Skip to content
  • Hjem
  • Seneste
  • Etiketter
  • Populære
  • Verden
  • Bruger
  • Grupper
Temaer
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Kollaps
FARVEL BIG TECH
  1. Forside
  2. Ikke-kategoriseret
  3. My comments are littered with folks asking "why is it a problem if your blocklist is public on Bluesky?"

My comments are littered with folks asking "why is it a problem if your blocklist is public on Bluesky?"

Planlagt Fastgjort Låst Flyttet Ikke-kategoriseret
37 Indlæg 22 Posters 0 Visninger
  • Ældste til nyeste
  • Nyeste til ældste
  • Most Votes
Svar
  • Svar som emne
Login for at svare
Denne tråd er blevet slettet. Kun brugere med emne behandlings privilegier kan se den.
  • vkc@linuxmom.netV vkc@linuxmom.net

    To be clear, I don't trust Fedi to handle this information with care, either. Difference being that on Fedi, your mods aren't some VC/blockchain-funded corporate entity. They're often enough your friends, your neighbors, or yourself.

    While there are certain database-related exploits which can be used to pull a blocklist, often enough that's a challenge for a typical layperson with an axe to grind. And it's an incomplete picture thanks to the quirks of federation. Not so on Bluesky.

    vkc@linuxmom.netV This user is from outside of this forum
    vkc@linuxmom.netV This user is from outside of this forum
    vkc@linuxmom.net
    wrote sidst redigeret af
    #8

    I'm not going to talk about Bluesky anymore for a bit, but I know folks are coming back here after hanging out there for a while, and I want to encourage Fedi users not to gloat, not to be jerks about it.

    And if you're just (re)joining us on Fedi, like all affinity groups, you're going to run into enthusiasts who are gloating, but I promise most of us are just happy you're here and want to help make this place awesome for you. ❤

    chrislowles@mastodon.socialC paco@infosec.exchangeP knowprose@mastodon.socialK ve2uwy@mastodon.radioV libreleah@mas.toL 5 Replies Last reply
    0
    • vkc@linuxmom.netV vkc@linuxmom.net

      My comments are littered with folks asking "why is it a problem if your blocklist is public on Bluesky?"

      I'm glad you asked.

      "Who you block" is a reasonable indicator of your personal alignments. If you block TERFs, you're likely trans-friendly, if not trans yourself. If you block white supremacists, you're likely in support of multiculturalism.

      If you block government entities, well, you know how this goes.

      Do I trust Bluesky to handle that information with care? Hell no.

      k_rey_c@social.coopK This user is from outside of this forum
      k_rey_c@social.coopK This user is from outside of this forum
      k_rey_c@social.coop
      wrote sidst redigeret af
      #9

      @vkc It's the "is metadata data" question. https://ssd.eff.org/module/why-metadata-matters

      1 Reply Last reply
      0
      • vkc@linuxmom.netV vkc@linuxmom.net

        I'm not going to talk about Bluesky anymore for a bit, but I know folks are coming back here after hanging out there for a while, and I want to encourage Fedi users not to gloat, not to be jerks about it.

        And if you're just (re)joining us on Fedi, like all affinity groups, you're going to run into enthusiasts who are gloating, but I promise most of us are just happy you're here and want to help make this place awesome for you. ❤

        chrislowles@mastodon.socialC This user is from outside of this forum
        chrislowles@mastodon.socialC This user is from outside of this forum
        chrislowles@mastodon.social
        wrote sidst redigeret af
        #10

        @vkc yerp

        1 Reply Last reply
        0
        • vkc@linuxmom.netV vkc@linuxmom.net

          I'm not going to talk about Bluesky anymore for a bit, but I know folks are coming back here after hanging out there for a while, and I want to encourage Fedi users not to gloat, not to be jerks about it.

          And if you're just (re)joining us on Fedi, like all affinity groups, you're going to run into enthusiasts who are gloating, but I promise most of us are just happy you're here and want to help make this place awesome for you. ❤

          paco@infosec.exchangeP This user is from outside of this forum
          paco@infosec.exchangeP This user is from outside of this forum
          paco@infosec.exchange
          wrote sidst redigeret af
          #11

          @vkc I totally agree. I'm trying to be extra nice to the n00bs. If we want them to feel happy and welcome, then we need to do things that make them feel happy and welcome.

          1 Reply Last reply
          0
          • vkc@linuxmom.netV vkc@linuxmom.net

            I'm not going to talk about Bluesky anymore for a bit, but I know folks are coming back here after hanging out there for a while, and I want to encourage Fedi users not to gloat, not to be jerks about it.

            And if you're just (re)joining us on Fedi, like all affinity groups, you're going to run into enthusiasts who are gloating, but I promise most of us are just happy you're here and want to help make this place awesome for you. ❤

            knowprose@mastodon.socialK This user is from outside of this forum
            knowprose@mastodon.socialK This user is from outside of this forum
            knowprose@mastodon.social
            wrote sidst redigeret af
            #12

            @vkc well, if they smell funny I might say something. I reserve that right. 🤣

            1 Reply Last reply
            0
            • vkc@linuxmom.netV vkc@linuxmom.net

              My comments are littered with folks asking "why is it a problem if your blocklist is public on Bluesky?"

              I'm glad you asked.

              "Who you block" is a reasonable indicator of your personal alignments. If you block TERFs, you're likely trans-friendly, if not trans yourself. If you block white supremacists, you're likely in support of multiculturalism.

              If you block government entities, well, you know how this goes.

              Do I trust Bluesky to handle that information with care? Hell no.

              luuk_aalders@mastodon.nlL This user is from outside of this forum
              luuk_aalders@mastodon.nlL This user is from outside of this forum
              luuk_aalders@mastodon.nl
              wrote sidst redigeret af
              #13

              @vkc

              I already had my doubts but when ICE was accepted, I left immediately!

              1 Reply Last reply
              0
              • vkc@linuxmom.netV vkc@linuxmom.net

                My comments are littered with folks asking "why is it a problem if your blocklist is public on Bluesky?"

                I'm glad you asked.

                "Who you block" is a reasonable indicator of your personal alignments. If you block TERFs, you're likely trans-friendly, if not trans yourself. If you block white supremacists, you're likely in support of multiculturalism.

                If you block government entities, well, you know how this goes.

                Do I trust Bluesky to handle that information with care? Hell no.

                growfediverse@dillyofapickle.comG This user is from outside of this forum
                growfediverse@dillyofapickle.comG This user is from outside of this forum
                growfediverse@dillyofapickle.com
                wrote sidst redigeret af
                #14
                @vkc This is honestly why I prefer fedi tech that lets me "bin" people on the receiving side, such as Friendica. Everyone i choose to goes into buckets that I can choose to view (or avoid) as I see fit, with labels that only make sense to me. Even if you get at my meta data, it's not easily clear why some fedi profiles are in the bucket "Orthopedic" and some are in "Birb Feeder" or "WhatPlantsCrave" and so on and so on. I've blocked you but you'll never know it, screaming into one of the voids.
                1 Reply Last reply
                0
                • niko@social.nikopoikulainen.fiN niko@social.nikopoikulainen.fi

                  @vkc And if it's public, it's not handled with care.

                  crazyeddie@mastodon.socialC This user is from outside of this forum
                  crazyeddie@mastodon.socialC This user is from outside of this forum
                  crazyeddie@mastodon.social
                  wrote sidst redigeret af
                  #15

                  @niko @vkc I mean...

                  It's not.

                  What you post to your PDS is public. The updates to it go to the "firehose", which is this public stream of updates. App views then take that information and filter it and crap. There's some other stuff going on here but this is pretty much it.

                  So your block list is a request to these views to not show your public posts to certain people.

                  If you are expecting more than that you are quite mistaken.

                  Don't put sensitive info on social media.

                  niko@social.nikopoikulainen.fiN 1 Reply Last reply
                  0
                  • vkc@linuxmom.netV vkc@linuxmom.net

                    My comments are littered with folks asking "why is it a problem if your blocklist is public on Bluesky?"

                    I'm glad you asked.

                    "Who you block" is a reasonable indicator of your personal alignments. If you block TERFs, you're likely trans-friendly, if not trans yourself. If you block white supremacists, you're likely in support of multiculturalism.

                    If you block government entities, well, you know how this goes.

                    Do I trust Bluesky to handle that information with care? Hell no.

                    thepolishdispatch@mstdn.socialT This user is from outside of this forum
                    thepolishdispatch@mstdn.socialT This user is from outside of this forum
                    thepolishdispatch@mstdn.social
                    wrote sidst redigeret af
                    #16

                    @vkc As a European I would 'wear' such public blocks as a badge of honour, but I am not on bluesky.

                    1 Reply Last reply
                    0
                    • vkc@linuxmom.netV vkc@linuxmom.net

                      My comments are littered with folks asking "why is it a problem if your blocklist is public on Bluesky?"

                      I'm glad you asked.

                      "Who you block" is a reasonable indicator of your personal alignments. If you block TERFs, you're likely trans-friendly, if not trans yourself. If you block white supremacists, you're likely in support of multiculturalism.

                      If you block government entities, well, you know how this goes.

                      Do I trust Bluesky to handle that information with care? Hell no.

                      adamshostack@infosec.exchangeA This user is from outside of this forum
                      adamshostack@infosec.exchangeA This user is from outside of this forum
                      adamshostack@infosec.exchange
                      wrote sidst redigeret af
                      #17

                      @vkc When you say “do I trust” I’m pretty sure they’re public; they’re aggregated on https://clearsky.app/.

                      vkc@linuxmom.netV 1 Reply Last reply
                      0
                      • crazyeddie@mastodon.socialC crazyeddie@mastodon.social

                        @niko @vkc I mean...

                        It's not.

                        What you post to your PDS is public. The updates to it go to the "firehose", which is this public stream of updates. App views then take that information and filter it and crap. There's some other stuff going on here but this is pretty much it.

                        So your block list is a request to these views to not show your public posts to certain people.

                        If you are expecting more than that you are quite mistaken.

                        Don't put sensitive info on social media.

                        niko@social.nikopoikulainen.fiN This user is from outside of this forum
                        niko@social.nikopoikulainen.fiN This user is from outside of this forum
                        niko@social.nikopoikulainen.fi
                        wrote sidst redigeret af
                        #18

                        @crazyeddie @vkc Even a block list can tell a lot. It's not just about what you don't want others to see, but also what you don't want to see yourself.

                        crazyeddie@mastodon.socialC 1 Reply Last reply
                        0
                        • adamshostack@infosec.exchangeA adamshostack@infosec.exchange

                          @vkc When you say “do I trust” I’m pretty sure they’re public; they’re aggregated on https://clearsky.app/.

                          vkc@linuxmom.netV This user is from outside of this forum
                          vkc@linuxmom.netV This user is from outside of this forum
                          vkc@linuxmom.net
                          wrote sidst redigeret af
                          #19

                          @adamshostack it is public, I said that in the first sentence of my post!

                          The point I'm making is that I could imagine Bluesky cooperating with authorities or advertisers in providing additional metadata well beyond the public data, and this could be used for nefarious purposes.

                          adamshostack@infosec.exchangeA 1 Reply Last reply
                          0
                          • niko@social.nikopoikulainen.fiN niko@social.nikopoikulainen.fi

                            @crazyeddie @vkc Even a block list can tell a lot. It's not just about what you don't want others to see, but also what you don't want to see yourself.

                            crazyeddie@mastodon.socialC This user is from outside of this forum
                            crazyeddie@mastodon.socialC This user is from outside of this forum
                            crazyeddie@mastodon.social
                            wrote sidst redigeret af
                            #20

                            @niko @vkc If you just don't want to see it then that's what mute is for. It's possible to provide that feature without it being public and it apparently does that in bluesky.

                            Mastodon does the very same thing. Mute is just for you. Block also informs the user and won't let them see what you post. This is at least partially public because servers have to know to do this for you. If you are on an openly federating server then you are probably exposed here.

                            Were you properly informed?

                            vkc@linuxmom.netV niko@social.nikopoikulainen.fiN 2 Replies Last reply
                            0
                            • crazyeddie@mastodon.socialC crazyeddie@mastodon.social

                              @niko @vkc If you just don't want to see it then that's what mute is for. It's possible to provide that feature without it being public and it apparently does that in bluesky.

                              Mastodon does the very same thing. Mute is just for you. Block also informs the user and won't let them see what you post. This is at least partially public because servers have to know to do this for you. If you are on an openly federating server then you are probably exposed here.

                              Were you properly informed?

                              vkc@linuxmom.netV This user is from outside of this forum
                              vkc@linuxmom.netV This user is from outside of this forum
                              vkc@linuxmom.net
                              wrote sidst redigeret af
                              #21

                              @crazyeddie @niko a big difference here is that on Fedi, the block informs *your server* and *the other server*, but on Bluesky, it informs *everyone* because it's centralized.

                              An end user has to be pretty smart to exploit that via Mastodon, and it'll be incomplete because of federation/defederation. On Bluesky, it's trivial and complete.

                              crazyeddie@mastodon.socialC wraithe@mastodon.socialW 2 Replies Last reply
                              0
                              • crazyeddie@mastodon.socialC crazyeddie@mastodon.social

                                @niko @vkc If you just don't want to see it then that's what mute is for. It's possible to provide that feature without it being public and it apparently does that in bluesky.

                                Mastodon does the very same thing. Mute is just for you. Block also informs the user and won't let them see what you post. This is at least partially public because servers have to know to do this for you. If you are on an openly federating server then you are probably exposed here.

                                Were you properly informed?

                                niko@social.nikopoikulainen.fiN This user is from outside of this forum
                                niko@social.nikopoikulainen.fiN This user is from outside of this forum
                                niko@social.nikopoikulainen.fi
                                wrote sidst redigeret af
                                #22

                                @crazyeddie @vkc I didn't know that, but makes sense. Nice little OSINT trick! To me, it doesn't matter as much it probably does to someone else. I guess I've been lucky (or just privileged).

                                1 Reply Last reply
                                0
                                • vkc@linuxmom.netV vkc@linuxmom.net

                                  My comments are littered with folks asking "why is it a problem if your blocklist is public on Bluesky?"

                                  I'm glad you asked.

                                  "Who you block" is a reasonable indicator of your personal alignments. If you block TERFs, you're likely trans-friendly, if not trans yourself. If you block white supremacists, you're likely in support of multiculturalism.

                                  If you block government entities, well, you know how this goes.

                                  Do I trust Bluesky to handle that information with care? Hell no.

                                  atthenius@fediscience.orgA This user is from outside of this forum
                                  atthenius@fediscience.orgA This user is from outside of this forum
                                  atthenius@fediscience.org
                                  wrote sidst redigeret af
                                  #23

                                  @vkc

                                  Is there a collection of national rules on this topic? Are servers hosted in some states more protected than others?

                                  1 Reply Last reply
                                  0
                                  • vkc@linuxmom.netV vkc@linuxmom.net

                                    @adamshostack it is public, I said that in the first sentence of my post!

                                    The point I'm making is that I could imagine Bluesky cooperating with authorities or advertisers in providing additional metadata well beyond the public data, and this could be used for nefarious purposes.

                                    adamshostack@infosec.exchangeA This user is from outside of this forum
                                    adamshostack@infosec.exchangeA This user is from outside of this forum
                                    adamshostack@infosec.exchange
                                    wrote sidst redigeret af
                                    #24

                                    @vkc Oops, thought you were implying that if they didn't keep the blocklists private... sorry!

                                    1 Reply Last reply
                                    0
                                    • vkc@linuxmom.netV vkc@linuxmom.net

                                      My comments are littered with folks asking "why is it a problem if your blocklist is public on Bluesky?"

                                      I'm glad you asked.

                                      "Who you block" is a reasonable indicator of your personal alignments. If you block TERFs, you're likely trans-friendly, if not trans yourself. If you block white supremacists, you're likely in support of multiculturalism.

                                      If you block government entities, well, you know how this goes.

                                      Do I trust Bluesky to handle that information with care? Hell no.

                                      terrasays@mastodon.socialT This user is from outside of this forum
                                      terrasays@mastodon.socialT This user is from outside of this forum
                                      terrasays@mastodon.social
                                      wrote sidst redigeret af
                                      #25

                                      @vkc

                                      Been using Mastodon off an on for some time. Spent some time on BS and felt icky. It stinks of corporate surveillance infrastructure.

                                      1 Reply Last reply
                                      0
                                      • vkc@linuxmom.netV vkc@linuxmom.net

                                        @crazyeddie @niko a big difference here is that on Fedi, the block informs *your server* and *the other server*, but on Bluesky, it informs *everyone* because it's centralized.

                                        An end user has to be pretty smart to exploit that via Mastodon, and it'll be incomplete because of federation/defederation. On Bluesky, it's trivial and complete.

                                        crazyeddie@mastodon.socialC This user is from outside of this forum
                                        crazyeddie@mastodon.socialC This user is from outside of this forum
                                        crazyeddie@mastodon.social
                                        wrote sidst redigeret af
                                        #26

                                        @vkc @niko It's actually the decentralized and modular design of the architecture that means it informs everyone. If it were centralized it could avoid making the block list public.

                                        The fact that everything you post goes to a PDS that then sends all updates to a "firehose" of information is what does the AT protocol bad here.

                                        Blacksky seem to be planning to plan to do something about this maybe. They want PDS that will limit output to just blacksky. Then it would be more like fedi here.

                                        1 Reply Last reply
                                        0
                                        • vkc@linuxmom.netV vkc@linuxmom.net

                                          @crazyeddie @niko a big difference here is that on Fedi, the block informs *your server* and *the other server*, but on Bluesky, it informs *everyone* because it's centralized.

                                          An end user has to be pretty smart to exploit that via Mastodon, and it'll be incomplete because of federation/defederation. On Bluesky, it's trivial and complete.

                                          wraithe@mastodon.socialW This user is from outside of this forum
                                          wraithe@mastodon.socialW This user is from outside of this forum
                                          wraithe@mastodon.social
                                          wrote sidst redigeret af
                                          #27

                                          @vkc @crazyeddie @niko A quick clarifying question; do you mean actual blocklists or simply who you have blocked? Because on BlueSky those are two different things
                                          (For anyone who doesn’t know I’ll explain below)
                                          If I make a block list on BS & start adding people to it, that’s easily accessible and trivially available

                                          If I simply block someone, that information is NOT trivially available, much the same as fedi; you CAN find it but you have to know how.

                                          Block lists are meant to be shared (IIRC)

                                          wraithe@mastodon.socialW crazyeddie@mastodon.socialC vkc@linuxmom.netV 3 Replies Last reply
                                          0
                                          Svar
                                          • Svar som emne
                                          Login for at svare
                                          • Ældste til nyeste
                                          • Nyeste til ældste
                                          • Most Votes


                                          • Log ind

                                          • Har du ikke en konto? Tilmeld

                                          • Login or register to search.
                                          Powered by NodeBB Contributors
                                          Graciously hosted by data.coop
                                          • First post
                                            Last post
                                          0
                                          • Hjem
                                          • Seneste
                                          • Etiketter
                                          • Populære
                                          • Verden
                                          • Bruger
                                          • Grupper