I'm coming to the conclusion that community-owned and operated small clouds (co-ops) with easy onramps for self-hosting open source services like mail, storage, and VPN are the only way forward.
-
@mttaggart Keeping this from just making groups easier to target will be... interesting, I expect.
@d_rift Maybe, but it's not like the big corpos are doing great with their many-egged baskets. And it's never been easier to deploy with reasonable security baselines.
-
@mttaggart @ireneista - this is something I very much want to do, for #CambridgeUK. Finding it harder to get started (find other local people who are interested) than I thought though.
@philcowans @mttaggart @ireneista
I think the dilemma is accountability/liability - what happens when one of your users does something that results in cops/feds demanding user data (or even seizing an entire server?)
Here in England it seems possible to get nicked for harmless protests and now there's the paranoia about "keeping kids safe"
How many people with a good career and salary in tech are going to risk it for the sake of someone /elses/ freedom, if they aren't making money from the venture?
This could maybe limit involvement to folk who are retired with good savings and less to lose (its already happening with the demographics of protesters)
(that goes for all the current VPN and hosting companies too and is their Achilles Heel).
-
Not for nothing but I've written a very well-regarded guide on home labs if you want to get started.
@mttaggart any suggestion on home labbing (two b's?) in this era of crazy hardware prices?
-
@mttaggart any suggestion on home labbing (two b's?) in this era of crazy hardware prices?
@brahms The book does, yeah!
-
@brahms The book does, yeah!
@mttaggart I wanted to buy it anyway, now you double-sold
-
@philcowans @mttaggart @ireneista
I think the dilemma is accountability/liability - what happens when one of your users does something that results in cops/feds demanding user data (or even seizing an entire server?)
Here in England it seems possible to get nicked for harmless protests and now there's the paranoia about "keeping kids safe"
How many people with a good career and salary in tech are going to risk it for the sake of someone /elses/ freedom, if they aren't making money from the venture?
This could maybe limit involvement to folk who are retired with good savings and less to lose (its already happening with the demographics of protesters)
(that goes for all the current VPN and hosting companies too and is their Achilles Heel).
@vfrmedia @mttaggart @ireneista - this is something to be figured out, but I'm willing to spend some time doing that. Ideally there'd be some kind of network of local co-ops to share best practice in each jurisdiction.
-
@philcowans @mttaggart @ireneista
I think the dilemma is accountability/liability - what happens when one of your users does something that results in cops/feds demanding user data (or even seizing an entire server?)
Here in England it seems possible to get nicked for harmless protests and now there's the paranoia about "keeping kids safe"
How many people with a good career and salary in tech are going to risk it for the sake of someone /elses/ freedom, if they aren't making money from the venture?
This could maybe limit involvement to folk who are retired with good savings and less to lose (its already happening with the demographics of protesters)
(that goes for all the current VPN and hosting companies too and is their Achilles Heel).
@vfrmedia @philcowans @mttaggart well, you find a solid lawyer as one of your first steps...
but yes, it's a significant barrier to entry
-
@mttaggart I wanted to buy it anyway, now you double-sold
@brahms Thanks! But also, I will just say it's absolutely brutal out there. eBay, Amazon refurb, Savemyserver, and GovDeals (US) are probably the best bets.
-
@vfrmedia @mttaggart @ireneista - this is something to be figured out, but I'm willing to spend some time doing that. Ideally there'd be some kind of network of local co-ops to share best practice in each jurisdiction.
@philcowans @vfrmedia @mttaggart that does sound like the right solution
-
I'm coming to the conclusion that community-owned and operated small clouds (co-ops) with easy onramps for self-hosting open source services like mail, storage, and VPN are the only way forward. Every corpo service is eventually going to make you ashamed to use it.
@mttaggart personally, I'd like to start a cooperatively owned Mastodon instance where ownership costs pay for infra, admin, and moderation, with owners all having a voice in operation, governance, and direction. Trying to find models as alternatives to benevolent third parties and pleading for donations.
-
@mttaggart personally, I'd like to start a cooperatively owned Mastodon instance where ownership costs pay for infra, admin, and moderation, with owners all having a voice in operation, governance, and direction. Trying to find models as alternatives to benevolent third parties and pleading for donations.
-
@vfrmedia @philcowans @mttaggart well, you find a solid lawyer as one of your first steps...
but yes, it's a significant barrier to entry
@ireneista @philcowans @mttaggart
I think even a basic hosting service for community organisations /could/ work, but you'd have to set clear boundaries on what it can and can't be used for *and* enforce them - (after all you wouldn't want the local Reform/Restore Britain group or the equivalent in other areas making use of the resources, or its no better than what Mullvad and others are doing and claiming its "free speech")
-
@vfrmedia @philcowans @mttaggart well, you find a solid lawyer as one of your first steps...
but yes, it's a significant barrier to entry
@ireneista @vfrmedia @philcowans It's why you need a legal entity in front of individuals to mitigate liability. But there are costs
And it's a trade-off. You're paying for conscience and choice with risk.
-
@ireneista @philcowans @mttaggart
I think even a basic hosting service for community organisations /could/ work, but you'd have to set clear boundaries on what it can and can't be used for *and* enforce them - (after all you wouldn't want the local Reform/Restore Britain group or the equivalent in other areas making use of the resources, or its no better than what Mullvad and others are doing and claiming its "free speech")
@vfrmedia @philcowans @mttaggart content policy enforcement is a trap though, if you build a mechanism it will be used against you
-
@vfrmedia @philcowans @mttaggart content policy enforcement is a trap though, if you build a mechanism it will be used against you
@vfrmedia @philcowans @mttaggart what we're hoping is of course that knowing the people involved is some sort of solution, but there's a specific type of adversarial modeling we'd need to work through, for how that sort of thing plays out after the usual asshat bad-faith bullshit and a few rounds of legal threats
-
@ireneista @vfrmedia @philcowans It's why you need a legal entity in front of individuals to mitigate liability. But there are costs
And it's a trade-off. You're paying for conscience and choice with risk.
@mttaggart @ireneista @philcowans
There's a similar discussion about this here and the issues involved (at least from a USA perspective)
-
@mttaggart any suggestion on home labbing (two b's?) in this era of crazy hardware prices?
@brahms @mttaggart you can do more than you think with old desktop hardware and 16 gigs of DDR4 RAM. It is also much more energy efficient than server hardware (and much quieter too)
-
@brahms @mttaggart you can do more than you think with old desktop hardware and 16 gigs of DDR4 RAM. It is also much more energy efficient than server hardware (and much quieter too)
@ithoughtisawa2 @brahms Absolutely, especially for individuals or families. When you need to guarantee reliability for a community, things do get more complicated if you're doing it right.
-
@mttaggart I love that. Need to do some more research, but would love to get involved with making a US, or even US regional version of this happen.
-
@vfrmedia @philcowans @mttaggart what we're hoping is of course that knowing the people involved is some sort of solution, but there's a specific type of adversarial modeling we'd need to work through, for how that sort of thing plays out after the usual asshat bad-faith bullshit and a few rounds of legal threats
@ireneista @vfrmedia @philcowans I don't have the full answer but for sure a component is that small services can and should show bad actors the door with haste.
