Nostr notes by marius

I've noticed that the public ActivityPub objects from tagspub ...

2026-06-05T09:59:30Z

In reply to nevent1q…ntzr
_________________________

I've noticed that the public ActivityPub objects from tagspub are all behind CORS.

Can this be relaxed/removed? For one of my projects that fetches them directly from the frontend, it forces a second request through the proxyURL mechanism when the first one fails due to CORS.

I'm getting flooded with follows from blank profiles on ...

2026-05-29T10:36:19Z

I'm getting flooded with follows from blank profiles on mastodon.social.

Does anyone have any idea what's up?

#mastoadmin #mastodon #spam

"being unable" or "no project has support for ...

2026-05-17T13:17:42Z

In reply to nevent1q…j3sh
_________________________

"being unable" or "no project has support for them" ?

silverpill (npub19yg…wysk)

out of curiosity, how long does a loaf last for you? We strive ...

2026-05-14T14:42:25Z

In reply to nevent1q…f7ds
_________________________

out of curiosity, how long does a loaf last for you? We strive for ~1Kg loaf lasting a whole week (baked bread is a luxury reserved for mornings' tasty treat of toast).

Nathan Lowell (he/him) 📎 (npub12s2…9gr0)

just saw your timing post, and we're working on the dough on ...

2026-05-14T14:09:29Z

In reply to nevent1q…ycfa
_________________________

just saw your timing post, and we're working on the dough on a slower pace. It's basically all through Saturday (make it in the morning, fold it a couple of times through the day, shape it and refrigerate in the afternoon-evening), leave it overnight in the fridge, and bake it first thing on Sunday. Nathan Lowell (he/him) 📎 (npub12s2…9gr0)

erm, nevermind, I'm a dumb dumb when it comes to fractions. ...

2026-05-14T14:02:26Z

In reply to nevent1q…tn3m
_________________________

erm, nevermind, I'm a dumb dumb when it comes to fractions. It's actually 4%. Nathan Lowell (he/him) 📎 (npub12s2…9gr0)

whoa, in my household we're using about 6% salt to flour ...

2026-05-14T13:51:56Z

In reply to nevent1q…u00f
_________________________

whoa, in my household we're using about 6% salt to flour ratio. :D

Nathan Lowell (he/him) 📎 (npub12s2…9gr0)

I think the negativity comes from the fact that a lot of floss ...

2026-04-18T10:41:54Z

In reply to nevent1q…qp54
_________________________

I think the negativity comes from the fact that a lot of floss developers have other reasons why they work on projects besides scratching their own itch - "meeting the local needs" as you put it.

That is expanding their knowledge and, sometimes even the enjoyment of the programming act itself.

:goose_hacker: So if you treat open source development as a learning experience and an artistic expression, you're automatically going to balk at something that would take that away.

I've been testing with generating color palettes and creating ...

2026-03-28T14:14:10Z

In reply to nevent1q…affq
_________________________

I've been testing with generating color palettes and creating themes for a while, and the best libraries/tools I found (for JavaScript) are rampensau:
https://meodai.github.io/rampensau/

and

https://meodai.github.io/fettepalette/

Another one I found recently and I want to investigate more (but, which uses a material like approach from what I can see) is this https://alwankit.com/

> And those demands can often be at odds with what people ...

2026-03-24T08:25:04Z

In reply to nevent1q…nnq8
_________________________

> And those demands can often be at odds with what people overall need or want.

洪民憙 (Hong Minhee) :nonbinary: (npub1upg…9n89) and here
I was thinking that having corporatized projects chasing investment returns is the thing that brings the wrong incentives to the development of social media. As it is daily reminded to us by Facebook and Co.

I'm going to speak my mind about this:
[@thisismissem](https://hachyderm.io/@thisismissem ) has sold out.

APC (npub1ycs…mpyc) Bi—zaar (npub16js…55yf)

so far there isn't a v2 in the go proxy ecosystem. I ...

2026-03-17T17:17:16Z

In reply to nevent1q…z729
_________________________

so far there isn't a v2 in the go proxy ecosystem. I don't know if it's because there's lag before the version gets picked up and disseminated or there's still something missing. I'll keep an eye on it and let you know tomorrow if it's still not there.

https://pkg.go.dev/quamina.net/go/quamina?tab=versions

erm... apologies for the verbosity, on a second look my first ...

2026-03-17T08:49:00Z

In reply to nevent1q…5wuc
_________________________

erm... apologies for the verbosity, on a second look my first paragraph doesn't read very well at all. Hopefully it makes at least a little sense.

Anyway the permalink to the function where I do all that has changed a little since previous post: https://github.com/go-ap/filters/blob/master/bytes_filter.go#L201

no worries, there isn't much that I did on my side. I have ...

2026-03-17T08:34:38Z

In reply to nevent1q…un6s
_________________________

no worries, there isn't much that I did on my side.

I have some "filter" types, that I use for filtering ActivityPub collections and objects and now they get transformed into quamina patterns and applied on the raw json that we store the ActivityPub objects as before marshaling them into the structs that the filters themselves get applied against.

Hopefully it saves some computation, but the benchmarks I created weren't very conclusive... perhaps because there's so much other functionality in the pipeline...

However the feature has made its way into production into the various servers that use this library...

I've been in the tech industry for about 20 years and I still ...

2026-03-09T20:46:15Z

In reply to nevent1q…qpct
_________________________

I've been in the tech industry for about 20 years and I still have no clue what CEOs are good for...

I have finally I made significant progress on this. The final ...

2026-02-28T09:58:09Z

In reply to nevent1q…635v
_________________________

I have finally I made significant progress on this.

The final code looks like this:

https://github.com/go-ap/filters/blob/master/bytes_filter.go#L199

For a list of filters that #GoActivityPub uses, we generate two patterns for Quamina: one for a denormalized raw document, and one for normalized raw document (they usually are stored in a normalized form, where an Activity's object/actor properties are flattened to their IRIs, but we can't know which it is unless we unmarshall it, which we want to avoid)

Another improvement from my complain from 4 days ago is that I was regenerating the patterns and initializing quamina for every new document, instead of one time per collection load.

not enough VC money for integrating that into the website.

2026-02-26T20:54:09Z

In reply to nevent1q…x3sd
_________________________

not enough VC money for integrating that into the website.

more specifically: $ go get quamina.net/go/quamina@v2.0.1 go: ...

2026-02-20T17:22:15Z

In reply to nevent1q…wv9q
_________________________

more specifically:

$ go get quamina.net/go/quamina@v2.0.1
go: quamina.net/go/quamina@v2.0.1: invalid version: module contains a go.mod file, so module path must match major version ("quamina.net/go/quamina/v2")

don't worry on my account, I ended up to using the HEAD ...

2026-02-20T17:20:33Z

In reply to nevent1q…9y3r
_________________________

don't worry on my account, I ended up to using the HEAD version, which is more convenient at the moment.

As soon as you pass v1, Go needs a /vX folder, which was the reason why I swore I'll never release libraries past v1 and had GoActivityPub in development mode for 8 years. :D

I've started my exploration of using @npub19ua…53cv's ...

2026-02-20T15:22:02Z

I've started my exploration of using Tim Bray 🇨🇦 (npub19ua…53cv)'s Quamina project for saving some compute time in the filters module of #GoActivityPub

Currently the GoAP storage backends iterate over resources (usually stored as raw JSON bytes), unmarshal them into GoActivityPub object structs, and *only* then apply the custom filtering logic on those objects. Since the majority of the objects generally fail the filtering logic, all that JSON decoding is wasted compute time and makes things slower.

Ideally quamina will allow me to check the raw JSON payloads directly against the filters, streamlining the execution and speeding things up. :goose_hacker:

#ActivityPub

@npub19ua…53cv is the version 2 of Quamina available to use ...

2026-02-20T15:04:12Z

Tim Bray 🇨🇦 (npub19ua…53cv) is the version 2 of Quamina available to use somehow?

pkg.go.dev and the go toolset only have 1.5.1 as the latest, perhaps because you haven't released it yet, but perhaps because of the terrible UX method of Go module versioning? :D

I might have mentioned before the Glide browser. If not, it's ...

2026-02-18T10:50:43Z

I might have mentioned before the Glide browser. If not, it's keyboard driven browser on top of mainline #firefox.

My main complaint about Mozilla in the past 10 years has been their move to the web-extensions API and in the process dropping support for the greatest addon of all time: #vimperator.

Glide comes very close to its functionality, and even though at the moment is still lacking important features (or I'm unable to program them to my desire), I can mostly make it work for my purposes, which feels great.

#glide_browser

Anyone in my followers list on a server that has secure fetch ...

2026-02-08T18:49:25Z

Anyone in my followers list on a server that has secure fetch enabled? I want to use it to test my proxyUrl implementation for client to server #ActivityPub. :D

My project that converts #SourceHut wiki repositories into static ...

2026-02-07T10:35:34Z

My project that converts #SourceHut wiki repositories into static websites is finally getting to the point where it works quite well.

I've integrated it into my flow for the #GoActivityPub documentation and it looks decent (in my biased opinion), the docs themselves are not great, but I'll do another pass over them before we release a v1 of the library.

https://go-activitypub.federated.id

Yesterday I've been social for a couple of hours and coupled ...

2026-02-04T11:14:53Z

Yesterday I've been social for a couple of hours and coupled with the unexpected -6 Celsius icy trek I had to take due to unforced public transport mishap, today I'm exhausted and I can barely focus on anything requiring any mental work. :(

Still I got to meet a bunch of cool people and bored them with talk about my passion project, so all's good. :)

Thank you wakest ⁂ (npub1xse…lgk3) for organizing the meetup! <3

my I'm dogfooding it on my alt: ...

2026-02-02T11:04:20Z

In reply to nevent1q…fjec
_________________________

my I'm dogfooding it on my alt: https://marius.federated.id/outbox

nopers. Straight up a Client to Server ActivityPub JavaScript ...

2026-02-02T11:03:38Z

In reply to nevent1q…2403
_________________________

nopers.

Straight up a Client to Server ActivityPub JavaScript application.

(You know, the ones that Eugen said they're not possible :P)

Finally added the SSH connectivity improvements to #ONI, the ...

2026-02-02T11:00:37Z

Finally added the SSH connectivity improvements to #ONI, the single user Fediverse server.

Now, if only I would be able to make a good UI for that. :D

no promises, but I might join you. @npub1ajs…40ga ...

2026-01-24T21:38:07Z

In reply to nevent1q…5wdt
_________________________

no promises, but I might join you.

offline (npub1ajs…40ga) 洪民憙 (Hong Minhee) :nonbinary: (npub1upg…9n89) Fedify: ActivityPub server framework (npub1tlf…wz08)

do you have libraries there? I imagined it's only ...

2026-01-14T18:37:57Z

In reply to nevent1q…frmt
_________________________

do you have libraries there? I imagined it's only applications.

[@andycarolan](https://social.lol/@andycarolan ) is helping me with a logo for FedBOX the GoActivityPub server, but that'll come a bit later.

I'm happy to say that we finally have a logo for ...

2026-01-14T18:26:08Z

I'm happy to say that we finally have a logo for #GoActivityPub, courtesy of [@andycarolan](https://social.lol/@andycarolan ) 🙇

https://go-activitypub.federated.id/

it's strange this wasn't picked up until recently by the ...

2026-01-08T13:31:19Z

In reply to nevent1q…7ztn
_________________________

it's strange this wasn't picked up until recently by the exhaustive testing setup of sqlite.

If anyone is using the latest versions of mattn/go-sqlite3 module ...

2026-01-08T11:31:17Z

If anyone is using the latest versions of mattn/go-sqlite3 module you might have an unpleasant surprise if your tables contain JSON data in BLOB columns and the table is also using STRICT.

Since sqlite 3.45.1 it's encouraged to move those columns to TEXT.

https://sqlite.org/json1.html#the_json_blob_input_bug

I spent two days trying to find why the #GoActivityPub sqlite storage
has started to fail out of the blue (well, not really "out of the blue", rather an unfortunate congruence of dependency updates and adding extra stress to the json payloads saving/updates).

#Go #sqlite

personally I was also irked a little about the fact that Meredith ...

2025-10-27T17:28:46Z

In reply to nevent1q…3ksn
_________________________

personally I was also irked a little about the fact that Meredith chooses to side-step completely any mention of alternatives to the mainstream OS choices, and alternatives to mainstream cloud providers.

I'm not sure if they have blinders on, or there's some deeper conflict of interests there, but it's definitely a discourse that is serving to gaslight Signal users.

something similar to the zoom pan effect Mastodon has on images. ...

2025-10-17T17:34:33Z

In reply to nevent1q…zh9a
_________________________

something similar to the zoom pan effect Mastodon has on images. I was thinking I was going to be cleverer and use drag and drop to keep track of the mouse movement, but that is where it fails for me. :D

sure, sure, I'm trying to use it for a somewhat unorthodox ...

2025-10-17T17:15:55Z

In reply to nevent1q…nvdn
_________________________

sure, sure, I'm trying to use it for a somewhat unorthodox purpose which is not to drag and drop. :D

Well, it looks like the drag and drop Web API is f*ed up beyond ...

2025-10-17T16:53:24Z

Well, it looks like the drag and drop Web API is f*ed up beyond any recognition, and can't be reliably used for cross browser stuff.

#frontend #javascript #webdev

Well, after an initial failure, my #NLNet grant application for ...

2025-10-16T11:33:06Z

Well, after an initial failure, my #NLNet grant application for #GoActivityPub has been accepted under the NGI0 Commons Fund. 💪

This means that for the next months my main focus will be fully on making #ActivityPub in the #Go programming language easier for other developers.

If you're one of them, reach out, I want to know what you struggle with and how I can help with that.

https://nlnet.nl/thema/NGI0CommonsFund.html#:~:text=GoActivityPub%20%E2%80%94%20Help%20people%20develop%20Fediverse%20software%20in%20Go

For #ONI the no fuss single user #ActivityPub service, I wanted ...

2025-09-22T13:52:06Z

For #ONI the no fuss single user #ActivityPub service, I wanted to migrate from my custom hodge-podge of JavaScript logic for building CSS themes from images, to something a little more credentialed and battle tested.

Then I looked over what the Material library would generate and I begun to reconsider.

Material is so unsipired, it defaults to such samey, generic norm-core color palettes that it's difficult to see any changes even between vastly different images.

I think I'll just improve my own algorithm because, frankly, I want more GeoCities and less Enterprise.

https://material-foundation.github.io/material-theme-builder/

For the past couple of days I've been hard at work writing ...

2025-08-25T12:17:05Z

For the past couple of days I've been hard at work writing documentation in the attempt to decrease the friction for developers that try #GoActivityPub for their applications.

I am of a mind to pay some #Go developers in the near future to do a weekend's worth of programming into trying to use the library in projects, so we can iron out potential issues with the use of the library itself and the documentation.

Anyone interested?

#go #ActivityPub #ActivityPubDev #fediverse

I'm not trying to paint you as an apologist for the leakers, ...

2025-07-26T13:42:29Z

In reply to nevent1q…2cm4
_________________________

I'm not trying to paint you as an apologist for the leakers, but when you post this type of rant, you must take your distance very explicitly if you must make a stand.

Focusing on the smaller issue - which might be warranted from your point of view - should not detract from the greater message of who's actually to blame.

So, apologies, I am fully aware of what you mean with this thread and I'll acknowledge that it is not in support for those assholes.

My intent was to point out - to you, and maybe others - that you inadvertently divert the attention from the real problem. Peace.

I think you should apply this logic but in reverse. Just because ...

2025-07-26T12:59:28Z

In reply to nevent1q…qys7
_________________________

I think you should apply this logic but in reverse.

Just because those people call themselves "hackers" - or media calls them that - doesn't mean that you, also a hacker, should be personally offended to the degree that you willingly or unwillingly try to diminish their culpability and shift the blame to the idiots that made it possible in the first place.

Again, there's only _one_ reprehensible act in all of this, and you're dancing around how bad it is with pedantry.

I'm sure you're aware of the fallacy that begins with "not all men...", and that's how you sound to me right now.

> That's where the focus needs to be. @npub1afm…5gp4 I ...

2025-07-26T12:13:46Z

In reply to nevent1q…5l3h
_________________________

> That's where the focus needs to be.

Michał "rysiek" Woźniak · 🇺🇦 (npub1afm…5gp4) I disagree.

In all of this situation there is only _one_ act of maliciousness, and it's not on the part of those idiots - until proven otherwise.

I agree that they need to be made legally responsible, and hopefully someone will do that one way or another, but they are not the moral culprits of this story so far.

> Negligence at Tea Puts 13.000 Women in Danger ...

2025-07-26T10:58:15Z

In reply to nevent1q…m05d
_________________________

> Negligence at Tea Puts 13.000 Women in Danger

Michał "rysiek" Woźniak · 🇺🇦 (npub1afm…5gp4) totally agree, but the people that released the information are definitely guilty of a lot more than just being incompetent, they're actively and unequivocally assholes... please let's try not to lionize them due to some misguided sense of pedantry about what hackers are or do.

There is such a thing as responsible disclosure after all.

I think an "Update" for the new preferred username went ...

2025-04-29T13:08:55Z

In reply to nevent1q…lpuj
_________________________

I think an "Update" for the new preferred username went through to all instances and it's basically the same actor.
wakest ⁂ (npub1xse…lgk3)

did anyone do a reverse image search to see who's image they ...

2025-04-08T17:51:10Z

In reply to nevent1q…gtdn
_________________________

did anyone do a reverse image search to see who's image they used? Maybe the poor lady doesn't know her image is being abused and used to abuse people in the fediverse. :(

no worries and no pressure. :D

2025-03-29T15:04:08Z

In reply to nevent1q…h9dj
_________________________

no worries and no pressure. :D

you can take a look at this project which makes use of all the ...

2025-03-29T14:59:29Z

In reply to nevent1q…xe9y
_________________________

you can take a look at this project which makes use of all the modules under the #GoActivityPub library and provides an easy to setup instance for one person:

https://git.sr.ht/~mariusor/oni

One demo instance is at https://marius.federated.id

It's going to be rough to use, but please write to the mailing list I have set up for the projects with your questions, and we can at least improve the docs. :D

https://lists.sr.ht/~mariusor/go-activitypub-discuss

the most important contribution you can make at the moment is to ...

2025-03-29T14:25:32Z

In reply to nevent1q…s00p
_________________________

the most important contribution you can make at the moment is to try to build something with my libraries and provide feedback where and when you're encountering any issues. 🙇

I'm working on Go plumbing for ActivityPub. Check my bio for ...

2025-03-29T14:23:53Z

In reply to nevent1q…3lp7
_________________________

I'm working on Go plumbing for ActivityPub. Check my bio for details.

I don't need monetary support, but any word of mouth, or helping hand helps a little.

jitter is when you add/subtract some value from a computed value ...

2025-03-29T13:12:05Z

In reply to nevent1q…t3l4
_________________________

jitter is when you add/subtract some value from a computed value to provide some obfuscation.

In this case Marcus Rohrmoser 🌻 (npub170a…rgyu) is probably thinking about masking the exact location of a potential user by converting it to an area with a random radius, but I might be wrong. So you'd know that there are other users "in vicinity" but not their pin-point precision location.

Sad to say NGI Zero didn't accept my grant request for ...

2025-03-14T15:52:32Z

Sad to say NGI Zero didn't accept my grant request for #GoActivityPub.

I am a bit disappointed if I'm honest. I hoped that a library that threads new ground for developers for both client and servers applications would have fit their criteria very well. I might not have made the case well enough I guess.

is useless 99% of the time, but sometimes it can warn you about ...

2025-03-14T11:08:50Z

In reply to nevent1q…zpa5
_________________________

is useless 99% of the time, but sometimes it can warn you about stuff.

also @npub1dml…x796 though she's "just" a ...

2025-03-07T07:54:02Z

In reply to nevent1q…hvas
_________________________

also Veronica Explains (npub1dml…x796) though she's "just" a technologist, not a gamer afaik. :D

strange that nobody mentioned ...

2025-03-07T07:46:41Z

In reply to nevent1q…szud
_________________________

strange that nobody mentioned [@gardiner_bryant](https://mastodon.online/@gardiner_bryant ), the original Linux gamer.

sure, but when a bot publishes many daily updates publicly, and ...

2025-01-29T18:04:23Z

In reply to nevent1q…awyy
_________________________

sure, but when a bot publishes many daily updates publicly, and only 10 people are interested, that's pretty disrespectful of anyone that's not and keeps having their public timelines spammed.

for for something low traffic like PR merges maybe, but if you ...

2025-01-29T15:15:15Z

In reply to nevent1q…9urp
_________________________

for for something low traffic like PR merges maybe, but if you look at the mailing list for my own projects where all commits get posted, I doubt anyone wouldn't want to mute it in about two days. :D

https://lists.sr.ht/~mariusor/go-activitypub-dev

I do get a semblance of a post if you search for the video ...

2024-12-24T20:06:43Z

In reply to nevent1q…gt00
_________________________

I do get a semblance of a post if you search for the video directly - though not the Video itself.

That's because it's also a full fledged addressable ActivityPub object:

apologies, I misunderstood :D I thought you meant the video ...

2024-12-24T20:03:56Z

In reply to nevent1q…dkhd
_________________________

apologies, I misunderstood :D I thought you meant the video attachment.

you can search for this post on Mastodon and the video attachment ...

2024-12-24T17:22:21Z

In reply to nevent1q…qkxg
_________________________

you can search for this post on Mastodon and the video attachment shows up fine (at least on my instance): https://marius.federated.id/outbox/1725894299052/object

it's strange that there's no way to add some monetization ...

2024-10-14T15:02:00Z

In reply to nevent1q…ra8g
_________________________

it's strange that there's no way to add some monetization plugins into PeerTube.

I think they would be happy to incentivize larger content creators to move to their platform.

Frankly I'd be more OK with ads if I knew they generate income for a particular person than an amorphous blob like Google.

I know, I know... I have two or three issues that they have been ...

2024-09-06T18:17:45Z

In reply to nevent1q…5g4u
_________________________

I know, I know... I have two or three issues that they have been ignoring for over three years. :)

in fairness I don't think I advertised the feature anywhere ...

2024-09-06T18:14:11Z

In reply to nevent1q…7xqv
_________________________

in fairness I don't think I advertised the feature anywhere where the Mastodon devs might have looked.

I didn't create a FEP for it sadly.

I have not gone over the details, but to the best of my knowledge ...

2024-09-06T18:06:06Z

In reply to nevent1q…lg4u
_________________________

I have not gone over the details, but to the best of my knowledge Authorized Fetch is just the name Mastodon uses for a similar mechanism to what I'm doing in FedBOX. In their case I think they don't allow any C2S get request on collections if they're not authorized, in mine I just filter out non Public activities/objects.

But, I'm pretty sure that my work on having the collections filtered based on recipients predates Mastodon's by quite some time. :P

I often struggle with working on non-trivial, long standing ...

2024-09-06T15:26:00Z

I often struggle with working on non-trivial, long standing projects because when I sit down to do the work after some hiatus, I can't seem to find the pain points I wanted to fix quickly enough.

It feels like trying to get a bandaid off when you can't find an edge where it comes unstuck easily enough.

The largest piece of bandaid that I wasn't able to get unstuck from the ActivityPub adjacent work is getting the HTTP-signatures working well with the rest of the fediverse (by which I mean Mastodon).

Today I might have got the corner of another little bit of bandaid unstuck which hopefully will help in the long run.

#ActivityPub #fedidev #GoActivityPub

I had no idea that software under MIT was considered not to be ...

2024-08-23T08:16:23Z

In reply to nevent1q…zw67
_________________________

I had no idea that software under MIT was considered not to be Free Software. I always thought about the problem like the more permissive the license the "more free" it is, as opposed to ones like GPL that have additional restrictions... Am I wrong?

npub12r320mcnpx7hnsr9v8ydwdk9eyqrlpm8usvspwzpd4hw8g5l9rdscrzz58 (npub12r3…zz58)