Nostr notes by Emelia

Wow, this is a pretty significant development: ...

2026-05-21T16:44:45Z

Wow, this is a pretty significant development: [www.nytimes.com/2026/05/21/b...](https://www.nytimes.com/2026/05/21/business/bluesky-russia-hacking-accounts.html?unlocked_article_code=1.kFA.EndN.WvJSkcxIv5DR&smid=url-share )

[Bluesky Says Kremlin Is Hackin...](https://www.nytimes.com/2026/05/21/business/bluesky-russia-hacking-accounts.html?unlocked_article_code=1.kFA.EndN.WvJSkcxIv5DR&smid=url-share )

Seeing folks on tumblr make interesting points on age ...

2026-05-10T14:22:16Z

Seeing folks on tumblr make interesting points on age verification where if the account is over 12 years old (or even 18 years old in some cases), that the age of the user should be able to be inferred from the account alone

Living up to my self-prescribed "corruptress of ...

2026-05-01T15:51:04Z

Living up to my self-prescribed "corruptress of protocols" title, I've proposed a "handles taskforce" for the Social Web CG/WG: [lists.w3.org/Archives/Pub...](https://lists.w3.org/Archives/Public/public-swicg/2026May/0004.html )

[Re: Taskforce Proposal: Intern...](https://lists.w3.org/Archives/Public/public-swicg/2026May/0004.html )

At the meetup, @npub1zvh…wqrp suggests bridging events from AT ...

2026-04-28T18:50:43Z

At the meetup, wakest (npub1zvh…wqrp) suggests bridging events from AT Protocol to ActivityPub, and my first reaction was "yeah, but all the event platforms on ActivityPub are probably using Create(Note) 😭"

I'm intending to go to the next ATProto Berlin Meetup, ...

2026-04-22T14:54:26Z

I'm intending to go to the next ATProto Berlin Meetup, looking forward to meeting Boris (npub1jsy…jjrj) and others!

(It's on the 28th, the link preview image is cached incorrectly)

[atmo.rsvp/p/atproto.be...](https://atmo.rsvp/p/atproto.berlin/e/3mjwcnoelh32o )

[ATProto Berlin Meetup](https://atmo.rsvp/p/atproto.berlin/e/3mjwcnoelh32o?1=1 )

Reginos is now bluesky lore. RE: ...

2026-04-17T01:31:09Z

Reginos is now bluesky lore.

RE: https://bsky.app/profile/did:plc:ragtjsm2j2vknwkz3zp4oxrd/post/3mjnkgpolks2y

quoting
note16gw…kqa6

tfw when youre in the mood for reginos but its forbidden

Next week on Friday I'm doing my first ever office hours! If ...

2026-04-02T18:16:25Z

Next week on Friday I'm doing my first ever office hours! If you have questions for this is your chance!

[atmo.rsvp/p/thisismiss...](https://atmo.rsvp/p/thisismissem.social/e/3mhz4pbqosccl )

[Office Hours with Emelia](https://atmo.rsvp/p/thisismissem.social/e/3mhz4pbqosccl )

So what @npub1vth…k7hr couldn't show you all in the demo ...

2026-03-29T03:51:41Z

So what Eurosky Sebastian (npub1vth…k7hr) couldn't show you all in the demo was the redesign I've just done on the Eurosky Social (npub1hnx…97k4) portal with all the apps listed:
https://puffball.us-east.host.bsky.network/xrpc/com.atproto.sync.getBlob?did=did:plc:5w4eqcxzw5jv5qfnmzxcakfy&cid=bafkreibwbl4q3mwiqaaz4nsapma2lg2e3frt3kqzegca4zghritgz5ub6i

Okay, so a little while ago, I was asked to run an office hours ...

2026-03-27T03:13:18Z

Okay, so a little while ago, I was asked to run an office hours event, where people could ask me their questions on AT Protocol, OAuth, etc

Here's that event: [atmo.rsvp/p/thisismiss...](https://atmo.rsvp/p/thisismissem.social/e/3mhz4pbqosccl )

[Office Hours with Emelia](https://atmo.rsvp/p/thisismissem.social/e/3mhz4pbqosccl )

This is an absolutely wonderful read from @npub1yl9…a25x — ...

2026-03-12T19:50:06Z

This is an absolutely wonderful read from Nelind (npub1yl9…a25x) — "A varied ecosystem and terminology."

[nelind.leaflet.pub/3m7xhza76f22g](https://nelind.leaflet.pub/3m7xhza76f22g )

[A varied ecosystem and termino...](https://nelind.leaflet.pub/3m7xhza76f22g )

I wrote up a piece on how standards are made, because of some ...

2026-03-10T03:59:45Z

I wrote up a piece on how standards are made, because of some folks being very negative about the grant on other social networks: [writings.thisismissem.social/how-standard...](https://writings.thisismissem.social/how-standards-are-made/ )

[How Standards Are Made](https://writings.thisismissem.social/how-standards-are-made/ )

Nostr event nevent1qqs9sqspsepwtvkn8w9jyfmwx80r8pvmjn5gh48jsd7yfqxrm0gmrxgzyrq4hyne9m9dpahenwl5y0y4ydsvrf2d3q4uj396ycgtuqg4h5pa5m2d4me

2026-03-09T23:28:27Z

[@toni.bsky.team](https://bsky.brid.gy/ap/did:plc:cwf4mmm7mpzistinx3ox2zhj ) saw the accessibility comment someone left on your blog post and opened: [github.com/bluesky-soci...](https://github.com/bluesky-social/social-app/issues/10035 )

[Drafts are causing usability i...](https://github.com/bluesky-social/social-app/issues/10035 )

Lol, someone asked an LLM to generate a readme for their ...

2026-03-09T16:59:37Z

Lol, someone asked an LLM to generate a readme for their ActivityPub project, and the readme it generated included a line about being funded by NLNet's grants, even though the project wasn't.

This just goes to show how common and dependent NLNet funding is for Fediverse projects.

This is an absolutely fantastic article by @npub1ayw…kf99 ...

2026-02-18T23:43:04Z

This is an absolutely fantastic article by Laurens (npub1ayw…kf99)

[connectedplaces.online/where-does-c...](https://connectedplaces.online/where-does-community-live/ )

[Where Does Community Live?](https://connectedplaces.online/where-does-community-live/ )

The problem with relying on email for 2FA or magic login links, ...

2026-02-17T01:18:12Z

The problem with relying on email for 2FA or magic login links, is that your email deliverability needs to be really really solid.

Bluesky (npub1nfl…nul3)'s unfortunately is not. Most common reason I can't sign into another application is because I never get the 2FA email from Bluesky.

Sure, I could move PDSes

Cool, I'm now an Invited Expert with the W3C FedID Working ...

2026-02-16T19:00:14Z

Cool, I'm now an Invited Expert with the W3C FedID Working Group, which allows me to better advocate the for needs of decentralized social web when it comes to FedCM and related technologies

Looking forward to working with the other working group members on these topics!

[www.w3.org/groups/wg/fe...](https://www.w3.org/groups/wg/fedid/participants/ )

First up in the #ATProtoOfficeHours is a mention of ...

2026-02-13T20:34:10Z

First up in the #ATProtoOfficeHours is a mention of [@germnetwork.com@bsky.brid.gy](https://bsky.brid.gy/ap/did:plc:4yvwfwxfz5sney4twepuzdu7 ) and the new integration from Bluesky.

The reference PDS installer will now default to requiring invites ...

2026-02-09T19:03:04Z

The reference PDS installer will now default to requiring invites — you can of course edit the configuration to disable this, but it's a "secure by default" setting.

RE: https://bsky.app/profile/did:plc:t6xqfwencuwg4sjm5uhloc7r/post/3mecyd4kyng2m
nostr:note168ckqyxvf6kxfu7pvnmjgsaysukdcjsmxqre62udslczsnmk7pvqee0vtr

This code worries me a lot, in bad ways. It's literally ...

2026-01-31T19:07:35Z

This code worries me a *lot*, in bad ways. It's literally hacking into some custom hand rolled authentication and authorization system into the reference PDS implementation.

Like, there's lots here that makes you go "good lord" and "this isn't how that's meant to work"

[github.com/bluesky-soci...](https://github.com/bluesky-social/atproto/compare/main...w-social-eu:w-social-atproto:main )

RE: https://bsky.app/profile/did:plc:vryspragp5yyohzghxpgqm7i/post/3mdqajvas722w

Look at @npub12el…lrpy out here casually with a -15,047 line ...

2026-01-29T18:30:12Z

Look at bryan newbold (⛱️ sabbatical edition) (npub12el…lrpy) out here casually with a -15,047 line code change.

RE: https://bsky.app/profile/did:plc:t6xqfwencuwg4sjm5uhloc7r/post/3mdhunmhcyu2m
nostr:note1ezewxalu4h06gzvf8c4ra6ve255q0ze0egfkc3unln0cc97x88mstgshxr

I'd somewhat disagree on this, which may surprise you. You ...

2026-01-29T13:36:21Z

I'd somewhat disagree on this, which may surprise you. You should only host a PDS when you feel like you can govern and provide it responsibly.

Poorly run PDSes that loose people's data hurt us much more than directing people to create an account on a well known PDS provider.

RE: https://bsky.app/profile/did:plc:jjtrsxiaw4amuujelxrxy7by/post/3mcruzeg7tk2d

quoting
note1c2j…kfzm

every atprotocol app and platform should host their own PDS. Please do not ask users to create an account elsewhere (i.e.: Bluesky)

So here's a short write up explaining what happened today and ...

2026-01-28T01:34:11Z

So here's a short write up explaining what happened today and what I'm going through, at a high level. It does include some history too, but I tried to keep it brief.

[On Financial Insecurity](https://thisismissem.leaflet.pub/3mdh4yan3xs23 )

This was an interesting watch about the early internet in Japan ...

2026-01-27T10:57:29Z

This was an interesting watch about the early internet in Japan and Japanese contributions to the modern day internet: [youtu.be/kAjdkDDz2A4?...](https://youtu.be/kAjdkDDz2A4?si=uCAu4O2G2o2FAUVb )

[The illegal network that built...](https://youtu.be/kAjdkDDz2A4?si=uCAu4O2G2o2FAUVb )

New @npub18vx…ytze package released: Extremely simple AT ...

2026-01-16T21:48:01Z

New AdonisJS Framework (npub18vx…ytze) package released: Extremely simple AT Protocol OAuth for your application.

1. Install & setup (one command, one manual edit)
2. Build your login form, using the oauth.login route
3. ???
4. Profit!!

[github.com/ThisIsMissEm...](https://github.com/ThisIsMissEm/adonisjs-atproto-oauth )

[GitHub - ThisIsMissEm/adonisjs...](https://github.com/ThisIsMissEm/adonisjs-atproto-oauth )

I want to clarify my position on this: I think just client_id in ...

2025-12-02T16:45:43Z

I want to clarify my position on this: I think just client_id in the current Service JWTs wouldn't provide the solutions to the problems listed, and could be easily manipulated.

However, I think the problems listed are valid problems that we should collectively come up with solutions for.

RE: https://bsky.app/profile/did:plc:cbkjy5n7bk3ax2wplmtjofq2/post/3m6xaxquzs22h

quoting
note1jqd…q2us

Wrote about my wish-list item to have a `client_id` claim in inter-service authentication JWTs.

[Why Inter-Service Auth Needs C...](https://ngerakines.leaflet.pub/3m6xaxk64tk2h )

Hey friends ln the #ATmosphere, if you're thankful for my ...

2025-11-27T15:30:13Z

Hey friends ln the #ATmosphere, if you're thankful for my contributions to AT Protocol though my standards work and trying to figure out how to push things forwards, please do consider supporting my work:

[support.thisismissem.social](https://support.thisismissem.social )

[Support Emelia Smith (@thisism...](https://support.thisismissem.social )

Okay, published a new internet draft to enable discovery of the ...

2025-11-17T20:12:02Z

Okay, published a new internet draft to enable discovery of the Authorization Server's authorization management UI's URI: [www.ietf.org/archive/id/d...](https://www.ietf.org/archive/id/draft-emelia-oauth-authorization-management-uri-00.html )

This should help with the "how do I manage my Bluesky OAuth apps" problem we're currently seeing.

RE: https://bsky.app/profile/did:plc:5w4eqcxzw5jv5qfnmzxcakfy/post/3m5tssnmmkk2l

[OAuth Authorization Management...](https://www.ietf.org/archive/id/draft-emelia-oauth-authorization-management-uri-00.html )

quoting
note1435…d5cd

Whelp, I think I'm going to write an new OAuth internet draft..

There's apparently no property in OAuth Authorization Server Metadata for providing a link to where people can go to manage their authorized applications on the authorization server. So I'm going to propose one.

Whelp, I think I'm going to write an new OAuth internet ...

2025-11-17T18:05:28Z

Whelp, I think I'm going to write an new OAuth internet draft..

There's apparently no property in OAuth Authorization Server Metadata for providing a link to where people can go to manage their authorized applications on the authorization server. So I'm going to propose one.

Oh look, a little press! Thanks for covering FediMod FIRES a bit ...

2025-11-14T18:51:29Z

Oh look, a little press! Thanks for covering FediMod FIRES a bit Connected Places (npub1l2k…6m2l) !

[connectedplaces.online/reports/fedi...](https://connectedplaces.online/reports/fediverse-report-142/ )

[Fediverse Report – #142](https://connectedplaces.online/reports/fediverse-report-142/ )

Woo! The Bluesky Relay implementation is now published as a ...

2025-11-12T09:13:34Z

Woo! The Bluesky Relay implementation is now published as a docker image!

RE: https://bsky.app/profile/did:plc:t6xqfwencuwg4sjm5uhloc7r/post/3lysmdfonng2m

quoting
note1snx…uk9e

New PR: [Add workflows to publish sonar and relay to ghcr.io (#1158)](https://github.com/bluesky-social/indigo/pull/1158 )

[Add workflows to publish sonar...](https://github.com/bluesky-social/indigo/pull/1158 )

Ha, this is pretty much how I work and I didn't realise it ...

2025-11-11T18:18:43Z

Ha, this is pretty much how I work and I didn't realise it was a cultural thing, but that's why you see me popping up everywhere:

(From: [protocol.ecologies.info/interviews/n...](https://protocol.ecologies.info/interviews/newbold-protocol_engineering/ ) )
https://puffball.us-east.host.bsky.network/xrpc/com.atproto.sync.getBlob?did=did:plc:5w4eqcxzw5jv5qfnmzxcakfy&cid=bafkreidgnhyt3xd3wpdwei6xvkjeq22n62pvstry65mmklkg5e7usx72ue

I'm needing to figure out what the next year is going to hold ...

2025-11-10T22:49:03Z

I'm needing to figure out what the next year is going to hold for me, as this year has been incredibly tough and I've barely scraped by: with any luck finishing the FIRES grant will hopefully be enough money to pay myself for December & January.

I had applied for a job recently, but didn't get it.

Something I see repeatedly in the ActivityPub community & ...

2025-11-08T15:01:01Z

Something I see repeatedly in the ActivityPub community & Fediverse, and with growing regularity in the ATmosphere is people pretending or thinking that they can control data once it has left their server/device.

You can definitely ask nicely that they do certain things...

Okay, so, I finally built that OAuth Client ID Metadata Service ...

2025-10-26T07:33:50Z

Okay, so, I finally built that OAuth Client ID Metadata Service that I've been talking about on an off, and also verified it works with bluesky: [cimd-service.fly.dev](https://cimd-service.fly.dev/ )

I did have to change my application_type to native to use localhost redirect URIs, which was annoying.

#oauth #atproto

https://cimd-service.fly.dev/

So a lot of y'all know I've been hacking on entryway ...

2025-10-09T14:22:04Z

So a lot of y'all know I've been hacking on entryway servers for AT Proto (because the old entryway code was becoming a dependency burden), but if an organisation like EuroSky or Northsky wanted to sponsor me to work on an open-source entryway solution, I'd be open to doing that work.

So you might know my work, to support me doing that I need about ...

2025-10-09T00:35:53Z

So you might know my work, to support me doing that I need about €60-70k per year.

Year to date, I've received €17,150 in financial support from the community, and €11,400 from NLNet grants. So a total of €28,550.

Add in whatever freelance work I've been able to pick up and it maybe bumps to €36k

I've been hacking on this all day on and off, and I've ...

2025-09-27T21:50:37Z

I've been hacking on this all day on and off, and I've got nothing. I need the signing key on the entryway seemingly to create valid JWTs, but the signing key needs to be reserved on the PDS, and you can't be like "oh, here's a signing key to use"

I'm pretty sure I'm missing something.

RE: https://bsky.app/profile/did:plc:5w4eqcxzw5jv5qfnmzxcakfy/post/3lzrktz6rbs25

quoting
note1ke5…jnuk

Have been hacking on seeing if it's possible to update the PDS entryway tests to use something based on the current version of the @atproto/pds instead of an ancient version.

It's vaguely kinda working, but it's still horribly broken, I'm definitely missing something:

[github.com/bluesky-soci...](https://github.com/bluesky-social/atproto/compare/main...ThisIsMissEm:bluesky-social-atproto:feat/entryway-for-tests )

[Comparing bluesky-social:main....](https://github.com/bluesky-social/atproto/compare/main...ThisIsMissEm:bluesky-social-atproto:feat/entryway-for-tests )

Have been hacking on seeing if it's possible to update the ...

2025-09-26T22:56:58Z

Have been hacking on seeing if it's possible to update the PDS entryway tests to use something based on the current version of the @atproto/pds instead of an ancient version.

It's vaguely kinda working, but it's still horribly broken, I'm definitely missing something:

[github.com/bluesky-soci...](https://github.com/bluesky-social/atproto/compare/main...ThisIsMissEm:bluesky-social-atproto:feat/entryway-for-tests )

[Comparing bluesky-social:main....](https://github.com/bluesky-social/atproto/compare/main...ThisIsMissEm:bluesky-social-atproto:feat/entryway-for-tests )

Oh, also, if y'all have liked what I've been working on, ...

2025-09-20T20:33:36Z

Oh, also, if y'all have liked what I've been working on, then you can support me at: [support.thisismissem.social](https://support.thisismissem.social )

[Support Emelia Smith (@thisism...](https://support.thisismissem.social )

Ooooh, it works!! This is a client talking to an authorization ...

2025-09-17T05:24:54Z

Ooooh, it works!! This is a client talking to an authorization server built with the `@atproto/oauth-provider` package standalone.

I've implemented just enough to make this proof of concept work.
https://puffball.us-east.host.bsky.network/xrpc/com.atproto.sync.getBlob?did=did:plc:5w4eqcxzw5jv5qfnmzxcakfy&cid=bafkreibhwdjt4l6wb6sm2ejvdvqvv2b3baz73avpz57fstmwy352dgcngm

So here's where I'm at with a custom "pds"-like ...

2025-09-15T01:59:12Z

So here's where I'm at with a custom "pds"-like thing that I'm building, where it's not actually using much of the PDS code from `@atproto/pds` but is actually just the OAuthProvider with a bare-bones implementation of the OAuthStore.

(Sorry, I don't have subtitles)
https://puffball.us-east.host.bsky.network/xrpc/com.atproto.sync.getBlob?did=did:plc:5w4eqcxzw5jv5qfnmzxcakfy&cid=bafkreifrkrqwubqadkflh5esqqn6a45x62e2x6bwbhklpfnobsyr6y5ri4

Hey #ATmosphere, someone is asking me about AT Protocol in PHP, ...

2025-09-06T14:59:22Z

Hey #ATmosphere, someone is asking me about AT Protocol in PHP, specifically for being a PDS. Is anyone doing a PHP implementation? Is that even possible?

#ATProtocol

Recently there has been a lot of dividing & heated discourse ...

2025-09-06T13:33:27Z

Recently there has been a lot of dividing & heated discourse about ActivityPub and AT Protocol.

Yesterday at the Social Web CG meeting, I proposed releasing a statement on this discourse, you can read the full statement here:

[github.com/swicg/genera...](https://github.com/swicg/general/blob/master/statements/2025-09-05-activitypub-and-atproto-discourse.md )

#activitypub #atprotocol #atproto #SocialWeb

[github.com/swicg/general/...](https://github.com/swicg/general/blob/master/statements/2025-09-05-activitypub-and-atproto-discourse.md )

Casual little pull request to fix support for multiple redirect ...

2025-08-26T18:10:39Z

Casual little pull request to fix support for multiple redirect URIs in the @atproto/oauth-client-node package: [github.com/bluesky-soci...](https://github.com/bluesky-social/atproto/pull/4139 )

[Fix #4136: Support multiple re...](https://github.com/bluesky-social/atproto/pull/4139 )

This piece on UBI and inequality is good: ...

2025-08-13T20:07:46Z

This piece on UBI and inequality is good: [www.scottsantens.com/what-the-med...](https://www.scottsantens.com/what-the-media-isnt-telling-you-why-universal-basic-income-ubi-is-the-answer-to-poverty-insecurity-and-inequality/ )

[What the Media Isn’t Telling Y...](https://www.scottsantens.com/what-the-media-isnt-telling-you-why-universal-basic-income-ubi-is-the-answer-to-poverty-insecurity-and-inequality/ )