Conversation

Notices

1. Embed this notice
   dakkar (dakkar@s.thenautilus.net)'s status on Saturday, 13-Apr-2024 23:56:51 JST dakkar

   • Hrefna (DHC)

   @hrefna@hachyderm.io Apologies for intruding, among all the fedi people I know, you're the best JSON-LD "expert" I can think of.
   
   We received this change request https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/492 which mirrors https://firefish.dev/firefish/firefish/-/commit/ddc8f62a16f42c1992be63ab76c915dd3df83d59#f7ac164b4532a445f7f82ce6c2517d6ffc76d89e
   
   Is my reaction (in the comments to the Sharkey MR) wrong? I'm pretty sure that IRIs in JSON-LD work just like namespaces worked in XML… so they don't need to resolve to actual resources, and changing a prefix-to-IRI mapping changes the meaning of the document.
   How wrong am I?

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Saturday, 13-Apr-2024 23:56:44 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Hrefna (DHC)

     @dakkar @hrefna I believe you are correct - it's like XML namespaces in that the exact value controls interpretation, and it doesn't matter if the domain name even exists.

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Saturday, 13-Apr-2024 23:59:25 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Hrefna (DHC)

     @dakkar @hrefna

     {
     "@context": {"firefish":"https://joinfirefish.org/ns#"},
     "firefish:thing": "foo"
     }
     

     and

     {
     "@context": {"arbitrary":"https://joinfirefish.org/ns#"},
     "arbitrary:thing": "foo"
     }
     

     are semantically identical

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 14-Apr-2024 00:06:10 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Hrefna (DHC)

     @dakkar @hrefna I'm guessing misskey won't work if you use an alias other than "firefish" for the context?

   • Embed this notice
     dakkar (dakkar@s.thenautilus.net)'s status on Sunday, 14-Apr-2024 00:06:11 JST dakkar

     in reply to

     • Hrefna (DHC)
     • Ryan Castellucci :nonbinary_flag:

     @ryanc@infosec.exchange @hrefna@hachyderm.io thanks for the confirmation, I've also checked with https://tools.w3cub.com/jsonld-to-expanded
     
     so… the firefish devs have made a change that did not break things only because the consumers (mostly Misskey forks) process JSON-LD "wrong", completely ignoring the context.
     
     I have suggested they revert that change, let's see what happens.

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 14-Apr-2024 02:24:14 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • Hrefna (DHC)

     @dakkar @hrefna task failed successfully?

   • Embed this notice
     dakkar (dakkar@s.thenautilus.net)'s status on Sunday, 14-Apr-2024 02:24:17 JST dakkar

     in reply to

     • Hrefna (DHC)
     • Ryan Castellucci :nonbinary_flag:

     @ryanc@infosec.exchange @hrefna@hachyderm.io oh no, it's even more simple-minded: it completely ignores the @context (which contains "firefish": "https://joinfirefish.org/ns#", "speakAsCat": "firefish:speakAsCat"), and only looks for speakAsCat (which is the only property defined in the firefish namespace) in the top-level of the activity

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 14-Apr-2024 05:45:30 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     @dakkar pragmatically, if every implementation that understands this thing is broken... just leave it be and fix the implementations so they use context correctly?

     seems like the json equivalent of shotgun parsing...

   • Embed this notice
     dakkar (dakkar@s.thenautilus.net)'s status on Sunday, 14-Apr-2024 05:45:32 JST dakkar

     in reply to

     • Ryan Castellucci :nonbinary_flag:

     @ryanc@infosec.exchange in the sense that "people will probably not notice the breakage", sure
     I'll still try to get them to revert, because it's wrong 😠