Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. FIRES allows for advisories against Fediverse actors, as well.

FIRES allows for advisories against Fediverse actors, as well.

Scheduled Pinned Locked Moved Uncategorized
20 Posts 4 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • oli@olifant.socialO oli@olifant.social

    For my linux nerds

    curl -s -H 'Accept: application/ld+json' 'https://fires.1sland.social/datasets' | jq

    The FIRES reference server does content negotiation, so hit https://fires.1sland.social/datasets in your web browser, and then hit it with a proper JSON header and you'll see different results.

    There's also a labels endpoint:

    curl -s -H 'Accept: application/ld+json' 'https://fires.1sland.social/labels' | jq

    Which also responds as text/html.

    oli@olifant.socialO This user is from outside of this forum
    oli@olifant.socialO This user is from outside of this forum
    oli@olifant.social
    wrote last edited by
    #11

    I'm working on a PR for this in Fediblockhole, too. It supports many formats, and talking to FIRES gives it state management for retractions it's never really had before--I mean, there's an explicit 'Retraction' type.

    1 Reply Last reply
    0
    • thisismissem@hachyderm.ioT thisismissem@hachyderm.io

      @oli nice work!

      *hands you the first implementer badge*

      oli@olifant.socialO This user is from outside of this forum
      oli@olifant.socialO This user is from outside of this forum
      oli@olifant.social
      wrote last edited by
      #12

      @thisismissem It's been a lot of fun. My next trick is to tie this into Fediblockhole so that FIRES just becomes another source you can pull in data from to build lists or push blocks to your server if you so choose--while also allowing Retractions to literally pull blocks off your server with it, adding a statefulness we didn't have before in Fediblockhole. Which I imagine is still a pretty common way to pull blocks, but imagine a Fediblockhole config like this:

      blocklist_fires_sources = [
        # { server = 'https://fires.1sland.social' },  # all datasets on this server
        { server = 'https://fires.1sland.social', datasets = [
          '019d36a7-fb61-7d3d-9228-b0e658f7ef0c', # Oliphant Ad Hoc Fediblock list
          '019d36a7-3274-77a4-8ee9-9f26dd2faa4f', # Seirdy's FediNuke
          '019d36a7-f621-7842-a00b-35cc2fecc8d7', # Gardenfence
          # '019d36a8-024f-7f44-855f-dfdf5badf536', # The Bad Space 90% Consensus
          # '019d36a7-34e0-7515-9990-58196d3ab9eb', # FreeDNS (25k domains, very large!)
          '019d36a7-f91a-7837-aeea-fb2ae48b67fe', # IFTAS AUD
          '019d36a7-f9a1-7546-8dd8-e88b14834cdf' # IFTAS DNI
          ], retractions = true },
        { url = 'http://localhost:4444/datasets/019d37ae-8f62-74ec-95f5-92ce0dba4ea4', retractions = true },
        # { url = 'https://other-fires.example/datasets/019d3565-f022-777b-abbc-aabbccddeeff', max_severity = 'silence' },
        # { server = 'https://fires.example.com', ignore_accept = true },  # ignore 'accept' policies
        # { server = 'https://fires.example.com', retractions = true },  # honor retractions from this source
        # { url = 'https://trusted-fires.example/datasets/uuid', retractions = true },
      ]
      

      You did nice work. ๐Ÿ™‚

      thisismissem@hachyderm.ioT 1 Reply Last reply
      0
      • thisismissem@hachyderm.ioT thisismissem@hachyderm.io

        @oli i have historical CSVs for IFTAS if you want them (though I'm still trying to get @iftas to deploy a FIRES server (I'd manage it for them)

        ricci@discuss.systemsR This user is from outside of this forum
        ricci@discuss.systemsR This user is from outside of this forum
        ricci@discuss.systems
        wrote last edited by
        #13

        @thisismissem @oli @iftas if the issue is funding, I can help

        thisismissem@hachyderm.ioT 1 Reply Last reply
        0
        • oli@olifant.socialO oli@olifant.social

          @thisismissem @iftas They are regularly updating their CSVs, I thought. I've been pulling updates:

          https://archipelago.1sland.social/blocklist/IFTAS%2DDNI
          https://archipelago.1sland.social/blocklist/IFTAS%2DAUD

          And that means they now have a regularly updated dataset for it now, too:

          https://fires.1sland.social/datasets/iftas-abandoned-and-unmanaged-denylist
          https://fires.1sland.social/datasets/iftas-do-not-interact

          thisismissem@hachyderm.ioT This user is from outside of this forum
          thisismissem@hachyderm.ioT This user is from outside of this forum
          thisismissem@hachyderm.io
          wrote last edited by
          #14

          @oli @iftas yeah, I was trying to get Jaz to become FIRES native, and we'd upload the full historical snapshot of those deny lists that we have.

          That's what powered the test data you saw & how I built the CSV import feature. I still have no idea how to give a REST API for that for programmatic use.

          1 Reply Last reply
          0
          • oli@olifant.socialO oli@olifant.social

            @thisismissem It's been a lot of fun. My next trick is to tie this into Fediblockhole so that FIRES just becomes another source you can pull in data from to build lists or push blocks to your server if you so choose--while also allowing Retractions to literally pull blocks off your server with it, adding a statefulness we didn't have before in Fediblockhole. Which I imagine is still a pretty common way to pull blocks, but imagine a Fediblockhole config like this:

            blocklist_fires_sources = [
              # { server = 'https://fires.1sland.social' },  # all datasets on this server
              { server = 'https://fires.1sland.social', datasets = [
                '019d36a7-fb61-7d3d-9228-b0e658f7ef0c', # Oliphant Ad Hoc Fediblock list
                '019d36a7-3274-77a4-8ee9-9f26dd2faa4f', # Seirdy's FediNuke
                '019d36a7-f621-7842-a00b-35cc2fecc8d7', # Gardenfence
                # '019d36a8-024f-7f44-855f-dfdf5badf536', # The Bad Space 90% Consensus
                # '019d36a7-34e0-7515-9990-58196d3ab9eb', # FreeDNS (25k domains, very large!)
                '019d36a7-f91a-7837-aeea-fb2ae48b67fe', # IFTAS AUD
                '019d36a7-f9a1-7546-8dd8-e88b14834cdf' # IFTAS DNI
                ], retractions = true },
              { url = 'http://localhost:4444/datasets/019d37ae-8f62-74ec-95f5-92ce0dba4ea4', retractions = true },
              # { url = 'https://other-fires.example/datasets/019d3565-f022-777b-abbc-aabbccddeeff', max_severity = 'silence' },
              # { server = 'https://fires.example.com', ignore_accept = true },  # ignore 'accept' policies
              # { server = 'https://fires.example.com', retractions = true },  # honor retractions from this source
              # { url = 'https://trusted-fires.example/datasets/uuid', retractions = true },
            ]
            

            You did nice work. ๐Ÿ™‚

            thisismissem@hachyderm.ioT This user is from outside of this forum
            thisismissem@hachyderm.ioT This user is from outside of this forum
            thisismissem@hachyderm.io
            wrote last edited by
            #15

            @oli oh! The datasets need to be absolute URIs, as their @id's like in activitypub โ€” the path isn't part of the protocol, just the absolute URI

            1 Reply Last reply
            0
            • ricci@discuss.systemsR ricci@discuss.systems

              @thisismissem @oli @iftas if the issue is funding, I can help

              thisismissem@hachyderm.ioT This user is from outside of this forum
              thisismissem@hachyderm.ioT This user is from outside of this forum
              thisismissem@hachyderm.io
              wrote last edited by
              #16

              @ricci @oli @iftas for IFTAS, they wanted some features I couldn't deliver within the timeframe of my grant, and right now I'm busy with client work. I do have a new grant proposal submitted to @nlnet and last I heard it was approved for next round. I don't think I'll have the grant MoU signed before June at the earliest.

              So it wasn't a funding issue on IFTAS's side particularly โ€” FIRES isn't a particularly demanding application to run & can be cached heavily.

              ricci@discuss.systemsR 1 Reply Last reply
              0
              • julian@activitypub.spaceJ julian@activitypub.space

                @oli@olifant.social abso-bloody-lutely love this.

                NodeBB just added in support for third party blocklists, with the IFTAS DNI and AUD lists as default.

                It would be great to support FIRES endpoints as well.

                @thisismissem

                thisismissem@hachyderm.ioT This user is from outside of this forum
                thisismissem@hachyderm.ioT This user is from outside of this forum
                thisismissem@hachyderm.io
                wrote last edited by
                #17

                @julian we've definitely talked about how to implement!

                Also the new deltas API is going to be a game changer for sync.

                cc @oli

                julian@activitypub.spaceJ 1 Reply Last reply
                0
                • thisismissem@hachyderm.ioT thisismissem@hachyderm.io

                  @ricci @oli @iftas for IFTAS, they wanted some features I couldn't deliver within the timeframe of my grant, and right now I'm busy with client work. I do have a new grant proposal submitted to @nlnet and last I heard it was approved for next round. I don't think I'll have the grant MoU signed before June at the earliest.

                  So it wasn't a funding issue on IFTAS's side particularly โ€” FIRES isn't a particularly demanding application to run & can be cached heavily.

                  ricci@discuss.systemsR This user is from outside of this forum
                  ricci@discuss.systemsR This user is from outside of this forum
                  ricci@discuss.systems
                  wrote last edited by
                  #18

                  @thisismissem @oli @iftas @nlnet gotcha!

                  1 Reply Last reply
                  0
                  • thisismissem@hachyderm.ioT thisismissem@hachyderm.io

                    @julian we've definitely talked about how to implement!

                    Also the new deltas API is going to be a game changer for sync.

                    cc @oli

                    julian@activitypub.spaceJ This user is from outside of this forum
                    julian@activitypub.spaceJ This user is from outside of this forum
                    julian@activitypub.space
                    wrote last edited by
                    #19

                    @thisismissem@hachyderm.io yeah we did, although at the time I hadn't properly implemented anything except a text box for domains to block or allow.

                    Now it can pull a blocklist by URL, but no support for more than suspend at the moment.

                    thisismissem@hachyderm.ioT 1 Reply Last reply
                    0
                    • julian@activitypub.spaceJ julian@activitypub.space

                      @thisismissem@hachyderm.io yeah we did, although at the time I hadn't properly implemented anything except a text box for domains to block or allow.

                      Now it can pull a blocklist by URL, but no support for more than suspend at the moment.

                      thisismissem@hachyderm.ioT This user is from outside of this forum
                      thisismissem@hachyderm.ioT This user is from outside of this forum
                      thisismissem@hachyderm.io
                      wrote last edited by
                      #20

                      @julian You'll definitely want a FederationPolicies model, beyond just a "block these domains" list.

                      For instance, coming in the future to FIRES is a way to distribute Hashtags that may contain harmful content, such that you could choose to filter those out.

                      Or, maybe you want to filter those in (I see you NodeBB and how you get content federated in!)

                      julian@activitypub.spaceJ 1 Reply Last reply
                      0
                      • R relay@relay.infosec.exchange shared this topic
                      Reply
                      • Reply as topic
                      Log in to reply
                      • Oldest to Newest
                      • Newest to Oldest
                      • Most Votes


                      • Login

                      • Login or register to search.
                      • First post
                        Last post
                      0
                      • Categories
                      • Recent
                      • Tags
                      • Popular
                      • World
                      • Users
                      • Groups