Okay so tumblr is banning rotating cubes saying it's porn and facebook banned saying "i'm gay" saying it's sexual solicitation and Twitter always seemed like it could disappear at any moment

I feel like we need to be getting ready for Mass Migration to Mastodon, which means we need to fix anything that keeps Mastodon from being usable, and there is in fact something that keeps Mastodon from being usable, there's one specific thing, it's this:

https://github.com/tootsuite/mastodon/issues/177

Support account migration · Issue #177 · tootsuite/mastodon

A lot of people seem to be jumping on https://mastodon.social right now, even though the end goal is to have users separated out across multiple federated instances. However, if people start puttin...

The lack of an account migration idiom on Mastodon really is fatal, it is sincerely a thing that keeps me from recommending Mastodon to people. The http://witches.town evaporation to me was kind of like a disproof of the fediverse and I feel like maybe the fediverse dev community should have treated it as such. There needs to be a way to recover your account, "toots", and follower network if one instance goes away.

If an instance goes away, or you decide you like another instance's UX/features more— well, you can repost stuff, you can shrug off content that's lost, you can let your friends know, ~oh, did you hear? I'm on fuckspace.industries now~. You can do these things *IF* Mastodon is a fun little side thing where we do our low-pressure social networking. This is not feasible or adequate if Mastodon is actually meant to be a *replacement* for Twitter.

A few people have let me know instances now have features for backing-up and importing old toots and follows— okay, if that's automatable, that's a fix for half the problem, cool! But there needs to be some idiom for pushing to your ex-followers "@mcc is now @[email protected]", and have instances know they need to either correct the follow or present a "refollow?" popup.

(And unfortunately, there probably needs to be a way of taking that back, because this is a security attack surface the size of Alaska.)

@mcc I wish it was just completely automated. Yes, there's a way to export a few things (including who WE follow) and move to another instance.

But I wish there was some kind of authorization handshake + handoff where it just automatically updates all our followers.

Just like if we ever change our username on an instance, they still follow us. I don't want followers to have to manually do anything.

@mcc so that bit re: highlighting old accounts is functional in Mastodon (peep https://mastodon.xyz/@jackyalcine).

the reverse is kinda tricky b/c you can't ensure all of those following accounts are still around. I had a little chat with @thegibson about this just now https://hackers.town/@thegibson/101190431070128309

jackyalciné (@[email protected])

1.26K Toots, 101 Following, 206 Followers · Software engineer by trade (and hobby); recreational cook, blogger and poet. Activist. I like tracking my life. Subscribe at https://jacky.wtf/subscribe/

@mcc Someone wrote a tool that will DM people on your exported follower list to tell them you’ve moved but it’s considered a bit obnoxious because it can flood your notifications if a lot of people are migrating at the same time.

@mcc see https://github.com/tootsuite/mastodon/issues/8465 and the notes on setting up mutual rel=me first here https://github.com/tootsuite/mastodon/issues/177#issuecomment-291688638

(the rel-me support is in now, which makes this clearer)

Support 301 redirection for account migration · Issue #8465 · tootsuite/mastodon

Mastodon now has UX for account migration - hooray! However, it doesn't actually redirect the account and followers . I can still post in the old instance, and my followers still see it, they s...

@mcc if part of the problem here is "oops my instance suffered catastrophic existence failure", then I don't think account migration is enough? it's not like you can migrate from an instance that doesn't exist anymore.

maybe a solution that involves linking accounts on multiple instances to a single identity? all your posts go to all linked accounts, people can follow any one of them, all your connections aggregate back to one "main" identity? something like that

@jbradfield So imagine there's some way of registering a public key that you later cash in on to say "that site? that was me. this is me now". Or a centralized site that tracks "A moved to B". There's no really *good* options but there's 100% options.
@mcc why is fuckspace.industries not a thing yet?
@meena apparently i am not as widely hated as rudy giuliani. do i need to work on that
@mcc a life's measure can be friends and enemies, indeed.
but you decide which ones you want have more of
@mcc there is an automated way to send a DM to all of your followers letting them know to follow your new account, and there's a way to mark accounts as redirecting to a new one. it's still not a complete solution but we're a lot closer to there than we were last time you checked, i think
@lavender that's pretty cool, it would be nice if the instances could automatically interpret the DM and do [[something]] with it.
@mcc there's not really anything stopping instances from doing that, but i wouldn't actually want to be automatically signed up to follow someone without manual intervention
@lavender sure, but it doesn't seem hard to make that a feature you can turn on and off?

@mcc here's an open issue about it. https://github.com/swicg/general/issues/1

imo portability of identity would be one of the *most* killer features

Follower Migration · Issue #1 · swicg/general

How can a user switch from being [email protected] to [email protected] without losing their followers? Related problem is how can they avoid breaking all the incoming links. If their followers...

@mcc security 'attack surface the size of Alaska' applies to just about everything in mastodon
@mcc This is being actively worked on, but they're trying to figure out how to keep it from being used as a mechanism for DOS attacks. https://github.com/tootsuite/mastodon/pull/9629
Add handler for Move activity by Gargron · Pull Request #9629 · tootsuite/mastodon

See: #177, #6955, #8003 Traffic My guesses about the traffic patterns of this feature: Given N as the number of followers on the original account, and M (M <= N) as the number of separate server...

@mcc hell yeah. It seems like a difficult but doable thing too, I really hope it gets done.
@mcc why not? export your followers, refollow, continue. It's not convenient, but what do you use twitter for that needs this level of permanence?
@lain @mcc supporting 301 redirection has worked for sites, blogs and feeds, and could work for mastodon. Yes, the key signing business makes it more of a faff, but supporting 301 is a solid basis and the web, feeds and Websub all support it already. https://github.com/tootsuite/mastodon/issues/8465
Support 301 redirection for account migration · Issue #8465 · tootsuite/mastodon

Mastodon now has UX for account migration - hooray! However, it doesn't actually redirect the account and followers . I can still post in the old instance, and my followers still see it, they s...

@mcc @Are0h @Gargron Yes yes this please. It's part of what has caused anxiety for *every friend* I have convinced to join.

"But what if I pick the wrong instance? What if I want to move later? What if something goes wrong with my instance and I need to move?"

Please please fix this.

@mcc @Are0h Gargron has more incentive to grow his instance and centralize mastodon around it. https://mastodon.starrevolution.org/media/REpDugsQGSd-IA25ex8
@mcc also many of the proposed solutions depend on backing up and restoring, while a cool robust thing would be replication without visible duplication, so I could have my toots and relationships on mastodon.social AND toots.passcod.name or whatnot and if one goes down the other is still there.

@passcod that sounds hard.

backing up and restoring is hard but i feel like the solution to THAT is to just make an automated tool / standalone separate site. mastodonglacier.social

@mcc It sounds hard to start with (lots of work at protocols levels) but the experience would probably be better? in the long term, and at scale

@passcod @mcc this is essentially torrents, right? When you need the data, someone has it.

If privacy is an issue, opt-in then.

@mattbk nnno, specifically not. (privacy should not be opt-in!). I mean, you could do something like that, but that's not what I'm talking about.
@passcod I meant you would opt in to such a decentralized automatic backup.

@mcc

followers aren't yours such that you can redirect their attention at will. I mean, maybe functionally it's *possible* but it has a similar ethical valence as subscribing someone else to an email list.

it's a mutual albeit asymmetric relationship initiated by the follower, made in the context of a specific instance. to move that relationship to a new instance imposes a new context.

@deejoe You can automate notification of a move, and you can give people the option to automate responding to such notifications by automatically refollowing.

Mastodon apparently has the ability to mass-DM people now. One solution would just be a slightly glossier UX over that feature that acknowledges this isn't a DM, it's a system message, like a follow request.

@mcc

That UX smoothing would at least be follower-facing. So often so much of this discussion puts things in terms of the person moving between instances.

Even more, the whole discussion seems borne of the centralized, siloed, unified-identity world many of us are trying to avoid, leave behind, or at least complement. A world where things are smoothed in the same way a cattle trough is smoothed--so nothing impedes the way except to hide the view of the killing floor.

@mcc maybe there could be a program developed that, after downloaded and you've fed in your account details, automatically pulls, signs, and encrypts your data at custom-set intervals for storage on your own drive.

at the same time, instances could incorporate an account import section that takes that data, authenticates the signature, and on confirmation, reconstructs the account on their instance.

@mcc yes, this exactly. Sadly I think ActivityPub makes it harder than Ostatus did.
@mcc I'd put money towards those features.

@mcc I don't know if there is a way to allow network migrations to be safe without requiring some sort of authentication method that the user in question holds the keys to, instead of the original publishing server.

If any instance could trigger a migration in absence of the original instance (ala w.t situation) that would be way more dangerous.

@shaderphantom Sure, so now you just have an authentication problem. Consult the entire history of cryptography and see if any existing solutions for this problem are worth their downsides.
@shaderphantom What if you had to opt-in, so people can choose between "what if the instance shuts down" vs "what if hax"? You set a "this account may at some point in the future migrate, here's my public signing key" flag or something.
@mcc this is what I figured but I would imagine requiring people to hold their private keys is prohibitive for non technical users, so I'm not even sure if it would fully address the problem.
@shaderphantom So consider the idea of a Bitcoin wallet— most people can't keep track of that private key, so sites exist that hold a private key for you. this is an example of *a* solution to a problem like this.

@mcc hmm.

seems like you could provision that public key in the actor for a user. Then have an actor representing the server who posts an activity to the entire federation with the signature produced by the user's private key. Then the other servers would assume authorization when submitting Update activities for every Activity the old actor made, to reassign attribution. Would require an extension to the spec that other servers would need to support though. Hrm.

@mcc @shaderphantom apps holding tokens could be another good one, and so on. but yeah, tech doesn't solve everything here. We mostly need a social understanding of how to resolve this, that people need to confirm the real person vs. a hacked system, levels of trust, etc. It'll likely vary depending on the users involved.
@mcc oh my god they’re banning saying “I’m gay”????? That’s like the only sentence I post online ... for real
@mcc

Mastodon is only one aspect of the larger fediverse.

We've had migration on the fediverse since 2012. Friendica has account migrations. Hubzilla and Zap have nomadic identity (your cloned accounts are kept in sync and you can interact from any of them). Friends, content, profiles, everything. I'm working on Osada migrations currently since ActivityPub doesn't support cloning; which is a shame because it's so darn versatile.