• 1 Post
  • 172 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle




  • Reddit, and the early 2000s Internet culture that spawned it had a more absolute view of free speech than the modern consensus. Reddit’s rules were pretty much limited to:

    • Don’t post things that are actually illegal to post
    • Don’t break Reddit

    The introduction of any other sitewide rules was controversial with the userbase at the time, and not because the average user was a creep who wanted to see teenagers in bikinis. People predicted (correctly) that other topics like piracy and darknet markets would eventually end up banned as Reddit tried to become more palatable to advertisers. People remain concerned that pornography will be banned or severely limited.


    Its not that he loved the subreddit, his (and by extension reddit corp) sociopathic ass simply views all that stuff as page views

    Let’s be fair to spez; there’s plenty to criticize him for, but he did not work at Reddit between roughly 2008 and 2016 when the jailbait controversy came up.




  • If I’m reading this comment right, it’s relying on a mistaken understanding of robots.txt. It is not an instruction to the server hosting it not to serve certain robots. It’s actually a request to any robot crawling the site to limit its own behavior. Compliance is 100% voluntary on the part of the robot.

    The ability to deny certain requests from servers that self-report running a version of their software with known vulnerabilities would be useful.


  • Lemmy and other services built on ActivityPub work by sending content to every server that hosts a user who has subscribed to a community or another user. Those servers could be anything from vanilla Lemmy hosted in a datacenter to an ad-hoc, informally-specified, bug-ridden, slow implementation of half of ActivityPub running on a jailbroken smart light bulb. Most of them will be online to receive a delete request and will handle it correctly most of the time, but that cannot be guaranteed.

    Anything you share to the world that way is out in the world and cannot be reliably rescinded. Discussion groups implemented as email lists used to be popular, and the same was true there, but more so since there isn’t a mechanism intended to edit or delete an email message after it is sent. Something similar is true of anything that functions as a public website; a great many things published to the web are available from sites like archive.org, like old forum posts.



  • I’ll refrain from writing the uncharitable version of my reaction to the idea that the Fediverse should be some small, close-knit community forever and instead say that people who want small, close-knit communities based on ActivityPub are free to create them. Mastodon and other major server software supports allowlist-only federation.

    People using servers with open federation should expect that their posts will reach an ad-hoc, informally-specified, bug-ridden, slow implementation of half of ActivityPub running on a jailbroken smart light bulb, and that it will behave differently from vanilla Mastodon.



  • If you send me an image by email and I display it on a website without permission, I am violating your copyright. If we apply the same thinking to ActivityPub, then most implementations of it are illegal. Fortunately, judges usually have enough common sense to step in and say a reasonable server admin would reasonably believe they have permission to do the things the popular software actually does.

    On the other hand, if someone takes photos I’ve shared on Mastodon and sells prints of them or licenses them to a stock photo agency, they’re definitely violating my copyright, and I will sue them. Some of the other options like running ads on a server are a little more ambiguous.

    Some of the other expectations people seem to have aren’t based on law but still-evolving concepts of consent. It would be nice to be able to program systems that have some awareness of what people are OK with.


  • Somebody put up a site saying

    It Has Been X Days Since a Techbro Asshole Released a Fedi Scraper/Indexer.

    There is an extreme amount of hostility from a certain segment of the (mostly Mastodon-using) Fediverse community toward anything that does anything with Fediverse content “without consent”. Trouble is, there’s no machine-readable mechanism for determining what people have consented to in most cases, and certainly no standard for it.

    If your computer sends my computer an image and some text via ActivityPub, without any further communication, may I…

    • Put it on a website visible to the public?
    • Send it to other peoples’ computers to do the same with?
    • Search for it later?
    • Display it next to advertisements?
    • Display it on a service I charge people a fee to use?
    • Keep it after your computer asks mine to delete it?

    Some of those things are what Mastodon does normally, but could be understood as copyright violations because the protocol doesn’t transmit any licensing information. Others, like search indexing are almost certainly legal, and the protocol is silent about them, but a few people will get very angry at anyone who visibly handles them differently from Mastodon. Meanwhile, how many people are quietly running servers with search indexes that aren’t even aware of Mastodon’s new opt-in/out search features?

    Pixelfed has started attaching licenses to content, but I think we might need more sophisticated, machine-readable licenses.


  • I’m a hardliner when it comes to user control of their own devices, so I’m not going to agree with Google’s behavior here even if it, on average results in a benefit to users.

    I don’t think it provides a net benefit to users though. I think Google wants to be lazy about building spam-mitigation solutions, and wouldn’t be sad if it results in fewer users blocking ads and tracking. If Google was positioning its RCS client as a hardcore security product, maybe it should warn both sides of the conversations that there’s a risk of compromise, but even Signal, which is far more dedicated to security doesn’t do that.

    Zero-click exploits are a more common attack vector than modified operating systems in the real world, and I’d be willing to wager my up-to-date LineageOS install is less vulnerable to them than the average person’s phone.