Emelia

https://bsky.brid.gy/r/https://bsky.app/profile/thisismissem.social

Corruptress of Protocols, Tech Princess 👸🏻

Working on Trust & Safety, open-source software, and open social web as an Independent Contractor. Chronically ill.

You've probably used tech I've contributed to.

Bridged: @thisismissem.[hachyderm.io](http://hachyderm.io )@ap.[brid.gy](http://brid.gy )

🌉 [bridged](https://fed.brid.gy/bsky/thisismissem.social ) from 🦋 [thisismissem.social](https://bsky.app/profile/thisismissem.social ), follow Bridgy Fed for Bluesky (npub1pqr…2sck) to interact

Web site: https://bsky.app/profile/thisismissem.social
Link: https://thisismissem.social
Link: https://support.thisismissem.social
Link: http://hachyderm.io
Link: http://brid.gy

Public Key

npub1c9dey7fwetg0d7vmhapre9frvrq62nvg90y5fw3xzzlqz9daq0dqlv2llc

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsvzkuj0yhv458klxdm7s3uj53kpsd9fkyzhj2yhgnpp0spzk7s8ksprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmnt46r632

Publishing to

relay.momostr.pink

Author Public Key

npub1c9dey7fwetg0d7vmhapre9frvrq62nvg90y5fw3xzzlqz9daq0dqlv2llc

Show more details

Published at

2026-08-01T14:06:12Z

Kind type

0 Metadata

Event JSON

{ "id": "ed68d250bdea6d9def6b0c54910fa7e5c878c82d9a66f131b1c22f89bdfae07b", "pubkey": "c15b92792ecad0f6f99bbf423c952360c1a54d882bc944ba2610be0115bd03da", "created_at": 1785593172, "kind": 0, "tags": [ [ "proxy", "https://bsky.brid.gy/ap/did:plc:5w4eqcxzw5jv5qfnmzxcakfy", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://bsky.brid.gy/ap/did:plc:5w4eqcxzw5jv5qfnmzxcakfy", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"Emelia\",\"about\":\"Corruptress of Protocols, Tech Princess 👸🏻\\n \\nWorking on Trust \u0026 Safety, open-source software, and open social web as an Independent Contractor. Chronically ill.\\n\\nYou've probably used tech I've contributed to.\\n\\nBridged: @thisismissem.[hachyderm.io](http://hachyderm.io )@ap.[brid.gy](http://brid.gy )\\n\\n🌉 [bridged](https://fed.brid.gy/bsky/thisismissem.social ) from 🦋 [thisismissem.social](https://bsky.app/profile/thisismissem.social ), follow nostr:npub1pqr3g2gk3vsnrqk9kwfqqcxc6d5cwjr0hyc0nlzz9py5nf92vd9sn02sck to interact\\n\\nWeb site: https://bsky.app/profile/thisismissem.social\\nLink: https://thisismissem.social\\nLink: https://support.thisismissem.social\\nLink: http://hachyderm.io\\nLink: http://brid.gy\\n\",\"website\":\"https://bsky.brid.gy/r/https://bsky.app/profile/thisismissem.social\",\"picture\":\"https://puffball.us-east.host.bsky.network/xrpc/com.atproto.sync.getBlob?did=did:plc:5w4eqcxzw5jv5qfnmzxcakfy\u0026cid=bafkreihcinkpvetsxxtfko5rctwmgkwzs7inv4f2p6ovlbf65y24i6gbpm\",\"banner\":\"https://puffball.us-east.host.bsky.network/xrpc/com.atproto.sync.getBlob?did=did:plc:5w4eqcxzw5jv5qfnmzxcakfy\u0026cid=bafkreift5zqfbs35l6spx5xoduvlvjulqub6ydgdgd5kavbh3b5ae27kye\",\"nip05\":\"[email protected]\"}", "sig": "f45ce1af5a87fbeecd330c523896839cf3ecd123aea2b33c104827402be44447ca6060f9f1761366f67a3e3d1f0d0b7212528efd34c1ab220620751e4673f3f8" }

Last Notes

2026-07-16 17:08:10 GMT

Fun story for everyone with the AT Protocol trademark: the Mastodon trademark for many many years was owned just by Eugen personally, not by the Mastodon gGmbH, which is part of the reason they had to recently pay Eugen €1 million euros.

2026-07-04 09:42:37 GMT

Oh dear lord, I knew it was bad, but didn't know it was this bad: [hackers.pub/@fedify/2026...](https://hackers.pub/@fedify/2026/why-activitypub-is-hard )
(I've mostly just contributed to activitypub projects that already existed, so didn't usually need to experience these specific pains)
[Why implementing ActivityPub i...](https://hackers.pub/@fedify/2026/why-activitypub-is-hard )

2026-06-25 12:40:42 GMT

Whelp, this is a pretty major vulnerability. If you use ffmpeg make sure you update
[www.securityweek.com/ffmpeg-pixel...](https://www.securityweek.com/ffmpeg-pixelsmash-flaw-allows-rce-on-video-players-media-servers-nas-appliances/ )
[FFmpeg PixelSmash Flaw Allows ...](https://www.securityweek.com/ffmpeg-pixelsmash-flaw-allows-rce-on-video-players-media-servers-nas-appliances/ )

2026-06-25 01:41:39 GMT

So [@[email protected]](https://bsky.brid.gy/ap/did:plc:lysqukqdu6hsrhet5v2brjgo ) let slip today that the reference implementation PDS is finally getting email based 2FA, for parity with the entryway.
I've been working on implementing this over the past 2 weeks, as my chronic illness has been a bit difficult, but it is indeed coming!

2026-06-21 11:56:54 GMT

Watch my stream from last night on ActivityPub, AT Protocol and more!, now on Youtube too: www.youtube.com/watch?v=BZgN...
We review @npub1up3…czka's article and go over some slides for alternative architectures of activitypub, and why some things Dan says are correct, citing the protocol.
[ActivityPub, AT Protocol, and ...](https://www.youtube.com/watch?v=BZgNMiw3lTY )

2026-06-21 01:15:59 GMT

Just wrapped up the ActivityPub, AT Protocol and more stream, the recording is up on twitch at the moment, and will be on youtube soon, and maybe spectra.video soon.
Thanks everyone who joined live! Was a almost 5 hour long stream.
www.twitch.tv/videos/28014...
[AT Protocol, ActivityPub and m...](https://www.twitch.tv/videos/2801433122 )

2026-06-19 12:17:48 GMT

So I've been trying to understand the legal structure that W Social has to better understand the separation between W Identity and W Social, and it's quickly looking like it's all for show.

2026-05-31 16:43:36 GMT

This looks like a useful tool: quien - a better whois and domain intelligence toolkit
[github.com/retlehs/quien](https://github.com/retlehs/quien )
[GitHub - retlehs/quien: A bett...](https://github.com/retlehs/quien )

2026-05-29 19:42:42 GMT

Also, @npub1r89…kwp7 mentioned it during Off Protocol Live, but if you're curious what Coop looks like, there's some screenshots here: [github.com/roostorg/coo...](https://github.com/roostorg/coop/issues/615#issuecomment-4568672559 )

2026-05-28 04:24:35 GMT

Have this in my notifications to listen to tomorrow.
RE: https://bsky.app/profile/did:plc:6q2thhy2ohzog26mmqm4pffk/post/3mmtpx5rfrc25
#note1ua4…lrv7

2026-05-21 16:44:45 GMT

Wow, this is a pretty significant development: [www.nytimes.com/2026/05/21/b...](https://www.nytimes.com/2026/05/21/business/bluesky-russia-hacking-accounts.html?unlocked_article_code=1.kFA.EndN.WvJSkcxIv5DR&smid=url-share )
[Bluesky Says Kremlin Is Hackin...](https://www.nytimes.com/2026/05/21/business/bluesky-russia-hacking-accounts.html?unlocked_article_code=1.kFA.EndN.WvJSkcxIv5DR&smid=url-share )

2026-05-10 14:22:16 GMT

Seeing folks on tumblr make interesting points on age verification where if the account is over 12 years old (or even 18 years old in some cases), that the age of the user should be able to be inferred from the account alone

2026-05-01 15:51:04 GMT

Living up to my self-prescribed "corruptress of protocols" title, I've proposed a "handles taskforce" for the Social Web CG/WG: [lists.w3.org/Archives/Pub...](https://lists.w3.org/Archives/Public/public-swicg/2026May/0004.html )
[Re: Taskforce Proposal: Intern...](https://lists.w3.org/Archives/Public/public-swicg/2026May/0004.html )

2026-04-28 18:50:43 GMT

At the meetup, @npub1zvh…wqrp suggests bridging events from AT Protocol to ActivityPub, and my first reaction was "yeah, but all the event platforms on ActivityPub are probably using Create(Note) 😭"

2026-04-22 14:54:26 GMT

I'm intending to go to the next ATProto Berlin Meetup, looking forward to meeting @npub1jsy…jjrj and others!
(It's on the 28th, the link preview image is cached incorrectly)
[atmo.rsvp/p/atproto.be...](https://atmo.rsvp/p/atproto.berlin/e/3mjwcnoelh32o )
[ATProto Berlin Meetup](https://atmo.rsvp/p/atproto.berlin/e/3mjwcnoelh32o?1=1 )

2026-04-17 01:31:09 GMT

Reginos is now bluesky lore.
RE: https://bsky.app/profile/did:plc:ragtjsm2j2vknwkz3zp4oxrd/post/3mjnkgpolks2y
#note16gw…kqa6

2026-04-02 18:16:25 GMT

Next week on Friday I'm doing my first ever office hours! If you have questions for this is your chance!
[atmo.rsvp/p/thisismiss...](https://atmo.rsvp/p/thisismissem.social/e/3mhz4pbqosccl )
[Office Hours with Emelia](https://atmo.rsvp/p/thisismissem.social/e/3mhz4pbqosccl )

2026-03-29 03:51:41 GMT

So what @npub1vth…k7hr couldn't show you all in the demo was the redesign I've just done on the @npub1hnx…97k4 portal with all the apps listed:
https://puffball.us-east.host.bsky.network/xrpc/com.atproto.sync.getBlob?did=did:plc:5w4eqcxzw5jv5qfnmzxcakfy&cid=bafkreibwbl4q3mwiqaaz4nsapma2lg2e3frt3kqzegca4zghritgz5ub6i

2026-03-27 03:13:18 GMT

Okay, so a little while ago, I was asked to run an office hours event, where people could ask me their questions on AT Protocol, OAuth, etc
Here's that event: [atmo.rsvp/p/thisismiss...](https://atmo.rsvp/p/thisismissem.social/e/3mhz4pbqosccl )
[Office Hours with Emelia](https://atmo.rsvp/p/thisismissem.social/e/3mhz4pbqosccl )

2026-03-12 19:50:06 GMT

This is an absolutely wonderful read from @npub1yl9…a25x — "A varied ecosystem and terminology."
[nelind.leaflet.pub/3m7xhza76f22g](https://nelind.leaflet.pub/3m7xhza76f22g )
[A varied ecosystem and termino...](https://nelind.leaflet.pub/3m7xhza76f22g )

2026-03-10 03:59:45 GMT

I wrote up a piece on how standards are made, because of some folks being very negative about the grant on other social networks: [writings.thisismissem.social/how-standard...](https://writings.thisismissem.social/how-standards-are-made/ )
[How Standards Are Made](https://writings.thisismissem.social/how-standards-are-made/ )

2026-03-09 23:28:27 GMT

[@toni.bsky.team](https://bsky.brid.gy/ap/did:plc:cwf4mmm7mpzistinx3ox2zhj ) saw the accessibility comment someone left on your blog post and opened: [github.com/bluesky-soci...](https://github.com/bluesky-social/social-app/issues/10035 )
[Drafts are causing usability i...](https://github.com/bluesky-social/social-app/issues/10035 )

2026-03-09 16:59:37 GMT

Lol, someone asked an LLM to generate a readme for their ActivityPub project, and the readme it generated included a line about being funded by NLNet's grants, even though the project wasn't.
This just goes to show how common and dependent NLNet funding is for Fediverse projects.

2026-02-18 23:43:04 GMT

This is an absolutely fantastic article by @npub1ayw…kf99
[connectedplaces.online/where-does-c...](https://connectedplaces.online/where-does-community-live/ )
[Where Does Community Live?](https://connectedplaces.online/where-does-community-live/ )

2026-02-17 01:18:12 GMT

The problem with relying on email for 2FA or magic login links, is that your email deliverability needs to be really really solid.
@npub1nfl…nul3's unfortunately is not. Most common reason I can't sign into another application is because I never get the 2FA email from Bluesky.
Sure, I could move PDSes

2026-02-16 19:00:14 GMT

Cool, I'm now an Invited Expert with the W3C FedID Working Group, which allows me to better advocate the for needs of decentralized social web when it comes to FedCM and related technologies
Looking forward to working with the other working group members on these topics!
[www.w3.org/groups/wg/fe...](https://www.w3.org/groups/wg/fedid/participants/ )

2026-02-13 20:34:10 GMT

First up in the #ATProtoOfficeHours is a mention of [@[email protected]](https://bsky.brid.gy/ap/did:plc:4yvwfwxfz5sney4twepuzdu7 ) and the new integration from Bluesky.

2026-02-09 19:03:04 GMT

The reference PDS installer will now default to requiring invites — you can of course edit the configuration to disable this, but it's a "secure by default" setting.
RE: https://bsky.app/profile/did:plc:t6xqfwencuwg4sjm5uhloc7r/post/3mecyd4kyng2m
#note168c…0vtr

2026-01-31 19:07:35 GMT

This code worries me a *lot*, in bad ways. It's literally hacking into some custom hand rolled authentication and authorization system into the reference PDS implementation.
Like, there's lots here that makes you go "good lord" and "this isn't how that's meant to work"
[github.com/bluesky-soci...](https://github.com/bluesky-social/atproto/compare/main...w-social-eu:w-social-atproto:main )
RE: https://bsky.app/profile/did:plc:vryspragp5yyohzghxpgqm7i/post/3mdqajvas722w

2026-01-29 18:30:12 GMT

Look at @npub12el…lrpy out here casually with a -15,047 line code change.
RE: https://bsky.app/profile/did:plc:t6xqfwencuwg4sjm5uhloc7r/post/3mdhunmhcyu2m
#note1eze…shxr

2026-01-29 13:36:21 GMT

I'd somewhat disagree on this, which may surprise you. You should only host a PDS when you feel like you can govern and provide it responsibly.
Poorly run PDSes that loose people's data hurt us much more than directing people to create an account on a well known PDS provider.
RE: https://bsky.app/profile/did:plc:jjtrsxiaw4amuujelxrxy7by/post/3mcruzeg7tk2d
#note1c2j…kfzm

2026-01-28 01:34:11 GMT

So here's a short write up explaining what happened today and what I'm going through, at a high level. It does include some history too, but I tried to keep it brief.
[On Financial Insecurity](https://thisismissem.leaflet.pub/3mdh4yan3xs23 )

2026-01-27 10:57:29 GMT

This was an interesting watch about the early internet in Japan and Japanese contributions to the modern day internet: [youtu.be/kAjdkDDz2A4?...](https://youtu.be/kAjdkDDz2A4?si=uCAu4O2G2o2FAUVb )
[The illegal network that built...](https://youtu.be/kAjdkDDz2A4?si=uCAu4O2G2o2FAUVb )

2026-01-16 21:48:01 GMT

New @npub18vx…ytze package released: Extremely simple AT Protocol OAuth for your application.
1. Install & setup (one command, one manual edit)
2. Build your login form, using the oauth.login route
3. ???
4. Profit!!
[github.com/ThisIsMissEm...](https://github.com/ThisIsMissEm/adonisjs-atproto-oauth )
[GitHub - ThisIsMissEm/adonisjs...](https://github.com/ThisIsMissEm/adonisjs-atproto-oauth )

2025-12-02 16:45:43 GMT

I want to clarify my position on this: I think just client_id in the current Service JWTs wouldn't provide the solutions to the problems listed, and could be easily manipulated.
However, I think the problems listed are valid problems that we should collectively come up with solutions for.
RE: https://bsky.app/profile/did:plc:cbkjy5n7bk3ax2wplmtjofq2/post/3m6xaxquzs22h
#note1jqd…q2us

2025-11-27 15:30:13 GMT

Hey friends ln the #ATmosphere, if you're thankful for my contributions to AT Protocol though my standards work and trying to figure out how to push things forwards, please do consider supporting my work:
[support.thisismissem.social](https://support.thisismissem.social )
[Support Emelia Smith (@thisism...](https://support.thisismissem.social )

2025-11-17 20:12:02 GMT

Okay, published a new internet draft to enable discovery of the Authorization Server's authorization management UI's URI: [www.ietf.org/archive/id/d...](https://www.ietf.org/archive/id/draft-emelia-oauth-authorization-management-uri-00.html )
This should help with the "how do I manage my Bluesky OAuth apps" problem we're currently seeing.
RE: https://bsky.app/profile/did:plc:5w4eqcxzw5jv5qfnmzxcakfy/post/3m5tssnmmkk2l
[OAuth Authorization Management...](https://www.ietf.org/archive/id/draft-emelia-oauth-authorization-management-uri-00.html )
#note1435…d5cd

2025-11-17 18:05:28 GMT

Whelp, I think I'm going to write an new OAuth internet draft..
There's apparently no property in OAuth Authorization Server Metadata for providing a link to where people can go to manage their authorized applications on the authorization server. So I'm going to propose one.

2025-11-14 18:51:29 GMT

Oh look, a little press! Thanks for covering FediMod FIRES a bit @npub1l2k…6m2l !
[connectedplaces.online/reports/fedi...](https://connectedplaces.online/reports/fediverse-report-142/ )
[Fediverse Report – #142](https://connectedplaces.online/reports/fediverse-report-142/ )

2025-11-12 09:13:34 GMT

Woo! The Bluesky Relay implementation is now published as a docker image!
RE: https://bsky.app/profile/did:plc:t6xqfwencuwg4sjm5uhloc7r/post/3lysmdfonng2m
#note1snx…uk9e

2025-11-11 18:18:43 GMT

Ha, this is pretty much how I work and I didn't realise it was a cultural thing, but that's why you see me popping up everywhere:
(From: [protocol.ecologies.info/interviews/n...](https://protocol.ecologies.info/interviews/newbold-protocol_engineering/ ) )
https://puffball.us-east.host.bsky.network/xrpc/com.atproto.sync.getBlob?did=did:plc:5w4eqcxzw5jv5qfnmzxcakfy&cid=bafkreidgnhyt3xd3wpdwei6xvkjeq22n62pvstry65mmklkg5e7usx72ue

2025-11-10 22:49:03 GMT

I'm needing to figure out what the next year is going to hold for me, as this year has been incredibly tough and I've barely scraped by: with any luck finishing the FIRES grant will hopefully be enough money to pay myself for December & January.
I had applied for a job recently, but didn't get it.

2025-11-08 15:01:01 GMT

Something I see repeatedly in the ActivityPub community & Fediverse, and with growing regularity in the ATmosphere is people pretending or thinking that they can control data once it has left their server/device.
You can definitely ask nicely that they do certain things...

2025-10-26 07:33:50 GMT

Okay, so, I finally built that OAuth Client ID Metadata Service that I've been talking about on an off, and also verified it works with bluesky: [cimd-service.fly.dev](https://cimd-service.fly.dev/ )
I did have to change my application_type to native to use localhost redirect URIs, which was annoying.
#oauth #atproto
https://cimd-service.fly.dev/

2025-10-09 14:22:04 GMT

So a lot of y'all know I've been hacking on entryway servers for AT Proto (because the old entryway code was becoming a dependency burden), but if an organisation like EuroSky or Northsky wanted to sponsor me to work on an open-source entryway solution, I'd be open to doing that work.

2025-10-09 00:35:53 GMT

So you might know my work, to support me doing that I need about €60-70k per year.
Year to date, I've received €17,150 in financial support from the community, and €11,400 from NLNet grants. So a total of €28,550.
Add in whatever freelance work I've been able to pick up and it maybe bumps to €36k

2025-09-27 21:50:37 GMT

I've been hacking on this all day on and off, and I've got nothing. I need the signing key on the entryway seemingly to create valid JWTs, but the signing key needs to be reserved on the PDS, and you can't be like "oh, here's a signing key to use"
I'm pretty sure I'm missing something.
RE: https://bsky.app/profile/did:plc:5w4eqcxzw5jv5qfnmzxcakfy/post/3lzrktz6rbs25
#note1ke5…jnuk

2025-09-26 22:56:58 GMT

Have been hacking on seeing if it's possible to update the PDS entryway tests to use something based on the current version of the @atproto/pds instead of an ancient version.
It's vaguely kinda working, but it's still horribly broken, I'm definitely missing something:
[github.com/bluesky-soci...](https://github.com/bluesky-social/atproto/compare/main...ThisIsMissEm:bluesky-social-atproto:feat/entryway-for-tests )
[Comparing bluesky-social:main....](https://github.com/bluesky-social/atproto/compare/main...ThisIsMissEm:bluesky-social-atproto:feat/entryway-for-tests )

2025-09-20 20:33:36 GMT

Oh, also, if y'all have liked what I've been working on, then you can support me at: [support.thisismissem.social](https://support.thisismissem.social )
[Support Emelia Smith (@thisism...](https://support.thisismissem.social )

2025-09-17 05:24:54 GMT

Ooooh, it works!! This is a client talking to an authorization server built with the `@atproto/oauth-provider` package standalone.
I've implemented just enough to make this proof of concept work.
https://puffball.us-east.host.bsky.network/xrpc/com.atproto.sync.getBlob?did=did:plc:5w4eqcxzw5jv5qfnmzxcakfy&cid=bafkreibhwdjt4l6wb6sm2ejvdvqvv2b3baz73avpz57fstmwy352dgcngm

2025-09-15 01:59:12 GMT

So here's where I'm at with a custom "pds"-like thing that I'm building, where it's not actually using much of the PDS code from `@atproto/pds` but is actually just the OAuthProvider with a bare-bones implementation of the OAuthStore.
(Sorry, I don't have subtitles)
https://puffball.us-east.host.bsky.network/xrpc/com.atproto.sync.getBlob?did=did:plc:5w4eqcxzw5jv5qfnmzxcakfy&cid=bafkreifrkrqwubqadkflh5esqqn6a45x62e2x6bwbhklpfnobsyr6y5ri4

2025-09-06 14:59:22 GMT

Hey #ATmosphere, someone is asking me about AT Protocol in PHP, specifically for being a PDS. Is anyone doing a PHP implementation? Is that even possible?
#ATProtocol

2025-09-06 13:33:27 GMT

Recently there has been a lot of dividing & heated discourse about ActivityPub and AT Protocol.
Yesterday at the Social Web CG meeting, I proposed releasing a statement on this discourse, you can read the full statement here:
[github.com/swicg/genera...](https://github.com/swicg/general/blob/master/statements/2025-09-05-activitypub-and-atproto-discourse.md )
#activitypub #atprotocol #atproto #SocialWeb
[github.com/swicg/general/...](https://github.com/swicg/general/blob/master/statements/2025-09-05-activitypub-and-atproto-discourse.md )

2025-08-26 18:10:39 GMT

Casual little pull request to fix support for multiple redirect URIs in the @atproto/oauth-client-node package: [github.com/bluesky-soci...](https://github.com/bluesky-social/atproto/pull/4139 )
[Fix #4136: Support multiple re...](https://github.com/bluesky-social/atproto/pull/4139 )

2025-08-13 20:07:46 GMT

This piece on UBI and inequality is good: [www.scottsantens.com/what-the-med...](https://www.scottsantens.com/what-the-media-isnt-telling-you-why-universal-basic-income-ubi-is-the-answer-to-poverty-insecurity-and-inequality/ )
[What the Media Isn’t Telling Y...](https://www.scottsantens.com/what-the-media-isnt-telling-you-why-universal-basic-income-ubi-is-the-answer-to-poverty-insecurity-and-inequality/ )