• 4 Posts
  • 173 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle
  • Subsidized devices blur the line between a fee for terminating service early, and paying off the cost of the device. Perhaps the former should be banned to encourage competition, and the cost of the device and the service clearly separated. That way it’s clear when the device is paid off and (in my imagined ideal regulatory scenario) must be unlocked.

    a poor person would have to pay BOTH. An early termination fee AND then go buy a new phone

    They probably don’t have to pay the fee. They might owe it legally, but the likely consequences for not paying are some impact on their credit score and inability to get service from that carrier under their own name for a while.








  • That’s a valid point, though it looks like Popfile’s installation instructions call for manually installing libraries, presumably current ones. I think it processes only text, not PDFs or images, which are traditional sources of vulnerabilities. I’m fairly certain it doesn’t attempt to execute Javascript. It is, itself written in Perl, which is memory-safe.

    It’s worth considering security because there’s so much malware out there trying to spread indiscriminately, but Popfile is less vulnerable than an Android app (which bundles its dependencies) or anything written in C (which is subject to all kinds of memory management bugs).







  • Privacy can mean different things in different contexts.

    Some peoples’ thoughts go first to sharing content with a restricted audience. ActivityPub isn’t good at that since the admins of every server involved can access the content. That’s also true of centralized social media, though sometimes the admins of those services seem farther removed from users’ social lives. E2EE chat like Matrix and Signal are good options for that use case, and there has been work on adding E2EE options to some ActivityPub software.

    I usually treat social media as public, so I’m not concerned with restricting access to things I share that way. I am, however concerned about service providers monitoring behavior like how long I spend looking at a particular post, or trying to track my browsing habits on third-party websites. Fediverse projects do not normally include those kinds of behaviors, and it would be scandalous if a service provider added them.




  • There are two general areas:

    • The history of the internet is full of examples of companies taking data about or creative output from people and trying to make money from it without permission, in ways the original creator might not like. Nobody has gone there with a Fediverse scraper or search project that we know of yet, but it’s going to happen if the Fediverse gets big enough.
    • Some people want to be able to easily share things with a certain audience without them being easily discoverable by a different audience. There are of course privacy settings to control visibility and software like Matrix that provides not only access control by cryptographic security, but those add friction. It’s only possible for this group to have it both ways if nobody develops good search tools, which turns some of them into bullies.


  • Lemmy search works pretty well on larger servers, and they’re indexed by major web search engines.

    The microblog side of things is worse, with Mastodon long having near-useless search because it might “encourage negative social dynamics” or some such. Some other software, such as Akkoma has had better search, and Mastodon has recently improved somewhat for accounts that opt into being searchable. Mastodon directs search engines not to index most pages.

    Some people get very upset about attempts to build general-purpose fediverse search tools.


  • Zak@lemmy.worldtoFediverse@lemmy.worldThe Fediverse has a DDoS problem
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    1
    ·
    2 months ago

    In this case, generating fake excerpts is not something a user on a server controlled by someone else can do; they have to operate a malicious server themselves. Defederation is a good solution to malicious servers.

    Certainly someone very determined could spin up a bunch of malicious servers and put out a bunch of posts containing fake excerpts, but they’d need followers to get any reach on the microblog side of the fediverse. They could spam Lemmy communities, but users would notice and downvote/report the posts.

    So I think “just defederate” probably is an adequate solution here, at least as things currently sit. Were the fediverse to grow by an order of magnitude, I think it would need a reputation system to add a bit of friction to a brand new server or user getting a lot of reach quickly.