| RobertSE | https://sauer-ernst.de |
| gemeinnützige NU17 gUG (haftungsbeschränkt) | https://nu17.de |
Goda nyheter! Arbetet som svenska myndigheter gjort i eSam fortsätter att ge frukt!
"In a landmark demonstration of the power of the Matrix open standard, two of Sweden's major public sector agencies, Försäkringskassan (the Swedish Social Insurance Agency) and Trafikverket (the Swedish Transport Administration), have successfully federated their entirely separate real time communications systems."
Sweden goes live with Matrix-based federation!
https://element.io/blog/sweden-goes-live-with-matrix-based-federation/
The fearless Noa Avishag Schnall of the Global Sumud Flotilla, had the courage, while zip-tied, to shout at Ben-Gvir to his face that he was a "genocidal maniac," after which she was assaulted & beaten by his goons. Yesterday she & her fellow activists arrived in Istanbul, battered & bruised but unbowed.
Fedify security updates: 1.9.11, 1.10.10, 2.0.18, 2.1.14, and 2.2.3
If you use Fedify, update to a patched release now. CVE-2026-42462 affects Fedify's Linked Data Signature handling. An attacker could use JSON-LD graph-restructuring features to change how a signed activity is interpreted without invalidating its Linked Data Signature.
Fedify verifies incoming ActivityPub activities with several mechanisms, including HTTP Signatures, Object Integrity Proofs, and Linked Data Signatures. The vulnerable path is Linked Data Signatures: the signature is checked over the canonical RDF graph, but JSON-LD can represent the same graph in more than one JSON shape. In affected versions, that gap could let a signed activity be reshaped so that Fedify reads a different ActivityPub object shape than intended.
The fix makes Fedify normalize Linked Data Signature-verified activities against Fedify's local JSON-LD context before interpreting them, and rejects JSON-LD constructs that can preserve the signed RDF graph while changing the ActivityPub object shape consumed by Fedify.
Patched releases are 1.9.11, 1.10.10, 2.0.18, 2.1.14, and 2.2.3. The GitHub Security Advisory is GHSA-9rfg-v8g9-9367, and the CVE ID is CVE-2026-42462.
Update @fedify/fedify:
BaumEntscheid Berlin
🌍Peter🔥Antifa✊
Konstellationen
Die Linke Steglitz-Zehlendorf
DB 🌱💦
Fedify: ActivityPub server frameworknpm update @fedify/fedify
yarn upgrade @fedify/fedify
pnpm update @fedify/fedify
bun update @fedify/fedify
deno update @fedify/fedifyAfter updating, redeploy. If you run other Fedify-based servers, update those too.
Thanks to @Claire for the report and responsible disclosure.
If anything is unclear, ask below.
A small but significant victory in a massive battle to defend human rights and international law. Francesca has been vindicated even in the courts of the superpower that sanctioned her for doing her duty
https://www.theguardian.com/us-news/2026/may/13/un-francesca-albanese-sanctions
🔗 https://bsky.app/profile/yanisvaroufakis.bsky.social/post/3mlsgl4n3fs2y
#neuhier
Noch dominiert bei uns LinkedIn soweit, dass wir erst mal dort über unser Erscheinen hier geschrieben haben:
https://www.linkedin.com/posts/stiftungsmarktplatz-eu_neuhier-activity-7457791371995779072-Ov--
Auf jeden Fall danke an den @stiftungen.social Server, ohne dessen Initative auch wir jetzt nicht hier wären. 🙏
Yanis Varoufakis (Bsky Mirror)
stiftungsmarktplatz.eu