• 1 Post
  • 18 Comments
Joined 1 year ago
cake
Cake day: September 1st, 2023

help-circle




  • Hopefully in 10 years, the moderation tools will be good enough to deal with a scaling userbase. What the fediverse needs is moderation subscriptions i.e subscribing to or unsubscribing from moderation actions of different groups or people.

    For example, joining a community would subscribe you automatically to the moderation list of that community, but you could also unsub from the list if you don’t like the mods there and sub to a group of people you trust more with mod decisions. Imagine if there’s an overeager mod in the community you subbed to and you wanted to exclude the modding decisions - mod lists would allow that.

    Anti Commercial-AI license



  • This does make sense, and I do not understand a lot of the technical details, or how this problem would be solved. I just wish it was haha

    :D same. I think the solutions could be applied elsewhere too. They’d be very interesting.

    Can’t say I understand what happens technically when someone is kicked from a matrix room, so what what happen with the encryption keys I dunno.

    That depends on the client. Some clients will exit, some will stay in the room. Encrypted matrix rooms use “perfect forward secrecy”, meaning new people can’t read the past, and old people removed from the group/chain/chat cannot read new messages. So, being kicked from a room would still allow you to see all the chat history you stored. Or if you sign in with a device that didn’t get the “kick” message yet, the server could still send you all the messages up until the point of the kick message.

    I’m not sure how Matrix implements it and server + client implementations can differ.

    Anti Commercial-AI license


  • Sharing != downloading forever. When you browse it, yes, technically it’s in your cache, but that’s why it’s called a cache. Most people won’t install a client that puts their browsing into long-term storage (unless Microsoft takes a screenshot for them and promises never to upload it somewhere). Regardless, it is still a security issue (as I just described with releasing the encryption key). You can choose to ignore it, until someone comes along and exploits it. Then you have a bunch of angry people screaming at you because you “didn’t close an obvious security hole”.

    Anti Commercial-AI license


  • I remember thinking about this long time ago and even asking some hackers about it to get blank stares back. Basically, there are multiple problems around data access.

    Take the simple scenario of a unfriending. Let’s say you have 12 friends, but Susie turned out to be a real bitch and you unfriended her. You don’t want Susie to have access to your photos, messages, and basically anything anymore! That means the encryption key has to change -->

    Where is all the data hosted and who is going to reencrypt all the entire history from the point Susie became your friend until you unfriended her? The most secure would be that you have all your data and that you re-encrypt it. Great, you are data-frugal and have maybe 10MB you have to re-encrypt. But Karl, your photography pal paid for gigabytes of storage and now has to rencrypt a good chunk of that if he unfriends somebody.
    You could of course say “fuck it, the asshole friend probably made a copy and re-encrypting is pointless”, but then your ex-friend can just share the private key with the world and TADA, everybody has access to the files you shared with said friend.

    And that’s just one problem I can think of right now. When you take more time to think about it, you’ll run into more and more stuff.

    I’m not saying it’s impossible, but it definitely isn’t easy. Add to that that many people don’t care and it’s less likely. The closest I get to that is Signal.

    Anti Commercial-AI license