• 288 Posts
  • 719 Comments
Joined 8 months ago
cake
Cake day: July 18th, 2024

help-circle
  • I would consider it similar to email, should we abandon it (yes, but not because of this) just because a malicious email server started publishing all the emails it recieved? AP is just email but social media.

    Yes, and people implemented PGP for encrypted email, and also made SMTP over TLS the standard, so that they wouldn’t have to demand that every router and every SMTP server everywhere on the internet agree not to republish or store secret information that was passing through it, because it started to become understood that email was in no way private.

    A proper standard for private posts would be similar. You could have all private posts be encrypted with a rotating key, for example, and have them decrypted by anyone who had the key, on the client side, and stored and transmitted in encrypted form. Being approved to follow the private posts would involve your user being given a copy of the key through some kind of private key exchange. It sounds complex (and it would be, a little), and it would involve moving to the client some of the key management that currently happens on the instance server (and thus undoes some of the actually good design of ActivityPub, by just putting the instance software back in the position of keeping every actor’s keys for them and doing all the crypto work on behalf of the users). Anyway, it would be work and involve some redesign. I’m not saying that’s what they should have done. I’m saying that’s what having private posts as a feature would mean. Anything else is non-private posts that are pretending to be private posts.


  • Yeah, so there’s no real way to implement private posts on Mastodon.

    I mean, it is fine if you want to implement sort of “best effort” semi-privacy and make it clear to everyone involved that that’s what it is, but for any reasonable definition of “private,” the requirement that it not get shown to people outside the list of people allowed to see it needs to be enforced better than this. There will always be server software that doesn’t “cooperate.” That’s just the nature of open distributed systems. If you’re making assurances to your users that their posts will be private, you need to be the one enforcing that, not everyone else on the network and the protocol needs to be set up with the ability for that to happen (which ActivityPub is not, which means it’s misleading that someone told users that they can have “private” posts via this hack.)
























  • The company says the content served to bots is deliberately irrelevant to the website being crawled, but it is carefully sourced or generated using real scientific facts—such as neutral information about biology, physics, or mathematics—to avoid spreading misinformation (whether this approach effectively prevents misinformation, however, remains unproven).

    You cowards. Make it all Hitler fan stuff and wild Elon Musk porno slash fiction. Make it a bunch of source code examples with malicious bugs. Make it instructions for how to make nuclear weapons. They want to ignore the blocking directives and lie about their user agent? Dude, fuck ‘em up. Today’s society has made people way too nice.




    1. Animals understand the world in a lot more detail and depth than we give them credit for. We get caught up in a lot of big brain nonsense, some of which is useful sure, but a lot of the basics, they’re well on top of. They’re not stupid, they just don’t have language or hands.
    2. I feel like a lot of human stuff is just total incomprehensible magic to cats and dogs. Cats clearly think humans can change the weather, or it might be different weather at a different door. Because why wouldn’t it be? You guys control the light switches and the doors and cars and stuff. Why would the weather be different? There’s stuff in my domain and then all the world change stuff is your domain. It’s cool, we can still be buds.

    Idk man, pick one.