can have #security vulnerabilities since the code is served over the web, so I've #OpenSourced my demo! You can check it out, and it should even work if #selfhosted on #GitHubPages.

Live Demo: https://dim.positive-intentions.com/?path=/story/usefs--encrypted-demo

Demo Code: https://github.com/positive-intentions/dim/blob/staging/src/stories/05-Hooks-useFS.stories.js

Hook Code: https://github.com/positive-intentions/dim/blob/staging/src/hooks/useFS.js

IMPORTANT NOTES (PLEASE READ!):
* This is NOT a product. It's for #testing and #demonstration purposes only.
* It has NOT been reviewed or audited. Do NOT use for sensitive data.
* The "password encryption" currently uses a hardcoded password. This is for demonstration, not security.
* This is NOT meant to replace robust solutions like #VeraCrypt. It's just a #proofofconcept to show what's possible with #browser #APIs.

huh. wild. why isn't mastodon's /api/v2/instance data (specifically .contact.account.acct) part of .well-known/nodeinfo (https://github.com/jhass/nodeinfo/blob/main/schemas/2.2/schema.json) #mastodondev #activitypub #diaspora

Building a Fediverse bridge for my OSSN-based network.
Posts with hashtags are published to the Fediverse
Likes, Follows and Boosts are correctly received and logged
Signature verification is implemented (HTTP Signatures using publicKeyPem from actor URLs)
Replies don’t thread.

Mastodon sends a valid inReplyTo, we log the like, follow, boost. but no Reply on the post

Any ideas?
#ActivityPub #FediverseDev #MastodonDev

hmm, what parts of making a fediverse server do you absolutely have to get right before a remote sees, if, say, you have to edit outbox URLs or change keys or something,

because the remote mastodon server will cache them forever and ever?

vs things you can update in place (like a 50x error)

Whenever I schedule a post on Mastodon, I feel two emotions.

Gratitude that FediPlan exists: https://plan.fedilab.app/

Annoyance that Mastodon still does not have UI for using its own scheduled post API: https://github.com/mastodon/mastodon/issues/10088

I couldn't find this documented anywhere other than in code so I wrote up some notes on how link previews work, and what #opengraph tags and #jsonld attributes are supported in #mastodon #webdev #mastodondev https://griff.steni.us/blog/2025/02/22/mastodon-link-previews.html

Looking for a Next.js template for restaurant booking & online ordering?

Fct Project offers:
User Registration
Menu Management
Order Processing
Payment Integration

Perfect for your next project! Get it here:
https://getnextjsthemes.com/product/fct-project

UPDATE: I figured it out here https://gardenstate.social/@stefan/113974481967986929

This one line of code seems to suggest to me that mastodon has an rss feed for hashtags for your account.... but I don't think that is true? I wish I knew ruby better.

https://github.com/mastodon/mastodon/discussions/33871

According to #feditips regular mastodon supports displaying rich text. But it doesn't say what kind of rich text. Can someone tell me what this is? Simple HTML? Markdown and LaTeX are specifically called out as non-standard.

Whatever formatting is allowed... does it count towards the post character limit size? #mastodondev

https://fedi.tips/is-mastodon-compatible-with-rich-text-formatting-such-as-markdown/

Would anybody like to meet and chat with some #ruby and #rails folks at the #38c3?

How about today (29.12.) 18:30 at the fairy dust?

OK, using Mastodon.py I now have a basic Django app with login and logout.

I enter my Fedi ID, and tech.lgbt asks me to "approve" my web application before giving it an auth token. Then my web app pulls out and displays some non-public information (the accounts I've blocked). Logging out revokes the auth token from the server, and clears the session.

What I don't understand is why my Django app is not listed under "your applications" in my profile, nor why I have to re-authorise the application every time. I'm storing and reusing the client_id and client_secret sent by the server on app registration. Anybody got any clues why this is?

ETA: A couple of things I've ruled out - I'm using a FQDN and HTTPS (i.e. my callback URI looks like https://dev.mydomain:8443/)

cc: @halcy

Have you ever wondered what it is like consuming data from the mastodon.social local streaming (HTTP SSE) API‽

Here is a raw video.

Some times during the day it is faster than others.

Some useful notes on Mastodon development using Docker - #MastoDev , #MastodonDev , and #Docker seem relevant hashtags
https://social.polotek.net/@polotek/112559079613721917

I see some conversations again about how Mastodon Link Previews work. Here’s my research on that topic from last year.

https://box464.com/posts/mastodon-preview-cards/