I would like to give an update on "federation" on Bluesky.
-
@mcc Bsky doesn’t have auth on your account and can’t delete individual posts.
The user can delete posts as they like and then it’s truly deleted and can’t be queried.
@boris "Bsky doesn’t have auth on your account and can’t delete individual posts."
This is true in my case because I self host a PDS. Most users use a Bluesky PBC hosted PDS. In this case, Bluesky owns everything, they have the keys, the bits are resident on their servers. What prevents them from deleting a post? Aren't they legally bound to delete posts in case of DMCA takedown, CSAM, etc?
-
And that's why I say, TLDR:
- I am legitimately excited about the work being done by Blacksky Algorithms! I am using their frontend and happy with it.
- Northsky is an interesting development to watch
- If you're on a Bluesky PDS, I recommend migrating off with one of these tools https://bsky.app/profile/did:plc:ii5jchdzlmcojjw4dqczcgkh/post/3lyt6t6qfa22u
- Everything Sucks. A LOT of things would have to change at a social level for *any* entity other than Bluesky to have power or independence in the ATP ecosystem. I still don't trust Bluesky.
@mcc I'm sorry that I'm too much of a fedi noob. What lead to it failing here? Defederating? Not enough people? Where could I read more on this? It sounds like it was a big hurdle to get parity with bluesky so I'm curious on what lead them to do that?
-
@boris what about "Takedowns on accounts and records apply on the API level regardless of the labeler headers."?
Paul Frazee (@pfrazee.com)
Okay I got some answers. Takedowns on accounts apply on the PDS level. Takedowns on accounts and records apply on the API level regardless of the labeler headers. I’ll explain why and share some thoughts in next posts
Bluesky Social (bsky.app)
It really sounds like user data/content is being made inaccessible at the source, but I'm out of my depth here.
@makeworld yes I’m not disagreeing!
The “source” is where someone’s account is hosted - a PDS. So, bsky PDS vs somewhere else.
And then the API end points would again be a PDS or appview hosted by someone.
If you’re on your own PDS anyone can fetch from you directly.
-
@mcc I'm sorry that I'm too much of a fedi noob. What lead to it failing here? Defederating? Not enough people? Where could I read more on this? It sounds like it was a big hurdle to get parity with bluesky so I'm curious on what lead them to do that?
@KnightMustard "What lead to it failing here?"
What lead to what failing?
-
May be a stupid question but I don't know enough about ATProto, ActivityPub or Bluesky infrastructure to be sure
Would it be possible for one of those systems that is forking Bluesky to make it so they use both ATProto and ActivityPub streams so they can be on here without a bridge?
-
@KnightMustard "What lead to it failing here?"
What lead to what failing?
@mcc You mentioned they got harassed off Fediverse? Perhaps I'm over complicating it?
-
@boris "Bsky doesn’t have auth on your account and can’t delete individual posts."
This is true in my case because I self host a PDS. Most users use a Bluesky PBC hosted PDS. In this case, Bluesky owns everything, they have the keys, the bits are resident on their servers. What prevents them from deleting a post? Aren't they legally bound to delete posts in case of DMCA takedown, CSAM, etc?
@mcc for illegal content (what is described as network abuse & infra moderation here https://docs.bsky.app/blog/blueskys-moderation-architecture) they likely take down the entire account
Yes Bsky _could_ delete posts by like … accessing the blob directory or deleting/editing SQLlite on disk but that’s tinkering. There’s no like masquerade as Boris function to do this in any sort of consolidated way across accounts.
Just like Google _could_ delete something in GDrive.
-
@mcc You mentioned they got harassed off Fediverse? Perhaps I'm over complicating it?
@KnightMustard No. I am saying a different group of people got harassed, a few years back, and I saw people leave the Fediverse as a result. My perception, which obviously is the perception of an outsider and so not trustworthy, is that black Fedi is smaller now than it used to be.
Rudy says he's never used Fedi.
-
I would like to give an update on "federation" on Bluesky.
My expectation was it was unlikely we'd ever see this happen because "federation" on ATProto means basically reproducing the entirety of the Bluesky software stack. In old Big Data terms, on ActivityPub your instance is a "horizontal shard" of the network; ATProto forces full DB replicas only.
Still, we're seeing movement on this front, which I'd split into two categories:
1. Your fault (you reading this)
2. Aaron Rodericks's fault@mcc thanks for this!
-
@benroyce @txtechnician @mcc the funding is an interesting one. If we don't hear anything new about another BSky funding round in the next 6 months they'll start being close to running dry (they're currently closing in on one year since the last round that was supposed to be for two years and had a failed one early 2025)
Some of these recent troubling decisions may already be influenced by that. They've said they want to start running ads and that has implications for moderation for example.
@ikuturso @benroyce @txtechnician @mcc
How much has actually been invested in Bluesky? Public information (https://accessipos.com/bluesky-stock-ipo/) is three rounds, a seed round and an $8M in 2023 and $15M (Blockchain Capital) in 2024. In January 2025 a round lead by Bain Capital (https://www.businessinsider.com/x-competitor-bluesky-valuation-new-funding-round-2025-1) was reported setting valuation at $700M, but no further info if that round closed has been reported. Is the total to date $23M plus seed accurate? What happened with the big January Bain Capital round?
1/
-
@ikuturso @benroyce @txtechnician @mcc
How much has actually been invested in Bluesky? Public information (https://accessipos.com/bluesky-stock-ipo/) is three rounds, a seed round and an $8M in 2023 and $15M (Blockchain Capital) in 2024. In January 2025 a round lead by Bain Capital (https://www.businessinsider.com/x-competitor-bluesky-valuation-new-funding-round-2025-1) was reported setting valuation at $700M, but no further info if that round closed has been reported. Is the total to date $23M plus seed accurate? What happened with the big January Bain Capital round?
1/
@mastodonmigration @ikuturso @txtechnician @mcc
good question
we can calibrate with earnings (what, about $0?), the length of time, and the nature of the lenders, and arrive at a nice measure of how close bluesky is to plutocrat destruction
-
@aeva @cthos either you rely on bluesky to get the content (meaning you have to trust them to convey the content) or you prepare and mirror the content yourself. No real third option, fundamentally. If there were several blacksky-like towers then they could potentially pool resources, but no other actor has gotten as far as blacksky so there's no one to pool with.
This is just me thinking out loud without much direct knowledge, but isn't live Atmosphere content supposed to remain available on its home PDS indefinitely? So couldn't an AppView implement an LRU cache rather than a full mirror of all content? Or does this storage cost come from something else that can't be trivially re-fetched later?
-
This is just me thinking out loud without much direct knowledge, but isn't live Atmosphere content supposed to remain available on its home PDS indefinitely? So couldn't an AppView implement an LRU cache rather than a full mirror of all content? Or does this storage cost come from something else that can't be trivially re-fetched later?
-
@mastodonmigration @ikuturso @benroyce @mcc Wait!
I got it. What if we got the government to fund it! /s
-
@mastodonmigration @ikuturso @benroyce @mcc Wait!
I got it. What if we got the government to fund it! /s
-
@trwnh @mcc @ikuturso @jrose In
did:plc:foo, foo is abase32(sha256(creation_request))[0:20]so its a 120-bit hash. I’m not confident of that’s long term securityAlso the
did:plcupdate metadata protocol is fundamentally dependent upon the existence of a central trusted system so you can’t just easily replicate it as a DHT system@erincandescent @ikuturso @mcc @trwnh @jrose
It's vulnerable to collisions, but I don't think those get you much with PLC? (Only the author of a DID creation request could create the collision.)
For pre-image, it inherits the security properties of SHA-256, which is probably fine, unless you're willing to brute-force the full 120 bits, which is well out of range of foreseeable technology I think - the whole Bitcoin network does like 2^96 hashes of SHA-256 per *year*.
-
That's a great point, and I'm guessing that what @cthos meant by "lightweight" AppView was precisely that it doesn't indefinitely store media - it either has a LRU cache or relies on the Bluesky PBC network's CDN.
-
@fontenot @mcc @aeva whatever this thing is doing: https://github.com/alnkesq/AppViewLite
(I have not investigated past their readme)
-
@fontenot @mcc @aeva whatever this thing is doing: https://github.com/alnkesq/AppViewLite
(I have not investigated past their readme)
Thanks! Yes, it looks like the 2 GB / day estimate was from early January, and they didn't implement the ability to cache images until February, so that's *just* for posts, replies, likes, etc, not a full mirror of the network.
(And in fact the image caching ability is on-demand, they don't get fetched from the PDS until someone using the AppView actually tries to view them. The software can also use the PBC's CDN.)
-
@mcc There's also https://plc.directory/, the
did:plc:database, also run by Bluesky.("
plc" stands for "placeholder", because they aspire to figure out something blockchain decentralized later.)I think Bluesky can inconvenience people at best, or hijack their accounts at worst, especially if they were using a Bluesky PDS and Bluesky has all the keys. But I don't know/remember the exact implications.
@mnordhoff The DID concept is so strange to me, because they did already figure out they could use DNS for this…? So why bother?
