Conversation

Notices

1. :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 18:09:03 CEST :crash: The_Gibson :crash:

   Remote profile options...

   So, what's the method to deal with the #eunomia threat, anybody got one?

   I assume the first step is defederating from mastodon.social?

   What about advertising to move people off mastodon.social?

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 18:15:54 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • dublinux

     @dublinux

     Believe it or not, I am all about a level headed approach.

     This doesn't look good though.

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 18:16:46 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • sungo

     @sungo

     Yeah, I mean the real issue here is the insecure nature of all social networks.

   • Michael W (Warren) Lucas (mwlucas@bsd.network)'s status on Monday, 08-Apr-2019 18:20:37 CEST Michael W (Warren) Lucas

     Remote profile options...

     • sungo

     @sungo @thegibson

     300K accounts, yes.

     Many folks use m.s as an entry point. Once we understand the fediverse, we jump off to form our own enclaves.

     I'd like to see someone start another obvious entry point, explicitly labeled as a "learn the fediverse, find your tribe, and move on to make room for others."

     The Doctor repeated this.
   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 18:23:00 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • sungo

     @sungo

     3xcept the entire federation is potentially threatened... not just mastodon.

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 18:36:34 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • Michael W (Warren) Lucas
     • sungo
     • Lord Bowlich

     @lordbowlich @sungo @mwlucas

     Because in the past when we open it up, we got bad faith actors trying to override/poison the community.

     At least that was last year here at H.town.

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 18:38:42 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • Random Geek

     @randomgeek

     I'm not sure that the code would matter... it is trivial to setup an instance and Hoover up data from everywhere.

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 18:39:28 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • Michael W (Warren) Lucas
     • sungo
     • Lord Bowlich

     @sungo @lordbowlich @mwlucas

     At least since I've known of IRC.... which is since like 1993.

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 18:47:13 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • Michael W (Warren) Lucas
     • sungo
     • Lord Bowlich

     @sungo @mwlucas @lordbowlich

     All they have to do here is ask.

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 18:52:58 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • Michael W (Warren) Lucas
     • sungo
     • Lord Bowlich

     @sungo @mwlucas @lordbowlich

     Points!

   • peter hessler @openbsd (phessler@bsd.network)'s status on Monday, 08-Apr-2019 20:12:35 CEST peter hessler @openbsd

     Remote profile options...

     in reply to

     @thegibson sigh. what's going on now?

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 20:44:43 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • peter hessler @openbsd

     @phessler

     https://eunomia.social/usecases

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 20:46:02 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • Buckaroo Fullerene
     • peter hessler @openbsd

     @gedvondur @phessler

     https://eunomia.social

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 20:50:23 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • Buckaroo Fullerene

     @gedvondur

     Eugen is on it's board of founders.

     Not that it is necessarily a problem... until he bakes it in.

   • peter hessler @openbsd (phessler@bsd.network)'s status on Monday, 08-Apr-2019 20:51:16 CEST peter hessler @openbsd

     Remote profile options...

     in reply to

     • Buckaroo Fullerene

     @thegibson @gedvondur thanks, then I can click on "use cases" and look.

     Don't forget to scroll, because there is a bunch of lazy loading bullshit.

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 20:52:53 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • Buckaroo Fullerene

     @gedvondur

     I am largely with you.

     I have been saying for some time that this platform is essentially insecure.

     It is trivial to gather information from it.

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 20:56:22 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • 18446744073709551616

     @koenaro

     The official word is that it won't be a code thing.

   • bill (bill@bsd.network)'s status on Monday, 08-Apr-2019 21:19:13 CEST bill

     Remote profile options...

     in reply to

     @thegibson
     I just read the project management report for Eunomia. They are targeting any platform open to activity pub. This includes diaspora, and media sharing sites. They are also targeting linkedin.

     So... they are attacking the protocol.

     One solution would be to migrate to a more private protocol/platform. Zot6 is more privacy focused. There may be others.
     https://zotlabs.com/

     That isn't the only solution, and I'm sure others have better examples.

     :crash: The_Gibson :crash: repeated this.
   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 23:12:43 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • Still Andrew (I guess)
     • Michael W (Warren) Lucas
     • sungo
     • Lord Bowlich

     @ajroach42 @sungo @lordbowlich @mwlucas

     Still AP, right?

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Monday, 08-Apr-2019 23:13:07 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • bill
     • Piles of Wafers

     @electricsand @bill

     That is an indicator.

   • Radical Edward (radicaledward@hackers.town)'s status on Monday, 08-Apr-2019 23:23:56 CEST Radical Edward

     Remote profile options...

     in reply to

     @thegibson Brings to mind the walkaway net in the book Walkaway. The openess is a feature even though they know bad actors will take advantage of that.

     :crash: The_Gibson :crash: repeated this.
   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Tuesday, 09-Apr-2019 00:20:26 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • Nate Cull

     @natecull

     Eunomia.social expressly calls itself a social credit scoring system.

     I don't know that it's just a survey.

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Tuesday, 09-Apr-2019 00:26:47 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • Nate Cull

     @natecull

     Same.

   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Tuesday, 09-Apr-2019 01:02:38 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • Still Andrew (I guess)
     • Michael W (Warren) Lucas
     • sungo
     • dude
     • Lord Bowlich

     @dude @ajroach42 @sungo @lordbowlich @mwlucas

     AP will still land you in their grasp...

   • dude (dude@take.iteasy.club)'s status on Tuesday, 09-Apr-2019 01:08:12 CEST dude

     Remote profile options...

     in reply to

     • Still Andrew (I guess)
     • Michael W (Warren) Lucas
     • sungo
     • Lord Bowlich
     @thegibson indeed. Recall AP is a thing because of Eugen. He moved on there after he managed to break most of the OStatus network. This isn't meant to be a secure protocol. People trying to take it there (ie by introducing things like federated dm's don't understand the technology let alone opsec). The HUGE difference is the behaviour of the development team compared to Eugen's BDFL model. @ajroach42 @sungo @lordbowlich @mwlucas
     :crash: The_Gibson :crash: repeated this.
   • :crash: The_Gibson :crash: (thegibson@hackers.town)'s status on Tuesday, 09-Apr-2019 01:35:14 CEST :crash: The_Gibson :crash:

     Remote profile options...

     • Cathal Garvey

     @cathal

     OK.

     So we don't sell it in the EU?

   • Cathal Garvey (cathal@octodon.social)'s status on Tuesday, 09-Apr-2019 01:38:42 CEST Cathal Garvey

     Remote profile options...

     in reply to

     @TheGibson More than that. Unless you can certify that a member is not EU based, you may have to just ban all EU people. Because if you fuck up and infringe an EU person's GDPR rights you could start getting hit with those murderous fines.
     And, some sites have done so: banned EU citizens. That's fine. Would Mastodon.social? I strongly doubt it could be done.
     Also: how does federation interact with GDPR? Would they have to ignore incoming toots in case they were GDPR-covered? 🤷♂️

     :crash: The_Gibson :crash: repeated this.
   • professional rando wanker (jeff@social.i2p.rocks)'s status on Tuesday, 09-Apr-2019 04:02:00 CEST professional rando wanker

     Remote profile options...

     • professional rando wanker
     • dude
     @dude @thegibson yes YES omg this join the onion federation OMfG