

lemmy’s approach still relies on audience targeting for privacy, just like mastodon. using a distinct object type (which is off spec btw) is “more secure” just because nobody else knows what lemmy is doing
lemmy’s approach still relies on audience targeting for privacy, just like mastodon. using a distinct object type (which is off spec btw) is “more secure” just because nobody else knows what lemmy is doing
it’s not unrealistic to keep trust at the server level. following your rationale, you can’t trust my reply, or any, because any server could modify the content in transit. or hide posts. or make up posts from actors to make them look bad.
if you assume the network is badly behaved, fedi breaks down. it makes no sense to me that everything is taken for granted, except privacy.
servers will deliver, not modify, not make up stuff, not dos stuff, not spam you, but apparently obviously will leak your content?
fedi models trust at the server level, not user. i dont need to trust you, i need to trust just your server admin, and if i dont i defederate
good reply but private items are not “quite literally blasted out to anyone who listens”, AP spec has audience targeting and content gets sent capillarly, like email. a Note for bob gets sent ONLY to bob’s server
as:Public content gets broadcasted by some software (relays) and inbox forwarded by others (mastodon, mitra).
“Can someone try and poke holes in this idea?”
you are still proposing a federate ad network. payments are left to crypto (not fedi), credit cards (not fedi) or paypal (not fedi). the shipping is done by shops themselves (not fedi) (also amazon handles ~80% of their deliveries, check in this thread for sources). What’s a “main shop”? doesn’t sound very decentralized. you suggest leaving contestation again to the shops to handle (not fedi).
what exactly are you fediversing here? the proposition to users would basically be a single view with all shops, but then just delegating to them? there can be value in this, i see it mostly as an ad network leveraging AP and I’m really not a fan. it isn’t really amazon
being angered by being shown issues in your idea doesn’t help your idea. go visit your local hackerspace and start building if you think we’re just naysayers
you are not proposing a federated amazon, this is just federated ads and/or reviews.
how to process payments? how to ship goods? how to handle refunds? how to handle contestations?
please you can’t just make anything federated. this protocol is built for social media and struggles to take over that sphere, we should focus on one thing rather than throwing random stuff at the wall hoping it sticks (cough federated tik tok cough)
this is an icky issue because lemmy sends votes with empty addressing, so remote instances should count them but not show them to anyone. however mastodon (and *key) sends likes with empty addressing too, but considers them public. lemmy is (surprisingly) right here and should request that the rest of fedi respects the protocol and hides stuff based on its addressing. maybe open issues on mastodon and friendica
also this issue probably exists when seeing lemmy posts on any microblogging instance
I would be SoL if I didn’t have one of my original sessions upon making the account years ago still
key backups are a thing: element tries to make you save the recovery phrase. if you lost your recovery phrase and all sessions, you can still rotate keys and recover the account, just no encrypted history. it seems you’re not familiar with matrix, not that the system is flawed
99% of rooms aren’t encrypted so are completely and totally insecure anyway
if this is true, you wouldn’t even be SoL if you lost your session: just rotate keys. very big rooms are unencrypted: what value does e2ee provide when the other end is 10k+ people? any of these may ne untrustworthy, you’re just paying extra infra cost. also, if 99% of your rooms are unencrypted, how do you keep seeing encryption issues?
these statements seem excessively dramatic and in opposition with each other
you mention neochat and fluffychat. i explicitly said element, and element x on mobile
im rather upset at the fact that we have basically no choice: dendrite is getting left behind, construct is abandoned, conduit is weird and conduwuit is not super reassuring. on the clientside, fluffy mostly works but uses old crypto, cinny is slow and lacks a ton of stuff, nheko is a mess, fractal is really underfeatured and i don’t even know what neochat is. using matrix basically boils down to “synapse+element(x)” or “lmao have fun fixing stuff”
it seems from your replies you lack understanding of how things work and are nonetheless choosing community clients rather than the stuff element does. super valid, i encourage you to do so, just maybe cast your judgment on the actual stuff you’re using and not the whole project itself
i’d like to close saying that your anectodal experience is not of much value here: you are having issues? i’m not, and neither is all those i’m communicating with. what gives? it’s instead observable that newer developments address the issues you’re mentioning: transparent encryption and simplified sliding sync
element is entitled, ignoring feedback and constantly playing the victim. its practices with the protocol are despicable.
the protocol, however, works
while “Could not decrypt message” is the n1 meme for matrix, i haven’t seen it happen in a long while, maybe a year. synapse and element x are quite good at this point, you should try matrix again
im not an element fan, company is a bit spoiled and sassy, but they stopped adding features and went all in on polishing recently. fair, as they’re trying to sell themselves for national deploys
honestly hashtags is 100% lemmy’s fault: groups/communities are “audience” AP field, lemmy some time ago aiming to be “more compatible with mastodon” made it so that posts in communities get automatically added an hashtag, and hashtags get sent into communities. this is honestly stupid and should be undone, you’d better aim your anger at lemmy devs.
regarding mentions, Twitter-like software needs them for addressing: lemmy implies that replies are addressed to replied-to user, other software doesn’t (you may want to contribute to a conversation without mentioning user directly above). if they don’t mention, you don’t see it, you’ll have to just deal with this. you could cook yourself a client that finds mentions in object “tag” and removes them from the body itself if you care this much
you’re right, my initial reply was harsh, i wish i had waited a bit longer before replying. i hope my points won’t get lost in the rant because i stand by them. i really wish this enthusiasm was spent on other hurdles rather than chasing big monoliths. i don’t want to curb enthusiasm, just move it elsewhere
So let me get this straight. Are you really saying “we the developers are going to build this however we see fit, and you the user can go fuck yourself, or else learn how to code and build it yourself”?
you’re putting it in rather extreme terms, but yes. even if you were completely right in your opinions, the person investing their free time to do work and sharing freely the result is entitled to work as greatly or badly as they like
Don’t like the feedback? Great, feel free to ignore it, or tell me why I’m wrong
honestly yes I’m doing exactly this: I’m ignoring your suggestion and telling you why i think you’re wrong. i also shared some of my reasoning behind which i think is still valid, and i will reiterate it
This alternative has existed for a long time, but still has a fraction of the users as other alternatives out there. Aren’t you at least curious as to why that is?
not at all because i know a good reason for it: fediverse doesn’t scale well if expected to replicate fully and be a “central plaza”. every server owning every post from billions of users is a very prohibitive design, especially if you expect self-hosters funded by their wallet or donations
i really think we should try to change how we do social media, not make the same thing again. if you just want that, atproto is likely more fitting, AP is decentralized, not distributed! things like nomadic identity would make the “server issue” obsolete. replies collections permit on-demand fetching of replies. activity signing and forwarding could provide real network-wide broadcasts
if we’re cooking ramen, we appreciate knowing if it’s too salty or bland. coming to complain about ramen not tasting like burgers, and proposing to add some ketchup, is useless at best, a bit disrespectful at worst
this feels useless at best and entitled at most: if you want these, get working. this is not reddit or Facebook: there is no profit or product, nobody is making money and no money is being spent on development or making sure your requests are met. all the time you spent writing this or replying could have been spent actually researching the app. not a dev? not entitled to complain
simplify user sign ups
you’re basically proposing a centralized service over a decentralized network. who runs that service? how is it guaranteed fair? which servers should be in the pool? what if a server is worse than another spec-wise? what if the assigned server shuts down? the solution to the server issue is you picking a server for your non techie friends, not cooking more centralized complexity on top.
polish/add functionalities
if you really want features developed, make a bounty! pay developers! expecting others to work for your appeasement for free is distastefully entitled. or do it yourself. as you can probably assess, expertise and free time don’t grow on trees.
how to attract more users
i think most of this disconnect stems from you wanting this to be just like big centralized services. it’s honestly delusional. in another reply you state that “lemmy.world couldn’t handle 10M users”. maybe, but decentralization is only going to make it worse. every lemmy server needs to broadcast every action to every other server which has users in that community. every post and like needs to be stored in all relevant instance dbs. this generates an insane amount of traffic and data. if the lemmy network suddenly gained 1000 servers, each with 10k users, the new replication traffic may stomp smaller instances to the ground.
the idea of a “global square” is naive and we should move over. it just limits us all because a platform which caters to everyone must be built around the common ground, and the common ground for everyone isn’t that much ground. a platform that caters to everyone caters to no-one: see mainstream social media and how it’s going. fedi is great because it’s a whole different model: small islands which can interconnect. this is why picking a server is so important and you should not hide it from the user: you’re not signing up to mastodon, you’re signing up to furry.engineer or fosstodon! you can interact with the other instance just fine, but it matters where you register!
this is the core of the disconnect: we should not bend the fediverse to what mainstream social media is, we should either teach others about this or be fine living as a niche. auto enshittifying ourselves hoping to be another facebook or another reddit feels really silly to me
then use “they”, do you speak exclusively with yourself? your linguistic choices affect others, just like others’ linguistic choices affect you (as you were noticing and complaining about)
you don’t understand the language and thus everyone should comply with you? i’d rather read correct english than what you find more understandable
taking care of bad servers is instance admin business, you’re conflating the user concerns with the instance owner concerns
generally this thread and previous ones have such bad takes on fedi structure: a federated and decentralized system must delegate responsibility and trust
if you’re concerned about spam, that’s mostly instance owner business. it’s like that with every service: even signal has spam, and signal staff deals with it, not you. you’re delegating trust
if you want privacy, on signal you need to delegate privacy to software. on fedi to server owners too, but that’s the only extra trust you need to pay
sending private messages is up to you. if i send a note and address it only to you, i’m delegating trust to you to not leak it, to the software to keep it confidential, and to the server owner to not snoop on it. on signal you still need to trust the software and the recipient
this whole “nothing is private on fedi” is a bad black/white answer to a gray issue. nothing is private ever, how can you trust AES and RSA? do you know every computer passing your packet is safe from side chain attacks to break your encryption? you claimed to work in security in another thread, i would expect you to know the concept of “threat modeling”