Discussion
reading a specification document https://www.w3.org/TR/activitypub/ taking psychic damage
ActivityPub uses [ActivityStreams] for its vocabulary. This is pretty great because ActivityStreams includes all the common terms you need to represent all the activities and content flowing around a social network.
"this is pretty great" is not a serious thing to say in a specification document. a specification is not a persuasive document!
@kopper actually had this all figured out a while back https://codeberg.org/outpost/ois/src/branch/dev?trans-rights=human-rights one of the best readmes i've ever read in my entire life
THIS IS NOT ENOUGH: SUPPORTING REMOTE JSON-LD CONTEXTS AT ALL FOR INCOMING OBJECTS IS AN ACTIVE VULNERABILITY https://socialhub.activitypub.rocks/t/am-i-understanding-something-wrong-or-is-json-ld-remote-context-support-a-gigantic-security-vulnerability-if-any-dumb-c2s-server-implementation-tries-to-federate-with-the-current-network/5439
And I have to implement JSON-LD 1.1. Despite what ActivityStreams says, real world fedi does not work in 1.0 alone. This is also why JSON-LD.NET was out of the question, despite it being faster than dotNetRdf (though it still uses Newtonsoft.Json, so I'd end up replacing it either way)
if the spec is wrong, What Is The Point of the spec???
Soon the following message is blasted to all the members of her followers collection,
"soon". whenever your server feels like "blasting" it. it'll get around to it
"my server came in, and just started blasting"
and since it has the special Public group addressed, is generally readable by anyone.
that's not "a public message to her followers". that's "to her followers", and then TWO separate new concepts:
oh my fucking god
4. Actors
ActivityPub actors are generally one of the ActivityStreams Actor Types, but they don't have to be.
SECRET THIRD THING
and since when is a social network defined by "activities and content"? where is the user?
furthermore, "flowing around a social network"? why are we analyzing data flow in a social network? "flow" is a specific term of art in graph algorithms and it makes me very nervous
If you know what JSON-LD is, you can take advantage of the cool linked data approaches provided by JSON-LD.
you can construct documents with built-in remote code execution if you know secret incantations! still waiting for the user to show up
@hipsterelectron the best thing about JSON-LD is that nobody can adequately explain what the fuck even is the point of using it besides creating infinite canceraids forever
