• 4 Posts
  • 14 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle












  • Honestly I’m glad they highlighted the telemetry. I went through the local report about what’s included and while it’s not an upsetting level of detail, it’s more comprehensive than I would have opted in to if asked.

    Still, as sibling points out it’s in a completely different league from slurping up your IMAP creds, something which has always been local-only data. This is the second time I know of recently where MS has trampled on this kind of local-only expectation - the other was Edge defaulting to sending the contents of textboxes you’re filling out on webpages to the MS cloud for spelling and grammar checks. Thunderbird is still a sound recommendation, and unlike Microsoft, I trust that if I uncheck the telemetry box they’re not going to try to get me some other way.




  • You’re putting yourself in a tough position by asking for both E2EE and the ability to use from a browser. You have to trust the web app each time you open the page, and hope that they haven’t altered the deal to simply grab your data after it’s been decrypted by your password. I have no idea how likely it is that Standard Notes would do that but I’d reconsider the browser requirement specifically if E2EE is non-negotiable for you - an offline open source client program would be a much stronger position.

    For my money, I use local text files and SyncThing but it’s probably not spiffy enough for many people/purposes.


  • IME something like Signal is an easy sell since it’s simple and works well. For all the fair criticism about relying on phone numbers it makes the onboarding easy. For other things compartmentalising helps, e.g., “okay we’ll collaborate using this cloud file storage but I personally will be accessing it through the browser while keeping most of my files in a SyncThing over here”. While I self-host certain things I don’t volunteer to do that for family/friends because it will be too frustrating for everyone if/when I let them down.

    In this kind of situation there’s a fine line between someone who maximises their privacy through tech decisions and someone who makes their “correct” tech choices their self identity. If you drift into the latter, being asked to compromise can feel like an attack, leading to overreacting and coming across as insecure and annoying. Not to psychoanalyse anyone in particular but sometimes I think people need a reminder.


  • Ask yourself, in three years from now will you be thinking “it’s so nice how Meta lets me follow and interact with their enormous userbase for free, without advertising, using my own open source server and frontend”?

    Remember that’s the basic expectation today for a participant in the fediverse. If this feels implausible, doing anything else is very incompatible with the fediverse’s existing values.

    The problem isn’t just that it’s Meta, it’s any situation where a much larger actor comes in with different motivations. Today we have a small number of users whose servers are almost exclusively run on a “community service” model. Meta is an advertising business. They are much bigger and will define the fediverse if allowed in. If we allow them to connect, it should be much later after organic growth which means we can assimilate them properly and deflect any bad behaviour.

    What might happen if Meta throws their weight around? I can predict at least three outcomes

    • Proprietary variations to ActivityPub, probably starting with something that seems “understandable” like moderation reasons.
    • Certain new features get centralised on Meta’s servers only (e.g. search) claiming that it’s for efficiency in the distributed environment.
    • Claiming spam problems, require individual instance operators or their users to verify themselves with Meta to enable federation.

    The question in my mind is whether their intention is to destroy the competition, or keep the fediverse alive as a way to claim that they are not a technical monopoly that needs to be broken up by regulators, in the same way that Google provides most of the funding for Firefox.