ShittyKopper@lemmy.blahaj.zone 10 months ago
just want to clarify something:
However, the way that activitypub works, the outgoing data is publicly available. Defederating with Meta doesn’t prevent that,
there is a technical solution to this in the form of authorized fetch: hub.sunny.garden/…/what-does-authorized_fetch-act…
mastodon implements it, pleroma/akkoma probably implements it, pixelfed implements it, firefish and iceshrimp implement it (sharkey has a PR implementing it opened just today), gotosocial not only implements it but enforces it, with no ability to turn it off
notably, none of the threadiverse software implement it, and no software other than the aforementioned gotosocial enable it by default.
Meta could be running a completely ordinary Mastodon or Lemmy server and monitoring data through that. Or they're using the API of some ordinary server. Or they're simply scraping the web directly.
I can understand using stuff like Authorized Fetch to control bandwidth, but this obsession with hiding data that has been explicitly posted on a public forum is frankly kind of weird.
Interesting thank you
I also saw something about Pixelfed adding stuff to help (just a few hours ago?)
Carighan@lemmy.world 10 months ago
Yeah but the point was probably more that if they just want the data, they can already trivially scrape it from any federated server, and finding one that allows them to scrape would not be difficult given the nature of federation.
ShittyKopper@lemmy.blahaj.zone 10 months ago
you can disable the webpage and unauthorized API if you so choose. mastodon and pleroma/akkoma provide these settings. gotosocial hides all unlisted posts from public pages.
authorized fetch only provides protection for activitypub, it’s just a single component of a layered stack of protection you can enable depending on your exact threat model.
the privacy threat model of Lemmy is significantly different from a microblog, which is the current target of threads.
(also have none of you heard of consent?)
FaceDeer@kbin.social 10 months ago
If you're going to disable the web page and prevent API usage, why are you even running a Federated server to begin with? It seems to be missing the whole point of the protocol to be trying to use it as a private forum or instant messenger, there are other projects far better suited to that sort of thing.
Have you not heard of public speech? When you stand on a street corner and shout your opinions to the world you can't expect everyone wandering past to seek out your explicit consent before they can hear you. Posting on a public forum means you are deliberately putting your words out where vast numbers of random people can see them. Yes, even Meta.
If you don't want that to be the case then this is probably not the right protocol to be using in the first place.