There's a common false dichotomy about #Threads: cut them off, or leave it to user choice.

I can't speak to other software, but Mastodon offers a third option: limiting Threads. This can be done for all users of a server.

- You can follow Threads accounts after clicking through a warning.

- You have to manually approve followers _from_ Threads.

Note, however, that boosted posts will continue to appear in your home timeline:

https://github.com/mastodon/mastodon/issues/26301#issuecomment-1868240966

Silenced users' content can appear on home timeline via boosts · Issue #26301 · mastodon/mastodon

Steps to reproduce the problem Preconditions: Have account Y status on local instance be Limited, or, account Y is on server Z which has a server-wide Limit in place on your local instance. Follow ...

GitHub

I like that option for our server, social.coop, and it's the one we voted to implement earlier this year.

We know that Threads already hosts bad actors (e.g., LibsOfTikTok). We know some reasonable folks have set up shop there and will continue to flee there from X.

This option makes it clear that Threads is not a safe space, while allowing limited connections.

Every instance will implement the option that makes sense to them, of course.

@eloquence yeah, I expect many of the instances who federate with Threads will limit them. From a privacy perspective though, it doesn't do anything to stop people's data from getting to Threads unless they opt out by individiually blocking Threads. "The fediverse is about consent" except when it isn't (opt-out is not affirmative consent).

@thenexusofprivacy @eloquence
Hmm? Doesn't it do about the same amount to stop people's data getting to Threads?

Instance-limit stops Threads users following you without consent. Individually blocking Threads rejects them automatically, instead of manually.

*Neither* is documented as stopping Threads users from reading your posts. Even if authorized fetch is enabled.[1]

[1] I base this on https://hub.sunny.garden/2023/06/28/what-does-authorized_fetch-actually-do/

What does AUTHORIZED_FETCH actually do?

A hopefully more approachable explanation of the Mastodon configuration settings Authorized Fetch and Disallow Unauthenticated API Access

Sunny Garden Hub

@thenexusofprivacy @eloquence
Clearly the Fediverse is not designed with consent at the forefront.

You can theorize about taking back privacy on public networks.

But if site A wants to allow Google, and you want to post a publicly readable reply on site A, my hope would be that you're educated and supported in knowing that you'll be Google-able.

E.g. if y'all want to roll back Google, that's a long-standing fracture. It needs work on *clear expectations* or you'll have nothing but fractures.

It's certainly true that the fedierse wasn't designed with consent at the forefront. But you're wrong about the effect of blockig and authorized fetch: sites that block Threads and turn on authorized fetch won't federate data to Threads.

It's true that Threads could technically still scrape public data if they want (and if other actions aren't taken to prevent them) but EU datra protection commissioners have warned them that scraping without consent is non-consensual access to data. And, data like followers-only posts and direct messages *isn't* public so isn't easily scrapable.

@sourcejedi @eloquence

@thenexusofprivacy @eloquence

> sites that block Threads and turn on authorized fetch won't federate data to Threads

I agree.

> I expect many of the instances who federate with Threads will limit them. From a privacy perspective though, it doesn't do anything to stop people's data from getting to Threads unless they opt out by individiually blocking Threads.

If a user blocks threads.net, their post can be boosted by a different user, and then re-boosted by a threads.net user. Can't it?

@sourcejedi there was just a long discussion about this on my personal account. It turns out that for user-level blocks it also depends on whether authorized fetch is enabled. https://indieweb.social/@jdp23/111597265293660428

@eloquence

Jon (@[email protected])

A couple of questions about authorized fetch. Assume my instance is running authorized fetch. - If I as a user block instance X, does that mean there's no way the content of my posts to get to instance X even if somebody on another instance boosts them? Or, does the content still get there, but it's just not visibile? - is the answer different if my instance is blocking instance X? @[email protected] @[email protected] @[email protected] you all seem like you might know the answer to this 😎

Indieweb.Social
@thenexusofprivacy
Got it! Sorry for my failed "clarification".
@sourcejedi no need to apologize, it's a confusing situation -- in fact in that other thread, when I read the documentation I thought the same thing.