New post from me over on the @spritely blog: Composing capability security and conflict-free replicated data types

Local-first apps often use CRDTs, but I'm not really aware of any that fully embrace capability security. This post is an attempt to show how the two can be composed using a simple group chat application as a case study.

https://spritely.institute/news/composing-capability-security-and-conflict-free-replicated-data-types.html

#spritely #localfirst #ocaps

Do we care enough to use capability-based #security for yet?

Every plugin system deserves robust composition. #ocaps

https://old.reddit.com/r/comfyui/comments/1dbls5n/psa_if_youve_used_the_comfyui_llmvision_node_from/

New ForgeFed #Blog post:

Stabilizing the Object Capability System

https://forgefed.org/blog/stabilizing-ocaps/

Where to comment: Right here on the Fediverse :)

--pere

#forge #ocaps #activitypub #forgefed #federation #haskell #fediverse #decentralization #development

New ForgeFed blog post: Vervis actor refactoring

https://forgefed.org/blog/vervis-actor-refactoring/

Where to comment: Here on the Fediverse :)

#activitypub #ocaps #haskell #development

--pere

The #Sandstorm project is excited to finally join the fediverse!

We're a secure computing platform for one-click deployment of open source web apps. We're also an innovative way of building apps based on object capabilities (#ocaps)!

We've selected floss.social because we love the vibe of the community growing here. Our friends at @forgejo are also here which is a great bonus.

Follow us for project updates and get the latest and greatest news on the growth of our community! #introduction

@jonobie havent looked at it yet, but @protean recommended this link yesterday from @bonfire about community led responses to disinfo (also relevant for spam, harassment etc.)

https://bonfirenetworks.org/zappa/

Bonfire is shaping up nice & they are implementing a group feature. Some other fediverse servers already have groups. Some of them (stuff that can federate on the zot protocol) already provide fine grained control over posting / reading permissions.

Looks like #ocaps is coming to activitypub

in the car I was pondering #ocaps, #goblins, and #functionalprogramming... I had searched for ocap frameworks in python, but today realized that simple dependency injection isn't the same, when any running code (in python at least) can inspect the internals of most anything it can get a reference to.

Perhaps ocap as a larger design only makes sense in a language that itself has a more secure design?

I'm talking out my butt here but it makes sense to me...