photog.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A place for your photos and banter. Photog first is our motto Please refer to the site rules before posting.

Administered by:

Server stats:

248
active users

#bbcode

0 posts0 participants0 posts today
Jupiter RowlandSchade nur, daß es nicht nur nicht über Friendica hinaus föderiert, sondern Friendica statt dessen an Nicht-Friendica-Server oder zumindest an Hubzilla und dessen Nachfahren den rohen BBcode sendet. Aber das tut es kurioserweise auch bei z. B. <code>[em][/em]</code>, <code>[strong][/strong]</code> und den Varianten von <code>[abstract][/abstract]</code>.<br><br>Vielleicht wird fälschlicherweise davon ausgegangen, daß Hubzilla &amp; Nachf. auch BBcode parsen, der über ActivityPub oder diaspora* reinkommt. Nur rechnen die damit nicht, also tun sie es auch nicht.<br><br>#<a class="" href="https://hub.netzgemeinde.eu/search?tag=Long" rel="nofollow noopener" target="_blank">Long</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=LongPost" rel="nofollow noopener" target="_blank">LongPost</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=CWLong" rel="nofollow noopener" target="_blank">CWLong</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=CWLongPost" rel="nofollow noopener" target="_blank">CWLongPost</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=LangerPost" rel="nofollow noopener" target="_blank">LangerPost</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=CWLangerPost" rel="nofollow noopener" target="_blank">CWLangerPost</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=FediMeta" rel="nofollow noopener" target="_blank">FediMeta</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=FediverseMeta" rel="nofollow noopener" target="_blank">FediverseMeta</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=CWFediMeta" rel="nofollow noopener" target="_blank">CWFediMeta</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=CWFediverseMeta" rel="nofollow noopener" target="_blank">CWFediverseMeta</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Friendica" rel="nofollow noopener" target="_blank">Friendica</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=BBcode" rel="nofollow noopener" target="_blank">BBcode</a>
Kevin Karhan :verified:<p>What <span class="h-card" translate="no"><a href="https://linuxmom.net/@vkc" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>vkc</span></a></span> <a href="https://linuxmom.net/@vkc/113669649759242573" rel="nofollow noopener" target="_blank">said</a>:</p><p><a href="https://infosec.space/tags/HTML" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>HTML</span></a> is a <a href="https://infosec.space/tags/ProgrammingLanguage" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ProgrammingLanguage</span></a>. Just because it's a <a href="https://infosec.space/tags/Markup" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Markup</span></a> &amp; directly <a href="https://infosec.space/tags/interpreted" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>interpreted</span></a> languague doesn't make it <em>less</em> valid!</p><ul><li>Otherwise <a href="https://infosec.space/tags/BASIC" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BASIC</span></a> and all the <a href="https://infosec.space/tags/Shells" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Shells</span></a> (like <a href="https://infosec.space/tags/bash" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>bash</span></a> &amp; <a href="https://infosec.space/tags/fish" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>fish</span></a>) ain't programming languagues eiter.</li></ul><p>I'd go so far as to say that <a href="https://infosec.space/tags/Markdown" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Markdown</span></a> and <a href="https://infosec.space/tags/BBcode" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BBcode</span></a> also qualify as sub- and supersets of <a href="https://infosec.space/tags/HTML" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>HTML</span></a> just like <a href="https://infosec.space/tags/Sass" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Sass</span></a> for <a href="https://infosec.space/tags/JavaScript" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>JavaScript</span></a>. </p><ul><li>For a <a href="https://infosec.space/tags/Programming" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Programming</span></a> <a href="https://infosec.space/tags/Languague" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Languague</span></a> it's irrelevant if they need a compiler and/or interpreter as the reason to use them is to have a <a href="https://infosec.space/tags/HumanReadable" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>HumanReadable</span></a> &amp; -editable codebase and not some <a href="https://infosec.space/tags/Apple1" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Apple1</span></a>-Style <em>"shoving binary data to a certain adress and hit run"</em> kinda situation.</li></ul><p>Even <a href="https://infosec.space/tags/COBOL" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>COBOL</span></a> on <a href="https://infosec.space/tags/PunchCards" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PunchCards</span></a> is <a href="https://infosec.space/tags/ProgrammingCode" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ProgrammingCode</span></a>!</p>
Micha<p><b>Gut zu wissen... BBCode Tags</b></p><p><i>Wie</i> <b>man</b> <span>auf</span> <span class="">Friendica</span> <s>Sachen</s> <u>hervorhebt</u> ...</p><p><a href="https://anonsys.net/search?tag=bbcode" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>bbcode</span></a></p><p><a href="https://anonsys.net/help/BBCode" rel="nofollow noopener" target="_blank">anonsys.net/help/BBCode</a></p>
Jupiter Rowland@<a href="https://mastodon.social/@dannotdaniel" rel="nofollow noopener" target="_blank">ᴚ uɐᗡ</a> It's called a quote. Standard feature on Friendica, Hubzilla (where I am), (streams), the now-deceased rest of the family, Misskey and all its forks etc., basically everywhere that isn't Mastodon.<br><br>Within Friendica, Hubzilla and (streams), it's handled basically the same way as on good old bulletin-board forums: in BBcode.<br><code>[quote]if the process is really that involved and if they can fix it[/quote]</code><br><br>(streams) also has ways of doing that with Markdown or HTML.<br><br>There are various different ways of getting that code, also depending on whether one replies to a post or a comment.<br><br>ActivityPub uses Rich Text for formatting. So Friendica converts this into the corresponding formatting in Rich Text, and on Hubzilla and (streams), the optional ActivityPub bridge PubCrawl does that.<br><br>Mastodon, in turn, has introduced some Rich Text displaying capabilities with version 4.0.<br><br>#<a class="" href="https://hub.netzgemeinde.eu/search?tag=Long" rel="nofollow noopener" target="_blank">Long</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=LongPost" rel="nofollow noopener" target="_blank">LongPost</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=CWLong" rel="nofollow noopener" target="_blank">CWLong</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=CWLongPost" rel="nofollow noopener" target="_blank">CWLongPost</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=FediMeta" rel="nofollow noopener" target="_blank">FediMeta</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=FediverseMeta" rel="nofollow noopener" target="_blank">FediverseMeta</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=CWFediMeta" rel="nofollow noopener" target="_blank">CWFediMeta</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=CWFediverseMeta" rel="nofollow noopener" target="_blank">CWFediverseMeta</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Friendica" rel="nofollow noopener" target="_blank">Friendica</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Hubzilla" rel="nofollow noopener" target="_blank">Hubzilla</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Streams" rel="nofollow noopener" target="_blank">Streams</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=%28streams%29" rel="nofollow noopener" target="_blank">(streams)</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=TextFormatting" rel="nofollow noopener" target="_blank">TextFormatting</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=BBcode" rel="nofollow noopener" target="_blank">BBcode</a> #<a class="" href="https://hub.netzgemeinde.eu/search?tag=RichText" rel="nofollow noopener" target="_blank">RichText</a>
Cătă<p><span class="h-card"><a href="https://mastodon.social/users/taylorlorenz" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>taylorlorenz</span></a></span> don't be shy on testing waters on other <a href="https://libranet.de/search?tag=ActivityPub" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ActivityPub</span></a> based platforms as well. You get the same audience and the same people, while enjoying these platforms' particular features. Friendica, for example, has a <a href="https://libranet.de/search?tag=DM" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DM</span></a> inbox already, as well as <a href="https://libranet.de/search?tag=QuotePosts" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>QuotePosts</span></a>.</p><p>You can also add titles to your posts, as well as format your text using <a href="https://libranet.de/search?tag=markdown" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>markdown</span></a> or <a href="https://libranet.de/search?tag=BBCode" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BBCode</span></a>, and many other features that haven't made their way into Mastodon just yet (or were already for years when Mastodon added them). Not to mention you can write texts as long as your heart desires, as there's no limit on them (and they appear just as long on Mastodon).</p><p>A good and fairly popular Friendica server is venera.social</p><p>Edit: and yes, I am on Friendica. Writing to you from Friendica as well. The server I'm on, libranet.de, uses a less stable version of it. venera.social has the same admin but uses the current stable release.</p>
Jupiter Rowland@<a class="" href="https://embers.social/profile/ada" rel="nofollow noopener" target="_blank">Ada</a> @<a class="" href="https://social.defcon42.net/@mirko" rel="nofollow noopener" target="_blank">defcon42/Mirko</a> @<a class="" href="https://thias.hellqui.st/users/m" rel="nofollow noopener" target="_blank">m@thias.hellqui.st</a> To me, it sounds more like some #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Mastodon" rel="nofollow noopener" target="_blank">Mastodon</a> users, especially those who came in through the #<a class="" href="https://hub.netzgemeinde.eu/search?tag=TwitterMigration" rel="nofollow noopener" target="_blank">TwitterMigration</a>, actually can't stand there being something else in the #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Fediverse" rel="nofollow noopener" target="_blank">Fediverse</a> than their beloved Mastodon. When they caught their first glimpse of the Fediverse beyond Mastodon, they reacted much like the people of Krikkit when they caught their first glimpse of the universe beyond Krikkit: "It has to go!"<br><br>They make themselves and each other believe that Mastodon is superior to any other Fediverse project in just about any regard imaginable while apparently completely refusing to learn about those other projects. They're supported in their belief by mass media only ever writing about Mastodon and the number of Mastodon users.<br><br>However, mass media only write about Mastodon because they simply don't know a thing about the rest of the Fediverse, and they didn't know a thing about Mastodon until the #<a class="" href="https://hub.netzgemeinde.eu/search?tag=TwitterTakeover" rel="nofollow noopener" target="_blank">TwitterTakeover</a> had actually happened, and the second wave of former #<a class="" href="https://hub.netzgemeinde.eu/search?tag=birbsite" rel="nofollow noopener" target="_blank">birbsite</a> users had come flooding into Mastodon in such numbers that it was impossible to ignore even for those who act as if #<a class="" href="https://hub.netzgemeinde.eu/search?tag=FLOSS" rel="nofollow noopener" target="_blank">FLOSS</a> doesn't exist.<br><br>As for the numbers of Mastodon users, they're so high because I guess more than 90% of all Mastodon users still don't know that the Fediverse is not only Mastodon, because they have never heard of anything else in the Fediverse. Mastodon was pretty much the only Fediverse project advertised on #<a class="" href="https://hub.netzgemeinde.eu/search?tag=BirbSocial" rel="nofollow noopener" target="_blank">BirbSocial</a> when this was still possible.<br><br>There are various reasons why Mastodon users don't spread across the Fediverse in masses. None of it is because Mastodon is superior to everything else because, truth be told, it isn't. I'll come to this later. One reason is, again, that the vast majority of them still don't know anything else. Another one is because it was hard enough to get used to Mastodon after years of using #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Twitter" rel="nofollow noopener" target="_blank">Twitter</a>, and they don't want to get used to yet another platform. And another one is that it's hard to move from Mastodon to something else and take your account or at least your connections with you.<br><br>Another reason may be because people don't need anything beyond microblogging, and that's what Mastodon does. Now, sorry for all those of you who fight tooth and claw to defend Mastodon against the competition, but #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Akkoma" rel="nofollow noopener" target="_blank">Akkoma</a> does microblogging, too. With extra features beyond Mastodon, some of which Mastodon users have been pestering Eugen Rochko to include in Mastodon for ages (e.g. "quote retweet"). All while being more lightweight and requiring fewer server resources than Mastodon. Oh, and it federates with Mastodon.<br><br>Other Fediverse projects aren't even competition for Mastodon because they specialise in something else. @<a class="" href="https://pixelfed.social/pixelfed" rel="nofollow noopener" target="_blank">Pixelfed</a> specialises in posting pictures, much like #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Instagram" rel="nofollow noopener" target="_blank">Instagram</a>. @<a class="" href="https://framapiaf.org/users/peertube" rel="nofollow noopener" target="_blank">PeerTube</a> specialises in video upload and streaming, not too dissimilarly from #<a class="" href="https://hub.netzgemeinde.eu/search?tag=YouTube" rel="nofollow noopener" target="_blank">YouTube</a>. #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Plume" rel="nofollow noopener" target="_blank">Plume</a> and #<a class="" href="https://hub.netzgemeinde.eu/search?tag=WriteFreely" rel="nofollow noopener" target="_blank">WriteFreely</a> specialise in distraction-free traditional blogging, much like #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Medium" rel="nofollow noopener" target="_blank">Medium</a>. #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Lemmy" rel="nofollow noopener" target="_blank">Lemmy</a> specialises in groups and posting and discussing news, much like #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Reddit" rel="nofollow noopener" target="_blank">Reddit</a> or #<a class="" href="https://hub.netzgemeinde.eu/search?tag=HackerNews" rel="nofollow noopener" target="_blank">HackerNews</a>. You can't claim that Mastodon is better at each of these things than these platforms.<br><br>And then there are the jacks-of-all-trades which are usually filed under either "macroblogging" or "like #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Facebook" rel="nofollow noopener" target="_blank">Facebook</a> ". They weren't launched to have something that goes beyond Mastodon because their history reaches far back before Mastodon. Mastodon was launched in 2016 (and not 2022 like many believe). #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Friendica" rel="nofollow noopener" target="_blank">Friendica</a> was launched in early 2010, even before the crowdfunding campaign for the development of #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Diaspora" rel="nofollow noopener" target="_blank">Diaspora</a> started. And in that early stage, Friendica, then still named #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Mistpark" rel="nofollow noopener" target="_blank">Mistpark</a>, was vastly more powerful than Diaspora* ever got and also vastly more powerful than Mastodon 13 years later.<br><br>#<a class="" href="https://hub.netzgemeinde.eu/search?tag=Hubzilla" rel="nofollow noopener" target="_blank">Hubzilla</a>, created by the same man as Friendica, is the most extreme one of them all. For starters, it eliminates the need for multiple accounts by having multiple independent channels with separate identities on the same account. Each channel can have multiple profiles like on Friendica so you can present your channel differently to individual contacts or groups of them and differently again to the general public.<br><br>It can do micro- and macroblogging with 50,000 or more characters and just about everything that can be done with #<a class="" href="https://hub.netzgemeinde.eu/search?tag=BBcode" rel="nofollow noopener" target="_blank">BBcode</a> (<em>italics</em>, <strong>bold type</strong>, <u>underline</u>, lists with bullet points or numbers, quotes, <code>code blocks</code>), and you can embed as many pictures as you want in your posts where you want them instead of them automatically being attached to the end of the post.<br><br>Group handling in Hubzilla is much easier than list handling in Mastodon. You never have to type the name of a contact to find them. You can edit contacts and add them to groups or remove them, and you can edit groups and add or remove contacts, all with a few mouse clicks. And while Mastodon shows a maximum of four lists on the main page, Hubzilla will give you easy access to all your groups.<br><br>On top of that, you can have<br><ul><li>very fine-grained access rights control with pre-definable contact roles<br></li><li>forums (just like Friendica, Hubzilla has #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Guppe" rel="nofollow noopener" target="_blank">Guppe</a> built in)<br></li><li>more elegant macroblogging with articles which, in addition to BBcode, support #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Markdown" rel="nofollow noopener" target="_blank">Markdown</a><br></li><li>simple webpages (or not so simple if you're the admin of a hub, and you can expand it further)<br></li><li>wikis (I'm not even kidding)<br></li><li>a public calendar<br></li><li>a virtually unlimited number of private calendars with #<a class="" href="https://hub.netzgemeinde.eu/search?tag=CalDAV" rel="nofollow noopener" target="_blank">CalDAV</a> connection<br></li><li>a virtually unlimited number of address books with #<a class="" href="https://hub.netzgemeinde.eu/search?tag=CardDAV" rel="nofollow noopener" target="_blank">CardDAV</a> connection<br></li><li>a file server with #<a class="" href="https://hub.netzgemeinde.eu/search?tag=WebDAV" rel="nofollow noopener" target="_blank">WebDAV</a> connection with its own access rights management which also ties in with the Photos and optional Gallery app (Mastodon drops your pictures somewhere, Hubzilla lets you upload them to your personal cloud space where you can access them whenever you want)</li></ul><br>All with one run-of-the-mill Hubzilla account. And once per channel, separately.<br><br>And as if that wasn't enough, Hubzilla introduced the #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Zot" rel="nofollow noopener" target="_blank">Zot</a> protocol and with it a concept named #<a class="" href="https://hub.netzgemeinde.eu/search?tag=NomadicIdentity" rel="nofollow noopener" target="_blank">NomadicIdentity</a>.<br><br>Mastodon and Friendica let you have multiple accounts, even on separate instances. They also support migration from one account to another, and unlike Mastodon, Friendica lets you take all your content with you. Hubzilla (and #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Streams" rel="nofollow noopener" target="_blank">Streams</a>, the successor of its slimmed-down successor, still created by the same guy) goes even further: Not only can you easily move from one hub to another, you can have channels on multiple hubs and automatically keep them fully in sync! If one hub goes down, it doesn't matter because you've got everything on all your other accounts.<br><br>Last but not least, both Friendica and Hubzilla federate with almost everything that moves, even far beyond the #<a class="" href="https://hub.netzgemeinde.eu/search?tag=ActivityPub" rel="nofollow noopener" target="_blank">ActivityPub</a> Fediverse. This could be Diaspora*, this could be #<a class="" href="https://hub.netzgemeinde.eu/search?tag=GNUsocial" rel="nofollow noopener" target="_blank">GNUsocial</a>, this could be #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Wordpress" rel="nofollow noopener" target="_blank">Wordpress</a> blogs with or without the ActivityPub add-on, this could be RSS feeds (and they both generate feeds themselves, so this is bidirectional, too), this could even be Twitter until the API is shuttered. Friendica even used to federate with Facebook until Facebook put rocks in the way; this is the only connector that Hubzilla didn't take over.<br><br>The obvious downside is that for someone who just came in from the #<a class="" href="https://hub.netzgemeinde.eu/search?tag=birdcage" rel="nofollow noopener" target="_blank">birdcage</a>, all this is utter overkill. In fact, people who are used to Mastodon may find Friendica borderline unusuable due to its many features. And Hubzilla is so infamous for its own clumsy UI capitulating before its sheer power that even Friendica users find it hard to use, fresh converts from Twitter to Mastodon even more so.<br><br>Some design decisions may be hard to understand for outsiders. Converts from other Fediverse projects to Hubzilla regularly fail at something as seemingly similar as connecting to users on other ActivityPub-based projects until you tell them that ActivityPub is an optional app on Hubzilla that has to be activated first because Hubzilla concentrates on Zot with its Nomadic Identity.<br><br>Also, just because these projects offer so much power, that doesn't mean that everyone needs it. If you do, it can be convenient to have it all under one login. But if all you're looking for is a bit of microblogging and online socialising, you don't need to drag a CMS and a full-blown cloud server with all bells and whistles along with you that just clutter up the UI. In that case, projects like Mastodon and Akkoma win because they're more approachable.<br><br>And while Friendica, Hubzilla &amp; Co. can do threaded discussions and even have something like forums, Lemmy can do this more elegantly because it specialises in it. While you can use Hubzilla's private calendar feature for event planning, it's easier to do the same with #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Mobilizon" rel="nofollow noopener" target="_blank">Mobilizon</a> which, again, specialises in it. Or you can host podcasts on Friendica, Hubzilla &amp; Co, but you can host them better on #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Funkwhale" rel="nofollow noopener" target="_blank">Funkwhale</a> and even better on #<a class="" href="https://hub.netzgemeinde.eu/search?tag=Castopod" rel="nofollow noopener" target="_blank">Castopod</a>.<br><br>Wanting the Fediverse to be only Mastodon hinders development, namely the development of new projects within the Fediverse that may be able to do all-new things that we haven't seen in the Fediverse yet. Things that, sorry to say again, you'll never be able to do with Mastodon.<br><br>P.S.: For extra kicks, don't just read this on Mastodon. Open my original post; there you can see what Hubzilla is capable of, and what Mastodon strips away.
Yellow Flag<p>Now back to <a href="https://infosec.exchange/tags/BBCode" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BBCode</span></a>. It being seemingly simple means that most implementations don’t bother with HTML sanitization. Instead, the expectation is that you run a bunch of regexps to produce HTML code and it will just be fine. Except that usually it’s not: <a href="https://jeffchannell.com/Other/bbcode-xss-howto.html" rel="nofollow noopener" target="_blank"><span class="invisible">https://</span><span class="ellipsis">jeffchannell.com/Other/bbcode-</span><span class="invisible">xss-howto.html</span></a></p>
Yellow Flag<p><a href="https://infosec.exchange/tags/BBCode" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BBCode</span></a> is more than two decades old and it made perfect sense back when it was introduced. It was somewhat of “HTML light” because at the time safely enforcing only a subset of HTML was very complicated. In 2007 I still witnessed MySpace fail at it, repeatedly.</p>
Yellow Flag<p>I realized today that some applications out there still use <a href="https://infosec.exchange/tags/BBCode" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BBCode</span></a> for non-legacy reasons. I really have no idea why anybody would do that in year 2020. It’s a very questionable decision security-wise, and it has no usability benefits either. <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>infosec</span></a> <a href="https://infosec.exchange/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>security</span></a> <a href="https://infosec.exchange/tags/XSS" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>XSS</span></a></p>
(wakest's old account)<p>so now that features are really starting to diverge between different <a href="https://mastodon.social/tags/activitypub" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>activitypub</span></a> sites we really need a way to come together and decide how these little bits can fit together. for instance <a href="https://mastodon.social/tags/misskey" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>misskey</span></a> has a ton of features they have implemented recently like polls and reactions other then 'star',</p><p>the masto fork now.kibousoft.co.jp has implemented <a href="https://mastodon.social/tags/bbcode" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>bbcode</span></a> in their instance and it looked like misskey is doing something similar with <a href="https://misskey.xyz/notes/5b7c8643894f8100445b1f28" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">misskey.xyz/notes/5b7c8643894f</span><span class="invisible">8100445b1f28</span></a></p>