I would like to give an update on "federation" on Bluesky.
-
@KnightMustard "What lead to it failing here?"
What lead to what failing?
@mcc You mentioned they got harassed off Fediverse? Perhaps I'm over complicating it?
-
@boris "Bsky doesn’t have auth on your account and can’t delete individual posts."
This is true in my case because I self host a PDS. Most users use a Bluesky PBC hosted PDS. In this case, Bluesky owns everything, they have the keys, the bits are resident on their servers. What prevents them from deleting a post? Aren't they legally bound to delete posts in case of DMCA takedown, CSAM, etc?
@mcc for illegal content (what is described as network abuse & infra moderation here https://docs.bsky.app/blog/blueskys-moderation-architecture) they likely take down the entire account
Yes Bsky _could_ delete posts by like … accessing the blob directory or deleting/editing SQLlite on disk but that’s tinkering. There’s no like masquerade as Boris function to do this in any sort of consolidated way across accounts.
Just like Google _could_ delete something in GDrive.
-
@mcc You mentioned they got harassed off Fediverse? Perhaps I'm over complicating it?
@KnightMustard No. I am saying a different group of people got harassed, a few years back, and I saw people leave the Fediverse as a result. My perception, which obviously is the perception of an outsider and so not trustworthy, is that black Fedi is smaller now than it used to be.
Rudy says he's never used Fedi.
-
I would like to give an update on "federation" on Bluesky.
My expectation was it was unlikely we'd ever see this happen because "federation" on ATProto means basically reproducing the entirety of the Bluesky software stack. In old Big Data terms, on ActivityPub your instance is a "horizontal shard" of the network; ATProto forces full DB replicas only.
Still, we're seeing movement on this front, which I'd split into two categories:
1. Your fault (you reading this)
2. Aaron Rodericks's fault@mcc thanks for this!
-
@benroyce @txtechnician @mcc the funding is an interesting one. If we don't hear anything new about another BSky funding round in the next 6 months they'll start being close to running dry (they're currently closing in on one year since the last round that was supposed to be for two years and had a failed one early 2025)
Some of these recent troubling decisions may already be influenced by that. They've said they want to start running ads and that has implications for moderation for example.
@ikuturso @benroyce @txtechnician @mcc
How much has actually been invested in Bluesky? Public information (https://accessipos.com/bluesky-stock-ipo/) is three rounds, a seed round and an $8M in 2023 and $15M (Blockchain Capital) in 2024. In January 2025 a round lead by Bain Capital (https://www.businessinsider.com/x-competitor-bluesky-valuation-new-funding-round-2025-1) was reported setting valuation at $700M, but no further info if that round closed has been reported. Is the total to date $23M plus seed accurate? What happened with the big January Bain Capital round?
1/
-
@ikuturso @benroyce @txtechnician @mcc
How much has actually been invested in Bluesky? Public information (https://accessipos.com/bluesky-stock-ipo/) is three rounds, a seed round and an $8M in 2023 and $15M (Blockchain Capital) in 2024. In January 2025 a round lead by Bain Capital (https://www.businessinsider.com/x-competitor-bluesky-valuation-new-funding-round-2025-1) was reported setting valuation at $700M, but no further info if that round closed has been reported. Is the total to date $23M plus seed accurate? What happened with the big January Bain Capital round?
1/
@mastodonmigration @ikuturso @txtechnician @mcc
good question
we can calibrate with earnings (what, about $0?), the length of time, and the nature of the lenders, and arrive at a nice measure of how close bluesky is to plutocrat destruction
-
@aeva @cthos either you rely on bluesky to get the content (meaning you have to trust them to convey the content) or you prepare and mirror the content yourself. No real third option, fundamentally. If there were several blacksky-like towers then they could potentially pool resources, but no other actor has gotten as far as blacksky so there's no one to pool with.
This is just me thinking out loud without much direct knowledge, but isn't live Atmosphere content supposed to remain available on its home PDS indefinitely? So couldn't an AppView implement an LRU cache rather than a full mirror of all content? Or does this storage cost come from something else that can't be trivially re-fetched later?
-
This is just me thinking out loud without much direct knowledge, but isn't live Atmosphere content supposed to remain available on its home PDS indefinitely? So couldn't an AppView implement an LRU cache rather than a full mirror of all content? Or does this storage cost come from something else that can't be trivially re-fetched later?
-
@mastodonmigration @ikuturso @benroyce @mcc Wait!
I got it. What if we got the government to fund it! /s
-
@mastodonmigration @ikuturso @benroyce @mcc Wait!
I got it. What if we got the government to fund it! /s
-
@trwnh @mcc @ikuturso @jrose In
did:plc:foo, foo is abase32(sha256(creation_request))[0:20]so its a 120-bit hash. I’m not confident of that’s long term securityAlso the
did:plcupdate metadata protocol is fundamentally dependent upon the existence of a central trusted system so you can’t just easily replicate it as a DHT system@erincandescent @ikuturso @mcc @trwnh @jrose
It's vulnerable to collisions, but I don't think those get you much with PLC? (Only the author of a DID creation request could create the collision.)
For pre-image, it inherits the security properties of SHA-256, which is probably fine, unless you're willing to brute-force the full 120 bits, which is well out of range of foreseeable technology I think - the whole Bitcoin network does like 2^96 hashes of SHA-256 per *year*.
-
That's a great point, and I'm guessing that what @cthos meant by "lightweight" AppView was precisely that it doesn't indefinitely store media - it either has a LRU cache or relies on the Bluesky PBC network's CDN.
-
@fontenot @mcc @aeva whatever this thing is doing: https://github.com/alnkesq/AppViewLite
(I have not investigated past their readme)
-
@fontenot @mcc @aeva whatever this thing is doing: https://github.com/alnkesq/AppViewLite
(I have not investigated past their readme)
Thanks! Yes, it looks like the 2 GB / day estimate was from early January, and they didn't implement the ability to cache images until February, so that's *just* for posts, replies, likes, etc, not a full mirror of the network.
(And in fact the image caching ability is on-demand, they don't get fetched from the PDS until someone using the AppView actually tries to view them. The software can also use the PBC's CDN.)
-
@mcc There's also https://plc.directory/, the
did:plc:database, also run by Bluesky.("
plc" stands for "placeholder", because they aspire to figure out something blockchain decentralized later.)I think Bluesky can inconvenience people at best, or hijack their accounts at worst, especially if they were using a Bluesky PDS and Bluesky has all the keys. But I don't know/remember the exact implications.
@mnordhoff The DID concept is so strange to me, because they did already figure out they could use DNS for this…? So why bother?
-
Update: Rudy who operates blacksky.community responded to this thread on bluesky. Above I said I wasn't clear on how independent Blacksky was of the Bluesky infra. His answer is "completely". They run their own relay (which scrapes PDSes itself), the relay feeds into their own appview, the appview feeds into their own client. https://bsky.app/profile/rude1.blacksky.team/post/3lyv5rwpc722c
And since they bridge end-to-end, in my Hypothetical Example above, they *could* choose to make different moderation decisions from Bluesky PBC.
@mcc what about the PLC DID directory?
AFAIK:
1) ‘blacksky community’ doesn’t have control over ‘their accounts’ as long as they don’t run their own directory.
2) running an ‘independent directory’ means: no zerocost migration between networks and no coherent communication between networks without bridging elements.
I find it distressing that, as of now, most bsky documentation still omits the fact that the directory underpins *everything*.
Paul Fuxjäger (@cypherhippie.bsky.social)
Looks like the component that carries ALL the weight of ‘credible exit’ marketing claims is exposed to increasing levels of spam/dos. *absolutely nobody* saw that coming. /SCNR Longterm viable ‘DID:PLC Registry Write Access Governance Model’, anyone? [contains quote post or other embedded content]
Bluesky Social (bsky.app)
-
@mcc what about the PLC DID directory?
AFAIK:
1) ‘blacksky community’ doesn’t have control over ‘their accounts’ as long as they don’t run their own directory.
2) running an ‘independent directory’ means: no zerocost migration between networks and no coherent communication between networks without bridging elements.
I find it distressing that, as of now, most bsky documentation still omits the fact that the directory underpins *everything*.
Paul Fuxjäger (@cypherhippie.bsky.social)
Looks like the component that carries ALL the weight of ‘credible exit’ marketing claims is exposed to increasing levels of spam/dos. *absolutely nobody* saw that coming. /SCNR Longterm viable ‘DID:PLC Registry Write Access Governance Model’, anyone? [contains quote post or other embedded content]
Bluesky Social (bsky.app)
@cypherhippie PLC is bullshit and honestly, I believe it is not possible to work around it. Or rather I have an entire design proposal for how to fix plc (replace it) and I know at least one other person with a design proposal for how to fix it (by replacing it), but I don't know how to solve the social part because the social part is "convince bluesky to give up power" and I can't think of a reason they'd do that.
-
@cypherhippie PLC is bullshit and honestly, I believe it is not possible to work around it. Or rather I have an entire design proposal for how to fix plc (replace it) and I know at least one other person with a design proposal for how to fix it (by replacing it), but I don't know how to solve the social part because the social part is "convince bluesky to give up power" and I can't think of a reason they'd do that.
@mcc interesting, you are suggesting another DID method or something completely different?
-
And that's why I say, TLDR:
- I am legitimately excited about the work being done by Blacksky Algorithms! I am using their frontend and happy with it.
- Northsky is an interesting development to watch
- If you're on a Bluesky PDS, I recommend migrating off with one of these tools https://bsky.app/profile/did:plc:ii5jchdzlmcojjw4dqczcgkh/post/3lyt6t6qfa22u
- Everything Sucks. A LOT of things would have to change at a social level for *any* entity other than Bluesky to have power or independence in the ATP ecosystem. I still don't trust Bluesky.
@mcc I'd love to migrate but it's all and I mean ALL way over my head
-
@mnordhoff yes, the plc is another really frustrating thing
@mcc 4 days later Bluesky has announced an intention to establish an independent Swiss entity to manage the DID database. So there's that!
Creating an Independent Public Ledger of Credentials (PLC) Directory Organization | Bluesky
The Bluesky Social app is built on an open network protocol that refers to each user by a unique Decentralized Identifier, or DID (a W3C standard). The most popular supported DID method was developed in-house by Bluesky Social, and is called "Public Ledger of Credentials", or PLC. The PLC identity system currently relies on a global directory service to distribute identity updates, and that directory service has been operated by Bluesky as well.
(docs.bsky.app)
It hasn't happened yet, and it remains to be seen how it will be funded, whether it will have real independence, etc., but still?!
