• 0 Posts
  • 15 Comments
Joined 1 year ago
cake
Cake day: April 9th, 2024

help-circle
  • taking care of bad servers is instance admin business, you’re conflating the user concerns with the instance owner concerns

    generally this thread and previous ones have such bad takes on fedi structure: a federated and decentralized system must delegate responsibility and trust

    if you’re concerned about spam, that’s mostly instance owner business. it’s like that with every service: even signal has spam, and signal staff deals with it, not you. you’re delegating trust

    if you want privacy, on signal you need to delegate privacy to software. on fedi to server owners too, but that’s the only extra trust you need to pay

    sending private messages is up to you. if i send a note and address it only to you, i’m delegating trust to you to not leak it, to the software to keep it confidential, and to the server owner to not snoop on it. on signal you still need to trust the software and the recipient

    this whole “nothing is private on fedi” is a bad black/white answer to a gray issue. nothing is private ever, how can you trust AES and RSA? do you know every computer passing your packet is safe from side chain attacks to break your encryption? you claimed to work in security in another thread, i would expect you to know the concept of “threat modeling”



  • it’s not unrealistic to keep trust at the server level. following your rationale, you can’t trust my reply, or any, because any server could modify the content in transit. or hide posts. or make up posts from actors to make them look bad.

    if you assume the network is badly behaved, fedi breaks down. it makes no sense to me that everything is taken for granted, except privacy.

    servers will deliver, not modify, not make up stuff, not dos stuff, not spam you, but apparently obviously will leak your content?

    fedi models trust at the server level, not user. i dont need to trust you, i need to trust just your server admin, and if i dont i defederate



  • “Can someone try and poke holes in this idea?”


    you are still proposing a federate ad network. payments are left to crypto (not fedi), credit cards (not fedi) or paypal (not fedi). the shipping is done by shops themselves (not fedi) (also amazon handles ~80% of their deliveries, check in this thread for sources). What’s a “main shop”? doesn’t sound very decentralized. you suggest leaving contestation again to the shops to handle (not fedi).

    what exactly are you fediversing here? the proposition to users would basically be a single view with all shops, but then just delegating to them? there can be value in this, i see it mostly as an ad network leveraging AP and I’m really not a fan. it isn’t really amazon


    being angered by being shown issues in your idea doesn’t help your idea. go visit your local hackerspace and start building if you think we’re just naysayers



  • this is an icky issue because lemmy sends votes with empty addressing, so remote instances should count them but not show them to anyone. however mastodon (and *key) sends likes with empty addressing too, but considers them public. lemmy is (surprisingly) right here and should request that the rest of fedi respects the protocol and hides stuff based on its addressing. maybe open issues on mastodon and friendica

    also this issue probably exists when seeing lemmy posts on any microblogging instance


  • I would be SoL if I didn’t have one of my original sessions upon making the account years ago still

    key backups are a thing: element tries to make you save the recovery phrase. if you lost your recovery phrase and all sessions, you can still rotate keys and recover the account, just no encrypted history. it seems you’re not familiar with matrix, not that the system is flawed

    99% of rooms aren’t encrypted so are completely and totally insecure anyway

    if this is true, you wouldn’t even be SoL if you lost your session: just rotate keys. very big rooms are unencrypted: what value does e2ee provide when the other end is 10k+ people? any of these may ne untrustworthy, you’re just paying extra infra cost. also, if 99% of your rooms are unencrypted, how do you keep seeing encryption issues?

    these statements seem excessively dramatic and in opposition with each other


    you mention neochat and fluffychat. i explicitly said element, and element x on mobile

    im rather upset at the fact that we have basically no choice: dendrite is getting left behind, construct is abandoned, conduit is weird and conduwuit is not super reassuring. on the clientside, fluffy mostly works but uses old crypto, cinny is slow and lacks a ton of stuff, nheko is a mess, fractal is really underfeatured and i don’t even know what neochat is. using matrix basically boils down to “synapse+element(x)” or “lmao have fun fixing stuff”

    it seems from your replies you lack understanding of how things work and are nonetheless choosing community clients rather than the stuff element does. super valid, i encourage you to do so, just maybe cast your judgment on the actual stuff you’re using and not the whole project itself


    i’d like to close saying that your anectodal experience is not of much value here: you are having issues? i’m not, and neither is all those i’m communicating with. what gives? it’s instead observable that newer developments address the issues you’re mentioning: transparent encryption and simplified sliding sync


    element is entitled, ignoring feedback and constantly playing the victim. its practices with the protocol are despicable.

    the protocol, however, works



  • honestly hashtags is 100% lemmy’s fault: groups/communities are “audience” AP field, lemmy some time ago aiming to be “more compatible with mastodon” made it so that posts in communities get automatically added an hashtag, and hashtags get sent into communities. this is honestly stupid and should be undone, you’d better aim your anger at lemmy devs.

    regarding mentions, Twitter-like software needs them for addressing: lemmy implies that replies are addressed to replied-to user, other software doesn’t (you may want to contribute to a conversation without mentioning user directly above). if they don’t mention, you don’t see it, you’ll have to just deal with this. you could cook yourself a client that finds mentions in object “tag” and removes them from the body itself if you care this much



  • So let me get this straight. Are you really saying “we the developers are going to build this however we see fit, and you the user can go fuck yourself, or else learn how to code and build it yourself”?

    you’re putting it in rather extreme terms, but yes. even if you were completely right in your opinions, the person investing their free time to do work and sharing freely the result is entitled to work as greatly or badly as they like

    Don’t like the feedback? Great, feel free to ignore it, or tell me why I’m wrong

    honestly yes I’m doing exactly this: I’m ignoring your suggestion and telling you why i think you’re wrong. i also shared some of my reasoning behind which i think is still valid, and i will reiterate it

    This alternative has existed for a long time, but still has a fraction of the users as other alternatives out there. Aren’t you at least curious as to why that is?

    not at all because i know a good reason for it: fediverse doesn’t scale well if expected to replicate fully and be a “central plaza”. every server owning every post from billions of users is a very prohibitive design, especially if you expect self-hosters funded by their wallet or donations

    i really think we should try to change how we do social media, not make the same thing again. if you just want that, atproto is likely more fitting, AP is decentralized, not distributed! things like nomadic identity would make the “server issue” obsolete. replies collections permit on-demand fetching of replies. activity signing and forwarding could provide real network-wide broadcasts

    if we’re cooking ramen, we appreciate knowing if it’s too salty or bland. coming to complain about ramen not tasting like burgers, and proposing to add some ketchup, is useless at best, a bit disrespectful at worst


  • this feels useless at best and entitled at most: if you want these, get working. this is not reddit or Facebook: there is no profit or product, nobody is making money and no money is being spent on development or making sure your requests are met. all the time you spent writing this or replying could have been spent actually researching the app. not a dev? not entitled to complain

    simplify user sign ups

    you’re basically proposing a centralized service over a decentralized network. who runs that service? how is it guaranteed fair? which servers should be in the pool? what if a server is worse than another spec-wise? what if the assigned server shuts down? the solution to the server issue is you picking a server for your non techie friends, not cooking more centralized complexity on top.

    polish/add functionalities

    if you really want features developed, make a bounty! pay developers! expecting others to work for your appeasement for free is distastefully entitled. or do it yourself. as you can probably assess, expertise and free time don’t grow on trees.

    how to attract more users

    i think most of this disconnect stems from you wanting this to be just like big centralized services. it’s honestly delusional. in another reply you state that “lemmy.world couldn’t handle 10M users”. maybe, but decentralization is only going to make it worse. every lemmy server needs to broadcast every action to every other server which has users in that community. every post and like needs to be stored in all relevant instance dbs. this generates an insane amount of traffic and data. if the lemmy network suddenly gained 1000 servers, each with 10k users, the new replication traffic may stomp smaller instances to the ground.

    the idea of a “global square” is naive and we should move over. it just limits us all because a platform which caters to everyone must be built around the common ground, and the common ground for everyone isn’t that much ground. a platform that caters to everyone caters to no-one: see mainstream social media and how it’s going. fedi is great because it’s a whole different model: small islands which can interconnect. this is why picking a server is so important and you should not hide it from the user: you’re not signing up to mastodon, you’re signing up to furry.engineer or fosstodon! you can interact with the other instance just fine, but it matters where you register!

    this is the core of the disconnect: we should not bend the fediverse to what mainstream social media is, we should either teach others about this or be fine living as a niche. auto enshittifying ourselves hoping to be another facebook or another reddit feels really silly to me