Emelia 👸🏻

Corruptress of Protocols, Tech Princess 👸🏻

Working on Trust & Safety, open-source software, and open social web as an Independent Contractor

You've probably used tech I've contributed to.

I'm chronically ill, likely with MCAS.

🚀 Founder of https://unobvious.technology
💪🏻 Pro-Unions 🏳️‍⚧️🏳️‍🌈 Trans & Queer

Mostly using Bluesky at the moment: @thisismissem.social

Public Key

npub1yd77yj5aqk7sdlhah7actf57jsg06fu7n79q2nwtwt227f95hzash2hrnr

NIP-05 Address

thisismissem@hachyderm-io.mostr.pub

Profile Code

nprofile1qqszxl0zf2wst0gxlm7mlwu9560fgy8ay70flzs9fh9h9490yj6t3wcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dssln6lr

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1yd77yj5aqk7sdlhah7actf57jsg06fu7n79q2nwtwt227f95hzash2hrnr

Show more details

Last Notes

2026-03-31 16:11:55 UTC

Over the weekend I published something titled “On being valued” and it ties into some other short pieces I've written over the past few months about finding the right "room(s)" to be in.
I think y'all will like it: https://thisismissem.leaflet.pub/3miajjbhi6c2w

2026-03-29 08:53:22 UTC

- reply

Here's a public FIRES server: https://fires.1sland.social
Integrated with Pelago: https://archipelago.1sland.social/fires
#moderation #fediblock #administration

2026-03-27 00:49:52 UTC

- reply

@nprofile…3dla for "how to integrate it into our workflows", well, that's where we need platforms to adopt it, and make that possible.
There is technically a write API for some data, but I was told during development that a UI for managing the server was better than an API, so API was postponed.

2026-03-27 00:48:23 UTC

- reply

@nprofile…3dla oh, also, my assumption was "post installation, you'll probably open your web browser to the server URL and start poking around and log in with the credentials you were shown"

2026-03-26 18:00:36 UTC

- reply

@nprofile…3dla maybe, what are you looking for? UI screenshots? API docs? Happy to take contributions!

2026-03-26 12:29:26 UTC

- reply

@nprofile…h0ux there are some good FLOSS LLMs like Haidra: https://haidra.net

2026-03-26 12:16:50 UTC

- reply

@nprofile…h0ux yeah, that's a bit of a trend with AI usage being something of a dirty secret. I'm ambivalent on it's usage, but personally don't use it for coding at present (sometimes I have to interact with it through github or Xcode though 🤷🏻‍♀️)
Personally it's the token cost and the fact I deeply enjoy understanding code as to why I don't use it.

2026-03-26 12:06:34 UTC

- reply

@nprofile…h0ux i think this just tests the protocol and what people want to do with it to the limits, we're seeing vibe coded AT Protocol PDSes too!
Definitely highlights rough or under defined parts of specs & tests interoperability.

2026-03-26 11:06:38 UTC

Friendly reminder: last year I built FediMod FIRES, a protocol and reference server implementation for sharing moderation data.
I haven't yet been able to get anyone to adopt it or even signal intent to adopt. But regularly I see people complaining about the lack of data sharing when it comes to moderation, especially for combating spam, scams, and harassment. The tool is there, please use it!
Whilst I'm not actively working on FediMod FIRES this quarter, I did apply in November for a grant to continue that work, and last I heard a few weeks ago is that the grant made it to the next stage, so I may have some money again to fund development.
It's not 1.0.0 yet, because I decided it needed more work for me to be happy to call it that, but it is usable!
Installation is also super simple for data producers, literally two commands on debian or ubuntu boxes.
Learn more: https://fires.fedimod.org/manuals/reference-server/
#moderation #fediblock #administration

2026-03-24 16:34:34 UTC

If you're interested in that Web Share Target API that I mentioned a few weeks ago, please do show your interest here and state if you can be a community group member or if you represent a W3C member organisations: https://github.com/w3c/web-share-target/issues/114
cc @nprofile…2zgl @nprofile…848s @nprofile…xgry

2026-03-24 14:49:12 UTC

“You should work for free because I'm independently wealthy and I work for free" isn't quite the statement on open source that you think you're making.

2026-03-10 02:55:41 UTC

So there's a tiny tiny percentage of people in my mentions right now that are accusing me of horrible things because they don't like Bluesky and I've taken money from them.
For these people, I'm not saying you have to like Bluesky's moderation practices or the decision they make for their own app, I would never say such.
However, you fundamentally do not get standards, and especially web standards, and how they are developed and authored.
In the standards community, there's practically a code that is we do not argue about our employers or financial supporters' corporate positions, we leave our companies at the door when we participate in writing open standards.
Sure, some of us my represent our given employers within the standards community (and there's a requirement to disclose affiliations), but there's also a bunch of us that operate entirely independently of any given company.
At the W3C, which is the home of the FedCM standard, they have what are known as Invited Experts, and the W3C enforces that they act independently and that they disclose any affiliation, especially financial.
I am an Invited Expert, that happened before Bluesky decided to fund my work. Bluesky, like them or not, are one of the few organizations that actually has the capital to fund standards work. Doing this work isn't cheap either! It's a tonne of work seeking consensus and reaching agreement to move things forwards.
Like, I'm current budgeting 30-50% of my productive time over the next year will be working on this standard.
When I first chatted with Bluesky, they were initially like "we want to do a three month freelance contract to implement FedCM for AT Protocol", and after some conversation, we settled on "no, this shouldn't be a contract but instead a grant, that allows you to be completely independent of bluesky and explicitly enables you to work across decentralized protocols, making FedCM better for everyone"
The grant is explicitly clear contractually that I am entirely independent from bluesky, like I could make a technical decision others at bluesky do not like (unlikely, but possible), and it would not affect the grant.
It explicitly requires me to work across protocols.

2026-03-09 18:40:00 UTC

I'm super hyped to announce that Bluesky Socal PBC has given me a grant to work on the Federated Credential Management (or FedCM) standards to make them really work for all decentralized web applications.
This is why I stepped up to be an Invited Expert with the W3C FedID Working Group earlier in the year. The missing part at that time was "how do I fund this work?" so I'm super happy that Bluesky Social PBC really came through with a grant to fund this work.
A really interesting thing that Bluesky Social PBC did here was they could have said "just make this work for AT Protocol" but instead they said "make this work for the entire decentralized web", and the contract explicitly states I should be working with the IndieAuth, Solid and other communities interested in federated and decentralized identity to make this happen.
https://decentralizing-fedcm.leaflet.pub/3mggfw4gdx22w

2026-02-20 15:07:39 UTC

- reply

@nprofile…87pl wasn't aware it had a resolution — it was a long thread so I probably missed some of it. But the quote there is how it was portrayed in Seflhosted newsletter.
Glad you've addressed it and hopefully have a plan in place to rectify the situation.

2026-02-20 14:56:05 UTC

Ouch, this is really not a good look for Ghost, @nprofile…87pl
“Ghost (CMS) took some heat from the community for a longstanding SQL vulnerability not being addressed in the project's Docker image”
https://forum.ghost.org/t/self-hosters-left-vulnerable-to-xss-vuln-due-to-second-class-docker-support/61674/19?ref=selfh.st

2025-12-04 20:51:55 UTC

- reply

@nprofile…8k56 I think Misskey does something else though. And that does come from Litepub, so could do more formalisation perhaps.

2025-12-04 20:31:58 UTC

I wish NodeBB had emoji reactions, @nprofile…8k56 just said something hilarious

2025-11-21 17:03:11 UTC

- reply

@nprofile…dcm7 I'd probably go bluesky for that

2025-10-14 08:08:23 UTC

- reply

@nprofile…u25l maybe https://www.passkeys.io ?

2025-09-06 13:28:43 UTC

Recently there has been a lot of discourse about ActivityPub and AT Protocol which has been quite dividing and heated.
Yesterday at the Social Web CG meeting (the group that maintains the ActivityPub and related specifications), I proposed releasing a statement that counters the narrative that one of these protocols must win, when both protocols can co-exist and have a lot to learn from each other.
The statement has been co-signed by various members of both Social Web CG, SocialCG, and the AT Protocol community.
“We do not win by tearing each other down, which only emboldens and empowers those who do not want either protocol to succeed.”
“Arguing between us only emboldens those that seek to derail and destroy efforts to build an open social web.”
You can read the full statement here:
https://github.com/swicg/general/blob/master/statements/2025-09-05-activitypub-and-atproto-discourse.md
#activitypub #atprotocol #atproto #SocialWeb

2025-08-07 17:21:29 UTC

Must say, some python code really isn't the easiest to read.. I think I prefer explicit loops over the "run this method with variable arguments based on a loop" syntax.

2025-08-04 18:35:01 UTC

- reply

@nprofile…wl4m we're slowly working on this via the AP Trust & Safety Taskforce by way of annotation activities and mechanisms to follow annotation providers.
https://github.com/swicg/activitypub-trust-and-safety/issues/41
cc @nprofile…mhq4

2025-07-24 14:31:21 UTC

- reply

@nprofile…3ram ooh, via the API is different iirc. https://docs.bsky.app/docs/advanced-guides/posts#website-card-embeds
Like, if you post via the web, it'll do the whole "fetch the link for opengraph data" thing, which I think is a service bsky runs, but if you are posting via the API then you need to send the app.bsky.embed.external thing

2025-07-24 13:24:48 UTC

- reply

@nprofile…3ram pretty sure yes?

2025-05-13 17:26:10 UTC

Specifically the petition to ban conversion therapy practices is lacking enough votes from:
- #germany (49.9%)
- #sweden (49.96%)
- #Netherlands (94%)
- #austria (25.5%)
- #Slovenia (83.14%)
- #portugal (24.46%)
If you're a citizen of these countries you can help advance a ban on conversion therapy practices by voting at:
https://eci.ec.europa.eu/043/public/#/screen/home

2025-05-10 18:36:48 UTC

Was nice listening to @nprofile…zwgs talking with Fireside Fedi (I think that's the podcast?)
https://c-tube.c-base.org/w/nUK259rHZk5RsANhrofMqx

2025-04-18 09:56:06 UTC

Have folks in the US started placing these to mark where and when people were disappeared?
https://mastodon.de/@atarifrosch/114358228402178998

2025-04-17 00:46:15 UTC

- reply

@nprofile…83zn @nprofile…t5vy now I'm wondering if I'll get karma for going to a react conference dressed as a princess?
https://media.hachyderm.io/media_attachments/files/114/350/539/975/600/379/original/3b540bbc0a919b15.jpeg

2025-04-08 14:53:06 UTC

- reply

@nprofile…kz02 if you've >7.0 CVSS score vulnerabilities disclosed by the community, then the Nivenly Fediverse Security Fund would apply, as we included Peertube in that program. (I assume you've security issues + CVEs for these if they're serious?)

2025-04-03 07:00:54 UTC

You know what would be better than @thunderbirdmail.com emails? Custom domains for normal people https://mastodon.social/@ryanleesipes/114271338343286677

2025-03-27 15:44:11 UTC

- reply

@nprofile…m54a mm, I get that, I still think it'd be nice to see some basic stats, if you want details then use an integration

2025-03-27 15:21:38 UTC

I'm kinda surprised the Ghost dashboard doesn't give you very basic stats about what content is being read/looked at / basic inbound traffic.
That seems more important than newsletter stuff?
Then again I often find myself at odds with creator stuff, so maybe I don't understand the platform well enough.
cc @nprofile…m54a

2025-03-26 19:54:55 UTC

@nprofile…m54a hey, is there any feature on the ghost roadmap to be able to increase the text size in the editor?
Finding it oddly small for some reason when trying to write; I'm not sure if just doing cmd+plus would break the editor in unexpected ways.
I'm not sure why 20px is looking small to me though, which is strange. Could just be because I'm tired.

2025-03-26 16:20:14 UTC

Have managed to hack together a very rudimentary integration between Open Media Match (Hasher-Matcher-Actioner / HMA) and Mastodon. This can act something like IFTAS CCS but for your own infrastructure.
Yes, it does mean running software incubated at Meta, but the alternative is buying from a provider like Thorn or reimplementing the entire hash & match software.
This is just a proof of concept, similar to the prototype by Juliet Shen (julietshen.bsky.social) for AT Protocol services.
This would allow hash & match for CSAM against the NCMEC hash database and NCII against the StopNCII hash database.
This isn't a production thing, just a proof of concept, it's not deployed anywhere. The only thing that HMA receives is the media file to hash.
Here I've manually loaded up that cat picture into an instance of HMA that I have running locally, and show that when that content is posted or reblogged by a local user, the hash is calculated, and if there's a match, it creates a report via the mastodon API.
https://github.com/facebook/ThreatExchange/tree/main/hasher-matcher-actioner
https://media.hachyderm.io/media_attachments/files/114/229/641/889/740/276/original/205e7b4fbe24c561.mp4

2025-03-21 10:16:12 UTC

- reply

@nprofile…m54a that reminds me to sort out migrating from medium..

2025-03-10 11:11:25 UTC

- reply

@nprofile…gfyr probably better directed towards @nprofile…kgua – there were reports of accounts following a similar pattern a few weeks ago

2025-03-09 23:32:57 UTC

Well this was an interesting bug to find in the Mastodon docs, which has funnily enough propagated throughout the app ecosystem.
https://github.com/mastodon/documentation/pull/1608
#mastodon

2025-02-27 18:00:32 UTC

- reply

@nprofile…hftj it was actually pretty quick for my company. It's my google migration that's a real problem.

2025-02-26 18:44:37 UTC

- reply

Full disclosure: I do still have a personal proton email account, but I'll be migrating that away too at the end of year (It renewed before I could migrate, and I doubt I could get a refund — and well, the €80 is a lot to me at the moment, because money is really really tight at the moment)

2025-02-26 18:16:28 UTC

Taking a stand against a company who has a CEO who openly supports racism, transphobia and fascism. Bye @nprofile…m7my
You could've actually stood up to hate, but instead you cosied up to an authoritarian. That's fundamentally incompatible with my business, so I'm taking my business elsewhere.
#DitchProton
https://media.hachyderm.io/media_attachments/files/114/071/554/273/592/975/original/726e479aef727930.png

2025-02-23 16:26:27 UTC

Heads up Mastodon operators: libvips 8.16.0 doesn't work with ruby-vips 2.2.2, which is currently used by Mastodon.
*** watch out if your system automatically updates libvips to 8.16.0 ***
This was one of the root causes of our media processing outage last night. Essentially when we were trying to process media, the conversion between different file sizes and metadata stripping was erroring out do to an incompatibility between ruby-vips 2.2.2 and libvips 8.16.0, resulting in the error:
```
Error while optimizing <name>: VipsForeignLoad: "/tmp/<name>.<ext>“ is not a known file format
```
This occurred for jpg, webp, and several other file formats, despite `vips -l foreign` showing everything setup correctly.
ruby-vips 2.2.3 is known to fix the issue, and will be used in mastodon 4.3.4 when it is released. Until then either don't update libvips or switch MASTODON_USE_LIBVIPS to false until mastodon 4.3.4 (unless you're comfortable modifying the Gemfile to use the newer ruby-vips version)
What we still have absolutely no explanation for though is that libvips 8.16.0 was installed on hachyderm systems on January 20th 2025, but we only started seeing issues yesterday after running regular system updates wherein libvips was not touched.
Ruby and gems were reinstalled yesterday due to an update of libicu, but libicu was also updated on Jan 20th 2025 so we did the same reinstall steps on that date too.
We didn't receive any error reports from people using hachyderm of not being able to upload media or media failing to load for them.
#mastodon #hachyderm @nprofile…tga4

2025-02-20 14:38:43 UTC

- reply

@nprofile…q54u didn't thunderbird do this?

2025-02-14 18:09:45 UTC

Currently facing a shortfall of about half my income by March 15th, would really appreciate all the support I can get right now:
https://support.thisismissem.social

2025-02-07 12:37:32 UTC

- reply

@nprofile…zwgs 6am east coast time isn't too bad! That's when I wake up (to chat with my girlfriend before she leaves for work)
Admittedly.. it is noon local time 😅

2024-11-25 21:19:30 UTC

- reply

Like, once again, actually writing code is a small part of an software engineers actual job.
That's like assessing structural engineers on the basis of calculations done 🤡
A lot of time is spent in communications, planning, and helping others.
Honestly a shame that a prominent software engineering podcast would actually run with this drivel.

2024-11-25 21:15:51 UTC

There's an utterly ridiculous "study" out from Stanford about "ghost engineers" which are reportedly engineers who do nothing at companies.
Pray tell, what flawed methodology did this "study" use?
It assessed code changes made by these engineers, not by lines of code changed but by "simulating a panel of 10 experts to evaluate each commit"
This fatally flawed study does not account for:
- management & planning
- research to unblock work
- collaboration with other staff
- helping other staff

2024-10-05 15:11:41 UTC

I am curious as to whether ActivityPub could support something like did:web or maybe did:webfinger for discovering the Actor object/document
Feels like that should be possible, but last I looked the did specs were indecipherable to me.
Though, I do wonder if there's a need for an ActivityPub actor to be able to have multiple inboxes/outboxes?
Probably something @npub1c94…7y29 might have thoughts on, but it could bring better interop between AP and ATProto

2024-09-03 23:32:47 UTC

- reply

@npub1r0x…nrzq it's happening next week already?? (It keeps feeling like it's further away than it is)

2024-08-18 02:12:14 UTC

Okay, so, there's like this Mastodon issue that I'd like to work on that's a huge precursor to potentially a lot of other things that could improve the fediverse.
However, in order to work on it, I'd need probably €10k+ in funding, because it's likely to take me at least a month and a half to complete, as it's quite complex.
How would you go about gaining that amount of funding?

2024-04-18 20:08:51 UTC

- reply

@npub1jqc…3mpt if you're up this way & I have energy, maybe you'd want to grab coffee / beer (though my health has been very poor this month)

2024-03-11 13:02:16 UTC

- reply

@npub1wjw…ue5t you may wanna improve this such that people don't get phished or similar..

2024-03-03 10:27:46 UTC

@npub1jc6…7v67 hey, do you have screenshots of Phanpy's Report Content process?
(Obviously I could collect them myself, but wondering if you had some readily/easily about)

2024-02-16 20:05:47 UTC

Most companies hire for the team they think they want to have, instead of hiring to retain & upskill the team that they currently have.

2024-01-11 10:03:38 UTC

- reply

@npub12ty…vnqc I'm guessing you're a lot further north than I am!

2024-01-11 09:59:13 UTC

- reply

@npub12ty…vnqc I'm kinda glad we almost never get polar vortexes.

2024-01-11 09:54:36 UTC

- reply

@npub12ty…vnqc here's me complaining about -10°C (berlin is the same latitude as calgary)

2023-09-12 13:21:48 UTC

- reply

@npub12ty…vnqc what about adding some sort of "confidence score"?

2023-09-07 02:25:39 UTC

- reply

@npub1t8r…rvnw I'm pretty sure that host may be spoofable..

2023-08-31 17:27:46 UTC

- reply

@npub1t8r…rvnw you can't prevent read unless content isn't publicly available

2023-08-31 17:00:59 UTC

- reply

@npub1t8r…rvnw like, fediblocksync but with the ability to obscure the really harmful URLs would be wise, but it's kinda a future piece of work

2023-08-31 16:52:05 UTC

- reply

@npub1t8r…rvnw probably better to just support importing a blocklist in the mastodon format for now

2023-08-26 18:05:44 UTC

- reply

@npub1t8r…rvnw nah, FNM is waaay better: https://github.com/Schniz/fnm

2023-08-26 04:58:30 UTC

- reply

@npub1yyx…qa5g @npub1m7k…tkt9 idk about you, but my mum's sewing was pretty fantastic.

2023-08-09 02:01:37 UTC

- reply

@npub1j43…jvze I'm almost certain there's gonna be a long post about why not to use CGI out there, I just don't know explicitly of it

2023-08-05 12:26:11 UTC

- reply

@npub12ty…vnqc wasn't someone else working on a thing called "Sup"?

2023-08-01 08:08:58 UTC

- reply

@npub12ty…vnqc would love a before/after screenshot!

2023-08-01 00:01:02 UTC

- reply

@npub1u7z…n5e4 @npub1zdp…vqv8 please tell me this is someone with a high power projector doing this, like was done to the Amazon tower in Berlin?

2023-07-17 19:45:04 UTC

Does anyone know who was behind the Message Rewrite Facility functionality in #Pleroma? https://docs-develop.pleroma.social/backend/configuration/mrf/

2023-07-02 12:08:10 UTC

- reply

@npub12ty…vnqc @npub120z…33r2 just do make sure you make time to relax & unwind, as to not burnout (take it from someone dealing with the effects of multiple burnouts), also definitely onboard collaborators to help spread the workload!

2023-06-16 00:37:14 UTC

- reply

Thanks to @npub1psy…pasy and @npub1he6…9qsv for helping me conduct this review/research!

2023-03-16 00:38:07 UTC

- reply

#[0] I'm not sure how this would help anything, given nothing is content addressed, so it wouldn't reduce load, but would increase storage requirements, particularly for media.

2023-02-11 15:49:25 UTC

Okay, okay, at @nprofile…eevm's prompting, an #introduction post:
Hi 👋🏻 I'm Emelia, from #berlin, #germany, I'm trans, queer, and kinky.
I'm a #tech princess 👸🏻 currently working on Fediverse Trust & Safety tooling and contributing to various Fediverse projects. I'm on the infrastructure team for @nprofile…625w
I was tech lead at @nprofile…ax4g (Nov 2023 – Sep 2024), I'm currently independent, funded by you and grants.
In 2020, I became the #founder of Unobvious Technology, aiming to improve the safety, #security and profitability of #sexworkers and advance the #adultindustry
p.s., the tech princess thing is a joke because I think it's fun to wear ballgowns to tech conferences.