• henfredemars@infosec.pub
    link
    fedilink
    English
    arrow-up
    125
    arrow-down
    9
    ·
    edit-2
    4 days ago

    So much for the claims I read that it would be a more open platform. I can’t see how this possibly benefits the users.

    The product is not open source and it is mainly controlled by a company through its servers and proprietary components. They own it. Even if they use some open protocols. They are about as open as OpenAI — they are not.

    • vaguerant@fedia.io
      link
      fedilink
      arrow-up
      63
      arrow-down
      2
      ·
      4 days ago

      This is technically incorrect (the best kind of incorrect?). Bluesky is open source, with the exception of the discover feed algorithm, which they claim must remain secret to prevent it being manipulated. There are open-source replacements for that feed available, so it’s open enough that it is theoretically possible to spin up a Bluesky replacement, albeit impossibly expensive.

      Coming at it from another angle though, the product in any commercial social media product is you, so in that sense you’re right: the product is not open source. Either way, open source code is not some panacea that erases all risk of commodifying its users. Bluesky is a great example because while it is open source, that in absolutely no way prevents them from tracking their users.

      • jaybone@lemmy.world
        link
        fedilink
        English
        arrow-up
        10
        ·
        4 days ago

        There’s nothing to prevent someone from spinning up a lemmy or mastodon instance and tracking users either.

          • jaybone@lemmy.world
            link
            fedilink
            English
            arrow-up
            6
            ·
            4 days ago

            Most likely. That’s if people knew about. You could do it secretly.

            Though I wonder if you were open about it, if people would accept it. Just say “hey, this instance doesn’t ask for donations, but we track and sell your info.” Maybe some users would be okay with that.

            • irelephant [he/him]🍭@lemm.ee
              link
              fedilink
              English
              arrow-up
              6
              ·
              4 days ago

              they can’t sell your info (from remote instances) without you agreeing to a privacy policy. Now, that most likely wouldn’t stop them, but it makes it harder legally.

              • jaybone@lemmy.world
                link
                fedilink
                English
                arrow-up
                5
                ·
                4 days ago

                Remote instances won’t have your IP or email, and other usage trend data. So that info could only be obtained by this hypothetical tracking instance. As for any remote content on other instances, that can just be scraped by anyone. You wouldn’t even need an account or instance to get that data.

        • vaguerant@fedia.io
          link
          fedilink
          arrow-up
          26
          ·
          4 days ago

          It’s kind of complicated. Bluesky doesn’t do anything the way the fediverse does, so a PDS isn’t a full instance, it’s just the way that your personal account interacts with the Bluesky service.

          An analogy I used in another thread about Bluesky got way too complicated, but my starting point was that if Bluesky is a swimming pool, then hosting a PDS is bringing your own personal bucket of water from home. Ultimately, you’re still feeding it all into the one big pool that Bluesky owns, at least until somebody else builds another swimming pool (puts up the money to host a fully-fledged Bluesky replacement service) and you take your bucket over there.

          On its own, the PDS doesn’t really do anything without the rest of the infrastructure behind it. You can’t go swimming in a bucket.

          • LeninsOvaries@lemmy.cafe
            link
            fedilink
            English
            arrow-up
            14
            ·
            4 days ago

            Bluesky is a trailer park. A PDS is a trailer. You can take it somewhere else, but you need somewhere to park it at night, and right now the only option is Bluesky.

          • Kichae@lemmy.ca
            link
            fedilink
            English
            arrow-up
            8
            ·
            4 days ago

            Yeah. Bluesky works way more like how people seem to imagine the fediverse does, with PDSes being glorified dumb terminals accessing a (functionally, if not forever technically) centealized pool of content. Hosting a PDS is just shouldering some of the cost of BS’s last mile.

          • Sl00k@programming.dev
            link
            fedilink
            English
            arrow-up
            6
            arrow-down
            2
            ·
            4 days ago

            This isn’t necessarily a bad thing though, it removed the complexity behind instances and federation which is primarily the reason mastodon didn’t see mass adoption.

            • Arcka@midwest.social
              link
              fedilink
              English
              arrow-up
              6
              arrow-down
              1
              ·
              4 days ago

              It isn’t federation, since not all nodes in the system have equal power (control). There is still a central authority that controls what the inferior nodes can do.

              Contrast that with email servers where you can send a message from one server to another without a more authoritative node as a required middleman.

        • irelephant [he/him]🍭@lemm.ee
          link
          fedilink
          English
          arrow-up
          10
          ·
          4 days ago

          A pds can do a lot more than people suggest, but its not very effective.

          Essentially, atproto has three distinct parts:

          • A PDS, stores your posts, user, and handles authentication
          • A relay, crawls every pds, and creates a “firehose” of data to build stuff with
          • An AppView, an app built with data from the relay. bsky.app is an appview, flushes.app is another. whtwnd.com is a blogging appview

          The relay is the main “centralised” part of the network, but its possible to use the network without it. whtwnd, for example, crawls PDSs directly, without a relay.

          There’s more to it, but thats the basics.

    • Pup Biru
      link
      fedilink
      English
      arrow-up
      25
      arrow-down
      1
      ·
      edit-2
      4 days ago

      you’re right that this is likely to be used for tracking crap, but i wouldn’t write off the concept as only for that

      for example, home assistant has https://my.home-assistant.io/ where you can set your home assistant URL and doc links (etc) link there, and then that site in turn automatically redirects to the correct place on your local home assistant

      this could be used similarly by the fediverse: imagine my.join-lemmy.org where lemmy instances you’re not logged into redirected you to, which then in turn redirects to your home instance… that way, links across the web to lemmy would automatically redirect to your home instance

      perhaps it’s not something that’s worth the trade off - centralising in some ways - but in federated platforms on the web it’s far from a write-off

    • UnderpantsWeevil@lemmy.world
      link
      fedilink
      English
      arrow-up
      18
      arrow-down
      1
      ·
      4 days ago

      So much for the claims I read that it would be a more open platform.

      There’s no profit in an open platform. You only build these things to mine data.

      • FauxLiving@lemmy.world
        link
        fedilink
        English
        arrow-up
        10
        arrow-down
        1
        ·
        4 days ago

        Exactly.

        It’s a for-profit company.

        They care about your privacy like McDonald’s cares about your health: if you have any left then they’re not squeezing cash from you hard enough.

        Talk to friends on Signal, invite your favorite The Atlantic reporter, use self-hosted or federated social networks.

        Expecting privacy on corporate owned social media is like expecting to become a royal because you went to Disney World.

        Don’t confuse the facade (social space for you and your friends/magical kingdom) with the reality (privacy stealing monetization factory/tourist juicer).

      • bishbosh@lemm.ee
        link
        fedilink
        English
        arrow-up
        6
        ·
        4 days ago

        This is further supported by the fact that story that they made more money selling their “fuck zuck” shirts or whatever, than they did in their actual money making strategies of selling unique domains.

        No VC investor is going to be okay with a merchandise company growth curve.