social-soc2019.md 5.8 KB


Title: GNU social Summer of Code 2019

Url: /social/soc/2019

GNU social - Summer of Code is organized by Diogo Cordeiro.

Mentors: Daniel Supernault, Diogo Cordeiro and Mikael Nordfeldth

EDITIONS

Ready?


GNU social is a social communication software used in federated social networks. It is widely supported and has a large userbase. It is already used by the Free Software Foundation, and Richard Stallman himself.

What would be expected from me?

Reliability Engineering : Fix bugs of current code base and ensure it stays functional

Software Engineering : Further development of GNU social v2

Computer Security Engineering : Ensure GS is secure

Every student will have to pick tasks in each of these fields in GS's GSoC. Excited already? Then read below some of our ideas and learn how you can be part of this!

Ideas

Make the ActivityPub plugin started in previous GSoC reliable

In previous GSoC an ActivityPub plugin for GS was developed but isn't compatible with every piece of software used in the fediverse (only working with Mastodon so far) nor completely safe and robust for large usage. Some of the existing key problems are:

  • It is unable to de-duplicate when OStatus and ActivityPub are both enabled - mostly noticed between GS instances with both enabled;
  • Is unable to verify signatures which is an attack vector that makes the plugin unsafe for use right now;
  • It also doesn't make use of queues nor collections caching nor has any kind of circuit breaker implemented. This makes its use risky in a highly active GS instance.

Add support for temporary posts

This will allow support for "stories" and empower whole instances (and/or single users) to have temporary posts.

Review third party developer interfaces

There are various bots in the fediverse and we feel it might be about time to set them apart from humans so that we know who to kill when the robotic uprising comes, so to speak (ahem).

Ultimately, bots aren't humans and, therefore, they shouldn't have accounts claiming that they are "Persons".

So some good measures for making change are:

  • Introduce OStatus 2 in GNU social for authentication of clients that aren't browsers;
  • Review current APIs for Applications that act in the User’s behalf and introduce a user platform for the management of those;
  • Review current APIs for Bots that act in their own behalf and introduce a developer platform for the management of those.

Technical sidenote for those who have read the ActivityPub standard: GS Bots are represented as Actors with the Application type, while GS Applications are an internal (not federated) thing that allow Actors with the Person type (a.k.a.: Users) to use third party applications to control and do stuff with their account.

"We have you noticed we've straighten every dent up"

Props to XRevan86 for that pun! (Notices in GNU social are colloquially referred to as Dents).

GNU social wants to get polished with a modern looking default theme. For this, it would be interesting to come up with some themes guidelines so, if you're into web design, this might be the task for you! :)

On the other hand, if you are more into backend development, we've got you covered. Some new and interesting concepts in the world of Software Engineering were introduced and we are naturally looking forward to include them and refresh the current code base for the release of GNU social 2 with them!

How to apply?

First read GNU's guidelines on how to prepare a good proposal.

Then please contact Diogo Cordeiro (up201705417) on GS's IRC channel (#social@irc.freenode.net) to get started on your proposal. Ah, and be sure to create your student account on Google Summer of Code asap.

GO!