So there's this guy who made a tool where someone punches in their bluesky or mastodon credentials to his website, and it auto-crawls their feeds and produces an LLM summary of everyone it finds posting there. He was asked what people should do if we don't want to be mulched as content for his summary feeds. He said we should block him. I replied, I can do that, but that only stops *you* from running the tool on me, how do I prevent *your other users* from running your tool on me? He blocked me.
It is possible he interpreted the way I phrased my request as rude. I may have said something like "you are selling us as meat".

Anyway, the fact he's blocked me *partially* solves my problem, in that now he cannot LLM summarize me anymore, but the problem that possibly eventually a *second* person would use his tool remains unresolved.

Honestly, it's baffling that he added Mastodon support at all given that he's been here for years and thus saw some of the MANY YEARS of conflict and debate about the idea of people merely *archiving* or *indexing* Mastodon posts. And then he goes an uploads an auto-LLM-mulcher tool. IDK.

I wonder what the tool does when it encounters a DM. From his description it seems to just grab the last N posts from your feed, and depending on how the feed is queried (like if his Mastodon client code were written indifferently, or perhaps slopcoded) the feed he queries might well contain DMs intermixed. I wonder if his tool is taking DMs and sending them over the wire to Anthropic and/or Microsoft
@cass @mcc is there a way for an instance to implement a UA block at the API level perhaps?
@GroupNebula563 @cass @mcc I have blocked zeitgeist.blue's IP in the moderation panel on my server
@cass @mcc is there a way for an instance to implement a UA block at the API level perhaps?
@GroupNebula563 @cass I am fairly certain if an instance wanted to do this it would be possible. Go to Preferences->Account->Authorized Apps. It knows the names of all the clients you've used. An instance surely could not prevent someone from downloading the source and running their own instance with a changed client name, but I feel confident the instance *could* prevent users from using the main version of the app uploaded by its original author.
@mcc @cass I feel like if you know enough about tech to know how to change the client name within the app, you’re probably not the target demographic for it anyways :P
@cass
Thatā€˜d force him to actually read the DMs he gets and he already established that heā€˜s not interested in actually reading unless it’s ground up into paste.
@mcc
35. Transmitting Everything You Say - Pepper&Carrot

Official homepage of Pepper&Carrot, a free(libre) and open-source webcomic about Pepper, a young witch and her cat, Carrot. They live in a fantasy universe of potions, magic, and creatures.

Pepper&Carrot
@mcc it’s so ā€œgreatā€ that we now not just have hostile instances to worry about but also hostile clients…
@mirabilos @mcc It's almost like real life, isn't it?
@mcc bet he's not honouring delete messages either.

@mcc
He's probably just getting the rss feed and running it through an LLM. It's technically so easy you hardly need a tool for it.

Problem is you can't really block this, unless you make your feed private.

@mcc ...okay, THIS finally convinced me to set my toots to auto-expire.

What a nightmare.

@Legit_Spaghetti

Rest assured they are ā€žlearnedā€œ from before expiry.

@mcc

@Legit_Spaghetti @mcc the problem is precisely that readers which copy your feed remove your chance to delete or expire. I'm followers only for that reason; some crypto guy put in his website, delete impossible, everyone's last few public posts.

@mcc I think one of the big stories of the decade is the slow realisation that when folks say they are releasing things for everyone to do anything with, and used licences that encode that utterance, we don't in fact mean anyone, and we don't in fact mean anything

a lot of people are also realising, myself included, that the parties who can exploit and profit disproportionately more from free stuff is are the parties who are highly experienced at exploitation and profiteering. and the parties most immune from the social checks we have on harmful behaviour are sociopaths who can do the most harm.

it's a bummer

@mcc it was bound to happen :/ though I believe servers could mitigate this by placing limits on number of querries given user/ip/subnet/userahent could perform. Thoyhg that would impact people behind NAT, thoes who want to scroll and read bit longer, and probably bots would just go around it by adding longer sleeps between querries.

Still, in the end if your client can display toots or other activities, so can bots.

@jablkoziemne The fact that anyone could have done this does not make doing it okay

@mcc I don’t know who this person is, so maybe it’s obvious that they participated in those debates, but it’s fully possible for a person to be on Mastodon for a long time and read a completely different set of posts than me.

There are very many people on Mastodon, and there are bound to be many different ā€communitiesā€. Even though we post in this huge undifferentiated heap without any ā€forumsā€ or ā€groupsā€, we choose who to follow, and we get posts from exactly them.

@mcc Well he shouldn't have made an invasive, consent obliterating tool with the slop shitting machine
@brad Okay so I tried to raise that point with him, and his refutation was (if I understood him correctly) along the lines that he *should* have made an invasive, consent obliterating tool with the slop shitting machine, and at that point the conversation hit an impasse
@mcc lol drop a username please 
@mcc ah is it this zeitgeist.blue bullshit? lol

@mcc Yeah. There's a thing going on here where that hits people in a sore spot (LLMs) that is in many ways out of bounds (you can't actually control other people's tools); the place it gets dicy is when you're running a service so you're promoting the use of the tools.

But in general, I'd be real mad at anyone who tried to control what I used to read with.

@aredridel @mcc I had a similar response to quote permissions: what good is turning off quoting for a public post when others can still use their "tools" to link to it? Someone explained to me that it's about making it easy to respect other people's wishes, for those who are inclined to do so.

Maybe it would be nice if this person added a more effective opt out mechanism? Or made their bot opt in? You'd still be free to implement your own LLM reading tool if you really want to.