No relation to the sports channel.

  • 0 Posts
  • 23 Comments
Joined 1 year ago
cake
Cake day: June 9th, 2023

help-circle

  • To be honest I’m still winding down there.

    But for me, once the blind moderators said they can’t work with the new system, that’s pretty definitive for me. When people with disabilities have found and built their own ways to exercise equal power with others and protect their communities, and then those ways are wantonly taken away from them — yeah, that’s bad.




  • Bad guys have noticed that there’s a resource here that could become valuable later: the ability to inject spam into Lemmy. Maybe not very valuable yet, but after a few more weeks/months of growth, expect it.

    So they’re acquiring the accounts needed to do that.

    These may be commercial spammers. If they’re not posting any spam yet, that may be because nobody’s paying them to do so yet. Commercial spammers don’t spam for free.

    They may be “black hats” (for-profit computer criminals) acquiring accounts to hold with the expectation of selling them or leasing them out. Their intended customers could include commercial spammers in the future; or (e.g.) terrorist or fascist groups. ISIS supporters and Trumpist-Putinists have both spammed other forums and social media sites, for example; and Republican operatives have used phone and SMS spam for voter suppression.

    Or they may be collecting accounts to use for denial-of-service or flooding attacks, to shut down Lemmy activity they don’t like. A number of political entities, including nation-states, have used similar activity to suppress or make unusable forums that they don’t like; e.g. flooding a forum with gore pictures to make it unpleasant to use or moderate.





  • Well, there’s not just one Them.

    The Them who wrote your American history textbook and glossed over the centrality of slavery to the Confederate cause, aren’t the same Them who write TV sitcoms that propagate stereotypes of bumbling clueless men entitled to dump all the emotional labor on their hyper-competent women partners.

    The Them who fund intrusive social media, aren’t the same Them who dial down the yellow-light time on your traffic lights to catch more people with red-light cameras.

    And the closer you look, the less it looks like a Them at all.

    The individual TV writers were really trying to be good TV writers, in the social & economic context of TV studios.

    The history textbook people were mostly actual professors. They want you to have a good history textbook. But the Texas Board of Education is giving them a hard time.

    Heck, the social-media programmers mostly just wanna launch cool stuff.

    The yellow-light people, though? They have no goddamn excuse.



  • Right now, this is a service being provided largely by volunteers, with some help from donors. For example, the lemmy.world instance is run by the same person as mastodon.world, who has posted some information here about the costs and donations involved in running Fediverse services.

    As it turns out, it’s not super expensive to run a public-facing Internet service with a few thousand users if you’re interested in doing so as a hobby activity. And a lot of folks are willing to donate to help the project along!


    More generally: Over the history of the Internet, new services have often been prototyped by researchers, students, and hobbyist volunteers. These folks are expecting to spend a little money to make the service work, and usually enjoy it when people using the thing they’ve built! They usually don’t have an immediate need to monetize everything, but they often accept donations if you’re enjoying their work and want to contribute that way.


  • I’ve only read the ActivityPub spec; I haven’t read the Lemmy code.

    With that in mind, my impression is —

    The new domain owner — if they set up an ActivityPub server instance (e.g. a Lemmy) and got a list of the old user’s post URLs — might be able to delete or edit the old user’s posts stored on other instances. That is a vulnerability, albeit a small one.

    If the old user was still listed as a moderator of communities hosted on other instances, the new domain owner might be able to take over that moderator role.

    One way to fix this would be for instances to issue a public-key cryptographic identity to each user, and distribute users’ public keys to other instances. Then activities purporting to be from that user would need to be signed by that user’s private key.

    Users’ private keys would stay local to their home instance, so users don’t have to do any key management themselves.

    This would mean that if an instance goes away (and its key material is destroyed) then nobody can ever act as any of those users again. A new user created with the same username and domain would be a distinct user for all other instances too.



  • Blocking and unblocking should be normal, expected, easily discoverable, and openly discussed. There are a lot of people on the Internet; a nonzero number of them are frothing assholes; and frothing assholes are quite capable of running servers.

    The whole system we’re on here is still new and in rapid flux. Expect change. This isn’t Reddit with admins saying for years that hosting /r/jailbait is essential to free speech. It takes time to develop agreeable responses to kinds of trouble this system hasn’t yet seen.



  • It’s really a lot like email, only the messages are (mostly) public instead of private.

    If you have an account at gmail.com you can send and receive emails with someone at another site like mit.edu, because your mail server and their mail server know how to talk to each other (that’s “federation”).

    But you don’t have to personally log into their mail server to do that. You just use your account on your server, and the servers take care of getting messages to the right server for the recipient.

    Similarly, here, you can subscribe to and comment on forums (“communities”) originating on other instances. You don’t have to personally log into the other instance to do that; the servers take care of that part.



  • It’s nice when “easy” UI features teach new users how to use the “advanced” features, instead of replacing or hiding the advanced features.

    For instance, the comment editor I’m using right now supports markup, but it also has a row of buttons that insert specific markup. If I don’t know how to type boldface in this markup language, I can press the B button and it inserts some stars for me. I still see the markup, which means that I can learn how to type boldface using the keyboard.

    This is an improvement over having a WYSIWYG editor where pressing the “bold” button makes your text bold but doesn’t teach you how to type markup for yourself.

    Another example of this is how menu items in many GUIs show you the keyboard shortcut that you could use instead of mousing through the menus.