Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)O
Posts
13
Comments
30
Joined
3 yr. ago

  • Personally I think we should add a differentiation between the storage policies of content which is owned by your own instance and content that federates from other instances.

    The former should be kept for a long time (forever?), while the latter can be cleared more regularly.

  • Really? Is there any evidence for this? I imagine they’d be open to huge lawsuits if they were exposing user data to any other parties.

  • I toss my KeePass file (encrypted database) in Google Drive.

    That way I have all the convenience of syncing through the cloud, but I also get the benefit of having my database access and database storage be managed by separate companies.

    If Google has a breach and my data gets leaked, sucks, but the database is encrypted so I’m good. If KeePass encryption is broken, sucks, but attackers would also have to find a way to gain access to my Google Drive.

  • You’re welcome! Hope it’s useful :)

  • Thanks for calling this out! Fixed, I hope. Wasn’t intentional.

  • Honestly, I’m interested to see how the federation handles this problem. Thank you for all the attention you’re bringing to it.

    My fear is that we might overcorrect by becoming too defederation-happy, which is a fear it seems that you share. However I disagree with your assertion that the federation model is more risky than conventional Reddit-like models. Instance owners have just as many tools (more, in fact) as Reddit does to combat bots on their instance. Plus we have the nuke-from-orbit defederation option.

    Since it seems like most of these bots are coming from established instances (rather than spoofing their own), I agree with you that the right approach seems to be for instance mods to maintain stricter signups (captcha, email verification, application, or other original methods). My hope is that federation will naturally lead to a “survival of the fittest” where more bot-ridden instances will copy the methods of the less bot-ridden instances.

    I think an instance should only consider defederation if it’s already being plagued by bot interference from a particular instance. I don’t think defederation should be a pre-emptive action.

  • Agreed from a technical standpoint.

    But the implications are still interesting. One might (big might) trust Reddit as an organization not to use this data for evil, but with federation, there’s nothing stopping an instance from simply releasing all users’ voting history to be public.

    Of course, my instance didn’t even ask for an email to sign up, so my entire account is anonymous that way.

    I wonder if there are technical ways to federate votes anonymously?