• 3 Posts
  • 370 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle

  • Federated systems are one option for this. On one of my sites, the only way people can leave comments is with ActivityPub. They must have a (probably pseudonymous) account on a server to use that, and I hope that most servers have moderation I find acceptable. I can block those that do not.

    More sophisticated options for sharing reputation between servers would help here. If, for example five servers I trust block another server as a source of harassment, I’d like to block it as well, automatically.





  • My (self-hosted) Mastodon server seems unable to view profiles on Threads. As far as I can tell, there’s nobody to talk to about that.

    I don’t have high hopes about Meta having good intentions here, but I am eager to see platforms that would have previously been walled gardens open up to the federated model. I do think we have some work to do on the open source side to manage the potential massive increase in exposure once Threads users can follow users of other software.

    Of course you can pick a server that blocks Threads if you just don’t want to deal with that.






  • That’s a valid point, though it looks like Popfile’s installation instructions call for manually installing libraries, presumably current ones. I think it processes only text, not PDFs or images, which are traditional sources of vulnerabilities. I’m fairly certain it doesn’t attempt to execute Javascript. It is, itself written in Perl, which is memory-safe.

    It’s worth considering security because there’s so much malware out there trying to spread indiscriminately, but Popfile is less vulnerable than an Android app (which bundles its dependencies) or anything written in C (which is subject to all kinds of memory management bugs).