this post was submitted on 26 Dec 2023
0 points (NaN% liked)

Fediverse

27830 readers
161 users here now

A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).

If you wanted to get help with moderating your own community then head over to [email protected]!

Rules

Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration), Search Lemmy

founded 1 year ago
MODERATORS
 

Authorized Fetch (also referred to as Secure Mode in Mastodon) was recently circumvented by a stupidly easy solution: just sign your fetch requests with some other domain name.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 0 points 8 months ago (1 children)

It's not as black and white as you make it. The options aren't "perfect security" and "no security".

The option that most people that experience regular harassment want is "enough security to minimise the shit we have to deal with to a level that is manageable even if it's imperfect"

[–] [email protected] 1 points 8 months ago (1 children)

While you're theoretically right, we've seen in practice that nobody really offers even the imperfect privacy you describe, and on decentralized systems it only becomes harder to solve.

A Facebook style centralized network where you explicitly grant access to every single person who can see your content - is as close as we can get. But nobody is trying to make that kind of social network anymore, because there isn't much demand for it.

If you want a soapbox (Twitter/mastodon/bluesky, Reddit/Lemmy/kbin, Instagram/pixelfed, YouTube/toktok/peertube) then privacy is going to be a dream, especially if decentralized.

[–] [email protected] 0 points 8 months ago (1 children)

Vulnerable folk are looking for community, not a soap box. The goal is to connect with other folk whilst being as free as possible from harassment.

It's absolutely possible to achieve that without perfect privacy controls.

[–] [email protected] 1 points 8 months ago (1 children)

Privacy and being free of (in-context) harassment aren't the same thing. Your posts can all be public but your client can filter out any harassment, for example.

If the goal is privacy so that people who aren't in the community don't know that you're in the community, and don't know what the community is even talking about, I'm skeptical that it's practical. Especially for a decentralized network, I think that the sacrifices needed to make this happen would make the social network unappealing to users. For example, you'd need to make it invite only and restrict who can invite, or turn off any kind of discovery so that you can't find people who aren't already in your circle. At that point you might as well just use a group chat.

[–] [email protected] 1 points 8 months ago (1 children)

Privacy and being free of (in-context) harassment aren't the same thing.

They're related. Often, the ability to limit your audience is about making it non trivial for harassers to access your content rather than impossible.

If the goal is privacy so that people who aren't in the community don't know that you're in the community

That's not the goal. The goal is to make a community that lets vulnerable folk communicate whilst keeping the harassment to a manageable level and making the sensitive content non trivial to access for random trolls and harassers.

It's not about stopping dedicated individuals, because they can't be stopped in this sort of environment for all the reasons you point out. It's about minimising harassment from the random drive by bigots

[–] [email protected] 1 points 8 months ago

Hmmm I think I understand the intent. I'll have to think on it some more.

My gut tells me that protecting people from drive-by bigotry is antithetical to content/community discovery. And what is a social network without the ability to find new communities to join or new content to see?

Perhaps something like reddit where they can raise the bar for commenting/posting until you've built up karma within the community? That's not a privacy thing though.

What would this look like to you, and how does it relate to privacy? I've got my own biases that affect how I'm looking at the problem, so I'd be interested in getting another perspective.