A PSA for people active on #Bluesky: your block list is PUBLIC information.

A website that tracks Bluesky stats – which I am not naming here on purpose – makes this job super easy: you can enter *any* username and see the accounts a user has blocked.

(Yes I tested it with my account and was horrified)

I'm alarmed by this because the information could be weaponized for abuse.

Muting may be the safer choice then?

Please read up about Bluesky here: https://dustycloud.org/blog/how-decentralized-is-bluesky/ (by @cwebber)

How decentralized is Bluesky really? -- Dustycloud Brainstorms

Oh and I also saw who blocked *ME* - that took about 3 seconds, the information is just a click away. (No hurt feelings there, but still, truly horrified this is public information - do the blockers know this?!?)

As @cwebber wrote: "[On Bluesky] everything is public, including who you block" https://dustycloud.org/blog/how-decentralized-is-bluesky/

How decentralized is Bluesky really? -- Dustycloud Brainstorms

Blog | L'unica cosa interessante del social anti-Elon Musk (e anti-X quindi) si chiama Bluesky Firehose - Info Data

Chi vi scrive predica da anni di evitare gli ambienti tossici, le piattaforme opache e i luoghi dove siamo considerati prodotti a nostra insaputa. Ho invitato a provare Telegram al posto di WhatsApp, Diaspora al posto di Facebook, Mastodon al posto di Twitter quando ancora si chiamava Twitter. E ora non avrei nessun problema a […]

Info Data

@_elena As per the op the public nature is an inherent of the design and it is even up to an app to respect or not (so someone could write a block-ignoring app, like the one you pointed out).

Since blocking for any reason or none is part of the culture there (imho a great thing), one could perhaps camouflage any particular block with volume, say by using block lists.

Of course people can still look for specific blockers for abuse, but there's a good chance many others are also blocking them..

@_elena @cwebber this plus a lack of private posting/private accounts - I'm avoiding.
@_elena A similar issue is that Bridgy Fed publicly shares your likes if they involve Bluesky users.

@rosewsgf @_elena This is just how Bluesky works. Likes are public there.

One should assume that every time you interface with Bluesky or one of their users it is wildly public.

@amd @_elena Are we talking about the same thing though? You can view the likes of a post on Mastodon, Instagram, Bluesky and so on, but the problem is that Bridgy Fed lists all the likes of a connected user on its activity feed page, making it extremely trivial to track their preferences, interests, political views, and so on.

@rosewsgf @_elena A user can see who has liked their post on mastodon, sure.

You cannot view who liked someone else’s post on mastodon nor can you see everything someone on mastodon has liked.

Both of those are public info on Bluesky (and thus any connected bridges). That’s not necessarily bad, but it’s a difference people should be aware of.

@amd @_elena I certainly can see the people who liked any Mastodon post by clicking on "favorites". That part is standard and expected across all social media.

The parts about publicly tying all likes or blocks to a user are a different story requiring a different level of awareness. It reminds me of Lemmy where most people can't see the users behind the likes and dislikes, but some instances of mbin allow to see those, enabling harassment and comments like "why did you dislike my post?"

@rosewsgf @_elena I was definitely mistaken here. I was looking at other mastodon servers that seem to be configured differently and did not show the favorites. I stand corrected.

My personal GoToSocial instance shows that there are likes, but does not share who liked it, as I understand it. It certainly doesn’t on the web view or to my alt account.

https://gts.amd.im/@amd/statuses/01JDJ9J5WD79RNHKJPB9ATY7BV

Post by amd, @[email protected]

Without question, I have more filament breakage with Paramount 3D than any other manufacturer. It’s bad enough for me with their PLA that I think I have to stop using it. @[email protected] #3DPrinting

gts.amd.im
@_elena I share your fear, but also stand by my blocks
@_elena @cwebber That was a great article! Thanks :)

@_elena @cwebber Holy fuck!

In theory, the same is true for activitypub (it was not designed for avoiding abuse, because fucking neckbeards), but I am not aware that there is a way to easily collate usernames (because of all the different instances), so it's not so big a problem.

@androcat @_elena It is definitely not the case that you can query openly *anyone* who is blocking *anyone* in AP. It's true that Mastodon does deliver the Block activity (even though it's not compliant with the "SHOULD NOT" in AP's language about it) but even then, you can't query who's blocking who in the network as an open database

@cwebber @_elena
Iirc, Mastodon is compliant with "should not", it's Pleroma that was developed specifically to skirt the block as a toggle.

But a server has to communicate which blocks to apply when federating, so something posing as an instance would probably enable something like this for AP in general.

However, it'd be a somewhat manual process, because Mastodon is not centralized.

@_elena When I learned about this, I rushed to Bluesky to make a rare post and "warn people".

But first, I wanted to search if anybody's talking about this. And people seem to already know! And are fine with it?

I think folks are already hooked, and it's like telling everyone that Twitter/X is a nazi bar two years ago.

@_elena Worse, if you're a determined troll, you can pick an account you're a fan of (let's imagine it's some famous far right figure) and then go and bother everyone who has blocked them
@_elena @cwebber can someone explain why that's a big issue?
@_elena It’s one of the reasons I ended up leaving Bluesky.
@_elena @cwebber Not sure I care since I usually tell people I’m blocking you because Nazi, racist, etc. They know already.
@_elena @cwebber Nobody cares enough about what I say to bother with lists.
@_elena @cwebber OTOH I suppose a list of people blocked a thousand times might be made, and them asked why, looked at harder, shared etc.
@_elena @cwebber that will definitely open up for abuse. Thanks for the heads up. 🙏

@_elena @cwebber

I would really proud to make my block list public.

@_elena @cwebber 🚩🚩🚩🚩🚩🚩🚩

@_elena Impressively bad implementation based on their reasoning. This is a solved problem on Mastodon. Guess it's a weakness to the AT Protocol since all those "data banks" need to communicate with the master server. Oops.

https://docs.bsky.app/blog/block-implementation

Why are blocks on Bluesky public? | Bluesky

The technical implementation of public blocks and some possibilities for more privacy preserving block implementations — an area of active research and experimentation.

@_elena @cwebber this doesn't convince the hardcore Bluesky bros.
@_elena @cwebber I wanted to make multiple lists with many accounts for various reasons but apparently these lists would also be public..that's a no go.

@_elena @cwebber

That's a black eye for Bluesky.

It's like publishing the names and addresses of crime victims.

"Unlike on other centralized platforms, blocks on Bluesky are public and enumerable data, because all servers across the network need to know that they exist in order to respect the user’s request."

https://docs.bsky.app/blog/block-implementation

Why are blocks on Bluesky public? | Bluesky

The technical implementation of public blocks and some possibilities for more privacy preserving block implementations — an area of active research and experimentation.

@_elena @cwebber the safest choice is to not use Bluesky.

Trading one fascist run network for another is just asking for more of the same

@_elena @cwebber I'm not surprised. They seem to make a big deal about the openness of their data. It almost makes you wish they were selling it. At least the audience would be smaller.

But... What I have noticed is that if someone follows you and you block them, they disappear from the list of your followers, BUT your follower count doesn't decrease. I found that odd.

@_elena @cwebber Another great reason to use Mastodon.
@_elena @cwebber People who use #BlueSky are mostly #Stockholming #Dorsey who left it once it became clear that it'll get shutdown and banned if it was left fully #unmoderated as he wanted it to be.

@_elena @cwebber
@mastodonmigration

Hmm...

Not already same capability for muting...??

If not, bet there soon will be.

Seems a thoroughly idiotic inclusion of an API feature that I'm betting isn't limited to "block".

@_elena @cwebber

I'm curious why anyone would even *want* to see someone's block list.

Like, that just seems very high school and *let me stir the pot*-ish.

@DeliaChristina @_elena @cwebber
In a polarized society with "us vs them" being general attitude you can get a lot of troubles by being called out for avoiding contacts with some demographics or beliefs.
@_elena @cwebber can you share in simple terms why this is bad? How can this information be used against you?
@_elena @cwebber
Muting is actually quite dangerous, in the sense that it allows people to reply shit (like doxxing or death threats) under your post without your knowledge. Blocking is definitely a necessity.
@_elena @cwebber Excellent tip. And one reason to continue to use Mastodon while playing around in Blue Sky.

@_elena @evan @cwebber Thanks for alerting everyone about this!

The only reason I do not publish my public block list on #Mastodon is that it requires extra time & energy typing in the explanation.

If someone sees my block list on #Bluesky, then it will not bother me, as I am barely on Bluesky at all.

@_elena @cwebber
@evan amazed that some think this is ok