Русская Hubzilla

Русская Hubzilla

ruzilla@tiksi.net

Форум пользователей Hubzilla

Домашняя страница:: https://tiksi.net/@ruzilla

Как работает аутентификация в Hubzilla

Sun, 15 Jan 2023 01:53:28 +0200

Русская Hubzilla

ruzilla@tiksi.net

Max Kostikov была создана публикация Sun, 15 Jan 2023 01:53:28 +0200

Как работает аутентификация в Hubzilla

Краткий обзор как работает система идентификации в сети #Zot (и, в частности, в #Hubzilla) от патриарха проекта Mike McGirvin и некоторые следствия из этого.

mike была создана публикация Fri, 13 Jan 2023 21:10:29 +0200

I'll try to simplify because this knowledge is essential for anybody trying to build off of Nomad.

In Nomad, the channel guid is your 'claimed' network identity.
In ActivityPub, both the channel URL and webfinger address are your 'claimed' network identity.

The difference is that under ActivityPub, the identity cannot exist without a server. Under Nomad, the identity is not tied to any server, but only to the guid.

In either case your claimed identity is then signed by you with your private key. The signature is the 'proof' of your claim.

When using Nomad, you also sign your current location (the site URL).

This isn't needed for ActivityPub because you only ever have one server. If you change servers, you need a new identity and anything that was ever stored with the old identity will need to be fixed.

On the other side of the conversation, the receiver receives something from you. It is the receiver's responsibility to fetch your public key and verify your signature, or in the case of Nomad signatures as we verify both your identity and location. Assuming your public key verifies both, we have now proven the 'claimed identity' and verified that the message was sent by you and also that your channel is currently using this location.

Once we have done that, the receiver generates the "xchan_hash" or as we call it in later versions - the "portable_id". This is a hash of your guid and your public key. Everybody on the network calculates the exact same portable_id for your channel. There is nothing secret about this and you can pass it around (and we do), but the only rule is that we never rely on a portable_id generated by anybody else. We can only use or rely on a portable_id we generated ourself after verifying your claimed identity. Otherwise it's just another 'claim' and could represent anybody. Once we've verified your identity and created this hash ourself, we can use it internally to refer to your identity - no matter what server you're using. And if you move servers, we don't need to change any existing data because your identity didn't change. All we need to do is add another location to those which we've currently associated with your identity.

I'll stop there, as adding any more information would just make it all too confusing. This is the essential explanation of how Zot/Nomad works. Everything else is just passing messages around.

mike была создана публикация Fri, 13 Jan 2023 21:59:46 +0200

As to the question of re-using a channel, in theory you can re-use a Zot/Nomad channel name. We don't care. It is the rest of the fediverse that cares. But that's the problem - because by allowing a channel name to be re-created in our network, we've provided a mechanism for somebody to forge and re-use identities in another network (ActivityPub, Diaspora, OStatus, etc.). It is our responsibility as responsible network citizens NOT to allow this because other software would block us permanently if our software allowed a way to compromise the integrity of their network. This was discussed amongst different projects, and the only reasonable solution was for us to prevent channel re-use. That said, you cannot prevent re-install - nobody can.

I have no problem with somebody breaking the rules to re-create their own channel. That would not be considered a forgery. But I'll advise that a number of things will likely break and they'll need to hack the database since the code prevents it; and as responsible network citizens we simply aren't going to change the code to allow it.

There are still a couple of associated bugs lurking in our own code, as I found when I recently re-used an old channel through a complete re-install. I've fixed a few places in streams where the identity was confused. Don't know if I've got them all, which will have to wait for the next time I do something like that - but all my streams connections are working again, so I'm hopeful. I've got one or two Hubzilla connections which are still confused and I know Mario has done some work in that area but they're still confused, so I'll just say that more work may be required on the Hubzilla side. Lots of other software (Mastodon, Pleroma) also were confused - some still are, and I can't use this channel at all with Diaspora anymore. Diaspora holds onto network identities and public keys forever.

So it's not a good idea to re-use a channel or re-install. I'm aware of the risks and can fix a lot of things (but not every thing) that break/s and can certainly live without Diaspora. I wouldn't recommend it to anybody else.

mike была создана публикация Sat, 14 Jan 2023 21:19:00 +0200

To be fair, this isn't the first time this conversation has come up. It's another one of those recurring rabbit holes that surfaces occasionally.

I can still remember when I was full of enthusiasm that I could fix it. And for the most part we did (as I had a fair bit of help). In a Nomad only world the problems are pretty much solved - but there are bugs to fix. Start there. Every single hubloc query that searches by address needs an "ORDER BY hubloc_id DESC" clause. Somewhere in Hubzilla there's still at least one place this is not happening. In Streams, there are also places where this should be fixed, though I've checked them all and left a few that shouldn't cause any problems. Even if it doesn't cause an issue today, we should still get in the habit of doing this to support re-installs anywhere we check identity.

The next thing you can do is implement Identity Proofs under ActivityPub.

https://codeberg.org/fediverse/fep/src/branch/main/feps/fep-c390.md

I consider Diaspora a lost cause at this point - unless somebody forks the project and converts it to ActivityPub. If you wish to still converse with that network, you should always start with a fresh channel they've never seen before. There's nothing more you can do. They do have a re-key operation associated with their account migration procedure, which might be useful as long as you never create a clone in our network, which that operation will likely destroy.

Be aware that Pleroma can change keys whenever they like and doesn't notify anybody. This makes it incredibly difficult to figure out if a Pleroma identity is getting re-used.

Re-keying is already provided as a protocol primitive in NomadHandler (Zot6Handler if you're using the older protocol). External network re-keying is provided in our implementation of Mastodon's 'movedTo' operation. Dead account detection (for channels that go away without telling anybody) is provided by Hubzilla's global directory - although this was tossed in streams because it doesn't work with the rest of the fediverse and has become a spam magnet.

#ActivityPub #Diaspora

разработка

Выпуск Hubzilla 8.0

Fri, 13 Jan 2023 22:48:03 +0200

Русская Hubzilla

ruzilla@tiksi.net

В новом выпуске, помимо традиционных исправлений и улучшений, начато использование нового менеджера очереди, который ранее был представлен в виде отдельного расширения Queueworker.
В отличие от используемой ранее, новая очередь обеспечивает более равномерную нагрузку на систему за счёт ограничения числа обработчиков и наличия приоритетов для различных типов заданий.

Mario Vavti была создана публикация Fri, 13 Jan 2023 22:37:39 +0200

Hubzilla 8.0 Released!

Hubzilla 8.0 comes with major changes in regard to queue processing. Basically the queueworker addon has been moved to core. At the same time it has received improvements which will result in faster and more reliable queue processing. Another long awaited feature that has been added is the ability to edit addon apps with the PDL editor.

Other notable changes
- Mark unseen items seen after a certain amount of time (default 90 days)
- Improved redbasic dark schema
- Unseen thread and unseen items count in HQ widget
- Unseen items notifications will just count the first 99 items and display 99+ if there are more
- Add mentions and thread owners to recipients for public items in activitypub
- Bugfixes

Breaking changes
- The logic to enable the site only public stream has changed. If you are using the site only public stream please revisit this setting in /admin/site.

For a detailed list of changes please refer to the changelog.

A big THANK YOU! to all contributors and everybody who supports Hubzilla and its development.

Update

- Backup your data
- Execute util/udall from the terminal

Install

Please refer to the install instructions.

#Hubzilla is a powerful platform for creating interconnected websites featuring a decentralized identity, communications, and permissions framework built using common webserver technology.

https://hubzilla.org*

*We are currently rebuilding our website. Hence the page is not up-to-date.

разработка новости

Fri, 13 Jan 2023 22:50:07 +0200

Max Kostikov

kostikov@zotum.net

Для администраторов хабов.
После обновления по умолчанию публичный поток будет отключён.
Включить его можно в настройках сайта
/admin/site/

Wed, 25 Jan 2023 04:26:12 +0200

uzver

uzver@zotum.net

наконец то UI стал более вменяем.
Но ещё есть над чем поработать

Wed, 25 Jan 2023 14:54:35 +0200 последнее редактирование: Wed, 25 Jan 2023 15:10:45 +0200

Max Kostikov

kostikov@zotum.net

@uzver

наконец то UI стал более вменяем.

Не радикальных изменений за последние года 3... Разве что HQ сильно изменилась в лучшую сторону.

Выпуск Hubzilla 7.8

Tue, 11 Oct 2022 11:55:07 +0200

Русская Hubzilla

ruzilla@tiksi.net

Mario Vavti была создана публикация Mon, 10 Oct 2022 20:19:13 +0200

Hubzilla 7.8 Released!

Hubzilla 7.8 comes with many bugfixes, improved handling of hub re-installs and bootstrap version 5.2
Bootstrap v5.2 has implemented CSS variables for most of its components. In the long term this will be beneficial for the handling of schemas in Hubzilla themes. Some work in this direction has already started.
For the complete list of changes please have a look at the changelog.

A big THANK YOU! to all contributors and everybody who is supporting Hubzilla.

How to Upgrade

- Create a backup
- Execute util/udall from the terminal

Get the Code

Source code: https://framagit.org/hubzilla/core/
Install instructions: https://framagit.org/hubzilla/core/-/blob/master/install/INSTALL.txt

Hubzilla is a powerful platform for creating interconnected websites featuring a decentralized identity, communications, and permissions framework built using common webserver technology.

https://hubzilla.org

новости разработка

Выпуск Hubzilla 7.6

Wed, 27 Jul 2022 10:59:34 +0200

Русская Hubzilla

ruzilla@tiksi.net

Mario Vavti была создана публикация Tue, 26 Jul 2022 20:19:37 +0200

Hubzilla 7.6 Released!

Hubzilla 7.6 brings a dashboard for the HQ module, some important bugfixes and some minor code cleanup. The HQ dashboard provides an overview of channels that require your attention and quick links to content that you have recently created or edited. A bug in the message filter had the effect that if a language filter was applied but the language could not be detected, the message was dismissed. This has been fixed.

A big THANK YOU! to all contributors and everybody who is supporting Hubzilla. Special thanks to @NGI Zero open source funding for supporting this project!

How to Upgrade

- Create a backup
- Execute util/udall from the terminal

Get the Code

новости разработка

Выпуск Hubzilla 7.4

Wed, 01 Jun 2022 20:32:30 +0200

Русская Hubzilla

ruzilla@tiksi.net

Увидел свет очередной выпуск Hubzilla 7.4
Основная работа была сосредоточена на переработке кода основной части платформы.
Среди наиболее заметных измнений следует выделить перенос приложений "Статьи", "Карточки" и "Wiki" из ядра системы в отдельные приложения (отключены по умолчанию).
Минимальные требования к PHP подняты до версии 8.0

Mario Vavti была создана публикация Wed, 01 Jun 2022 09:34:11 +0200

Hubzilla 7.4 Released!

During the course of the Hubzilla 7.4 release cycle we have focused on refactoring the core codebase. The minimum required PHP version has been bumped to 8.0. The articles, cards and wiki apps have been moved from core to separate addons. If you are using one or more of the moved apps, you will require to install the addons (admin task) and reinstall the apps. Besides the refactoring we still found the time to fix some annoying bugs. Please have a look at the changelog for more details.

A big THANK YOU! to all contributors and everybody who is supporting Hubzilla. Special thanks to @NGI Zero open source funding for supporting this work.

How to Upgrade

- Make sure you are using at least PHP version 8.0
- Create a backup
- Execute util/udall from the terminal
- Consider installing the article, cards and wiki addons if the apps are used by your hub members

Get the Code

#russian #lang_ru

новости разработка

Выпуск Hubzilla 7.2

Tue, 29 Mar 2022 21:20:28 +0200 последнее редактирование: Tue, 29 Mar 2022 21:24:08 +0200

Русская Hubzilla

ruzilla@tiksi.net

Увидела свет новая версия #Hubzilla 7.2
Главные изменения.

Обновлена темная схема оформления Redbasic, которая теперь основана на bootstrap-nightfall.
Добавлена поддержка алгоритма цифровой подписи HTTP hs2019.
Улучшенные фильтры содержимого.
Добавлен графический интерфейс для редактора макета системной страницы (редактор PDL).
Переработана и улучшена поддержка входящих сообщений протокола ActivityPub.
Важные исправления безопасности

Mario Vavti была создана публикация Tue, 29 Mar 2022 11:58:49 +0200

Hubzilla 7.2 Released!

I am very happy to announce the release of Hubzilla 7.2 which brings new features, improved code quality, security fixes and a bunch of squashed bugs. Here is an overview of the most notable changes:

This release contains important security fixes. Please consider updating ASAP!

- Updated redbasic dark schema which is now based on bootstrap-nightfall
- Support for the hs2019 HTTP signature algorithm
- Login and register button moved into the hamburger menu for small screens
- Enhnaced content filters
- Added support for quoteUrl in inbound activities
- Added a GUI for the system page layout editor (PDL editor)
- Added widget descriptions to be used in the PDL editor
- Rewrite and modernize the activitypub inbox
- New addon Fediwordle - a distributed word game inspired by wordle
- Important security fixes

A big THANK YOU! to all contributors and everybody who is supporting Hubzilla. Special thanks to @NGI Zero open source funding for supporting the work on the PDL editor GUI.

How to Upgrade

- Create a backup
- Execute util/udall from the terminal

Get the Code

#russian #lang_ru #development

новости разработка

Выпуск Hubzilla 7

Fri, 21 Jan 2022 10:26:32 +0200 последнее редактирование: Fri, 21 Jan 2022 13:18:26 +0200

Русская Hubzilla

ruzilla@tiksi.net

Увидел свет новый 7 выпуск децентрализованной федеративной платформы #Hubzilla.

Среди главных новшеств, безусловно, следует отметить полностью переработанную систему прав доступа, которая является одной из ключевых особенностей Hubzilla. Проведённый рефакторинг позволил упростить рабочий процесс и в то же время обеспечить большую гибкость при более удобной организации взаимодействия.

Роли каналов также были упрощены. Теперь есть выбора из 4 возможных варианта: "публичный", "личный", "форум сообщества" и "настраиваемый". По умолчанию канал создаётся как "личный".

Индивидуальные разрешения для контактов были упразднены в пользу ролей, которые теперь являются обязательным требованием при добавлении каждого контакта.

Роли контактов имеют одну предустановку по умолчанию, которая определяется ролью канала. Пользовательские роли контактов могут быть созданы по желанию. Любая роль контакта может быть установлена по умолчанию для новых соединений в приложении "Роли контактов".

Настройки конфиденциальности были перенесены в отдельный модуль настроек. Настройки видимости онлайн-статуса и записей на страницах справочника и предложений были перенесены в профиль.

Расширенные конфигурации доступны в настройках конфиденциальности, если выбрана роль пользовательского канала. Они получили первоначальное предупреждение, а некоторые записи, которые могут быть неправильно поняты, получили подсказки.

Группами конфиденциальности можно управлять из приложения "Группы конфиденциальности", если оно установлено. Настройки группы конфиденциальности по умолчанию для нового контента и группы конфиденциальности по умолчанию для новых контактов также были перенесены туда.

Гостевой доступ был переработан, чтобы позволить добавлять новых гостей в группы конфиденциальности. Ссылки быстрого доступа к приватным ресурсам были добавлены в выпадающий список для удобства.

Другие значимые изменения.

Улучшен пользовательский интерфейс для изменения фотографии профиля.
Улучшено отображение опросов.
Исправлены опросы для каналов форума.
Улучшена производительность при удалении контакта.
Удалено устаревшее расширение для обмена личными сообщениями. Вместо него, в том числе и для обмена с Diaspora, используется стандартный механизм прямых сообщений.
Поддержка и улучшения для расширения Socialauth.
Различные исправления ошибок.

Расширение для обмена личными сообщениями было удалено. Это означает, что старая переписка больше не будет доступна из пользовательского интерфейса. Непосредственно данные будут удалены из базы данных в следующем релизе 7.2.

Каналам - форумам должна быть присвоена роль канала "форум сообщества" в настройках канала. В противном случае канал больше не будет работать как форум. Если вам требуется роль пользовательского канала, эту настройку можно найти в расширенной конфигурации настроек приватности.

Визитная карточка профиля (vcard) была неработоспособна и была удалена из пользовательского интерфейса. Возможно, позднее она будет восстановлена.

Приятного полёта!

Mario Vavti была создана публикация Fri, 21 Jan 2022 10:05:34 +0200

Hubzilla 7.0 Released!

Hubzilla 7.0 is addressing one of the most important features of Hubzilla - permissions. By refactoring the way we set permissions we managed to simplify the workflow to do so and at the same time provide more flexibility while making it easier to organize.

Channel roles have been simplified. There are now 4 possible selections: public, personal, community forum and custom. Personal is the default.

Individual contact permissions have been deprecated in favor of contact roles which are now a requirement for every contact.

Contact roles have one default preset which is defined by the channel role. Custom contact roles can be created as desired. Any contact role can be set to be the default for new connections in the contact roles app.

Privacy settings have been moved to a separate settings sub module. Settings for the online status visibility and entries in the directory and suggestions pages have been moved to the profile.

Advanced configurations are available in the privacy settings if the custom channel role is selected. They have received an initial warning and some entries which are likely to be misunderstood have got advising help texts.

Privacy groups can be managed from the Privacy group app if installed. The settings for the default privacy group for new content and the default privacy group for new contacts have been moved there.

Guest access has been refactored to allow new guests to be added to privacy groups. Quick access links to private resources have been added to the lock icon dropdown for convenience.

Other notable changes
- Improved UI for changing the profile photo
- Improved rendering of polls
- Fixed polls for forum channels
- Improved performance when deleting a contact
- Remove deprecated legacy mail addon
- Scope support and improvements for the socialauth addon
- Various bug fixes

Breaking changes
- The legacy mail addon has been removed. This means that the data will not be accessible anymore from the UI. The data will be removed from the database in the next release (7.2). At this point the legacy mail data will be lost.
- Forum channels must be assigned the "community forum" channel role in the channel settings. Otherwise the channel will not act as a forum anymore. If you require the custom channel role, this setting can be found in the advanced configuration of the privacy settings.
- Profile vcard was dysfunctional and has been removed from the UI. It might be revived at a later point.

A big THANK YOU! to all contributors and everybody who is supporting Hubzilla. Special thanks to @NGI Zero open source funding for supporting this work.

How to Upgrade

1. create a backup
2. execute util/udall from the terminal
3. select a new channel role for your channel (optional*)
4. review your privacy settings (optional*)
5. assign your contacts a contact role (optional*)

* Optional because your old privacy settings will be still in tact until you decide to change them.

Get the Code

#russian #lang_ru

новости разработка

Выпуск Hubzilla 6.4.1

Fri, 03 Dec 2021 23:14:59 +0200

Русская Hubzilla

ruzilla@tiksi.net

В новом выпуске Hubzilla представлены ряд исправлений ранее выявленных ошибок, а также проведена работа по улучшению отображения на различных устройствах и повышения общей отзывчивости системы.

Mario Vavti была создана публикация Fri, 03 Dec 2021 14:59:29 +0200

Hubzilla 6.4.1 Released!

Hubzilla 6.4.1
- Fix hubloc_site_id in fix_system_urls() on detected site rename events
- Fix duplicate deliveries if duplicate hublocs available
- Redesign profile vcard for improved responsive handling
- Fix profile photos not stored in profile photo folder
- Maximum width of content region is now calculated in rem for improved responsive handling
- Fix likes notices emited allthough they are disabled
- Fix page not reloaded after comment/like in mod photos - issue #1651
- Port improved Lib/HttpMeta from zap
- Improved responsive aside

#russian #lang_ru #development

новости разработка

Sat, 04 Dec 2021 00:34:21 +0200

Lone wolf

neoferosium@zotum.net

Будем надеяться что это работает

Sat, 04 Dec 2021 11:25:31 +0200

Max Kostikov

kostikov@zotum.net

@Lone wolf А что, это когда-то не работало?

Sat, 04 Dec 2021 22:09:47 +0200

Lone wolf

neoferosium@zotum.net

@Max Kostikov

А что, это когда-то не работало?

Да я уже запутался.

Выпуск Hubzilla 6.4

Tue, 09 Nov 2021 20:10:52 +0200

Русская Hubzilla

ruzilla@tiksi.net

После более чем 2 месяцев разработки увидел свет новый выпуск #Hubzilla 6.4.
Помимо традиционно большого количества исправлений и улучшений, сред новшеств следует отметить

Переработанная поддержка клонирования каналов по сети. Теперь есть возможность произвести полную синхронизацию онлайн без использования файлов. Прогресс синхронизации визуализирован.
Улучшена производительность при работе с файловым хранилищем.
Добавились настройка уведомлений, позволяющая отметить просмотренными все действия относящиеся к отображённой публикации.

Больше подробностей смотрите в журнале изменений.

Mario Vavti была создана публикация Tue, 09 Nov 2021 11:41:24 +0200

Hubzilla 6.4 Released!

Hubzilla 6.4 comes with many bug fixes and some neat usability improvements. Here is a condensed list of the most notable changes:

- BBcode support for the notes widget and app
- Implement system apps sync with clones
- Improved file upload performance
- Introduce all in one channel cloning via network; separate import of files and items is not required anymore (not compatible with cloning from older versions)
- Introduce progress tracking for files and items import when cloning via network (not compatible with cloning from older versions)
- Improve channel delete performance by moving some actions to background tasks
- Implement apps un-starring from the app bin via drag and drop
- Add notices tab to HQ widget
- Add option to mark all notices of a thread read if a notice of the thread is clicked (default true)

For the complete changelog please refer to this document.

A big THANK YOU! to all contributors and everybody who is supporting Hubzilla.

How to Upgrade

1. create a backup
2. execute util/udall from the terminal

Get the Code

#russian #lang_ru #development

новости разработка

Экстренный выпуск Hubzilla 6.2.2

Sun, 03 Oct 2021 17:44:58 +0200

Русская Hubzilla

ruzilla@tiksi.net

В связи с обнаружением и устранением крайне неприятной ошибки, которая при определённых обстоятельствах могла приводить к удалению метаданных об изображениях канала, рекомендуется срочно обновиться.

Mario Vavti была создана публикация Sun, 03 Oct 2021 14:54:20 +0200

Hubzilla 6.2.2 Released!

This update fixes an issue which could lead to loss of photos under certain conditions.
Please update ASAP!

#russian #lang_ru #Hubzilla

новости разработка