Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. I would like to give an update on "federation" on Bluesky.

I would like to give an update on "federation" on Bluesky.

Scheduled Pinned Locked Moved Uncategorized
342 Posts 109 Posters 884 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • mcc@mastodon.socialM This user is from outside of this forum
    mcc@mastodon.socialM This user is from outside of this forum
    mcc@mastodon.social
    wrote on last edited by
    #178

    @mat @eniko "but where are replies to those posts coming from in this setup?"

    Short version: "You can't get them"

    Long version: Currently the only ways to get replies to a post published in your Bluesky PDS are

    - Run a "relay". This means (this is not a joke) receiving from Bluesky PBC a copy of literally every post made in the network, and filtering for ones that @ you.

    - Log in to bsky.app (or a clone like blacksky) with your PDS username and password, and look in the notifications tab.

    mcc@mastodon.socialM 1 Reply Last reply
    0
    • mcc@mastodon.socialM mcc@mastodon.social

      @mat @eniko "but where are replies to those posts coming from in this setup?"

      Short version: "You can't get them"

      Long version: Currently the only ways to get replies to a post published in your Bluesky PDS are

      - Run a "relay". This means (this is not a joke) receiving from Bluesky PBC a copy of literally every post made in the network, and filtering for ones that @ you.

      - Log in to bsky.app (or a clone like blacksky) with your PDS username and password, and look in the notifications tab.

      mcc@mastodon.socialM This user is from outside of this forum
      mcc@mastodon.socialM This user is from outside of this forum
      mcc@mastodon.social
      wrote on last edited by
      #179

      @mat @eniko Now, that last thing is possible, and even easy. But at that point it's really, super unclear *why* you would architect your Wordpress server to *be* a PDS, rather than running the regular PDS software on the same box, and having the Wordpress server post to it from time to time using the external API. It's extra work, but there's no obvious advantage and there's barely even a difference.

      mcc@mastodon.socialM 1 Reply Last reply
      0
      • dalias@hachyderm.ioD dalias@hachyderm.io

        @mcc @erincandescent I have a system that doesn't need blockchain. Instead it uses a "nocoin" (term I coined, pardon the pun) distributed notary system that doesn't have a ledger because there's no way to enumerate things that have been recorded, only to prove that a particular thing was seen by a notary at a particular time.

        dalias@hachyderm.ioD This user is from outside of this forum
        dalias@hachyderm.ioD This user is from outside of this forum
        dalias@hachyderm.io
        wrote on last edited by
        #180

        @mcc @erincandescent The concept is that you intentionally preclude the possibility of detecting "double-spend" so that the system can't be used for exchanging things of value. As a bonus, this also precludes selling identities. It's impossible to prove you're not keeping hidden an earlier-dated transfer to a different new owner when you offer to transfer an identity for money.

        erincandescent@akko.erincandescent.netE mcc@mastodon.socialM 2 Replies Last reply
        0
        • thisismissem@hachyderm.ioT thisismissem@hachyderm.io

          @mat @mcc @eniko I think you'd be hard pressed to implement AT Proto in PHP tbh..

          Edit, to expand on that: AT Proto requires a bunch of cryptography (for keys and dpop and such), and websockets for the sync part of the protocol (which is how relay's typically hear about your posts)

          thisismissem@hachyderm.ioT This user is from outside of this forum
          thisismissem@hachyderm.ioT This user is from outside of this forum
          thisismissem@hachyderm.io
          wrote on last edited by
          #181

          @mat @mcc @eniko you could probably take the bluesky-social/pds repo, and add in endpoints that a wordpress plugin would call to automatically create records in it for social posts, if you just wanna distribute out a app.bsky.feed.post for each wordpress post.

          That'd be pretty easy to do.

          1 Reply Last reply
          0
          • mcc@mastodon.socialM mcc@mastodon.social

            @mat @eniko Now, that last thing is possible, and even easy. But at that point it's really, super unclear *why* you would architect your Wordpress server to *be* a PDS, rather than running the regular PDS software on the same box, and having the Wordpress server post to it from time to time using the external API. It's extra work, but there's no obvious advantage and there's barely even a difference.

            mcc@mastodon.socialM This user is from outside of this forum
            mcc@mastodon.socialM This user is from outside of this forum
            mcc@mastodon.social
            wrote on last edited by
            #182

            @mat @eniko Isn't it convenient that Bluesky has architected an "open" system where the solution to every problem turns out to be "use Bluesky", and any other solution requires fighting incredible gravity?

            1 Reply Last reply
            0
            • thisismissem@hachyderm.ioT This user is from outside of this forum
              thisismissem@hachyderm.ioT This user is from outside of this forum
              thisismissem@hachyderm.io
              wrote on last edited by
              #183

              @mat @mcc @eniko yeah, because you need sync, afaik. https://atproto.com/specs/sync

              1 Reply Last reply
              0
              • mcc@mastodon.socialM This user is from outside of this forum
                mcc@mastodon.socialM This user is from outside of this forum
                mcc@mastodon.social
                wrote on last edited by
                #184

                @mat @thisismissem @eniko The continuous event streams are HTTP. Mine are being proxied through Apache

                thisismissem@hachyderm.ioT 1 Reply Last reply
                0
                • dalias@hachyderm.ioD dalias@hachyderm.io

                  @mcc @erincandescent The concept is that you intentionally preclude the possibility of detecting "double-spend" so that the system can't be used for exchanging things of value. As a bonus, this also precludes selling identities. It's impossible to prove you're not keeping hidden an earlier-dated transfer to a different new owner when you offer to transfer an identity for money.

                  erincandescent@akko.erincandescent.netE This user is from outside of this forum
                  erincandescent@akko.erincandescent.netE This user is from outside of this forum
                  erincandescent@akko.erincandescent.net
                  wrote on last edited by
                  #185

                  @dalias @mcc it sounds like in an attempt to prevent people using your system for money you’ve also made it useless for actually managing identities because it becomes impossible to definitively recover control of a compromised account or transfer an account to someone else safely.

                  dalias@hachyderm.ioD 1 Reply Last reply
                  0
                  • mcc@mastodon.socialM mcc@mastodon.social

                    @mat @thisismissem @eniko The continuous event streams are HTTP. Mine are being proxied through Apache

                    thisismissem@hachyderm.ioT This user is from outside of this forum
                    thisismissem@hachyderm.ioT This user is from outside of this forum
                    thisismissem@hachyderm.io
                    wrote on last edited by
                    #186

                    @mcc @mat @eniko I mean, kinda correct in that WebSockets are tunneled over HTTP, but it's still the WebSocket Protocol that is being used..

                    mcc@mastodon.socialM 1 Reply Last reply
                    0
                    • tylercook@mastodon.gamedev.placeT tylercook@mastodon.gamedev.place

                      @mcc I do, yeah. So it's just one part of the stack. The complicated parts come later, eh?

                      mcc@mastodon.socialM This user is from outside of this forum
                      mcc@mastodon.socialM This user is from outside of this forum
                      mcc@mastodon.social
                      wrote on last edited by
                      #187

                      @tylercook Yes, correct. If you already have a setup for hosting Docker containers standing up the PDS is *trivial*. Like, you could do it in under an hour. I don't pay per byte of bandwidth (VPS) but the load from running my PDS has been so low I don't notice it. And if it turns out to be a problem you can migrate out to another PDS.

                      I'm going to DM you a link to a Discord I found helpful when debugging issues with my PDS.

                      1 Reply Last reply
                      0
                      • thisismissem@hachyderm.ioT thisismissem@hachyderm.io

                        @mcc @mat @eniko I mean, kinda correct in that WebSockets are tunneled over HTTP, but it's still the WebSocket Protocol that is being used..

                        mcc@mastodon.socialM This user is from outside of this forum
                        mcc@mastodon.socialM This user is from outside of this forum
                        mcc@mastodon.social
                        wrote on last edited by
                        #188

                        @thisismissem @mat @eniko Okay, yes, that's more accurate.

                        thisismissem@hachyderm.ioT 1 Reply Last reply
                        0
                        • mcc@mastodon.socialM mcc@mastodon.social

                          @fleeky 1. Correct
                          2. I don't know

                          fleeky@prsm.spaceF This user is from outside of this forum
                          fleeky@prsm.spaceF This user is from outside of this forum
                          fleeky@prsm.space
                          wrote on last edited by
                          #189

                          @mcc am having a discussion of this on bsky that is helping to disambiguate :
                          https://bsky.app/profile/futur.blue/post/3lyuzwzb2k226
                          also https://github.com/zeppelin-social/bluesky-appview

                          mcc@mastodon.socialM 1 Reply Last reply
                          0
                          • mcc@mastodon.socialM mcc@mastodon.social

                            @thisismissem @mat @eniko Okay, yes, that's more accurate.

                            thisismissem@hachyderm.ioT This user is from outside of this forum
                            thisismissem@hachyderm.ioT This user is from outside of this forum
                            thisismissem@hachyderm.io
                            wrote on last edited by
                            #190

                            @mcc @mat @eniko so yeah, I was more saying PHP and WebSockets isn't likely to be the most pleasant time for someone. (much like Ruby and WebSockets)

                            But yeah, if you're suggesting a sidecar PDS to a wordpress blog that just publishes bluesky posts with a link to the wordpress post, then that'd be relatively simple. It's once you want to go beyond that that things start getting hard.

                            1 Reply Last reply
                            0
                            • erincandescent@akko.erincandescent.netE erincandescent@akko.erincandescent.net

                              @dalias @mcc it sounds like in an attempt to prevent people using your system for money you’ve also made it useless for actually managing identities because it becomes impossible to definitively recover control of a compromised account or transfer an account to someone else safely.

                              dalias@hachyderm.ioD This user is from outside of this forum
                              dalias@hachyderm.ioD This user is from outside of this forum
                              dalias@hachyderm.io
                              wrote on last edited by
                              #191

                              @erincandescent @mcc Nope. Recovery is one of the primary considerations. Unless you intentionally want recovery to be impossible (some people may), you have a recovery policy notarized (can be published or kept unpublished in safe storage you control) prior to any use of the identity. Then proof of conditions satisfying the recovery policy preempt any transfer of control that took place later during a compromise.

                              dalias@hachyderm.ioD 1 Reply Last reply
                              0
                              • dalias@hachyderm.ioD dalias@hachyderm.io

                                @mcc @erincandescent The concept is that you intentionally preclude the possibility of detecting "double-spend" so that the system can't be used for exchanging things of value. As a bonus, this also precludes selling identities. It's impossible to prove you're not keeping hidden an earlier-dated transfer to a different new owner when you offer to transfer an identity for money.

                                mcc@mastodon.socialM This user is from outside of this forum
                                mcc@mastodon.socialM This user is from outside of this forum
                                mcc@mastodon.social
                                wrote on last edited by
                                #192

                                @dalias @erincandescent I understand how such a system would work but I would not use it for at least two reasons

                                1 Reply Last reply
                                0
                                • dalias@hachyderm.ioD dalias@hachyderm.io

                                  @erincandescent @mcc Nope. Recovery is one of the primary considerations. Unless you intentionally want recovery to be impossible (some people may), you have a recovery policy notarized (can be published or kept unpublished in safe storage you control) prior to any use of the identity. Then proof of conditions satisfying the recovery policy preempt any transfer of control that took place later during a compromise.

                                  dalias@hachyderm.ioD This user is from outside of this forum
                                  dalias@hachyderm.ioD This user is from outside of this forum
                                  dalias@hachyderm.io
                                  wrote on last edited by
                                  #193

                                  @erincandescent @mcc And in my view, "not usable for money" is a prerequisite for "usable as identity". Related: the whole market for buying popular browser extensions to put malware in them.

                                  M 1 Reply Last reply
                                  0
                                  • mcc@mastodon.socialM mcc@mastodon.social

                                    Why does the "relay" matter? Well, because although Bluesky's claim is that moderation is "composable" in their system— that you can choose which moderators to follow— moderation decisions made by Bluesky are hard binding on systems they control. Someone blocked by Bluesky is blocked from the Bluesky appview, their content will get removed from the Bluesky PDS if they were using that. The Bluesky relay censors content that violates the data "schema"; I suspect (?) it enforces moderation also.

                                    res260@infosec.exchangeR This user is from outside of this forum
                                    res260@infosec.exchangeR This user is from outside of this forum
                                    res260@infosec.exchange
                                    wrote on last edited by
                                    #194

                                    @mcc I don't think the last part is true. Their relay implementation is open source also. Trying to find more info about this

                                    1 Reply Last reply
                                    0
                                    • mcc@mastodon.socialM This user is from outside of this forum
                                      mcc@mastodon.socialM This user is from outside of this forum
                                      mcc@mastodon.social
                                      wrote on last edited by
                                      #195

                                      @mat @eniko Well, point of order. Do I want to work together? If so, why? I have no incentive or desire to badmouth Bluesky specifically, but also, do I have any incentive to grow their ecosystem or help their corporate project? All I want to do is talk to people. The only ATP dev I've done has been because it makes it easier for me to talk people.

                                      1 Reply Last reply
                                      0
                                      • mcc@mastodon.socialM mcc@mastodon.social

                                        And that's why I say, TLDR:

                                        - I am legitimately excited about the work being done by Blacksky Algorithms! I am using their frontend and happy with it.

                                        - Northsky is an interesting development to watch

                                        - If you're on a Bluesky PDS, I recommend migrating off with one of these tools https://bsky.app/profile/did:plc:ii5jchdzlmcojjw4dqczcgkh/post/3lyt6t6qfa22u

                                        - Everything Sucks. A LOT of things would have to change at a social level for *any* entity other than Bluesky to have power or independence in the ATP ecosystem. I still don't trust Bluesky.

                                        bustamarx@corteximplant.comB This user is from outside of this forum
                                        bustamarx@corteximplant.comB This user is from outside of this forum
                                        bustamarx@corteximplant.com
                                        wrote on last edited by
                                        #196

                                        @mcc This is great information, thank you for updating us. And thanks to @cwebber for boosting it into my feed. 👍

                                        1 Reply Last reply
                                        0
                                        • mcc@mastodon.socialM mcc@mastodon.social

                                          Why does the "relay" matter? Well, because although Bluesky's claim is that moderation is "composable" in their system— that you can choose which moderators to follow— moderation decisions made by Bluesky are hard binding on systems they control. Someone blocked by Bluesky is blocked from the Bluesky appview, their content will get removed from the Bluesky PDS if they were using that. The Bluesky relay censors content that violates the data "schema"; I suspect (?) it enforces moderation also.

                                          boris@cosocial.caB This user is from outside of this forum
                                          boris@cosocial.caB This user is from outside of this forum
                                          boris@cosocial.ca
                                          wrote on last edited by
                                          #197

                                          @mcc Content doesn’t get removed from the PDS it would be hidden by labels - accounts do have takedown labels applied.

                                          Bluesky operated relay doesn’t censor Lexicons that don’t validate and it doesn’t enforce moderation.

                                          For those following along at home the relay costs about $30/month to run for all ~38M accounts worth of content.

                                          mcc@mastodon.socialM makeworld@merveilles.townM 2 Replies Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups