Well I didn’t want to have a bio, but Lemmy doesn’t let me null it out, so I guess I’ll figure out something to put here later.

  • 0 Posts
  • 30 Comments
Joined 4 months ago
cake
Cake day: May 10th, 2024

help-circle


  • I think maybe you are confusing instances with communities? Instances are the servers you sign up your account on like lemmy.world or lemmy.ml whereas communities like asklemmy are hosted on an instance. I think there’s universal agreement that growing communities is generally a good thing because it leads to more content and discussion. Growing instances on the other hand isn’t super important (indeed there are going to be plenty of people like myself that are going to stick with a single user personal instance and be perfectly happy). I think the person you’re replying to was confused by the wording of your post.


  • Believe it or not, we’re living in the most peaceful period of human history thus far. I’d recommend the book The Better Angels of Our Nature by Steven Pinker which talks about how far we’ve come. That said, I see the threat of global warming, lack of fresh water, famine, and energy scarcity becoming threats to the current status quo, though. If we don’t figure some things out as a species, we’re likely in for some turbulent times in the next hundred years.


  • Personally, I think it’d be nice if you could self-host just the bridge instances and connect them with beeper yourself, so that the part that isn’t e2e encrypted is running on software you can validate and hardware you control.

    I 100% agree this would be a great solution. That’s what I thought this page was going to be at first until I kept reading and realized it’s just a config guide for the Matrix Ansible setup. I wish they didn’t say “self host Beeper” on that page at all because self hosting Matrix has absolutely nothing to do with the Beeper service other than their devs built the bridges that they’re showing you how to set up with Matrix.







  • E2EE only exists up to the bridge, not the whole way to your client

    I just want to clarify that most bridges can be set up to have E2EE between the Matrix client and the bridge (regardless of whether the bridge supports encrypted chats on the bridged service because not all do, e.g. Facebook), but it is true that the bridge itself has to decrypt and translate between Matrix and the 3rd party chat service, so as you mentioned trusting who hosts bridges or doing it yourself is really important.


  • pitninja@lemmy.pit.ninjatoMildly Infuriating@lemmy.worldI have a flat tyre
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    1 year ago

    Not trying to pile on advice that’s not helpful in your current situation, but I would really recommend getting an air pump to keep in your vehicle at all times for precisely this situation. Mine has saved my ass several times just over the last few years. And that’s also weird about your locking lug nuts—when I had a vehicle that had those, it came with the socket adapter included in the standard roadside kit.


  • Yeah, the defederation metaphor falls apart as you described because subscriptions to communities requires two way communication, which isn’t going to happen because beehaw isn’t going to acknowledge subscription requests from instances it’s blocked. Instances blocked by beehaw would probably have to do the same type of thing Threads or Mastodon users would have to do to bring in Lemmy content by manually bringing it in via searching the federation link.


  • You can run headless or do what the person I was responding to recommended and put it behind an authenticated portal, but that’s not really going to stop other instances and clients from accessing the same resources that op is hoping to limit access to except in the most basic case of people casually browsing op’s Lemmy instance through op’s own lemmy-ui.

    Edit, but to be clear, what I was responding to and my response didn’t directly address op’s specific concern (which I kind of misunderstood myself before just now rereading) that outside/guest users shouldn’t be able to search for communities from other instances and I think it’s a fair concern because just searching for a community from another instance brings in posts and could be a vector for spam/abuse.


  • Wouldn’t this do basically nothing to prevent a 3rd party client from browsing your instance without authentication? I don’t know that there’s much that can really be done about this because you need open APIs for other instances to be able to access the content of your instance in order to make federation possible. That said, it’s an important consideration that anybody running a single person instance should consider. If you run a single person instance, people can learn a lot about you just by seeing which communities are available on your instance. The only way to obfuscate your actual interests is to have a dummy account subscribe to all the top communities on the biggest instances. (Which, honestly, this isn’t a bad strategy to employ anyway if you’re wanting a fresh All feed).