experienced_devs Experienced Devs Feel stuck in an unideal position
Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    No idea on the current market myself. You should absolutely start looking at the rate you are being paid right now though. Just don't get discouraged about the resume gap, it's a rare field where you can make your own backfill for those gaps.

    1
  • lemmyconnect Connect for Lemmy App Connect 1.0.46 Released
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    Are you planning to open source it at all?

    I am also wondering this myself. I don't fault anyone for not, but may have an impact on my long term commitment with where my interest in this space is.

    Also latest updates seemed to fix the issue with fold type phones.

    2
  • experienced_devs Experienced Devs Feel stuck in an unideal position
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    I’ve done a lot of low rate or entirely volunteer work for small, often non-profit organizations in the past, and don’t fall into the trap. It can be thankless and it can be soul sucking.

    However, obviously if you want to eat and if this is your only income right now you’ll have to stick it out a bit. So I hope we are talking like you are virtually working no hours for that rate, leaving you time to expand your resume on your own.

    I have often been asked in the past by friends or acquaintances how you get a good career in programming, and the answer typically is either luck, or a lot of your own hard work.

    I don’t know what the job market is like these days, but historically your papers mean very little to getting a job. A link to your Github goes a long way to demonstrate your abilities and provides a much higher degree of confidence you know what you are doing because they can actually look at your work, and if you are contributing to other projects, that you are a team player. As one speaker said at a Google Q&A I watched when asked if a PhD would increase their chance of getting hired: “well, we won’t hold having a PhD against you”.

    There is also a lot of free course material out there to various degrees of difficulty.

    Programming is becoming more and more competitive, and the ones that succeed have made it their passion, which does mean a lot of unpaid work. So either find projects you are happy to provide your time to to sharpen your skill, or start your own project that you can get satisfaction in building. Actually programming something is always the fastest way to improve your skill.

    6
  • fediversede Fediverse Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    Ok, so you have nothing to worry about. The subtle distiction matters to many, as evident by the engagement the subject has been getting. It's just about education, it isn't a case against Lemmy.

    1
  • fediversede Fediverse Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    It isn't that the fediverse doesn't care, it is that the primary focus here is to prevent you from being tracked. How public you are is your responsibility, as it is everywhere, but there is a degree that you have to be more cautious here.

    There are discussions on how to mitigate this, but it can't be entirely solved because it conflicts with other goals such as censorship resistence and community safety.

    The comment about EU is the other component. Many instances do not have privacy policies, Lemmy doesn't provide a default framework, so some admins are temporarily blocking EU if it applies to them. The ones hosted in EU will get rekt if they aren't or don't get into compliance. I offer a template to start this process of compliancy.

    1
  • fediversede Fediverse Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    Everyone can see them if they use kbin and I think Mastodon which Lemmy interoperates with (ie. Kbin users often see and engage with posts on Lemmy and vice versa). Sign up to kbin if you want to see yourself.

    All admins have access, and a rouge admin could very easily mine it.

    I can see an argument for it, but does make you take pause on how you will use that feature doesn't it?

    1
  • foss Free and Open Source Software Warning: Lemmy doesn't care about your privacy, everything is tracked and stored forever, even if you delete it
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    So, obviously an anti Lemmy bias there, and not entirely true, but there are some aspects of federation it can be dangerous to ignore.

    There is a different primary privacy focus here, and it provides an extreme level of privacy but places an extreme level of responsibility on the user for their own privacy, more than most places.

    There is a distinction to a potential scrape and a system designed to duplicate, often irreversibly at submit.

    There are also other things people are often not aware of and the community is not doing a great job communicating. Admins are not doing a great job of protecting themselves either.

    For instance many, still don't know votes here are entirely public.

    If you understand this all and are comfortable, great. Many do not prepare themselves and would engage differently if they had a better understanding.

    For a take by someone who is pro-federation but not ignoring these concerns see: https://lemmy.ca/post/948217

    5
  • fediversede Fediverse Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 50%

    Apologies. It can resonate with some, but can definitely be confusing to others. If you want clarity on anything I am happy to try to answer it plainly.

    0
  • fediversede Fediverse Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    Hey folks, guy in the cross post. Thanks for doing that @hardypart@feddit.de , I feel it is an important discussion for people to be a part of across the Lemmiverse.

    Seems there is some positive engagement on here, and maybe a couple that are a bit confused. I'm going to assume they aren't just curmudgeons because why would you waste time commenting if you weren't making an expression of interest in good faith, but maybe not ready to fully invest yet?

    To expand on the TLDR; many new users are coming from monolith platforms (such as reddit; Meta; etc) into the brave new world of federated platforms (like Lemmy) without fully understanding the difference in privacy principles between these two models. Many, more experienced, users do not understand it fully themselves and they make potentially dangerous assertions, or at least ones that could mislead less experienced users into believing Lemmy behaves in a way that it doesn't.

    It's all fine and good to say "Everything posted on the internet stays. Never post anything you don't want public", but in practice, and especially people coming from monolith platforms, they may make mistakes if they are not highly cognizant of some distinctions between the two models of public, social engagement.

    If you are certain you'll never, ever have any risk of making such a mistake, the subtle distinction won't matter to you. If you aren't sure (it is very easy to trip up here) you are going to want to be educated on where some of the potential hazards are, and you will want to be very, very, very careful. Like you never have been before.

    Even some of the most confident, let's call them, "perfectly private posters", often get a little shook when I inform them their votes are entirely public, when they had previously made an assumption they were not due to familiarity with a monolith platform where votes are private. It seems intuitive that they should be private here, but that is not the case. This is a very prevalent misunderstanding right now, and very eye opening to some.

    I much prefer the model of federated because it really gives the user the full control of their privacy to engage to the level they are comfortable with. But it can be very dangerous if not managed appropriately.

    I also feel the wider community is not doing a very good job of communicating this, which is validated by the chord it seems to have struck over on Beehaw. But I come with solutions: a haywire, but comprehensive essay on some of the things a user should be aware of. I have also started a project that provides templates for privacy policies so that admins can add accountability to their instances while also protecting themselves.

    Anyway, a very complex subject many are still learning to navigate, and not something easily reduced to a tldr; As it is, this version is half the length of the original, and you would have been half way through it by now if you just went to the source.

    If you have any questions, I'm here to answer them.

    10
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    I feel you didn't read the original post. It isn't about expecting privacy, it isn't a criticism of the fundamentals of Lemmy as many seem to be taking it (there are many ways I explain how it is more private from being tracked and profiled).

    It is about understanding how privacy is maintained on a federated platform.

    Many users coming from other platforms do not understand the mechanisms here and how they are different. Take a look for the comment here about vote privacy, which many assumed was private due to coming from a platform where this was.

    1
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    ceddit and others you have noted historically have broken for a variety of different reasons, and the others are are currently not functioning as the API they used was banned May 1st. Pushshift, which these services often used, had a mechanism to remove sensitive data you accidentally posted or otherwise wanted removed.

    Archive.org is not searchable, not indexed in mainstream search engines. Also would be responsive to legal requests. It is hard to get a complete profile history on someone.

    All of these external sources require a great deal of extra effort from someone to pry.

    The concern to be aware of here isn't that it could be scraped, which yes it can. The concern is that it is duplicated by design, wide and broad, on a platform that somewhat functions as a single entity, the instant you hit submit.

    People make mistakes. The Unabomber got caught by doxxing himself with a single phrasing of an idiom. Not complaining, simply saying "be very, very, very, very, very, very, very, very, very careful here"

    And ultimately this comes down to different conceptions of privacy, sure, but one of these conceptions is suspiciously impossible to fix yet simultaneously deflective of the other, that other being directly beneficial to companies and any seeking to control mass populations.

    Exactly. The privacy goal on federation is different. If people are educated, they can be safer.

    You can't eat your cake and have it too.

    1
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    I’d also argue stalking has more to do with the mental health issues of the stalker than the victim being to blame for how they interacted with the world. We don’t tell a student not to participate in lectures because someone may latch onto something they said and become infatuated. We punish stalkers instead.

    If someone is aware and engaging to their comfort level, no matter how open, I would not blame them, the victim, for being stalked. If someone wanted to be cautious, but they didn't know the risks here, I would feel guilty for not educating them on how they can protect themselves.

    Idk this is a ramble. I see so many things so often that used to be personal responsibility on online safety, that instead of teaching the skills we make tools. And i feel like not teaching good personal safety and protection is goong to doom any project ultimately.

    You can’t fix ignorance without education.

    Which is the entire point of my post, to encourage education in this space (which again, again, again, is different than what many are coming from with its own unique set of risks)

    1
  • privacy Privacy YSK: You can view upvote and downvote information through kbin
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    I kind of agree with you. There argument against showing it to maintain a certain atmosphere on the platform. However given it is freely available to view on kbin and I believe Mastodon (ie. it is entirely public), it surprises many users and previous assumptions that it is private were maybe incorrectly confirmed by not seeing it here. Perhaps a warning of some sort before you are allowed to cast your first vote.

    2
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    I appreciate that you are reflecting on how you want to manage your own privacy in this space!

    1
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    People should be educated enough of the pros and cons as much as possible, although that might mean some would get intimidated and refuse to join.

    Bingo. Which would you rather do, talk someone's pants off, or scare them off or otherwise have them caught with them down?

    Also love your local domain.

    2
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    I've had a similar idea. Want to have a race to market? (you'll have a head start, I'm heading into the domain of managing federation block lists next).

    This is the beautiful part of an open platform, we can all steer it and contribute all sorts of wonderful solutions.

    2
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    Unfortunately not that easy. There is discussion on solutions. There isn't any now. Platform currently isn't stable enough to respect mutually federated changes all the time.

    Also I did put a disproportionate focus on this no take back component, but the scope is wider than that (see comment below about votes being public when almost everyone coming from a monolith assumes it is private)

    6
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    Yeah. I can see a case made on either side.

    This is the point I am trying to drive home. Even with zero comments, zero posts, you could doxx yourself accidentally with votes alone. You came here from another platform and had a certain expectation of how privacy works here. It does intuitively feel like it should be private.

    You are trading some privacy for censorship resistance and community safety in this case, because the goals are different here.

    If you trust your admin to keep your IP and email private, and you manage your comments and posts carefully, I encourage you to let your voice be heard and upvote every sinnerdotbin's pantless picture post of the week (just don't like the posts in a different, very small and niche category that can link to you publically as you are the chair of the board at never-nude.social, and there are only 5 members who always like the same posts) . If you are in a country where that support might end with you in a work camp, I'd maybe advise against it in case your local turns out to be a honeypot.

    There is a privacy component to federation that the world really would benefit from, but it will be lost if people are not informed. Incredibly private if you are aware how to navigate it. Horrible if you aren't.

    4
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    Unless a user is viewing from kbin, which interoperates here. It is entirely in view to the kbin UI (and Mastodon I believe).

    2
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 75%

    It's the same camp.

    I'm not making the claim other platforms are better because you might be able to slip in a ninja edit before it is captured. I am making the claim that if you are not on high alert here, more than ever, it will bite you.

    For better or worse, some people are coming here from other services expecting a measure of control of their data that you don't get here.

    The experimental aspect of this space is the other thing I feel warrants more explicit warning about, and noted in my policy template.

    2
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 90%

    Votes are entirely public, Lemmy just made a UI choice not to show them. They show up if someone views it from kbin and ultimately something that could be mined from a self hosted admin.

    I think this information may make some of those who profess everything is saved on the internet and why care change their tune.

    Saves I am not sure about yet. Think that may be locals only.

    8
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    Also USA does have laws regarding site usage by children. Might be more of a TOS thing, but this was brought over from the Mastodon policy I adapted.

    IANAL. Especially anywhere near children.

    2
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    You're almost there.

    Only if your home server remains unfederated. Even then other users of the server will be able to see everything. And will be more likely to remember, like miss Busy Body.

    Uh, a, if not the primary point in my post?

    Your IP, your email, will remain at your local if your admin is responsible. If you act to your comfort level in your engagement, you will remain private in the public sphere.

    2
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    If you self host, or find an admin you have incredible trust in, you should remain untraceable if you manage your engagement responsibly.

    Though another thing I highlight in the policies is this is experimental software. Leaks can and will happen. We have a voice and can play an active part in preserving that privacy.

    Recorder is always on by default with your engagement; recorder is always off by default when it comes to things that automatically identify you. It is the opposite in a monolith service.

    1
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    It does to many, thus the awareness of how it works here, that is all.

    If you don't think it matters, or you understand enough to be sure never to expose yourself in a way that you are uncomfortable with that is awesome! Many are waking up to a realization of the nature of things here they were previously not aware of, and some are growing very uncomfortable with that now that they can't adapt their previous engagement to that knowledge.

    2
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    I don’t think the word “privacy” is a good word for the concept. I believe “user data control” or “right to be forgotten” is more appropriate for the “deletion issue”. However, there are few privacy issues such as instance admins having access to private messages and the potential for a hack to expose users e-mail addresses and usernames.

    This has been debated, and is very dependent on the context. It is a very broad concept to try to address and the lines do get blurred on the definition of what is "private data". The hope here is to partition the responsibilities of the admin from the user.

    3
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    Me too! The world is different now.

    Existing social media never really gave you a real edit/delete button anyway either. It’s all anonymity theater. The reality is that your data was always being scrapped and archived, somewhere by someone. This is just a reality created by digitization and virtually free recording/copying. No specific digital medium was ever going to protect you from this.

    I explain the distinction to federated in the post. It is very different than a scrape or archive.

    In the early days of the internet, everyone knew to use pseudonyms and not share personal information. We seemed to have forgotten this lesson. Maybe it’s time to relearn this lesson. Life is full of lessons. Let this be just one more.

    Exactly. I am bringing awareness back to this.

    No one should fool themselves into thinking they can use a pseudonym and not eventually doxx themselves accidentally if they have any level of engagement. People have grown accustom to being able to somewhat reverse that mistake. Many are also not accustom to their interests, their votes, and their voice is all retained, in one, easily digested and public place.

    You are hitting on another subject I hope to investigate further myself: the shift that has to happen for society to adapt to modern, public discourse (eg. let the past slide).

    3
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    I explain the distinction in the post. It is very different on a platform designed to distribute at instant of hitting submit.

    Also...

    I do expect my account to be secure, in that no one should be able to pretend to be me.

    Surprise! They very easily can here.

    4
  • technology Technology Lemmy (the wider community) privacy *does* stink (and how to change that)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    When you shout in a town square, does everything else you've ever shouted, everything you've ever voiced your support for, everything you follow closely echo and remain in that square?

    Again, this is a feature. But one people really have to understand before they engage here.

    12
  • privacy Privacy YSK: You can view upvote and downvote information through kbin
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    I have had concerns about this since I joined. Personally I don't mind that the votes are public and can see a case for it, however the wider community is doing a very poor job of informing the users how this all works, and that will result in very bad outcomes.

    Lemmy (the wider community) privacy does stink (and how to change that)

    1
  • technology
    Technology sinnerdotbin 1 year ago 98%
    Lemmy (the wider community) privacy *does* stink (and how to change that)

    Sensationalist title yes, but this is something that is partially true. *TLDR; I am not spreading FUD. This space can be more safe than many, **for the privacy aspect it was actually designed to maintain**, which is the complete opposite privacy principle to where most new people are coming from. A monolith platform provides a measure of control over how public your engagement is while leaving you open to being tracked; open federated protects you from being tracked with a cost of having less control over how public your engagement is (and will remain). Some people do not understand this and will change the way they engage if they understand.* There is a lot of misinformation I am seeing (or at least glossed over information) that will potentially lead less informed to peril. I am hoping to provide clarity and maybe shift the attitude of some of the more technical among the community. Not everyone is educated in the same domains, and not every one will grasp some of these concepts easily. Every thread started along the lines of "Discovered X in Lemmy is not private” is followed up with a comment “Eh, not really an issue. And I reviewed the code myself, an account deletion removes everything from *the db*”. I push my glasses up: “Ackchyually, that isn’t really true in practice. If defederation happens, or otherwise disconnected, (which always will happen in some capacity) a copy will remain in Lemmiverse, forever". This is followed up with “well duh, that is how federation works, and *everything you post on the internet is copied and there forever. It is no different than a scrape or a screenshot*”. There are nuanced but very important distinctions to a scrape or screenshot and a federated, distributed, indexed copy. Those distinctions will change the way many engage with the platform. Most people are not having screenshots taken of every post they make, when they make them. Most don’t have to be concerned with wildly compromising material tanking their run for office. It takes a high degree of intent and effort for someone to go to external, and unauthorized sources of duplication. It may not be a complete profile history. Most archives are not going to be indexed and easily searchable on mainstream search engines. Unauthorized archives can get sued into oblivion or otherwise disappear. Not everyone is able to grasp a platform that acts kind of like a single entity but is not a single entity, especially if they are a refugee from a monolith platform. Many just see it as a single entity initially and when they see “removed from the db” they will assume any such action means platform wide. A federated copy is automatic and effectively instant by design. A federated copy will be a complete profile. A federated copy will show up in federated searches. A federated copy could end up readily showing up in external indexes. A federated copy may have engagement the user isn't notified of. A user on an instance where defederation has happened may easily come across an entire profile history in a frozen state. Attention can be brought to content that the user desires censored because it will say “edited” or "deleted by user X" and a SnoopyJerkison could just switch to an instance account that has a copy with two clicks in the official app. I have made an informed decision on how I will engage by recognizing this. I’ve accepted the folks my local are always going to see my spelling as impecab.. impeccibahh… very good, while some other local may see me as the philistine that I am before an edit. I will inevitably doxx myself in some way but it might be nice to have a stalker. It’s just me and the damn dog on our private fiberglass island here and she isn’t much of a conversationalist. I am in a place in life where I’m pretty comfortable with myself and have no problem walking around here with no pants on. Not sure why I recently got onto using pant idioms at every opportunity, but I have accepted that if it follows me around with folks replying, “I know you, you're that guy with no pants!”, I won’t be able to go back and remove the sources of the reference platform wide. I’ve made comments I cringe a little at. Entirely benign and nothing I’m losing sleep over, but in haste they were not expressed in my usual voice nor really contributed to the discussion. If I had hesitated longer I would not have responded. Point being: I’m the one ringing alarm bells about this and I am still having to remind myself of the nature of federation. Some people may not be comfortable with this, or could become less comfortable later. They should not be led to believe that it is a simple matter of “the internet doesn’t forget, but you can delete it from the platform” and understand they need to be *very* cognizant and thoughtful in how they engage because federation is *very* unforgiving and *really* doesn’t forget. This is a feature, not a bug. At its core, federation is balancing many goals. From censorship resistance, community safety, to privacy. It can actually provide an extreme level of privacy. But people will make mistakes, that will remain here, right in their face, if they aren’t extra careful. It won’t be in some dark archive. It won’t be in a screenshot never taken and never posted. The reminder of an accidental slip up will be here to perpetually haunt them. They will leave (likely traumatized by it for years to come). A federated copy will have the perception of being more legitimate, true or not. The common, non-technical, person won’t understand if they find something you post hosted on a site you are ideologically opposed to, which it will be. Imagine my embarrassment at the next Pantless-Meeting-Pantless event when I get stopped at the door and shown the posts they believe I have actively made on “never-nude.social”. “But… but.. federation!”. “Ok Captain Kirk. Here’s your pants. Now scram!” Some want to have assurance they can remove content platform wide for other reasons. Revoking support for a platform is one that seems to be in vogue right now. I’ve seen posts like “that site we hate is restoring our retracted posts!”. But I’ve seen cases right here on Lemmy where a user has censored all their content, only to come across that same content on other widely used instances completely intact. This loss of edit access happens fast. Every user at this local will be aware of the high profile cases of defederation. This is a feature by design, and one you can expect more of I suspect. There are also simply errors in federation at times. I’ve lost access to copies on a popular instance the second I posted them. Maybe this will change. It will be a monumental challenge. And it isn’t the case now. Users have to fully understand this. “So what, screw the normies. Let them find out the hard way. It’s getting too crowded here anyway. Like you pantless sinnerdotbin! Git outta here if you don’t like it here in the wwwild-wild-west”. Yet another aspect some are failing to recognize: many of the instances exist in places where they do take privacy very seriously. There are laws about disclosing collection, use and retention of data. One day you may visit your trusty local and you may find a blank page with a single statement: “I keep having very expensive embodied suits appear on my doorstep holding crisp manilla envelopes. I may be breaking the law. I am shuttering immediately”. Hope I didn’t want a reputation of wearing buttless-chaps instead of no pants ‘cause I ain’t got access to modify any of it now. I’ve seen admins advising others to block EU in their firewall because they are aware of this liability and the lack of a privacy policy. That is a big part of the world that will have limited contribution to this movement. Policies go a long way to establish user trust. I have gained a high level of confidence in some admins. They are competent, capable, and thoughtful about their users. People have been investigating hardening beyond what I would expect from any admin. They could showcase this level of care and intent by explaining it in their policies. Privacy policy frameworks can also help new admins navigate responsibilities that keep their users, and the wider platform, safe. Don’t hand wave this aspect away with “don’t post anything you don’t want public on the internet”. This is a totally different beast. Educate those not as fortunate as you to understand how this actually works. It is designed for your actual traceable information to be kept safe by the gatekeepers, the admins. Users must be highly aware: everything else you do here is public in a way you may never have experienced before. Don’t hand wave the concern about post/profile/vote/message privacy, explain how the privacy goal is different here and how one might mitigate the aspects they are not comfortable with. I have started a project where I intend to provide basic policy frameworks that one might use as a point of reference and I would very much like further input on it. https://github.com/BanzooIO/federated_policies_and_tos/ These policies are going to be terrifying for the uninitiated. I have drafted an optional privacy policy preface that may help admins express the clear distinctions between their responsibility, their users’ responsibility, and the actual real privacy goals in this emerging space. https://github.com/BanzooIO/federated_policies_and_tos/blob/main/optional-privacy-policy-intro.md - End transmission, engage pantalon. *Zip*

    75
    92
    main Lemmy.ca's Main Community inconsistent comments between instances?
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    Yeah, same here. Just seemed to be worse since the recent block list and thought maybe related, but appears to be just timing.

    2
  • main Lemmy.ca's Main Community inconsistent comments between instances?
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    Lemmy isn't even at a point 2 minor version yet so it will be awhile before it is stable and these kind of kinks worked out, but this kind of thing is going to somewhat the norm I think, by design.

    Beehaw defederated Lemmy.world, and they are both have large communities. Although we federate with them both, depending on who/where it was posted the source of truth may result in not always getting consistent updates from both.

    I believe the reality in federated space is you will always want to have an account on all the more active instances, using one local as your primary and monitoring things you want to follow on multiple. Luckily the official app makes it pretty easy to do, and maybe there is another app, or one in the works, that will do a client side merge across accounts.

    1
  • main Lemmy.ca's Main Community inconsistent comments between instances?
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    I think that part is still up to the instance to announce. In the case here at lemmy.ca the admin has made a call to block those on a list another admin has made of problematic instances (seem to be primarily instances that have seen a recent, unexplained spike). Note this is not the issue with Lemmy.world which is not blocked, the issue with them just seems to be either overloaded or general issues with Lemmy or .world right now.

    https://lemmy.ca/post/919062

    Difference in signup policy creating moderation overhead the reason for the high profile case:

    https://beehaw.org/post/567170

    2
  • lemmy_admin Lemmy Administration *Permanently Deleted*
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    You'll want to post more detail than

    the instance would not work

    VM doesn't boot? Backend doesn't start? Nginx doesn't start or returns an error when visiting? Database connection?

    1
  • main Lemmy.ca's Main Community Preemptive Blocking of Instances with high potential bot counts
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSI
    sinnerdotbin
    1 year ago 100%

    I believe .world has, though it still shows up as linked: https://lemmy.ca/instances

    However there is another thread here about .world federation issues. I tested it and .world isn't syncing here.

    @smorks does the configuration or tool you are using for this reflect in the linked/blocked page or is it blocked on another level when this +10,000 user block kicks in?

    *edit: tested from .ml which has more than 10,000 users and worked. However if it is by "active" user, .ml, behaw below 10,000 where .world is above.

    3
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearLE
    Lemmy Administration sinnerdotbin 1 year ago 100%
    Privacy Policy

    cross-posted from: https://lemmy.ca/post/821266 > So it seems that no instance has published a privacy policy, many users are asking about such a thing (as they should), and much confusion on how federation happens among users AND some admins. I feel this is pretty important to the survival of Lemmy to work out a privacy policy framework. > > Yes, the argument that "everything on the internet stays forever" is true, but there is a big distinction between captured copies, and some of the unique data distribution / management issues that come up with a federated service. It is important to inform the user of this distinction. It is also important to inform them how early the development is. > > It is going to scare the pants off some users. I'd argue an educated user on an totally public platform is far more safe than an uneducated one on a closed platform, but let the user decide that for themselves. I'd much rather scare the pants off them then have them coming for me once they get caught with their pants down and feel I didn't do enough to warn them. Can you imagine hundreds of thousands of pantless lemmings with pitchforks coming for you? Not a pretty image. > > I AM NOT A LAWYER, but I have created a template based on the Mastodon privacy policy if anyone wants a basic framework to start from: > > https://github.com/BanzooIO/federated_policies_and_tos/blob/main/lemmy-privacy-policy.md > > I am not overly experienced with instance management yet, but I have done my best to cover all aspects of how data is federated. Please contribute in correcting any errors. > > I also feel it is important for admins to disclose the current lack of SSL support in connecting to PostgreSQL and what the local admin has done to mitigate the risk. > > Issues on open on the topic of privacy policies here: > https://github.com/LemmyNet/lemmy/issues/721 and https://github.com/LemmyNet/lemmy-ui/issues/1347

    7
    5
    privacy
    Privacy sinnerdotbin 1 year ago 96%
    Privacy Policy

    So it seems that no instance has published a privacy policy, many users are asking about such a thing (as they should), and much confusion on how federation happens among users AND some admins. I feel this is pretty important to the survival of Lemmy to work out a privacy policy framework. Yes, the argument that "everything on the internet stays forever" is true, but there is a big distinction between captured copies, and some of the unique data distribution / management issues that come up with a federated service. It is important to inform the user of this distinction. It is also important to inform them how early the development is. It is going to scare the pants off some users. I'd argue an educated user on an totally public platform is far more safe than an uneducated one on a closed platform, but let the user decide that for themselves. I'd much rather scare the pants off them then have them coming for me once they get caught with their pants down and feel I didn't do enough to warn them. Can you imagine hundreds of thousands of pantless lemmings with pitchforks coming for you? Not a pretty image. I AM NOT A LAWYER, but I have created a template based on the Mastodon privacy policy if anyone wants a basic framework to start from: https://github.com/BanzooIO/federated_policies_and_tos/blob/main/lemmy-privacy-policy.md I am not overly experienced with instance management yet, but I have done my best to cover all aspects of how data is federated. Please contribute in correcting any errors. I also feel it is important for admins to disclose the current lack of SSL support in connecting to PostgreSQL and what the local admin has done to mitigate the risk. Issues on open on the topic of privacy policies here: https://github.com/LemmyNet/lemmy/issues/721 and https://github.com/LemmyNet/lemmy-ui/issues/1347

    25
    3
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearLE
    Signup Hanging

    This seems to be more a problem with Lemmy as I have experienced it on other instances and probably better suited for the Github issue tracker. But I wanted to make a test post anyway so figure I'd start here and see if anyone else has experienced the problem or can direct me to active discussion already started on it. Signup almost always hangs and just pinwheels. Tried multiple times today, FF in mobile/desktop. Chrome. Same result. Console just keeps dumping messages like 'CreatePostLike', 'RemovePost', etc., which seem to be global activity being pushed to the client (I haven't dug too deep, but I'm not actively doing anything so I can only assume it is some kind of global push updates). Likely unrelated to the signup hanging, and it happens on all pages; I realize this is all very early release stuff, but seems a bit poor form to just have console.log endlessly dumping on production to me, even in early release. Also hangs when trying to login and the account isn't activated (attempted when I thought maybe it went through despite the hang). Never received a response such as "invalid account" or "waiting for validation" Eventually an attempt did go through. But a second attempt has resulted in the same behaviour. Again probably better for the issue tracker, but curious if anyone else local here has found the same issue with signup/login.

    1
    0