Aside: this is a *major* reason why I quit Bluesky and deleted my account some months back.
Uncategorized
22
Posts
19
Posters
0
Views
-
@Laukidh@infosec.exchange @vkc@linuxmom.net I tried but no-one loves the bot that bridged you to other platforms
-
@vkc a similar thing is true for Mastodon. the UI doesn't show it, but your server will send the other server a note saying that you blocked that user.
since you run your own server, you can get a list of who blocked you with a query like
SELECT accounts.username, accounts.domain
FROM blocks
JOIN accounts ON blocks.account_id = accounts.id
WHERE
target_account_id = (
SELECT id
FROM accounts
WHERE
username = 'vkc'
AND private_key IS NOT NULL
LIMIT 1
);this is documented, and while the official UI doesn't show it, a malicious actor could easily build tooling on their own server.
don't ask me why, I don't know either. while there probably are ui-niceties around it (mainly that the other node can make sure they don't show the user you've blocked your content), this... isn't great.
-
@vkc Wait, the people you block, on your account, are public to anyone? That... Is the weirdest technological decision I have ever heard of. I wonder why they would do that? Transparency? Idk...
-
RE: https://mastodon.social/@_elena/115909375706083994
Aside: this is a *major* reason why I quit Bluesky and deleted my account some months back.
I would block a baddie, and because that crap is PUBLIC on Bluesky (?!?), that basically creates a "hate list" that's easily exploitable. And of course folks were exploiting it!
If you're going to use Bluesky, strongly recommend not blocking folks unless they're specifically harassing you. And don't block big accounts, that crap can come back to haunt you.
I went the other way, and deleted my account.
@vkc This is straight up terrifying!
-
RE: https://mastodon.social/@_elena/115909375706083994
Aside: this is a *major* reason why I quit Bluesky and deleted my account some months back.
I would block a baddie, and because that crap is PUBLIC on Bluesky (?!?), that basically creates a "hate list" that's easily exploitable. And of course folks were exploiting it!
If you're going to use Bluesky, strongly recommend not blocking folks unless they're specifically harassing you. And don't block big accounts, that crap can come back to haunt you.
I went the other way, and deleted my account.
@vkc There is so much toxic crap, worldwide. I'm sorry you had to deal with any of it.
Against them. For You.
Tim -
@vkc a similar thing is true for Mastodon. the UI doesn't show it, but your server will send the other server a note saying that you blocked that user.
since you run your own server, you can get a list of who blocked you with a query like
SELECT accounts.username, accounts.domain
FROM blocks
JOIN accounts ON blocks.account_id = accounts.id
WHERE
target_account_id = (
SELECT id
FROM accounts
WHERE
username = 'vkc'
AND private_key IS NOT NULL
LIMIT 1
);this is documented, and while the official UI doesn't show it, a malicious actor could easily build tooling on their own server.
don't ask me why, I don't know either. while there probably are ui-niceties around it (mainly that the other node can make sure they don't show the user you've blocked your content), this... isn't great.
@denschub @vkc Yep, DMs or "Private mentions" on Mastodon can be exploited using a similar vector. The client can say this message should be readable only to this/these users, but you can write a client which doesn't respect the protocol and view them anyway. It's a strong argument for why DMs should probably not exist on decentralized platforms that do not or cannot use E2EE.
-
@Ember @vkc Sorry, but this has a bit of a "if you block someone and get harassed for it, it's your fault because you're on a node that's not doing a good job" vibes to me. I'd be a lot happier if we didn't provide potential footguns to people.
Also, I'm not even sure your argument works. If I'd be an instance admin wanting to do a decent job, I wouldn't even know how to protect my users. mastodon.social only has one instance blocked for blockbots according to their list, so that's not a good starting point. A lot of "decent instances" don't publicly explain why they block other instances, or don't show that info at all. If I, for example, would trust your decisions fully, I couldn't even follow your lead because you don't make server blocks publicly available. Same with Hachyderm. That also means a user couldn't evaluate block decisions before joining a server to make sure they're on a node that is "decent". In the end, it's all just vibes based, and that puts a lot of people at risk without them even knowing.
There's a ton of instances that are run by really awesome people, but they don't have the bandwidth to stay on top of the latest malicious instances all the time. And those are commonly also the kind of instances that host a lot of non-tech users, which makes this even riskier.
I get it, it's a hard problem to solve, but this is one of those many things where Mastodon puts users at risk without even telling them or allowing them to make a decision on their own. I don't like that. And if we rightfully throw shit at Bluesky, we should also at least acknowledge the limitations in our own courts.
-
RE: https://mastodon.social/@_elena/115909375706083994
Aside: this is a *major* reason why I quit Bluesky and deleted my account some months back.
I would block a baddie, and because that crap is PUBLIC on Bluesky (?!?), that basically creates a "hate list" that's easily exploitable. And of course folks were exploiting it!
If you're going to use Bluesky, strongly recommend not blocking folks unless they're specifically harassing you. And don't block big accounts, that crap can come back to haunt you.
I went the other way, and deleted my account.
@vkc alternatively, if you're going to BlueSky please block me. I don't want to know anyone that supports that platform.
-
RE: https://mastodon.social/@_elena/115909375706083994
Aside: this is a *major* reason why I quit Bluesky and deleted my account some months back.
I would block a baddie, and because that crap is PUBLIC on Bluesky (?!?), that basically creates a "hate list" that's easily exploitable. And of course folks were exploiting it!
If you're going to use Bluesky, strongly recommend not blocking folks unless they're specifically harassing you. And don't block big accounts, that crap can come back to haunt you.
I went the other way, and deleted my account.
@vkc
If you're gonna use Bluesky, don't. :) -
RE: https://mastodon.social/@_elena/115909375706083994
Aside: this is a *major* reason why I quit Bluesky and deleted my account some months back.
I would block a baddie, and because that crap is PUBLIC on Bluesky (?!?), that basically creates a "hate list" that's easily exploitable. And of course folks were exploiting it!
If you're going to use Bluesky, strongly recommend not blocking folks unless they're specifically harassing you. And don't block big accounts, that crap can come back to haunt you.
I went the other way, and deleted my account.
@vkc Could someone enlighten me on why this is bad or otherwise harmful?
-
RE: https://mastodon.social/@_elena/115909375706083994
Aside: this is a *major* reason why I quit Bluesky and deleted my account some months back.
I would block a baddie, and because that crap is PUBLIC on Bluesky (?!?), that basically creates a "hate list" that's easily exploitable. And of course folks were exploiting it!
If you're going to use Bluesky, strongly recommend not blocking folks unless they're specifically harassing you. And don't block big accounts, that crap can come back to haunt you.
I went the other way, and deleted my account.
Well done you.
I am not tech savvy enough to know why something is bad UNTIL it bites me on the ass.I know what I don't want. Anyone being harassed (you are legally required to kick Nazis in the balls - if they have any) in the future.
I do not want ads (craft items by individuals I like) but am [lobster weeps] not able to purchase presently.
I will not be going back on WAFRN developers/main forum until I am comfortable with its policy towards Bluesky. I only joined a few days ago. So no great loss. Though I really appreciated its early day capabilities. Ah Well ...
-
undefined _elena@mastodon.social shared this topic
-
RE: https://mastodon.social/@_elena/115909375706083994
Aside: this is a *major* reason why I quit Bluesky and deleted my account some months back.
I would block a baddie, and because that crap is PUBLIC on Bluesky (?!?), that basically creates a "hate list" that's easily exploitable. And of course folks were exploiting it!
If you're going to use Bluesky, strongly recommend not blocking folks unless they're specifically harassing you. And don't block big accounts, that crap can come back to haunt you.
I went the other way, and deleted my account.
Well done!
-
undefined oblomov@sociale.network shared this topic
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@tofugolem @Rojertb why not send the king the and leave it there for good?
-
HAHA @stefano is in mastodon, because he has Twitter phobia.
That just Melon Musk Tweeting about Bsd.cafe
-
For anyone who has worked in tech for a few decades it should be abundantly clear that both the main internal cost *and* the main competence of your typical US enterprise tech company is ....
Sales...Not tech...
literally 80% of what you are paying for is sales.
So if tech is any kind of strategic internal competence, it quickly becomes sensible to be much less reliant on companies who spend most of their effort selling you things you really don't need / are not in your interest
-
@daniel @ApostateEnglishman I don't develop an xmpp client so it's not a problem if phrase it like an advert, right?
I second the recommendation for XMPP, as it is properly and actively federated, with an ecosystem that encourages small, healthy, community hosted, servers (hosting one for ~20 users is about as hard, expensive and time consuming as self-hosting a static website)
-
@ben DeltaChat and #Conversations_im are significantly closer aligned in ideology than Signal and Conversations.
When it comes to protocol design and governance I still have a favorite though.
-
@jwildeboer Oof. Time to stock up under the mattress?😉
-
@Fbrzvnrnd per cortesia ho bisogno di una dritta. Vorrei creare un file epub con dei semplici disegni (degli atomi). Per far si che i disegni si adeguino alla dimensione della "pagina" devono essere vettoriali SVG? Utilizzare #inkscape? #epub
