Bluesky is saying that torture and self-harm posts are acceptable. That's the end of Bluesky as far as I'm concerned. They don't have a clue what they're letting themselves in for.

@lauren Im still trying to confirm if this is their actual policy. That no user or server admin in bluesky can actually ban or delete content, but only end users can choose to see, or not see it.

So far, from what I see, it might be that later scenario.

@tchambers That control panel image seems explicit. It has a SHOW option for torture and self-harm, etc. Q.E.D., I would think.

@lauren I was kinda amazed that any social network would launch with what in essence was a "Show bloody gore, spam and hate, and fake account content" toggle, too.

I was HOPING that like the Fediverse that each admin of a BlueSky service can mute or block or ban such content for all. But not sure that is so, yet.

@tchambers @lauren I don't believe "instance" admins have any say over what content federates and what doesn't.

As in, instances (or "nodes" in BS parlance, I think?) are just account/data storage. Admins, as far as I know, have no agency and barely any power in the system.

@rysiek @lauren I can't believe that is true. But cannot find anything in their docs or the posts there from developers to say otherwise.
@tchambers @rysiek Please keep me informed as you learn more. Thanks!

@lauren @tchambers I am too lazy to dig for it right now but I remember reading in their docs pretty explicit mentions that whole point is that from the user's perspective it should not matter which instance they are on.

I mean, even here:
https://atproto.com/guides/faq

> Account portability is the major reason why we chose to build a separate protocol. We consider portability to be crucial because it protects users from sudden bans, server shutdowns, and policy disagreements.

FAQ | AT Protocol

@lauren @tchambers also this:
https://atproto.com/guides/overview#speech-reach-and-moderation

> ATP's model is that speech and reach should be two separate layers, built to work with each other. The “speech” layer should remain neutral, distributing authority and designed to ensure everyone has a voice. The “reach” layer lives on top, built for flexibility and designed to scale.

"Speech" is what nodes do, "reach" is what (winner-takes-all bigger-is-better) recommendation algorithms do.

Node admins have no say over recco algos.

Protocol Overview | AT Protocol

@rysiek @lauren @tchambers

I read the same, but interpreted it differently. It's bad, but different bad?

I read it as:
* User data is stored in Merkle trees. Basically github repos where each post, like, comment etc, is like a commit.
* Each commit author is a DID, which is stable.
* You can host your GitHub repo of activity on any host. That's the "speech" part. You can set up your own lil nazi repo if you want.
* But search indexes across hosts. That's the "reach" part. Host admins filter

@rysiek @lauren @tchambers

I see confusion/possible jeopardy in that today, because there's no distinction between the AT protocol (git in this analogy) and Bluesky (GitHub in this analogy). Because BlueSky is the only instance of the AT protocol.

The maintainers of git can say, "Hey, Nazis might use this! We have no control! Don't blame us!" but GitHub can't say the same if they host illegal/harmful content.

@rysiek @lauren @tchambers

I do see the devs talking about actively building in the ability to block and ban users. I think block is coming this or next week.

And I think AT Protocol host admins can build their own pluggable indexers, and feed algorithms. So no one can make you host CSAM, or any content you don't want. At least, that's my understanding? I could be wrong.

Their "what's hot" feed is a placeholder implementation that just filters on likeCount > 8. But admins can roll their own

@mekkaokereke @rysiek @tchambers And what if the content is encrypted or otherwise obscured so that the node admin can't recognize it, but is still unwittingly participating in its storage and distribution?

@lauren @rysiek @tchambers

I think that risk exists today for Mastodon too? And most of the web?

If I share a link to my blog here, every Masto instance of my followers goes to that blog to generate a preview. That preview image could be a PNG that contains secrets through steganography. No one would know!

The only recourse is if I act out too much and get caught, I can be banned, or my instance can be defederated.

It's the warez problem all over again, 20 years later, with fewer rar files🤷🏿‍♂️

@mekkaokereke @lauren @rysiek

If admins in BlueSky can act like admins on Mastodon, I'd feel assured that they were on the better track, banning users and removing content on their own servers, and the equivalent of "#fediblocking" or "blueskyblocking" remote individuals, remote servers, etc, from their own servers.

RIght now worried all they can do is label and hope.

Will keep digging.

@tchambers @lauren @rysiek

It looks like the plan is that admins can effectively "defederate."

https://blueskyweb.xyz/blog/3-2-2023-bluesky-beta-app

And glancing at the repo, it looks like even if they didn't plan for this, a fork could make those changes here:

https://github.com/bluesky-social/indigo

I peeked at the api and the indexer. It looks like you could make instances that you don't like, invisible to you and your users. Or require that content go through your moderator plugin first. Etc.

Bluesky Private Beta Update

@mekkaokereke @lauren @rysiek

Thanks, do you mean this language?

" if you decide you want to host your own server...you can also switch over to doing that. If you don’t like the way we show you posts or moderate your experience, you can switch services without losing your friends or data, or swap out your feed or moderators though a plugin ecosystem."

I just wish that were clearer on moderation details: Seems all user-based not on admin/server based.

@tchambers @mekkaokereke @lauren @rysiek looks like one of those "we provide the tools we're not liable for user actions" type of things
@mekkaokereke @tchambers @rysiek Having a UI with an explicit option for showing torture and self-harm posts seems like a real problem going forward.

@lauren @mekkaokereke @tchambers @rysiek

It's still unclear to me who sets those tags and whether this mechanism can be abused to censor content “uncomfortable to power”. Let's say that some of the large-ish instances start blocking specific content tags (e.g. racism or self-harm) altogether. Could this be used by bot networks to tag unrelated content this way to prevent it from federating?

@lauren @mekkaokereke @tchambers @rysiek That screenshot is under text that they says they are debugging it. I understand that to mean: it's not finished and subject to change. Also, a lot of people seem to forget legitimate reasons for wanting to see all the bad stuff: research, journalism, etc.

@mekkaokereke @tchambers @lauren @rysiek

Looks like the #bluesky crew are going to build a commercial friendly version of the #OMN project. We can learn from this to build the #openweb version... they are actually doing, where we are at the sqobaling stage. So we might need some focus ;)

@mekkaokereke @rysiek @tchambers Of course. That's why there's this increasing push to require government IDs for access to social media, and ultimately to anything considered "inappropriate for children" -- and more. Like I said, this will not happen overnight, but it's going to happen. It will happen first to the big platforms and to any ecosystem that gets a lot of public attention.

@lauren @rysiek @tchambers

Yeah, I made this sequence of faces 🤨😮😫 when I realized that we were all rushing to bind our DIDs to DNS entries that we registered for and paid for with credit cards.

@mekkaokereke I think the steganographic risk, is also a canard, but I would defer to @jnazario's expertise in such realms (I seem to recall he gave a presentation at CanSecWest maybe prior to 2005 on such subjects in real world data and also collaborated with Niels Provos on prior research and is cited in Provos' 2001 paper).

p.s.

Warez is a solution. The problem was commercializing software. You've got that world view completely backwards.

e.g. https://m.pouet.net/prod.php?which=55991

Insert No Coins by Razor 1911

64k for Windows, 1st at Main 2010

pouët.net