Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mastodon.xyz/users/Profpatsch/statuses/116143306459283485">Beady Belle Fanchannel (profpatsch@mastodon.xyz)'s status on Saturday, 28-Feb-2026 12:57:59 JST</a><a href="https://mastodon.xyz/@Profpatsch" title="profpatsch@mastodon.xyz"><img src="https://gnusocial.jp/avatar/206555-48-20231101012538.webp" width="48" height="48" alt="Beady Belle Fanchannel" style="position: absolute; left: 0; top: 0;">Beady Belle Fanchannel</a></section><article><p>Has anybody thought about modelling <a href="https://mastodon.xyz/tags/activitypub" rel="tag">#activitypub</a> with a tool like <a href="https://alloytools.org/book.html" rel="nofollow">https://alloytools.org/book.html</a><br>to find potential exploits? Thinking about the spec it’s missing any algorithms for authorization, but I already found a couple of edge-cases that make a server DoSssable or give an attacker the ability to spoof messages …</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/6193223#notice-12204830">In conversation</a><time datetime="2026-02-28T12:57:59+09:00" title="Saturday, 28-Feb-2026 12:57:59 JST">about 6 months ago</time> <span>from <span><a href="https://mastodon.xyz/@Profpatsch/116143306459283485" rel="external" title="Sent from mastodon.xyz via ActivityPub">mastodon.xyz</a></span></span><a href="https://mastodon.xyz/@Profpatsch/116143306459283485">permalink</a><h4>Attachments</h4><ol><li><article><header><div>No result found on File_thumbnail lookup.</div><h5><a href="https://alloytools.org/book.html">https://alloytools.org/book.html</a></h5><div></div></header><div></div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Beady Belle Fanchannel (profpatsch@mastodon.xyz)'s status on Saturday, 28-Feb-2026 12:57:59 JST Beady Belle Fanchannel
Has anybody thought about modelling #activitypub with a tool like https://alloytools.org/book.html
to find potential exploits? Thinking about the spec it’s missing any algorithms for authorization, but I already found a couple of edge-cases that make a server DoSssable or give an attacker the ability to spoof messages …
In conversationabout 6 months ago from mastodon.xyzpermalink
Attachments
1. No result found on File_thumbnail lookup.
  https://alloytools.org/book.html

Public

Embed Notice

HTML Code

Corresponding Notice