marius

Mostly a programmer.

Implementing #ActivityPub in the #Go programming language.

Current projects:

* #GoActivityPub - a library to use ActivityPub in Go.

* #FedBOX - a generic ActivityPub service supporting the client to server API.

* #brutalinks - a link aggregator inspired by (old) reddit, hacker news and lobste.rs built on top of FedBOX.

* #oni - a single user ActivityPub server with minimal fuss.

My posts are mostly related to ActivityPub and web development.

alt: https://marius.federated.id
Brutalinks: https://brutalinks.tech/~marius
SourceHut: https://sr.ht/~mariusor/
github: https://github.com/mariusor/

Public Key

npub1xzemdlwv55dqyzgd6pzpmpwu9au3jan8f4t86qlhv0mktzjkajuqnfwwdj

NIP-05 Address

mariusor_at_metalhead.club@momostr.pink

Profile Code

nprofile1qqsrpvaklhx22xszpyxaq3qashwz77gewen564naq0mk8am93ftwewqprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmnt2zws7p

Publishing to

relay.momostr.pink

Author Public Key

npub1xzemdlwv55dqyzgd6pzpmpwu9au3jan8f4t86qlhv0mktzjkajuqnfwwdj

Show more details

Last Notes

2026-03-28 14:14:10 UTC

- reply

I've been testing with generating color palettes and creating themes for a while, and the best libraries/tools I found (for JavaScript) are rampensau:
https://meodai.github.io/rampensau/
and
https://meodai.github.io/fettepalette/
Another one I found recently and I want to investigate more (but, which uses a material like approach from what I can see) is this https://alwankit.com/

2026-03-24 08:25:04 UTC

- reply

> And those demands can often be at odds with what people overall need or want.
@npub1upg…9n89 and here
I was thinking that having corporatized projects chasing investment returns is the thing that brings the wrong incentives to the development of social media. As it is daily reminded to us by Facebook and Co.
I'm going to speak my mind about this:
[@thisismissem](https://hachyderm.io/@thisismissem ) has sold out.
@npub1ycs…mpyc @npub16js…55yf

2026-03-17 17:17:16 UTC

- reply

so far there isn't a v2 in the go proxy ecosystem. I don't know if it's because there's lag before the version gets picked up and disseminated or there's still something missing. I'll keep an eye on it and let you know tomorrow if it's still not there.
https://pkg.go.dev/quamina.net/go/quamina?tab=versions

2026-03-17 08:49:00 UTC

- reply

erm... apologies for the verbosity, on a second look my first paragraph doesn't read very well at all. Hopefully it makes at least a little sense.
Anyway the permalink to the function where I do all that has changed a little since previous post: https://github.com/go-ap/filters/blob/master/bytes_filter.go#L201

2026-03-17 08:34:38 UTC

- reply

no worries, there isn't much that I did on my side.
I have some "filter" types, that I use for filtering ActivityPub collections and objects and now they get transformed into quamina patterns and applied on the raw json that we store the ActivityPub objects as before marshaling them into the structs that the filters themselves get applied against.
Hopefully it saves some computation, but the benchmarks I created weren't very conclusive... perhaps because there's so much other functionality in the pipeline...
However the feature has made its way into production into the various servers that use this library...

2026-03-09 20:46:15 UTC

- reply

I've been in the tech industry for about 20 years and I still have no clue what CEOs are good for...

2026-02-28 09:58:09 UTC

- reply

I have finally I made significant progress on this.
The final code looks like this:
https://github.com/go-ap/filters/blob/master/bytes_filter.go#L199
For a list of filters that #GoActivityPub uses, we generate two patterns for Quamina: one for a denormalized raw document, and one for normalized raw document (they usually are stored in a normalized form, where an Activity's object/actor properties are flattened to their IRIs, but we can't know which it is unless we unmarshall it, which we want to avoid)
Another improvement from my complain from 4 days ago is that I was regenerating the patterns and initializing quamina for every new document, instead of one time per collection load.

2026-02-26 20:54:09 UTC

- reply

not enough VC money for integrating that into the website.

2026-02-20 17:22:15 UTC

- reply

more specifically:
$ go get quamina.net/go/quamina@v2.0.1
go: quamina.net/go/quamina@v2.0.1: invalid version: module contains a go.mod file, so module path must match major version ("quamina.net/go/quamina/v2")

2026-02-20 17:20:33 UTC

- reply

don't worry on my account, I ended up to using the HEAD version, which is more convenient at the moment.
As soon as you pass v1, Go needs a /vX folder, which was the reason why I swore I'll never release libraries past v1 and had GoActivityPub in development mode for 8 years. :D

2026-02-20 15:22:02 UTC

I've started my exploration of using @npub19ua…53cv's Quamina project for saving some compute time in the filters module of #GoActivityPub
Currently the GoAP storage backends iterate over resources (usually stored as raw JSON bytes), unmarshal them into GoActivityPub object structs, and *only* then apply the custom filtering logic on those objects. Since the majority of the objects generally fail the filtering logic, all that JSON decoding is wasted compute time and makes things slower.
Ideally quamina will allow me to check the raw JSON payloads directly against the filters, streamlining the execution and speeding things up. :goose_hacker:
#ActivityPub

2026-02-20 15:04:12 UTC

@npub19ua…53cv is the version 2 of Quamina available to use somehow?
pkg.go.dev and the go toolset only have 1.5.1 as the latest, perhaps because you haven't released it yet, but perhaps because of the terrible UX method of Go module versioning? :D

2026-02-18 10:50:43 UTC

I might have mentioned before the Glide browser. If not, it's keyboard driven browser on top of mainline #firefox.
My main complaint about Mozilla in the past 10 years has been their move to the web-extensions API and in the process dropping support for the greatest addon of all time: #vimperator.
Glide comes very close to its functionality, and even though at the moment is still lacking important features (or I'm unable to program them to my desire), I can mostly make it work for my purposes, which feels great.
#glide_browser

2026-02-08 18:49:25 UTC

Anyone in my followers list on a server that has secure fetch enabled? I want to use it to test my proxyUrl implementation for client to server #ActivityPub. :D

2026-02-07 10:35:34 UTC

My project that converts #SourceHut wiki repositories into static websites is finally getting to the point where it works quite well.
I've integrated it into my flow for the #GoActivityPub documentation and it looks decent (in my biased opinion), the docs themselves are not great, but I'll do another pass over them before we release a v1 of the library.
https://go-activitypub.federated.id

2026-02-04 11:14:53 UTC

Yesterday I've been social for a couple of hours and coupled with the unexpected -6 Celsius icy trek I had to take due to unforced public transport mishap, today I'm exhausted and I can barely focus on anything requiring any mental work. :(
Still I got to meet a bunch of cool people and bored them with talk about my passion project, so all's good. :)
Thank you @npub1xse…lgk3 for organizing the meetup! <3

2026-02-02 11:04:20 UTC

- reply

my I'm dogfooding it on my alt: https://marius.federated.id/outbox

2026-02-02 11:03:38 UTC

- reply

nopers.
Straight up a Client to Server ActivityPub JavaScript application.
(You know, the ones that Eugen said they're not possible :P)

2026-02-02 11:00:37 UTC

Finally added the SSH connectivity improvements to #ONI, the single user Fediverse server.
Now, if only I would be able to make a good UI for that. :D

2026-01-24 21:38:07 UTC

- reply

no promises, but I might join you.
@npub1ajs…40ga @npub1upg…9n89 @npub1tlf…wz08

2026-01-14 18:37:57 UTC

- reply

do you have libraries there? I imagined it's only applications.
[@andycarolan](https://social.lol/@andycarolan ) is helping me with a logo for FedBOX the GoActivityPub server, but that'll come a bit later.

2026-01-14 18:26:08 UTC

I'm happy to say that we finally have a logo for #GoActivityPub, courtesy of [@andycarolan](https://social.lol/@andycarolan ) 🙇
https://go-activitypub.federated.id/

2026-01-08 13:31:19 UTC

- reply

it's strange this wasn't picked up until recently by the exhaustive testing setup of sqlite.

2026-01-08 11:31:17 UTC

If anyone is using the latest versions of mattn/go-sqlite3 module you might have an unpleasant surprise if your tables contain JSON data in BLOB columns and the table is also using STRICT.
Since sqlite 3.45.1 it's encouraged to move those columns to TEXT.
https://sqlite.org/json1.html#the_json_blob_input_bug
I spent two days trying to find why the #GoActivityPub sqlite storage
has started to fail out of the blue (well, not really "out of the blue", rather an unfortunate congruence of dependency updates and adding extra stress to the json payloads saving/updates).
#Go #sqlite

2025-10-27 17:28:46 UTC

- reply

personally I was also irked a little about the fact that Meredith chooses to side-step completely any mention of alternatives to the mainstream OS choices, and alternatives to mainstream cloud providers.
I'm not sure if they have blinders on, or there's some deeper conflict of interests there, but it's definitely a discourse that is serving to gaslight Signal users.

2025-10-17 17:34:33 UTC

- reply

something similar to the zoom pan effect Mastodon has on images. I was thinking I was going to be cleverer and use drag and drop to keep track of the mouse movement, but that is where it fails for me. :D

2025-10-17 17:15:55 UTC

- reply

sure, sure, I'm trying to use it for a somewhat unorthodox purpose which is not to drag and drop. :D

2025-10-17 16:53:24 UTC

Well, it looks like the drag and drop Web API is f*ed up beyond any recognition, and can't be reliably used for cross browser stuff.
#frontend #javascript #webdev

2025-10-16 11:33:06 UTC

Well, after an initial failure, my #NLNet grant application for #GoActivityPub has been accepted under the NGI0 Commons Fund. 💪
This means that for the next months my main focus will be fully on making #ActivityPub in the #Go programming language easier for other developers.
If you're one of them, reach out, I want to know what you struggle with and how I can help with that.
https://nlnet.nl/thema/NGI0CommonsFund.html#:~:text=GoActivityPub%20%E2%80%94%20Help%20people%20develop%20Fediverse%20software%20in%20Go

2025-09-22 13:52:06 UTC

For #ONI the no fuss single user #ActivityPub service, I wanted to migrate from my custom hodge-podge of JavaScript logic for building CSS themes from images, to something a little more credentialed and battle tested.
Then I looked over what the Material library would generate and I begun to reconsider.
Material is so unsipired, it defaults to such samey, generic norm-core color palettes that it's difficult to see any changes even between vastly different images.
I think I'll just improve my own algorithm because, frankly, I want more GeoCities and less Enterprise.
https://material-foundation.github.io/material-theme-builder/

2025-08-25 12:17:05 UTC

For the past couple of days I've been hard at work writing documentation in the attempt to decrease the friction for developers that try #GoActivityPub for their applications.
I am of a mind to pay some #Go developers in the near future to do a weekend's worth of programming into trying to use the library in projects, so we can iron out potential issues with the use of the library itself and the documentation.
Anyone interested?
#go #ActivityPub #ActivityPubDev #fediverse

2025-07-26 13:42:29 UTC

- reply

I'm not trying to paint you as an apologist for the leakers, but when you post this type of rant, you must take your distance very explicitly if you must make a stand.
Focusing on the smaller issue - which might be warranted from your point of view - should not detract from the greater message of who's actually to blame.
So, apologies, I am fully aware of what you mean with this thread and I'll acknowledge that it is not in support for those assholes.
My intent was to point out - to you, and maybe others - that you inadvertently divert the attention from the real problem. Peace.

2025-07-26 12:59:28 UTC

- reply

I think you should apply this logic but in reverse.
Just because those people call themselves "hackers" - or media calls them that - doesn't mean that you, also a hacker, should be personally offended to the degree that you willingly or unwillingly try to diminish their culpability and shift the blame to the idiots that made it possible in the first place.
Again, there's only _one_ reprehensible act in all of this, and you're dancing around how bad it is with pedantry.
I'm sure you're aware of the fallacy that begins with "not all men...", and that's how you sound to me right now.

2025-07-26 12:13:46 UTC

- reply

> That's where the focus needs to be.
@npub1afm…5gp4 I disagree.
In all of this situation there is only _one_ act of maliciousness, and it's not on the part of those idiots - until proven otherwise.
I agree that they need to be made legally responsible, and hopefully someone will do that one way or another, but they are not the moral culprits of this story so far.

2025-07-26 10:58:15 UTC

- reply

> Negligence at Tea Puts 13.000 Women in Danger
@npub1afm…5gp4 totally agree, but the people that released the information are definitely guilty of a lot more than just being incompetent, they're actively and unequivocally assholes... please let's try not to lionize them due to some misguided sense of pedantry about what hackers are or do.
There is such a thing as responsible disclosure after all.

2025-04-29 13:08:55 UTC

- reply

I think an "Update" for the new preferred username went through to all instances and it's basically the same actor.
@npub1xse…lgk3

2025-04-08 17:51:10 UTC

- reply

did anyone do a reverse image search to see who's image they used? Maybe the poor lady doesn't know her image is being abused and used to abuse people in the fediverse. :(

2025-03-29 15:04:08 UTC

- reply

no worries and no pressure. :D

2025-03-29 14:59:29 UTC

- reply

you can take a look at this project which makes use of all the modules under the #GoActivityPub library and provides an easy to setup instance for one person:
https://git.sr.ht/~mariusor/oni
One demo instance is at https://marius.federated.id
It's going to be rough to use, but please write to the mailing list I have set up for the projects with your questions, and we can at least improve the docs. :D
https://lists.sr.ht/~mariusor/go-activitypub-discuss

2025-03-29 14:25:32 UTC

- reply

the most important contribution you can make at the moment is to try to build something with my libraries and provide feedback where and when you're encountering any issues. 🙇

2025-03-29 14:23:53 UTC

- reply

I'm working on Go plumbing for ActivityPub. Check my bio for details.
I don't need monetary support, but any word of mouth, or helping hand helps a little.

2025-03-29 13:12:05 UTC

- reply

jitter is when you add/subtract some value from a computed value to provide some obfuscation.
In this case @npub170a…rgyu is probably thinking about masking the exact location of a potential user by converting it to an area with a random radius, but I might be wrong. So you'd know that there are other users "in vicinity" but not their pin-point precision location.

2025-03-14 15:52:32 UTC

Sad to say NGI Zero didn't accept my grant request for #GoActivityPub.
I am a bit disappointed if I'm honest. I hoped that a library that threads new ground for developers for both client and servers applications would have fit their criteria very well. I might not have made the case well enough I guess.

2025-03-14 11:08:50 UTC

- reply

is useless 99% of the time, but sometimes it can warn you about stuff.

2025-03-07 07:54:02 UTC

- reply

also @npub1dml…x796 though she's "just" a technologist, not a gamer afaik. :D

2025-03-07 07:46:41 UTC

- reply

strange that nobody mentioned [@gardiner_bryant](https://mastodon.online/@gardiner_bryant ), the original Linux gamer.

2025-01-29 18:04:23 UTC

- reply

sure, but when a bot publishes many daily updates publicly, and only 10 people are interested, that's pretty disrespectful of anyone that's not and keeps having their public timelines spammed.

2025-01-29 15:15:15 UTC

- reply

for for something low traffic like PR merges maybe, but if you look at the mailing list for my own projects where all commits get posted, I doubt anyone wouldn't want to mute it in about two days. :D
https://lists.sr.ht/~mariusor/go-activitypub-dev

2024-12-24 20:06:43 UTC

- reply

I do get a semblance of a post if you search for the video directly - though not the Video itself.
That's because it's also a full fledged addressable ActivityPub object: https://marius.federated.id/attachments/mdvp.mp4

2024-12-24 20:03:56 UTC

- reply

apologies, I misunderstood :D I thought you meant the video attachment.

2024-12-24 17:22:21 UTC

- reply

you can search for this post on Mastodon and the video attachment shows up fine (at least on my instance): https://marius.federated.id/outbox/1725894299052/object

2024-10-14 15:02:00 UTC

- reply

it's strange that there's no way to add some monetization plugins into PeerTube.
I think they would be happy to incentivize larger content creators to move to their platform.
Frankly I'd be more OK with ads if I knew they generate income for a particular person than an amorphous blob like Google.

2024-09-06 18:17:45 UTC

- reply

I know, I know... I have two or three issues that they have been ignoring for over three years. :)

2024-09-06 18:14:11 UTC

- reply

in fairness I don't think I advertised the feature anywhere where the Mastodon devs might have looked.
I didn't create a FEP for it sadly.

2024-09-06 18:06:06 UTC

- reply

I have not gone over the details, but to the best of my knowledge Authorized Fetch is just the name Mastodon uses for a similar mechanism to what I'm doing in FedBOX. In their case I think they don't allow any C2S get request on collections if they're not authorized, in mine I just filter out non Public activities/objects.
But, I'm pretty sure that my work on having the collections filtered based on recipients predates Mastodon's by quite some time. :P

2024-09-06 15:26:00 UTC

I often struggle with working on non-trivial, long standing projects because when I sit down to do the work after some hiatus, I can't seem to find the pain points I wanted to fix quickly enough.
It feels like trying to get a bandaid off when you can't find an edge where it comes unstuck easily enough.
The largest piece of bandaid that I wasn't able to get unstuck from the ActivityPub adjacent work is getting the HTTP-signatures working well with the rest of the fediverse (by which I mean Mastodon).
Today I might have got the corner of another little bit of bandaid unstuck which hopefully will help in the long run.
#ActivityPub #fedidev #GoActivityPub

2024-08-23 08:16:23 UTC

- reply

I had no idea that software under MIT was considered not to be Free Software. I always thought about the problem like the more permissive the license the "more free" it is, as opposed to ones like GPL that have additional restrictions... Am I wrong?
@npub12r3…zz58