Well I didn’t want to have a bio, but Lemmy doesn’t let me null it out, so I guess I’ll figure out something to put here later.

  • 0 Posts
  • 33 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle

  • I would highly recommend the recent Freakonomics Radio series about whaling. It’s Episodes 549-551 and the bonus episode from 2023-08-06. If you’re firmly against killing any living creature (or at least sentient creatures), I highly doubt it will change your mind (and I don’t think that it should or that it tries to), but I also think it is really fascinating learning about the history of the whaling industry and hearing the perspective of a modern whaler in the bonus episode. Putting aside the obvious ethical issues with killing sentient creatures, it’s interesting to consider things like whether there’s a sustainable level of whaling, what a sustainable quota would look like, and how much we’re in competition with certain whale species for harvesting fish as food for our own species. I personally appreciated how unbiased Freakonomics tried to be in their discussion of the topic.








  • Personally, I think it’d be nice if you could self-host just the bridge instances and connect them with beeper yourself, so that the part that isn’t e2e encrypted is running on software you can validate and hardware you control.

    I 100% agree this would be a great solution. That’s what I thought this page was going to be at first until I kept reading and realized it’s just a config guide for the Matrix Ansible setup. I wish they didn’t say “self host Beeper” on that page at all because self hosting Matrix has absolutely nothing to do with the Beeper service other than their devs built the bridges that they’re showing you how to set up with Matrix.







  • E2EE only exists up to the bridge, not the whole way to your client

    I just want to clarify that most bridges can be set up to have E2EE between the Matrix client and the bridge (regardless of whether the bridge supports encrypted chats on the bridged service because not all do, e.g. Facebook), but it is true that the bridge itself has to decrypt and translate between Matrix and the 3rd party chat service, so as you mentioned trusting who hosts bridges or doing it yourself is really important.




  • Yeah, the defederation metaphor falls apart as you described because subscriptions to communities requires two way communication, which isn’t going to happen because beehaw isn’t going to acknowledge subscription requests from instances it’s blocked. Instances blocked by beehaw would probably have to do the same type of thing Threads or Mastodon users would have to do to bring in Lemmy content by manually bringing it in via searching the federation link.


  • You can run headless or do what the person I was responding to recommended and put it behind an authenticated portal, but that’s not really going to stop other instances and clients from accessing the same resources that op is hoping to limit access to except in the most basic case of people casually browsing op’s Lemmy instance through op’s own lemmy-ui.

    Edit, but to be clear, what I was responding to and my response didn’t directly address op’s specific concern (which I kind of misunderstood myself before just now rereading) that outside/guest users shouldn’t be able to search for communities from other instances and I think it’s a fair concern because just searching for a community from another instance brings in posts and could be a vector for spam/abuse.


  • Wouldn’t this do basically nothing to prevent a 3rd party client from browsing your instance without authentication? I don’t know that there’s much that can really be done about this because you need open APIs for other instances to be able to access the content of your instance in order to make federation possible. That said, it’s an important consideration that anybody running a single person instance should consider. If you run a single person instance, people can learn a lot about you just by seeing which communities are available on your instance. The only way to obfuscate your actual interests is to have a dummy account subscribe to all the top communities on the biggest instances. (Which, honestly, this isn’t a bad strategy to employ anyway if you’re wanting a fresh All feed).