veganism.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Veganism Social is a welcoming space on the internet for vegans to connect and engage with the broader decentralized social media community.

Administered by:

Server stats:

295
active users

#AP

5 posts5 participants1 post today

Kids, this is how framing works.

The law is not a football game. She is not a "Trump foe." She is a prosecutor who successfully executed her duty to prosecute a criminal under the laws of her state. However, she is not Aryan, and all who aren't are subjected to racist casting by mass media, whether deliberate or not.

Trump is a convicted felon, a foe of the Constitution of the United States, and AP is shilling for him when they write crap like this.

"Convicted felon Donald Trump abuses power to attack a prosecutor who dared challenge a fascist dictator."

flipboard.com/@associatedpress

Associated Press - By BEN FINLEY · Justice Department targets New York attorney general, a Trump foe. Here's what to knowBy Associated Press - By BEN FINLEY
Replied in thread

@yianiris @riseup @susurros

I talk about this issue a lot, a #fluffy post on this hamishcampbell.com/security-co

There are more #spiky posts if you read back.

This is a very old and broken discusern, which needs a reboot and a rebalance for any good path. By far the best thing we have built is the #Fediverse with #AP over the last ten years and this suffering from the same but different balance issue hamishcampbell.com/compost-the

hamishcampbell.comSecurity comes from community rather than technological control – Hamish Campbell
More from Hamish Campbell
Continued thread

A Ford f150 with Grey pain warn paint on hood and tailgate license Baja plate #Ap-16-386 also parked for over 3 months, white tiquan vw small suv with the plate #8vcv163, black BMW license plate #7km7198, there is also another small spray painted white truck with racking that they use to block in cars and if you try to ask them to move their car so you can get out they try to start alterations or damage your vehicle.

Obs du som e medlem/tillitsvalgt i en progressiv sivilsamfunnsorganisasjon som bruka #hypersys som medlemssystem.

Æ e begynt å utvikle ei "bro" som gjør det simpelt for dåkk å start og vedlikehold et #discourse #forum for intern diskusjon.

Kom dåkk bort fra #facebook-gruppa og epost-lista, til et forum som e bra på personvern og enkelt å bruk og administrere.

Bidra gjerne til utviklinga!

codeberg.org/roedt/hypersys-di

#gaza #journalists #famine
#BBC #AFP #AP #Reuters
@palestine

"In an unprecedented joint appeal, four of the world’s leading news agencies have warned that their Palestinian journalists in Gaza are now facing death by Israel’s policy of mass starvation"
"With Israel continuing to block access for foreign media, Palestinian reporters—many of them freelancers—have been the sole witnesses to the devastation inflicted by Israel’s campaign of extermination"

middleeastmonitor.com/20250725

«Ces #journalistes sont les yeux du monde, ils risquent de mourir de faim»: le cri de détresse des rédactions internationales. Via le média : Le temps

« Leurs photos témoignent d’une détresse ultime. La faim, la soif – celles des autres et les leurs. L’Agence France-Presse, l’américaine Associated Press, la canado-britannique #Reuters et la chaîne britannique #BBC News lancent un cri de détresse (..) » #Journalisme #DroitsHumains #Gaza #AP #FrancePresse

letemps.ch/en-images/ces-journ

Le Temps SA · «Ces journalistes sont les yeux du monde, ils risquent de mourir de faim»: le cri de détresse des rédactions internationalesBy Nora Teylouni
Continued thread

The full US Court of Appeals for DC Circuit kept in place a June 6 decision by a divided 3-judge panel that the #Trump admin could legally restrict access to the #AP to news events in the Oval Office & other locations controlled by the White House including Air Force One.

The D.C. Circuit order denied the AP's request that it review the matter, setting up a possible appeal to the #SCOTUS.

WTF

US appeals court won't lift limits on #AssociatedPress #access to White House

A US appeals court on Tuesday declined to lift restrictions imposed by #Trump's admin on White House access by #AP #journalists after the #news organization declined to refer to the body of water long called the Gulf of Mexico as the Gulf of America as he inanely prefers.

#law #democracy #Constitution #FreeSpeech #FreePress #WHCA #WhiteHouseCorrespondentsAssociation
reuters.com/legal/government/u

Concept for discussion: Replacing HTTP Signatures with Bearer Tokens for ActivityPub Federation

Curious what other people think about this idea. What if federation security was re-worked to use target-assigned
bearer tokens to authenticate GET/POST requests? This would remove the need for complicated signing schemes and reduce system load under heavy traffic bursts (as no cryptography is required).

A basic implementation could look like this:
1. When instance A (
a.example.com) first attempts to federate with instance B (b.example.com), a POST request is made to a dedicated registration endpoint. (for discussion, we'll say it's https://b.example.com/activity-pub/register-instance). This request includes fields necessary for verification, including the source domain name, target domain name, and a securely-generated verification token. Other metadata could be included to allow instance B to selectively allow/prohibit federation based on other criteria, but this is optional.
2. Instance B makes a POST request back to a dedicated verification endpoint on instance A (for discussion, we'll say it's
https://a.example.com/activity-pub/verify-registration). This request must include the target domain name and verification token provided in step 2.
3. Instance A checks the verification token (and verify that it matches the target domain name) and return a successful value.
The verification code must be invalidated after this call!
4. Instance B, after verifying instance A's request, returns a securely-generated
federation key back to instance A. This federation key is a bearer token used to authenticate all requests from instance A to instance B. This key must be unique to instance A!
5. Instance A completes the original request with the
Authorization header set to Bearer {federation_key}.
6. Instance B receives the request, detects the federation key, and checks it against the list of registered instances.
7. If the key does not exist or A has been defederated, then a
403 Forbidden error is returned.
8. If the key is expired or revoked, then
401 Unauthorized error is returned. Upon receiving a 401 error, instance A should start over from step 1 to re-authenticate and complete the request with a new token. This process should not be repeated for recursive failures!
9. If the key is approved, then a
200 OK response or 202 Accepted response is returned, and A can consider the request as successful.

Advantages versus HTTP Signatures:
- No cryptography requirements.
- Simple logic, no edge cases around HTTP query parameters or header order.
- Equally effective for all request types.
- Keys can be easily revoked or rotated.
- Supports authorized fetch and defederation use cases "by default".

Disadvantages versus HTTP Signatures:
- Breaks the actor model - instances are required as a first-class concept. (but really, the actor model is basically dead already. you can't even federate reliably without a WebFinger server, at minimum.)
- Requires multi-request "handshake" before communication. (but this is already required in practice, since a signature can't be validated without first requesting the signing actor.)
- Out-of-band protocol - communication can't happen over ActivityPub / ActivityStreams because this is a prerequisite to authenticate any request. (but again, we already require WebFinger and some software requires NodeInfo for full support.)

So, what are your thoughts? Good idea? Bad idea? Did I miss something? Please let me know, I welcome replies here!

#ActivityPub #AP #Federation

MDN Web DocsHTTP authentication - HTTP | MDNHTTP provides a general framework for access control and authentication. This page is an introduction to the HTTP framework for authentication, and shows how to restrict access to your server using the HTTP "Basic" scheme.