ActivityPub is a protocol and open standard for decentralized social networking . It provides a client-to-server (shortened to C2S) API for creating and modifying content, as well as a federated server-to-server (S2S) protocol for delivering notifications and content to other servers. ActivityPub has become the main standard used in the fediverse , a popular network used for social networking that consists of software such as Mastodon , Pixelfed and PeerTube .
56-504: ActivityPub is considered to be an update to the ActivityPump protocol used in pump.io , and the official W3C repository for ActivityPub is identified as a fork of ActivityPump. The creation of a new standard for decentralized social networking was prompted by the complexity of OStatus , the most commonly used protocol at the time. OStatus was built using a multitude of technologies (such as Atom , Salmon , WebSub and WebFinger ),
112-626: A Cayman Islands -based entity affiliated with Web3 firm Mask Network. Pawoo is banned by most instances on Mastodon due to allowing lolicon art. In April 2019, computer manufacturer Purism released a fork of Mastodon named Librem Social. Gab , a controversial social network with a far-right user base, changed its software platform to a fork of Mastodon and became the largest Mastodon node in July 2019. Gab's adoption of Mastodon allowed Gab to be accessed from third-party Mastodon applications, although four of them blocked Gab shortly after
168-444: A Mastodon instance's trending topics, not arbitrary popular words. Trending topics vary between instances, since individual instances are aware of different subsets of posts from the whole fediverse . Quote posts do not exist on Mastodon, and quotes from other instances that run software with quotes do not display an embed of the quoted post. While previously rejected from being implemented due to issues with toxicity and harassment,
224-594: A base to build the ActivityPub standard. It was officially published as a Recommendation on January 23, 2018. The protocol has since gone on to become the main standard used in the fediverse , with future development on the standard to be organized by the Social Web Community Group, a successor to the working group. Mastodon (social network) Mastodon is an open source , self-hosted , social networking service . Mastodon uses
280-616: A competing social media company named after himself", being banned. Subsequently, Mastodon users wrote fictional backstories and memes about "John Mastodon" and circulated the hashtag #JohnMastodon . Following the Mastodon suspension and ban on Mastodon links on Twitter, Twitter introduced a new policy on 18 December to prohibit sharing links on Twitter to a variety of social media websites, with Mastodon being one of those blocked. The policy stated that it prohibited links in both tweets and account details and that accounts that violated
336-578: A formal letter to Truth Social's chief legal officer on 26 October 2021. On 12 November 2021, Truth Social published its source code. In April 2022, the European Union launched its own Mastodon and PeerTube instances via the European Data Protection Supervisor , dubbing them "EU Voice" and "EU Video". The instances were a test run of whether it would be sustainable to run its own social media platforms. While
392-826: A lower-value target and reduces potential damage. The creator of Mastodon, Eugen Rochko, argues that these issues do not set it apart from other software products that can be hosted by non-professionals. In 2023, the Mozilla Foundation contracted cybersecurity firm Cure53 to perform penetration testing on the Mastodon software, in preparation for establishing an instance for the Mozilla community. The testing discovered several vulnerabilities, including one called "TootRoot" that would have enabled arbitrary code execution and another that would have enabled cross-site scripting attacks through oEmbed cards. These vulnerabilities were patched in July 2023. Mastodon has been
448-414: A private beta. However, the instance has since been discontinued and will be offline as of December 17, 2024. While Mastodon's decentralized structure is one of its most distinctive features, it also poses additional security challenges. Since many Mastodon instances are run by volunteers, some security experts are concerned about data security and responsiveness to new threats and vulnerabilities across
504-468: A problem with the ActivityPub protocol itself, but with implementations not refreshing their content for updated data when needed. The username format commonly used by ActivityPub software ( acct URIs with the scheme replaced by an at sign , an example being @w3c@w3c.social ) has been criticized for being too complex for most users to understand. However, ActivityPub itself supports any URI as
560-670: A product of the infrastructure used in GNU social (the originator and largest user of the OStatus protocol), which made it difficult to implement the protocol into new software. OStatus was also only designed to work with microblogging services, with little flexibility to the types of data that it could hold. The standard was first published by the World Wide Web Consortium (W3C) as a W3C Recommendation in January 2018 by
616-572: A project has since started via funding from NLnet with the goal of implementing a standard that avoids these issues. In September 2018, with the release of version 2.5 with redesigned public profile pages, Mastodon marked its 100th release. Mastodon 2.6 was released in October 2018, introducing the possibilities of verified profiles and live, in-stream link previews for images and videos. Version 2.7, in January 2019, made it possible to search for multiple hashtags at once, instead of searching for just
SECTION 10
#1732800968013672-657: A single hashtag. Version 2.7 has more robust moderation capabilities for server administrators and moderators, while accessibility, such as contrast for users with sight issues, was improved. The ability for users to create and vote in polls, as well as a new invitation system to manage registrations was integrated in April 2019. Mastodon 2.8.1, released in May 2019, made images with content warnings blurred instead of completely hidden. In version 2.9 in June 2019, an optional single-column view
728-764: A single, global policy on content moderation . Servers can choose to limit or filter out messages with disparaging content. The main author of the Mastodon software, Eugen Rochko , believes that small, closely related communities deal with unwanted behavior more effectively than a large company's small safety team. Users can also block and report others to administrators, much like on Twitter. Instance administrators can block other instances from interacting with their own, an action called defederation . By posting toots hashtagged with #fediblock , some instance administrators and users alert others of issues requiring moderation. Unlike Twitter (now known as X ), Mastodon by default only allows for hashtags and mentioned accounts in
784-485: A singular server, while the federated timeline shows messages across all participating Mastodon servers. Users can communicate across connected Mastodon servers with usernames similar in format to full email addresses. In early 2017, journalists like Sarah Jeong distinguished Mastodon from Twitter for its approach to combating harassment. Mastodon uses community-based moderation, in which each server can limit or filter out undesirable types of content, while Twitter uses
840-468: A standard Mastodon instance, these messages can include up to 500 text-based characters, greater than Twitter's 280-character limit. Some instances support even longer messages. Users join a specific Mastodon server, rather than a single centralized website or application. The servers are connected as nodes in a network, and each server can administer its own rules, account privileges, and whether to share messages to and from other servers. Many servers have
896-599: A standardized system for migrating accounts using the Move activity via the Fediverse Enhancement Proposal organization, the current proposal only allows for basic follower migration, with all other data remaining linked to the original account. ActivityPub implementations have been criticized for missing replies and parts of reply threads from remote posts, and presenting outdated statistics (e.g. likes and reposts) about remote posts. However, this isn't
952-500: A theme based on a specific interest. Mastodon includes a number of specific privacy features. Each message has a variety of privacy options available, and users can choose whether the message is public or private. Public messages display on a global feed, known as a timeline, and private messages are only shared on the timelines of the user's followers. Messages can also be marked as unlisted from timelines or direct between users. Users can also mark their accounts as completely private. In
1008-412: A user. In order to publish data (for example liking an article), a user creates an activity that declares that they liked an Article object and publishes it to their outbox, where it is then delivered by the ActivityPub server via a POST request to the inboxes listed in the activity's to , bto , cc and bcc fields. The receiving servers then accounts for the newly received activity and updates
1064-478: A username, and it is a limitation of Mastodon and other ActivityPub implementations, not the protocol itself. (f. StatusNet; orig. Laconica) Pump.io pump.io is a software package containing a social networking service and communication protocol that can be used as a federated social network . Started by Evan Prodromou , it is a follow-up to his previous microblogging software StatusNet (later merged into GNU social) and its OStatus protocol. It
1120-576: Is an Indian social networking product launched in September 2020 that uses the Mastodon source code, initially without releasing its modifications. The service also identified itself as being wholly made in India, despite its origin. In October 2021, former US President Donald Trump founded Truth Social , which is based on Mastodon. Initially, Truth Social did not make its source code available, violating Mastodon's AGPLv3 license. Eugen Rochko sent
1176-554: Is capable of communicating using W3C 's ActivityPub standard, which has been implemented since version 1.6. A Mastodon user can therefore interact with users on any other server in the Fediverse that supports ActivityPub. Since version 2.9.0, Mastodon has offered a single-column mode for new users by default. In advanced mode, Mastodon approximates the microblogging interface of TweetDeck . Users post short-form status messages, historically known as "toots", for others to see. On
SECTION 20
#17328009680131232-401: Is designed to be more lightweight and usable for general activity streams instead of the predecessor's focus on microblogging timelines, with its goal being to achieve "most of what people want from a social network". Development of the software started in September 2011, with an initial version being released on October 3, 2012. identi.ca , the largest StatusNet instance at the time (which
1288-574: Is powered by Ruby on Rails and Node.js , with its web client being written in React.js and Redux . The only database software supported is PostgreSQL , with Redis being used for job processing and various actions that Mastodon needs to process. The service is interoperable with the fediverse , a collection of social networking services which use the ActivityPub protocol for communication between each other, with previous versions containing support for OStatus . Client apps for interacting with
1344-463: Is written in Node.js and uses Activity Streams as the format for commands and to transfer data via a simple REST inbox API. The software package also uses a NoSQL database such as MongoDB or Redis , and requires GraphicsMagick for uploading media. Pump.io can be ran easily on hardware with less resources, such as a Raspberry Pi or any other single-board computer . It can be used either with
1400-622: The Activity Streams format and its vocabulary to allow for more general interactions between users, as well as to make development of alternative ActivityPump-based social networks easier for software developers, who were forced to operate within the limits of OStatus and its core technologies. The W3C Social Web Working Group was launched in July 2014, originally to build on the OpenSocial standard. The working group later changed focus towards building on ActivityPump, using it as
1456-447: The ActivityPub protocol for federation which allows users to communicate between independent Mastodon instances and other ActivityPub compatible services. Mastodon has microblogging features similar to Twitter , and is generally considered to be a part of the Fediverse . Mastodon was created by Eugen Rochko and revealed to the public via Hacker News in October 2016. Not long after, it quickly gained popularity and became
1512-563: The Fediverse to be searched, but allows server administrators to enable functionality via Elasticsearch to search for the full text of public posts that have opted-in to being indexed. Searches are limited to all content that the instance knows about, either locally or from other instances that have been indexed. However, services utilizing the ActivityPub protocol exist which allow for searching all posts on all instances as long as users opt-in. For similar reasons, only hashtags can appear in
1568-686: The Mastodon API are available for desktop computer operating systems, including Windows , macOS and the Linux family of operating systems, as well as mobile phones running iOS and Android . The API is open for anyone to utilize, allowing clients to be built for any operating system that can connect to the internet . While Mastodon was first released in October 2016, the service began to expand in late March and early April 2017. Servers were mostly operated by academic institutions, journalists, hobbyists, and activists. The Verge wrote that
1624-763: The Social Web Working Group (SocialWG), a working group chartered to build the protocols and vocabularies needed to create a standard for social functionality. Shortly after, further development was moved to the Social Web Community Group (SocialCG), the successor to the SocialWG. ActivityPub uses the ActivityStreams 2.0 format for building its content, which itself uses JSON-LD . The three main data types used in ActivityPub are Objects, Activities and Actors. Objects are
1680-420: The acquisition migrated to Mastodon, bringing new attention to the ActivityPub protocol with it. Various major social media platforms and corporations have since pledged to implement ActivityPub support, including Tumblr , Flipboard and Meta Platforms ' Threads . Poorly optimized ActivityPub implementations can cause unintentional distributed-denial-of-service attacks on other websites and servers, due to
1736-400: The article by adding the like action to it. An example actor object that represents a user account : An example activity that likes an article object: An example article object: Lead author Christine Lemmer-Webber notes that the team predominantly identified as queer , which led to features that help users and administrators protect against "undesired interaction." She also notes that
ActivityPub - Misplaced Pages Continue
1792-480: The change. In response, Mastodon's main contributors stated in their blog that they were "completely opposed to Gab’s project and philosophy", and criticized Gab for attempting "to monetize and platform racist content while hiding behind the banner of free speech" and for " paywalling basic features that are freely available on Mastodon". Gab later removed federation with ActivityPub due to various perceived technical issues and plans to build its own protocol. Tooter
1848-503: The community at this time was small and that it had yet to attract the personalities that keep users at Twitter. The global use had risen from 766,500 users as of 1 August 2017, to 1 million users on 1 December 2017. In November 2017 artists, writers, and entrepreneurs such as Chuck Wendig , John Scalzi , Melanie Gillman and later John O'Nolan joined in. Another spike in popularity came in March through April 2018, due to
1904-423: The concerns about user privacy raised by the #deletefacebook effort. Membership of Mastodon and other alternative social media sites increased in early December 2018 after Tumblr announced its intention to ban all adult content from the site. In November 2019, nearly 20,000 Twitter users in India temporarily shifted to Mastodon over complaints by users against Twitter's moderation policies. To circumvent
1960-572: The decentralized nature of the network. An example would be Mastodon 's implementation of OpenGraph link previews, wherein every instance that receives a post that contains a link with OpenGraph metadata will download the associated data, such as a thumbnail , in a very short timeframe, which can slow down or crash servers as a result of the sudden burst of requests. ActivityPub has been criticized for not natively supporting moving accounts from one server to another, forcing implementations to build their own solutions. While there has been work on building
2016-482: The dominant platform in the fediverse and overtaking the previous leader, GNU social . It gained significant adoption in 2022 following the acquisition of Twitter by Elon Musk . The project is maintained by the German non-profit Mastodon GmbH . Development of Mastodon is crowd-funded, and does not contain any support for advertisements or monetized features. Mastodon servers run social networking software that
2072-463: The federated network had grown to 665,000 active users, with a few growing pains. In particular, Mastodon's largest instance, mastodon.social, needed capacity upgrades to handle the new load. Accounts on a server called journa.host founded by Adam Davidson are restricted to professional journalists. Mastodon's increased adoption continued in the days following the Twitter takeover. On 11 November,
2128-422: The goal of building a new suite for testing various ActivityPub implementations and their compliance with the specification. The initial wave of adoption for ActivityPub (circa 2016-2018) came from software that was already using OStatus as their federation protocol, such as Mastodon , GNU social and Pleroma . Following the acquisition of Twitter by Elon Musk in 2022, many groups of users that were critical of
2184-488: The included Web UI, or other clients via its API . As a federated social network, pump.io is not tied to a single site. Users across servers can subscribe to and communicate with each other, and if one or more individual nodes go offline the rest of the network remains intact. ActivityPump is the protocol used by pump.io to allow for federation of user content between different pump.io instances. Compared to OStatus , its microblogging-oriented predecessor, ActivityPump uses
2240-453: The increasing online censorship of social networks in mainland China, an increasing number of Chinese-language users have chosen to migrate to Mastodon in 2022. A spike in Mastodon's user participation occurred in April 2022, following the 25 April announcement of Elon Musk purchasing Twitter . By 27 April, 30,000 new users had joined Mastodon. On 28 April 2022, the European Data Protection Supervisor (EDPS) launched
2296-407: The main suspect in an issue regarding the generation of OpenGraph link previews, wherein the data from the link is not cached by the post and transmitted to other instances. Many instances in turn automatically fetch the preview data as well as soon as they receive the post (which can be near-instantaneously after the post is created), creating an accidental DDoS attack that can temporarily increase
ActivityPub - Misplaced Pages Continue
2352-422: The most common data type, and can be images, videos, or more abstract items such as locations or events. Activities are actions that create and modify objects, for example a Create activity creates an object. Actors are representative of an individual, a group, an application or a service, and are the owners of objects. Every actor type contains an inbox and outbox stream, which sends and receives activities for
2408-407: The network, considering the difficulty of configuring and maintaining an instance as well as uneven skill levels among administrators. Configuration errors and security bugs in server implementation has already led to user data being scraped or modified by attackers. It is worth noting that Mastodon also collects considerably less personal data, compared to other social media platforms, which makes it
2464-409: The number of new users of the platform compared to the previous week was reported to be 700,000, moving Mastodon over the 7 million user mark. During that period, several prominent figures joined Mastodon, including prominent actors, comedians, journalists, political activists, and politicians. In December 2022, the number of monthly active users of Mastodon reached two million. On 15 December,
2520-505: The official ActivityPub microblogging platform ( EU Voice ) of the EU institutions, bodies and agencies (EUIs), based on Mastodon. Musk's acquisition became final on 27 October 2022. Mastodon had an increase of 70,000 new users from a resultant " diaspora " on 28 October alone. Daily downloads increased substantially, rising from 3,400 daily downloads on 27 October to 113,400 on 6 November 2022. According to Rochko, by 3 November, use of
2576-405: The official Mastodon Twitter account was banned from Twitter, as well as other accounts with links to some Mastodon instances . On the following day, Twitter began to flag all Mastodon links as malware, preventing Twitter users from sharing them. A Mediaite opinion piece on the bannings included an erroneous report of an account for "John Mastodon" (a misspelling of @joinmastodon ), "founder of
2632-490: The pilot ended two years later in 2024 (after an extension in 2023 for another year) and taking the instances offline after being unable to find an organization that would take over operations, the European Commission has launched their own separate instance. In December 2022, the Mozilla Foundation launched a Mastodon instance under mozilla.social, initially with closed registrations before opening it up as
2688-433: The policy would be suspended. By 19 December, the policy and official mentions about it had been removed from Twitter web pages. Musk stated the following day that banning users for posting Mastodon links had been a mistake. Rochko stated that at least five venture capital firms looking to invest in Mastodon had been turned away by December 2022, and that Mastodon's nonprofit status would not be jeopardized. By
2744-587: The release was part of an effort to attract new users. Mastodon 4.0 was released in November 2022, including language support for translating posts, editing posts and following hashtags. Mastodon is published as free and open-source software under the Affero GPL license, allowing anyone to use the software or modify it as they wish. Servers can be run by any individual or organization, and users can join these servers as they wish. The server software itself
2800-598: The service and identify themselves as a Mastodon instance, others have attempted to conceal their origin by removing all mentions of Mastodon from the public view. These instances also don't release their source code modifications, violating the AGPLv3 license in use by Mastodon. In 2017, Pixiv launched a Mastodon-based social network named Pawoo. The service was acquired by media company Russell in December 2019; in December 2022, Russell sold it to The Social Coop Limited,
2856-400: The start of January 2023, Mastodon had 1.8 million active users, down 30% from its peak of over 2.5 million active users in early December 2022. On 19 March 2023, Mastodon surpassed the ten million mark for registered user accounts. In July 2023, Mastodon’s founder, Eugen Rochko, stated that monthly active users were increasing again, surpassing the 2-million mark. that ensued, there
SECTION 50
#17328009680132912-461: The team authoring ActivityPub had no corporate participation. The SocialCG previously organized a yearly free conference called ActivityPub Conf about the future of ActivityPub. Triages are held regularly to review issues pertaining to the ActivityPub and ActivityStreams 2.0 specifications as part of the SocialCG. In 2023, Germany's Sovereign Tech Fund donated € 152,000 to socialweb.coop with
2968-506: The timeline, messages can display with an optional content warning feature, which requires readers to click on the hidden main body of the message to reveal it. Mastodon servers have used this feature to hide spoilers , trigger warnings , and not safe for work (NSFW) content, though some accounts use the feature to hide links and thoughts others might not want to read. Mastodon aggregates messages in local and federated timelines in real time. The local timeline shows messages from users on
3024-432: Was a significant migration of users to alternative platforms. Mastodon has been considered a prominent alternative in this landscape, alongside platforms like Threads and Bluesky . As a result of its open source nature and ability to be deployed without restriction, various organizations, companies and governments have started their own Mastodon instances. While some instances have mentioned their usage of Mastodon for
3080-419: Was added. This view became the default displayed to new users, with a user "preferences" option to switch to a multiple-column-based view. In August 2020, Mastodon 3.2 was released. It included a redesigned audio player with custom thumbnails and the ability to add personal notes to one's profile. In July 2021, an official client for iOS devices was released. According to the project's CEO, Eugen Rochko ,
3136-437: Was also ran by Prodromou), converted to pump.io in June 2013. While never becoming as popular as its predecessor, the ActivityPump protocol that was designed for it was later used as a template for the creation and standardization of the ActivityPub standard, and development of pump.io has since been discontinued, with the latest version of the engine being released in 2020 and further development concluding by 2022. Pump.io
#12987