mathstodon.xyz is one of the many independent Mastodon servers you can use to participate in the fediverse.
A Mastodon instance for maths people. We have LaTeX rendering in the web interface!

Server stats:

2.8K
active users

#mastodev

4 posts4 participants2 posts today

Let’s say you have an HTTP server running locally that returns a custom Fediverse timeline… How would you make it available to fediverse clients?

First thing I have tried to build was a Firefox extension that redirects `/timelines` requests for a masto instance to the local server, but mastodon does not look happy about the different IP.

On the other side, taking an existing client (e.g. @elk) and adding an extra timeline looks way easier, but rather ad-hoc.

Riddle me this. How can a spammer start their account creation from /auth/confirmation? He does this every week. He never accesses /auth/sign_up. He always first shows up in the logs accessing /auth/confirmation.

I have his ASN blocked by the Cloudflare firewall from accessing /auth/sign_up. I see in the Cloudflare logs that he tried to access /auth/sign_up but got a 403 from Cloudflare. The request is nowhere in my logs. It was truly blocked by the proxy server.

But, then suddenly he's using /auth/confirmation with the same blocked ASN seconds later and creates the account. Today I added the same ASN restriction to /auth/confirmation to try to stop future sign-ups, but this is beside the point.

It's like he tries to go to sign_up, gets a 403, and then uses some alternative means to begin the signup process.

He's not getting in with an invitation code, either.

Can he be using an existing account in some way to get an access token for an API call of some type to begin registration?

How does he do this?

#MastoAdmin #MastoDev @Gargron @ClearlyClaire

Was looking at `api_versions` in Mastodon's `/api/v2/instance` endpoint as this would be sort of like "feature detection" for anything new, instead of the hacky UA version string detection 😩.

They are documented under specific features, e.g.: docs.joinmastodon.org/entities but I was curious to see what's introduced for every version bump on a single page.

So I made one (in Notion, as screenshot here, for now), not sure if this would be useful for other devs 🤔 #MastoDev

Continued thread

This **does not** save your account credentials or other sensitive data, only your preferences.

If you have multiple accounts on the same device this **does** expose the fact that those accounts are managed by the same person. If that is a concern you don't need to save the preferences to your device, you can save them to any cloud service (e.g., Google Drive) your account is connected to.

Initial work on `blur` filter for media in posts. Context: github.com/mastodon/mastodon/p (nightlies, not stable releases)

- Quite tricky as the post is filtered but visually not entirely "filtered"
- Need to handle case of conflicting user intentions; set "Always show media" for "Sensitive content" in settings vs "Hide media with a warning" filter
- Copy for choosing the filter action got a bit tricky. Using "obscured (media only)" for now

#PhanpySocialDev #MastoDev (still experimental, on my local)

Question for you #webdev peeps:

I've made a site and it's totally in dark mode. How I like it 😊

But some people mentioned that I should offer a light mode toggle because "some people are not used to dark mode and won't like it".

Do you think that's valid?

(Someone else said that there's also potentially an accessibility issue with dark mode - is that true?)

# #Pachli 2.11.0 is released

## New features include

- Support translation throughout the app
- Experimental Markdown support
- Content filters default to all contexts

## Fixes include:

- Toot button accessibility
- Grammar fixes
- Report UI updates
- Content filter updates
- Fewer crashes

## Updated translations

- Finnish, Indonesian, Irish, Latvian, Norwegian Nynorsk, Polish, Slovak, Spanish

More details at pachli.app/pachli/2025/03/31/2.

Pachli · Pachli 2.11.0 releasedPachli 2.11.0 is now available. This release provides post translation support throughout the app, adds experimental support for rendering Markdown content, changes content filter defaults, and more.

You know what would be great in #mastodon? Having a separate feed/column for all the hidden/filtered posts in your Home timeline.
So that I don't need to be reminded of all the bunch of filtered stuff unless I take the effort of looking at the separate feed when I'm in the right mindset.

Replied in thread

@filiplachert Thanks, but no, there is no options for a list of the posts/conversations that a person has muted. What you shared just muted users.

I am looking for the listing of actual posts/conversations that have been muted by me, as shown in the last image.

It's not under user options, profile options nor post/conversation options.

(EDIT, at least no option in the current official, stable Mastodon v 4.3.6 version) #MastoDev

Two things:

1. Has anyone written a thread composer app for Mastodon? I need that. I don't write a lot of threads, but when I do I really miss old Twitter's thread composer.

2. I have to admit that I am very popular with the bots of Mastodon. It seems like a lot of my well hashtagged posts get immediate pings but they're always from robots. Is that happening to everybody?