snabelen.no er en av mange uavhengige Mastodon-servere du kan bruke for å delta i det desentraliserte sosiale nettet.
Ein norsk heimstad for den desentraliserte mikroblogge-plattformen.

Administrert av:

Serverstatistikk:

364
aktive brukere

#ap

16 innlegg13 deltakere0 innlegg i dag

#gaza #journalists #famine
#BBC #AFP #AP #Reuters
@palestine

"In an unprecedented joint appeal, four of the world’s leading news agencies have warned that their Palestinian journalists in Gaza are now facing death by Israel’s policy of mass starvation"
"With Israel continuing to block access for foreign media, Palestinian reporters—many of them freelancers—have been the sole witnesses to the devastation inflicted by Israel’s campaign of extermination"

middleeastmonitor.com/20250725

Fortsettelse av samtale

The full US Court of Appeals for DC Circuit kept in place a June 6 decision by a divided 3-judge panel that the #Trump admin could legally restrict access to the #AP to news events in the Oval Office & other locations controlled by the White House including Air Force One.

The D.C. Circuit order denied the AP's request that it review the matter, setting up a possible appeal to the #SCOTUS.

WTF

US appeals court won't lift limits on #AssociatedPress #access to White House

A US appeals court on Tuesday declined to lift restrictions imposed by #Trump's admin on White House access by #AP #journalists after the #news organization declined to refer to the body of water long called the Gulf of Mexico as the Gulf of America as he inanely prefers.

#law #democracy #Constitution #FreeSpeech #FreePress #WHCA #WhiteHouseCorrespondentsAssociation
reuters.com/legal/government/u

Concept for discussion: Replacing HTTP Signatures with Bearer Tokens for ActivityPub Federation

Curious what other people think about this idea. What if federation security was re-worked to use target-assigned
bearer tokens to authenticate GET/POST requests? This would remove the need for complicated signing schemes and reduce system load under heavy traffic bursts (as no cryptography is required).

A basic implementation could look like this:
1. When instance A (
a.example.com) first attempts to federate with instance B (b.example.com), a POST request is made to a dedicated registration endpoint. (for discussion, we'll say it's https://b.example.com/activity-pub/register-instance). This request includes fields necessary for verification, including the source domain name, target domain name, and a securely-generated verification token. Other metadata could be included to allow instance B to selectively allow/prohibit federation based on other criteria, but this is optional.
2. Instance B makes a POST request back to a dedicated verification endpoint on instance A (for discussion, we'll say it's
https://a.example.com/activity-pub/verify-registration). This request must include the target domain name and verification token provided in step 2.
3. Instance A checks the verification token (and verify that it matches the target domain name) and return a successful value.
The verification code must be invalidated after this call!
4. Instance B, after verifying instance A's request, returns a securely-generated
federation key back to instance A. This federation key is a bearer token used to authenticate all requests from instance A to instance B. This key must be unique to instance A!
5. Instance A completes the original request with the
Authorization header set to Bearer {federation_key}.
6. Instance B receives the request, detects the federation key, and checks it against the list of registered instances.
7. If the key does not exist or A has been defederated, then a
403 Forbidden error is returned.
8. If the key is expired or revoked, then
401 Unauthorized error is returned. Upon receiving a 401 error, instance A should start over from step 1 to re-authenticate and complete the request with a new token. This process should not be repeated for recursive failures!
9. If the key is approved, then a
200 OK response or 202 Accepted response is returned, and A can consider the request as successful.

Advantages versus HTTP Signatures:
- No cryptography requirements.
- Simple logic, no edge cases around HTTP query parameters or header order.
- Equally effective for all request types.
- Keys can be easily revoked or rotated.
- Supports authorized fetch and defederation use cases "by default".

Disadvantages versus HTTP Signatures:
- Breaks the actor model - instances are required as a first-class concept. (but really, the actor model is basically dead already. you can't even federate reliably without a WebFinger server, at minimum.)
- Requires multi-request "handshake" before communication. (but this is already required in practice, since a signature can't be validated without first requesting the signing actor.)
- Out-of-band protocol - communication can't happen over ActivityPub / ActivityStreams because this is a prerequisite to authenticate any request. (but again, we already require WebFinger and some software requires NodeInfo for full support.)

So, what are your thoughts? Good idea? Bad idea? Did I miss something? Please let me know, I welcome replies here!

#ActivityPub #AP #Federation

The MDN Web Docs logo, featuring a blue accent color, displayed on a solid black background.
MDN Web DocsHTTP authentication - HTTP | MDNHTTP provides a general framework for access control and authentication. This page is an introduction to the HTTP framework for authentication, and shows how to restrict access to your server using the HTTP "Basic" scheme.

UK, France and 23 other countries say the war in Gaza ‘must end now’

[now let's see if they do something]

from #AssociatedPress #AP #APNews
By SYLVIA HUI and JILL LAWLESS
Updated 1:05 PM EDT, July 21, 2025

LONDON (AP) — Twenty-five countries including #Britain, #France and a host of #European nations issued a joint statement on Monday that puts more pressure on #Israel, saying the war in #Gaza “must end now” and Israel must comply with international law.

The foreign ministers of countries including #Australia, #Canada and #Japan said “the suffering of civilians in Gaza has reached new depths.” They condemned “the drip feeding of aid and the inhumane killing of civilians, including children, seeking to meet their most basic needs of water and food.”

The statement described as “horrifying” the deaths of over 800 #Palestinians who were seeking aid...

apnews.com/article/europe-isra

#StopStarvingGaza
#Palestine #MiddleEast #WestAsia #EU
#news #press #politics @palestine

Summer in the UK usually involves a visit to the pub 🍻

At the Newsmast Foundation, we're spending our summer at a different kind of pub - Activity Pub (but yeah, we'll probably be at the other kind once or twice too)!

The structure of the AP protocol means social is in its DNA, just like it is at your local! Our hope is that, just like your local, AP can provide a hub for your community too 🏡

Good still exists in America...

"A diverse group — faith leaders, college students, grandmothers, retired lawyers and professors — has been showing up at immigration courts across the nation to escort immigrants at risk of being detained for deportation by masked ICE officials."

apnews.com/article/immigration

#Immigration #News @apnews @apnews_bot #AP #APNewsroom #Politics #USPolitics #USPol #Project2025 @apnews

Freed from #ICE detention, #MahmoudKhalil files $20 million claim against Trump administration

from #AssociatedPress #AP #APNews
By JAKE OFFENHARTZ
Updated 3:47 PM EDT, July 10, 2025

[good article - contains interview excerpts and photos]

"Inside, Khalil said he was denied his ulcer medication, forced to sleep under harsh fluorescent lights and fed “nearly inedible” food, causing him to lose 15 pounds (7 kilograms). “I cannot remember a night when I didn’t go to sleep hungry,” Khalil recalled.

Meanwhile, the #Trump administration publicly celebrated the arrest, promising to deport him and others whose protests against #Israel it dubbed “pro-terrorist, anti-Semitic, anti-American activity.” "

apnews.com/article/mahmoud-kha

#NoDeportationOfMahmoudKhalil
#StopTheDeportations
#NoDeportationOfRümeysaÖztürk
#NoDeportationOfMohsenMahdawi
#DefendFreeSpeech
#DefendStudentProtesters
#NeverStopTalkingAboutPalestine
#Gaza #Palestine #MiddleEast
#USA #US #USPolitics #politics
#news #press @palestine

"But under the hood, the #ActivityPub protocol doesn’t use full mentions at all. Instead, it uses actor IDs."

The actor ID for my main account is mastodon.social/users/crepels. In my case, there is a direct translation between the full mention and the actor ID, but that doesn’t have to be the case."

@crepels, 2023

seb.jambor.dev/posts/understan

Intriguing. So in theory, the Actor ID for a fediverse account could also be represented in an app as @username@email.service or @username@xmpp.service 🤔

MastodonSebastian Jambor (@crepels@mastodon.social)63 Innlegg, 71 Følger, 317 Følgere · I like to explore und understand technology, and share my understanding in an acessible way on my blog. I also created two playgrounds: systemd-by-example.com is a playground that allows you to experiment with systemd from your browser, and activitypub.academy is a Fediverse instance that allows you to explore the ActitivyPub protocol in real time.

Truly SHOCKING video reporting here by #AP, about US contractors in Gaza firing live ammo at Palestinians as they come for food aid. IMHO, this is one of those times when it's important to bear witness, unless it would be too distressing to watch the footage. Will be shocked if this does not explode in the news.
youtu.be/63XTo2EyLZA?si=pGqQcF

🔥🔥🔥 TRIGGER WARNING 🔥🔥🔥

Truly SHOCKING video reporting here by #AP, about US contractors in Gaza firing live ammo at Palestinians as they come for food aid. IMHO, this is one of those times when it's important to bear witness, unless it would be too distressing to watch the footage. Will be shocked if this does not explode in the news.

youtube.com/watch?v=63XTo2EyLZ

.#Israel #Hezbollah #Hamas #Houthi #Gaza #Palestine #Lebanon #Iran #MiddleEast #War #Politics #USPolitics #USPol #News