Muddybulldog

Mixed feelings on this. Cool tool, great idea. On the other hand, it’s also an effective tracker. Not privacy friendly.

Beauty of FOSS is anybody can just remove it.

Federation is enabled by default. Defedersting takes explicit action…

Indeed. !test@mylemmy.win is my community for, well, testing. It has 63 subscribers. One is me, the rest are bots that managed to find the community.

I’m thinking you could care less.

Agreed. It really comes down to what is enough to satisfy most people. Exporting subscriptions is an easy implementation. Saved/favorited posts, slightly less easy but very achievable. Each of these could be safely done as a user initiated export/import.

Once you start getting into any type of ownership type work, votes, comments, etc. then it’s starts getting hairy due to integrity concerns. How do we trust that this activity actually belongs to the person claiming it.

Someone else did bring up the point that the canonical URL is stored, so that does make correlation a bit easier.

Doesn’t solve the concerns you’ve brought forth. For example, the “I don’t have an account here”. A local instance can correlate a local post to a remote post, being able to provide a “open on original instance” link but it can’t be done the opposite direction, which would relieve this problem.

As for hashing, it too certain what that would gain but at some point there was obviously a decision not to correlate by the message UUID (which would accomplish the same thing). Since I wasn’t in the room can’t say why.

Message activity contains a UUID but the activity table is considered disposable and is purged regularly. Once the message is broken down into its parts and stored the universal identifier is lost. All correlation is local.

Like I said, I was just running of the top of my head.

While it’s true they have canonical URLs, there still remains that there’s no apparent method for integrity checks. No way to validate a correlation between the “new user” and the post or comment that can prevent abuse.

It won’t be anything even close.

Indexes are unique to each instance. Post ID, Comment ID, Vote ID. There’s no way to correlate this information between two instances other than to do a full text match, post by post, comment by comment, vote by vote, to determine if what is being imported already exists on the new instance or is “new”.

Even if you go that route, then there’s the quandaries that follow… if you import what is effectively a “new” post to your new instance, do the comments (which aren’t yours) come along, or do you simply end up importing your post with no interaction history.

Then there is identity. You most likely have a non-local identity on your new server, as a result of federation, how does the new instance know that you are who you say you are, givimg you ownership of any of that existing content as it binds it to your, now, local identity?

That’s just off the top of my head.

If you’re lucky you’ll get to keep your cake day.

That’s literally my only question. Why is this such a big deal, now?

This was put to bed weeks ago on a Mastodon thread that included all the big MastoAdmims.

https://mastodon.online/@mastodonmigration/110599608755384963

We know because it was explained weeks ago:

The nda wasn’t because of some absurd agreement but just the fact they’re launching a new project and we’re getting access to engineers and product team to discuss what the relationship could be. And they went well. https://universeodon.com/@supernovae/110600321409021802

There was no deal signing or any bullshit like that - that’s all fake news.

The nda is because none of this stuff is released and it’s up to meta to share details or admins to join the ongoing calls to learn in advance of launch what is going on.

I don’t know why this blew up like it did.

It’s admins doing due diligence ahead of a major product launch and getting access to engineers on the teams making it happen. https://universeodon.com/@supernovae/110600310078347561

https://universeodon.com/@mastodonmigration@mastodon.online/110599608817744057

Apparently the admins at Universodon had no problem putting this drama to rest weeks ago:

The nda wasn’t because of some absurd agreement but just the fact they’re launching a new project and we’re getting access to engineers and product team to discuss what the relationship could be. And they went well. https://universeodon.com/@supernovae/110600321409021802

There was no deal signing or any bullshit like that - that’s all fake news.

The nda is because none of this stuff is released and it’s up to meta to share details or admins to join the ongoing calls to learn in advance of launch what is going on.

I don’t know why this blew up like it did.

It’s admins doing due diligence ahead of a major product launch and getting access to engineers on the teams making it happen. https://universeodon.com/@supernovae/110600310078347561

There’s pretty strong speculation, and it’s not unreasonable, but there’s zero evidence of anything.

Actually, it was my first home before I started my own instance and I still maintain a presence here.

And, seeing as you said you would answer any questions in this thread and then subsequently blew of my legitimate question with a snarky remark, well, I think that’s a clear sign of where this thread is going.

And we haven’t even gotten to the part where we’ve actually established that someone did or did not have a conversation never mind whether anyone signed an NDA so my question remains, unaltered and unanswered.

To put it simply, so what?

Are they actually claiming to be the same person? I don’t see any actual impersonation.

I understand. It really comes down to your entry point. For example, as long as I’m viewing the community/user/content via my instance I can interact; e.g. I’m replying to a post on https://mylemmy.win/post/114914 ; you, on the other hand are replying to https://kbin.social/m/fediverse@lemmy.world/t/158389/why-can-t-we-have-federated-identity . Since we’re viewing from our own instances we can interact. If either of us goes directly to the canonical URL, https://lemmy.world/post/1194109 , we’d be forced to login. It’s all the same post, just different points of entry that muddy the user experience.

Gotcha. As others have already mentioned it is obtuse. If you end up at the post via your own instance it works but if someone links directly to the canonical post then you get confronted with needing to login. e.g. I see this post as https://mylemmy.win/post/114914, so I can interact just fine whereas if someone sent me the link to https://lemmy.world/post/1194109 (same post, different entry point) I’m stuck.