Post AQ2C2bnhaNBkEKbTwe by AIaYYAle4i1uKmKpqy.gme@bofh.social
 (DIR) More posts by AIaYYAle4i1uKmKpqy.gme@bofh.social
 (DIR) Post #AQ27TN1g7qvgSJ5B9U by crschmidt@better.boston
       2022-11-26T21:34:48Z
       
       1 likes, 0 repeats
       
       Over the years, I made a handful of maps of various things in Cambridge; I have collected some, but not all of them, on this page about housing things in Cambridge.This includes things like maps of where you could legally build a fourplex (short answer: not many places!); the distribution of tax paid per parcel (Kendall Square pays a lot!) and more.https://crschmidt.net/housing/cambridge/#Projects #CambMA #Cambridge #Housing
       
 (DIR) Post #AQ27TNWAIVJdyrLWfg by crschmidt@better.boston
       2022-11-26T21:45:24Z
       
       2 likes, 0 repeats
       
       Fun fact: sharing this link on Mastodon caused my server to serve 112,772,802 bytes of data, in 430 requests, over the 60 seconds after I posted it (>7 r/s). Not because humans wanted them, but because of the LinkFetchWorker, which kicks off 1-60 seconds after Mastodon indexes a post (and possibly before it's ever seen by a human).Every Mastodon instance fetches and stores their own local copy of my 750kb preview image.(I was inspired by to look by @jwz's post:  https://mastodon.social/@jwz/109411593248255294.)
       
 (DIR) Post #AQ27TQ5gjOv3xbyvJo by cshabsin@hachyderm.io
       2022-11-26T22:02:23Z
       
       0 likes, 0 repeats
       
       @crschmidt well, this sounds like a p0 bug. Mastodon is going into robots.txt on many servers once this gets noticed widely.
       
 (DIR) Post #AQ27TQmEBEwm5Xstcm by crschmidt@better.boston
       2022-11-26T22:21:27Z
       
       0 likes, 0 repeats
       
       @cshabsin Don't worry! I just confirmed that Mastodon doesn't respect robots.txt for any of these fetches, so even if it's added to robots.txt, it will have no effect!
       
 (DIR) Post #AQ27TRDAZ4UvR6UPcO by crschmidt@better.boston
       2022-11-26T22:10:23Z
       
       0 likes, 0 repeats
       
       lol, and because @jwz boosted _this_ post -- which does not include my URL in it! -- I got _another_ stampede... because Mastodon fetches the "context" of the post as well, so all the Mastodon servers with someone following jwz got both this post and the parent post indexed, and those servers all crawled mine as well.(At least I fixed the HTTP->HTTPS problem in my og: information that caused _3_ requests per server in the first round first!)
       
 (DIR) Post #AQ27TRPDqG8g2U82PA by tw@cantos.social
       2022-11-26T23:53:45Z
       
       0 likes, 0 repeats
       
       @crschmidt @cshabsin that definitely seems ... inappropriate.
       
 (DIR) Post #AQ27TS3dQ0Su3p2JOa by jefftk@mastodon.mit.edu
       2022-11-27T03:05:53Z
       
       0 likes, 0 repeats
       
       @tw @crschmidt @cshabsin link preview bots all ignore robots.txt, so mastodon is at least following precedent here.Except that I think Mastodon's implementation is wrong: on a centralized network the preview is created at the 'request' of the person sharing, so robots.txt doesn't apply. But here it's created fully automatically, so it really should apply. The fix would be to capture the site at sharing time and send it along in the post, which is also more efficient (though prone to abuse?)
       
 (DIR) Post #AQ27TT0TtDXL0KZJ7Q by crschmidt@better.boston
       2022-11-27T04:47:06Z
       
       0 likes, 0 repeats
       
       @jefftk @tw @cshabsin yeah, the prone to abuse and "hard to standardize across all implementations" are the reasons it was rejected in 2017, and has languished as an untouched feature request since 2020 (respectively). Time to rethink that. (I don't love that a single implementation is 95% of the fediverse, but it is; standardization is frankly secondary to making sure the core implementation works well.
       
 (DIR) Post #AQ27TTNsUEFgAtVzaS by crschmidt@better.boston
       2022-11-27T14:28:02Z
       
       0 likes, 0 repeats
       
       Now up to 1.7GB, across 4846 requests, from 2302 different instances.Interestingly, this includes servers that my instance has suspended; e.g. poa.st, which I wouldn't have expected to see this post; I guess this is because boosts from a server that isn't defederated with them can make it through. That has some side effects I don't like.Chart attached shows new instances requesting pages from my server per minute since I posted it. List of instances at https://crschmidt.net/fediverse/linkfetcher-instances.txt .
       
 (DIR) Post #AQ27TTTu7p4YTaKnyq by jefftk@mastodon.mit.edu
       2022-11-27T14:28:47Z
       
       0 likes, 0 repeats
       
       @crschmidt @tw @cshabsin Follow-up https://mastodon.mit.edu/@jefftk/109416209502343043 https://www.jefftk.com/p/mastodons-dubious-crawler-exemption https://github.com/mastodon/mastodon/issues/21738
       
 (DIR) Post #AQ27TU91evxwX7Ze4m by AIaYYAle4i1uKmKpqy.gme@bofh.social
       2022-11-27T15:30:24.750230Z
       
       0 likes, 0 repeats
       
       It's 2022. Use a CDN. Cloudflare is free.
       
 (DIR) Post #AQ27TVHZQeOY3uZz28 by crschmidt@better.boston
       2022-11-27T14:49:47Z
       
       0 likes, 0 repeats
       
       Additional fun things to learn: - Mastodon does not appear to use range headers or limit the size of a download to identify opengraph information, so linking a large file means 1000 servers are gonna read the whole damn thing? - Plemora does a HEAD request first to (I expect) check the content-type: for the .txt link above, Plemora does _not_ fetch the content of the file (Mastodon does)
       
 (DIR) Post #AQ28H2IpRt8Uf7mqrA by tw@cantos.social
       2022-11-27T15:38:16Z
       
       0 likes, 0 repeats
       
       @gme @crschmidt @cshabsin @jefftk That's a pretty dismissive take on software violating an agreed-upon Internet standard...
       
 (DIR) Post #AQ28H2u3DUuUWZCZsG by AIaYYAle4i1uKmKpqy.gme@bofh.social
       2022-11-27T15:39:26.256898Z
       
       0 likes, 0 repeats
       
       I read the blog post and at the very top OP even admits that Mastodon is not a crawler. So what "standard" is being broken?
       
 (DIR) Post #AQ28aJk6pc0QFmk0mm by alex@gleasonator.com
       2022-11-27T15:42:55.084669Z
       
       2 likes, 1 repeats
       
       @crschmidt @jefftk @tw @cshabsin > a single implementation is 95% of the fediverseThat's not actually true, you just can't see us from across The Great Wall of Mastodon.
       
 (DIR) Post #AQ28v3SsY0LFqkZPTE by kroner@seal.cafe
       2022-11-27T15:46:44.664601Z
       
       0 likes, 0 repeats
       
       Do you know if it would be feasible to implement AP federation, but only for a specific software?I'd love to put AP federation on the project I am working on eventually but I think it would be better suited to not tie in with what's currently out there :shrugge: This would be for future reference tho because it's not even in alpha yet lol
       
 (DIR) Post #AQ29C6kpZPkiyW6AhU by alex@gleasonator.com
       2022-11-27T15:49:46.490502Z
       
       1 likes, 0 repeats
       
       @kroner @crschmidt @tw @cshabsin @jefftk Just use custom Object types. Most servers will drop them if they don’t understand.
       
 (DIR) Post #AQ29L5zzkRqHEqTeAS by kroner@seal.cafe
       2022-11-27T15:51:26.751637Z
       
       0 likes, 0 repeats
       
       Aight sounds good to me :cat_thumbsup:
       
 (DIR) Post #AQ29VnGviMKcLMV26y by Leaflord@leafposter.club
       2022-11-27T15:53:23.741078Z
       
       0 likes, 0 repeats
       
       Based autism
       
 (DIR) Post #AQ29Yt48d8BNBHzWpU by sj_zero@social.fbxl.net
       2022-11-27T15:53:57.890217Z
       
       1 likes, 2 repeats
       
       Number of servers running software from the-federation.info(Granted there's some stuff that doesn't support ActivityPub on here, but it's technically all part of the fediverse)
       
 (DIR) Post #AQ2ByfUnuB5iX3swc4 by PaterSnape@noagendasocial.com
       2022-11-27T16:21:02Z
       
       0 likes, 0 repeats
       
       @crschmidt @jefftk @tw @cshabsin Funny how everybody who pointed out the 95% figure is wrong was blocked in advance.
       
 (DIR) Post #AQ2C2bPx0gBp2fUVvM by jefftk@mastodon.mit.edu
       2022-11-27T15:58:11Z
       
       0 likes, 0 repeats
       
       @gme @crschmidt @tw @cshabsin where do you see that in the blog post? I agree that scraping a preview isn't crawling if you do it at send time, but doing it at automatically at retrieve time is
       
 (DIR) Post #AQ2C2bnhaNBkEKbTwe by AIaYYAle4i1uKmKpqy.gme@bofh.social
       2022-11-27T16:21:39.029373Z
       
       0 likes, 0 repeats
       
       Let's accept your argument to be true for a moment.Doesn't change the fact that there exists a technical solution to the problem you present in your argument.Put the site behind a CDN.
       
 (DIR) Post #AQ2CPWdCyG7yrHcfNA by crschmidt@better.boston
       2022-11-27T16:25:50Z
       
       0 likes, 0 repeats
       
       @PaterSnape @jefftk @tw @cshabsin I don't really know what you mean here?Specifically, what I mean is "95% of the servers making these requests are Mastodon servers, so this is largely a Mastodon problem." My understanding is Mastodon is also the home to the overwhelming majority of the Fediverse _users_ (even though it's only bare majority of _servers_). My wording choice was poor, but I don't have anyone intentionally blocked?
       
 (DIR) Post #AQ2CWRNQuBPgaaXcqO by AIaYYAle4i1uKmKpqy.gme@bofh.social
       2022-11-27T16:27:02.336744Z
       
       0 likes, 0 repeats
       
       Also:
       
 (DIR) Post #AQ2CfVd8Sdu8O2D6LQ by alex@gleasonator.com
       2022-11-27T16:28:40.243782Z
       
       8 likes, 1 repeats
       
       @sj_zero @crschmidt @tw @jefftk Mastodon wins at number of servers and total number of users.Pleroma and its forks win at activity - of people actually doing stuff. One Pleroma user posts probably 10x more than a Mastodon user and are likely to stick around for longer.
       
 (DIR) Post #AQ2Cr5EUQqoTzWCYc4 by jefftk@mastodon.mit.edu
       2022-11-27T16:28:40Z
       
       0 likes, 0 repeats
       
       @gme @crschmidt @tw @cshabsin in the portion of the post that you've screenshotted I'm only talking about fetching at posting time
       
 (DIR) Post #AQ2Cr5oIHjS9mYx9Q8 by AIaYYAle4i1uKmKpqy.gme@bofh.social
       2022-11-27T16:30:46.487592Z
       
       0 likes, 0 repeats
       
       You also wrongly assume that the fediverse is only made up of Mastodon servers. When I receive a post on Pleroma my Pleroma instance also fetches the URL to generate a preview. Again, the technical solution to this technical problem is for a site to be behind a CDN. If a site is getting hammered where it can't handle the legitimate traffic to it then it should be placed behind a CDN.
       
 (DIR) Post #AQ2D0VpYuXTD5c2PTc by jefftk@mastodon.mit.edu
       2022-11-27T16:31:58Z
       
       0 likes, 0 repeats
       
       @gme @crschmidt @tw @cshabsin saying "Mastodon is doing the wrong thing here" doesn't mean Pleroma isn't also doing the wrong thing!
       
 (DIR) Post #AQ2D0WF5Ndt2MlynGC by AIaYYAle4i1uKmKpqy.gme@bofh.social
       2022-11-27T16:32:28.300932Z
       
       0 likes, 0 repeats
       
       It's not wrong. Use a CDN.
       
 (DIR) Post #AQ2D3tvVmN0WgsR7uC by alex@gleasonator.com
       2022-11-27T16:33:04.675333Z
       
       0 likes, 0 repeats
       
       @sj_zero @crschmidt @tw @jefftk (Look at https://fedi.ninja sorted by most active)
       
 (DIR) Post #AQ2DG4UKKys0vCWZqy by jefftk@mastodon.mit.edu
       2022-11-27T16:34:18Z
       
       0 likes, 0 repeats
       
       @gme @crschmidt @tw @cshabsin does the existence of CDNs mean Googlebot should also feel free to ignore robots.txt?
       
 (DIR) Post #AQ2DG52iH8NMdqc2S0 by AIaYYAle4i1uKmKpqy.gme@bofh.social
       2022-11-27T16:35:17.617327Z
       
       0 likes, 0 repeats
       
       That's a straw man.
       
 (DIR) Post #AQ2DMCtzy1C6krSRcm by PaterSnape@noagendasocial.com
       2022-11-27T16:36:30Z
       
       1 likes, 0 repeats
       
       @crschmidt @jefftk @tw @cshabsin There are three people who answered to your post and didn't show up on the public thread of your instance. So I think they are blocked.
       
 (DIR) Post #AQ2DdrtqnAhopUoHuy by PaterSnape@noagendasocial.com
       2022-11-27T16:39:41Z
       
       0 likes, 0 repeats
       
       @crschmidt @jefftk @tw @cshabsin I don't appear there either, so I don't know what that means.
       
 (DIR) Post #AQ2DtfKdHspkU3s05A by matty@nicecrew.digital
       2022-11-27T16:35:51.186974Z
       
       0 likes, 0 repeats
       
       Huh, we aren't even on the list.
       
 (DIR) Post #AQ2DtfrFKcvC7D82uu by Charlamagne@poa.st
       2022-11-27T16:42:32.564669Z
       
       0 likes, 0 repeats
       
       @matty @alex @crschmidt @tw @jefftk @sj_zero Soon brother... Soon...
       
 (DIR) Post #AQ2DvMKwsgTY9RpEeW by jefftk@mastodon.mit.edu
       2022-11-27T16:42:47Z
       
       0 likes, 0 repeats
       
       @PaterSnape @crschmidt @tw @cshabsin link to one of the posts that seem blocked?
       
 (DIR) Post #AQ2E2Gi8CHKUjHxnCy by PaterSnape@noagendasocial.com
       2022-11-27T16:44:06Z
       
       0 likes, 0 repeats
       
       @jefftk @crschmidt @tw @cshabsin https://gleasonator.com/notice/AQ2CeqYUPflGECnCWO
       
 (DIR) Post #AQ2E2kpcD18q9BhC2S by crschmidt@better.boston
       2022-11-27T16:44:09Z
       
       0 likes, 0 repeats
       
       @PaterSnape Okay. Well, that's through no action of mine. However, looking at https://joinfediverse.wiki/FediBlock likely gives the easy explanation here. - NoAgendaSocial is relatively widely blocked, nearly as much as poa.st. (On better.boston, this is "limited".) - Gleasonator is also widely blocked, and is marked "Suspend" on my instance.I have no particular opinions on these particular moderation choices, but they weren't made by me, and certainly not to block people trying to correct me personally.
       
 (DIR) Post #AQ2EFkBluSBJv1Fkps by alex@gleasonator.com
       2022-11-27T16:46:25.890968Z
       
       3 likes, 1 repeats
       
       @PaterSnape @jefftk @crschmidt @tw @cshabsin MIT is blocking me? Lol.
       
 (DIR) Post #AQ2ERJ5AW5vdKAg6aW by PaterSnape@noagendasocial.com
       2022-11-27T16:48:37Z
       
       0 likes, 0 repeats
       
       @crschmidt That's why I said they were blocked in advance. I personally don't do any instance counting, but they disagree with your numbers. And maybe your estimation is wrong, because you blocked most instances that don't run Mastodon.
       
 (DIR) Post #AQ2ESMhiXKNyqYDJCK by cshabsin@hachyderm.io
       2022-11-27T16:38:00Z
       
       0 likes, 0 repeats
       
       @gme it's really not. It's the same argument. Your argument is "My service is impacting you? That's your problem, not mine."
       
 (DIR) Post #AQ2ESNAQoZM2HbeExE by AIaYYAle4i1uKmKpqy.gme@bofh.social
       2022-11-27T16:48:42.566497Z
       
       0 likes, 0 repeats
       
       Yes, and you have two choices right?You can block the requests in your WAF.You can place your site behind a CDN to absorb the load.As for Google not respecting robots.txt that's immaterial.First, robots.txt is a custom. It's not a rule. It's not a law.Second, plenty of bots and crawlers don't respect robots.txt. Some malicious, sure. But most are benign!So either block the mastodon user-agent from hammering your site in your WAF, or place your site behind a CDN to absorb and spread the load.This isn't complicated.
       
 (DIR) Post #AQ2EW6YsUpAJwJrWd6 by crschmidt@better.boston
       2022-11-27T16:46:31Z
       
       0 likes, 1 repeats
       
       @PaterSnape (re-adding @jefftk to the thread, since he was interested in the behavior; Jeff, see previous post here. This is based on how Mastodon handles instance blocks -- for Pater, a "limit", so I can search for his posts and reply to them, and would see them if I followed him; for Gleasonator, the instance is Suspend, so I can't find them even if I search explicitly.)
       
 (DIR) Post #AQ2EhFgutPAxRLwCau by kroner@seal.cafe
       2022-11-27T16:51:27.139435Z
       
       1 likes, 0 repeats
       
       They can't handle the vegan apparently
       
 (DIR) Post #AQ2Ex9gJ0MYDQzEdX6 by Hollahollara@spinster.xyz
       2022-11-27T16:54:22.804958Z
       
       2 likes, 0 repeats
       
       @kroner @alex @crschmidt @tw @cshabsin @jefftk @PaterSnape See how easily he can ignore the steak.
       
 (DIR) Post #AQ2EymADPhtV4hzw2K by bushgrad@zov.oti.st
       2022-11-27T16:54:38.574019Z
       
       0 likes, 0 repeats
       
       It’s run by students and volunteers afaik
       
 (DIR) Post #AQ2F3CCUYGWMz7Accq by pawlicker@pawlicker.ddns.net
       2022-11-27T16:55:23.971427Z
       
       2 likes, 0 repeats
       
       @alex @crschmidt @jefftk @sj_zero look at meow.social it kept going down and running slow because of mastodon while the only way you can make a single user instance slow is to bloat up the db or be me and run an instance on a old sparc haha
       
 (DIR) Post #AQ2FBdeaMikcRhKwWe by pawlicker@pawlicker.ddns.net
       2022-11-27T16:56:57.721644Z
       
       0 likes, 0 repeats
       
       @PaterSnape @crschmidt @jefftk it's defederation as many instances block others and don't even tell you. Click the view external link button if Eugen still let's you (it was in the timestamp).
       
 (DIR) Post #AQ2FCiA55fA0iUa1mS by jefftk@mastodon.mit.edu
       2022-11-27T16:45:25Z
       
       0 likes, 0 repeats
       
       @gme @crschmidt @tw @cshabsin I don't see how? It seems like the position you were staking out is that it doesn't matter whether the server is behaving contrary to spec, all that matters is that there is a technical workaround available to the site?
       
 (DIR) Post #AQ2FCjV27FVwrlOH4q by AIaYYAle4i1uKmKpqy.gme@bofh.social
       2022-11-27T16:57:05.419057Z
       
       0 likes, 0 repeats
       
       What spec? What standard? What law? What regulation?[RFC 9309](https://www.rfc-editor.org/rfc/rfc9309.html)?Section 1 of RFC 9309 very clearly states:> These rules are not a form of access authorization.Section 2.3.1.1 states:> If the crawler successfully downloads the robots.txt file, the crawler MUST follow the parseable rules.But noting in the RFC mandates that the robots.txt file actually be downloaded.In fact, Section 3 of the RFC goes to great lengths to point out:> The Robots Exclusion Protocol is not a substitute for valid content security measures.
       
 (DIR) Post #AQ2FZTVTk7fTvSRXWq by sj_zero@social.fbxl.net
       2022-11-27T17:01:18.253388Z
       
       0 likes, 0 repeats
       
       >Eyeballs the parts scavenged from roadside signs menacingly
       
 (DIR) Post #AQ2FcmSjiqHXaJjkDQ by bushgrad@zov.oti.st
       2022-11-27T17:01:52.430283Z
       
       0 likes, 0 repeats
       
       My impression is, users who have been around for longer, feel relaxed and are more likely to engage freely. The ‘rules for engaging’ are learned by observation and trial-and-error and are ‘mastered’ by those who stick around. This I observe mostly on Pleroma/Rebased.
       
 (DIR) Post #AQ2FkCnuBSXTJBB94i by bushgrad@zov.oti.st
       2022-11-27T17:03:13.078766Z
       
       0 likes, 0 repeats
       
       To a lesser extent, on Diaspora. On that platform, I think, it’s more long format - so people post less frequently. This may be the reason.
       
 (DIR) Post #AQ2G8vvi3gfCDJcWZc by pawlicker@pawlicker.ddns.net
       2022-11-27T17:07:34.868720Z
       
       0 likes, 0 repeats
       
       @sj_zero @crschmidt @alex @jefftk the real thing is to host a pleroma server on a old server or core 2 duo Dell you got for free or $20 at ewaste/the thrift store under your bed, with dynamic dns.
       
 (DIR) Post #AQ2HLT0R0XA0E8N2zg by dev@m.crschmidt.net
       2022-11-27T17:19:25Z
       
       1 likes, 0 repeats
       
       @alex @PaterSnape No, not MIT; better.boston is (likely because they took the list from Fediblock as a starting point for blocking instances.) https://joinfediverse.wiki/FediBlock
       
 (DIR) Post #AQ2HMH8IdZA1h0R2C8 by cshabsin@hachyderm.io
       2022-11-27T17:18:27Z
       
       1 likes, 0 repeats
       
       @gme it's obviously not a security measure, but your point seems valid. It's a method for being a good citizen of the Internet. If Mastodon, as a platform, doesn't care about following these kinds of norms, then I'm not sure how all these otherwise tech savvy people will be able to continue to support it. The social network is trivially weaponizable. Even for people with CDNs, traffic isn't free.
       
 (DIR) Post #AQ2HNvuiV4UqShs8p6 by PaterSnape@noagendasocial.com
       2022-11-27T17:21:37Z
       
       0 likes, 0 repeats
       
       @dev @alex I think he talks about mastodon.mit.edu , which seems to block him.
       
 (DIR) Post #AQ2HWRwlHnrQ7wtEJc by AIaYYAle4i1uKmKpqy.gme@bofh.social
       2022-11-27T17:23:02.854685Z
       
       0 likes, 0 repeats
       
       At least Cloudflare does have a free plan so there really isn't an excuse. If a site is personal and isn't making any money or generating any revenue there's no fiscal reason why it can't be hosted behind Cloudflare's free CDN & WAF which should mitigate these issues.Every single one of my sites are behind Cloudflare.For the sites I actually make money from them I gladly pay the $20 a month.For the sites that I don't make any money on and that are personal and non-commercial, I'm using the free plan.Simple.
       
 (DIR) Post #AQ2HZaxuDDdoxxvOfg by PaterSnape@noagendasocial.com
       2022-11-27T17:23:44Z
       
       0 likes, 0 repeats
       
       @dev @alex No, you are right. One of his post is visible on the MIT instance.
       
 (DIR) Post #AQ2Hz6zMHqnfWaltZY by PaterSnape@noagendasocial.com
       2022-11-27T17:28:20Z
       
       0 likes, 0 repeats
       
       @dev @alex *all of his posts
       
 (DIR) Post #AQ2JR6AF2tRx1vlray by cshabsin@hachyderm.io
       2022-11-27T17:42:09Z
       
       0 likes, 0 repeats
       
       @gme the free plan must cap out at some amount of usage.I'm also disinclined to use Cloudflare since they took their sweet time taking down The Daily Stormer.
       
 (DIR) Post #AQ2JR6YLbGjSEh37AW by AIaYYAle4i1uKmKpqy.gme@bofh.social
       2022-11-27T17:44:31.069569Z
       
       0 likes, 0 repeats
       
       I have yet to hit any caps in over 10 years and averaging >4TB a month on one of my sites that's on the free plan.
       
 (DIR) Post #AQ2Jzr4l8UWmMymPjs by epic@gleasonator.com
       2022-11-27T17:50:53.653823Z
       
       1 likes, 0 repeats
       
       @alex @PaterSnape @jefftk @crschmidt @tw @cshabsin That’s better than a degree from them. Wild cards drastically change the game.
       
 (DIR) Post #AQ2SV2WBRWJsT3zKng by coin@asimon.org
       2022-11-27T19:26:09.016212Z
       
       1 likes, 0 repeats
       
       @crschmidt @jefftk @tw @alex @crschmidt @tw @jefftk @sj_zero And that's the actual important figure. We need activity, not numbers.
       
 (DIR) Post #AQ3vltLtrlQinAWgK0 by shanselman@hachyderm.io
       2022-11-28T05:04:30Z
       
       0 likes, 0 repeats
       
       @gme @crschmidt @tw @cshabsin @jefftk I will likely regret wading in here but this is a rather bizarre thread. Spec or not, it’s poor design. It’s irresponsible. It’s messy. It’s resource intensive. To say “put a CDN on it” doesn’t change the waste - it hides the bug/implementation and shifts the responsibility. @jwz and friends are correct to bring attention to it. Don’t bury it. Fix it. @Gargron
       
 (DIR) Post #AQ3vltuzlHVEY0wi1Y by pilky@mastodon.social
       2022-11-28T09:54:35Z
       
       0 likes, 0 repeats
       
       @shanselman @gme @crschmidt @tw @cshabsin @jefftk @jwz @Gargron Maybe it’s because I’m coming at this from the view of a native app developer but “just put it behind a CDN” in response to inefficiencies in the fediverse feels like an app developer telling users “just charge your phone more often” in response to their app eating all the battery. It’s up to devs to be a good platform citizen
       
 (DIR) Post #AQ3vluP7xFbc3T2lzU by AIaYYAle4i1uKmKpqy.gme@bofh.social
       2022-11-28T12:28:45.591933Z
       
       0 likes, 0 repeats
       
       And I was approaching this from both a sysadmin and infosec perspective.Anyone that deploys an application today that is not behind a WAF is foolish.Cloudflare offers both. A WAF and CDN.Double-win in my book.
       
 (DIR) Post #AQ3wBkf8nSINN2rBMe by corpsmoderne@mamot.fr
       2022-11-28T06:33:42Z
       
       0 likes, 0 repeats
       
       @gme @crschmidt @tw @cshabsin @jefftk let's put this straight: you think everyone will the smallest blog site which will have a dozen of human visits per day tops should use a CDN because Mastodon can't come up with a reasonable mechanism to share website previews?
       
 (DIR) Post #AQ3wBlPa0nRTh4aGkS by AIaYYAle4i1uKmKpqy.gme@bofh.social
       2022-11-28T12:33:26.352254Z
       
       0 likes, 0 repeats
       
       > let's put this straight: you think everyone will the smallest blog site which will have a dozen of human visits per day tops should use a CDN because Mastodon can't come up with a reasonable mechanism to share website previews?Yes. If you want to prevent your site from getting DDOS'd, which is exactly what we're talking about here. Cloudflare offers a free WAF and CDN to everybody.If you had an option of deploying a no-cost WAF and CDN in front of your website what's the excuse for not deploying it?