Post B7m5iK4sQ3WlQKZrEW by ariadne@social.treehouse.systems
 (DIR) More posts by ariadne@social.treehouse.systems
 (DIR) Post #B7m4kRh6yIubfguSps by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       the fact that Evan Prodromou (threat model: cisgender white canadian man) launched tags.pub without thinking about risks or exposure is, I assure you, par for the courseevery security & privacy win in activitypub happened despite evan
       
 (DIR) Post #B7m4pvCMhgL8cn8i7E by natty@astolfo.social
       0 likes, 0 repeats
       
       @ariadne@treehouse.systems 10/10 use of "despite"
       
 (DIR) Post #B7m5iJsTABbQnqlwtU by noisytoot@berkeley.edu.pl
       0 likes, 0 repeats
       
       @ariadne I don't really get all the opposition to it when it's quite literally doing the exact same thing as public relays (boosting public posts from instances subscribed to said relays). The only difference as far as I can tell is that people are more aware of tags.pub because they're notified of the boosts.
       
 (DIR) Post #B7m5iK4sQ3WlQKZrEW by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @noisytoot because it boosts any hashtag it sees, including ones it probably shouldn't, like peoples lewds and shit
       
 (DIR) Post #B7m5qsABZcgtSH8a5g by noisytoot@berkeley.edu.pl
       0 likes, 0 repeats
       
       @ariadne but it gets the posts from public relays which are already boosting all these posts, just people probably aren't as aware of it
       
 (DIR) Post #B7m5qsPQewssDYGkqm by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @noisytoot this is also why relays are stupid
       
 (DIR) Post #B7m5y9m2Upwk6HJgCu by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @noisytoot (the reason I wrote a relay server was to demonstrate that it could be done with Announce activities, thus not needing permanently lived LDSigs, not because relays are good)
       
 (DIR) Post #B7m62Kjrff6HGXI6HA by PuercoPop@mastodon.social
       0 likes, 0 repeats
       
       @ariadne what would a good consent model look for aggregation services. I've thought about servers having an actor that represents the instance. Following the server actor would be a way to opt-in to the aggregation.
       
 (DIR) Post #B7m6J8ag5gtEVn0Tce by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @PuercoPop *mutters loudly about capability based security*
       
 (DIR) Post #B7m9GFEZEZxQ6qycqm by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @noisytoot @zwol not to mention identity fraud
       
 (DIR) Post #B7mC4QS600M7I1MPiK by evan@cosocial.ca
       0 likes, 0 repeats
       
       @ariadne I have bad news: I am not even gay. 🫤
       
 (DIR) Post #B7mCXuQXdFHIeYgz56 by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @evan I stand corrected
       
 (DIR) Post #B7mEMVjjI3cAneMNhA by ariadne@social.treehouse.systems
       0 likes, 1 repeats
       
       @luana the problem isn't the use of hashtag but rather the unintended amplification.  for example, somebody uses a hashtag to group posts targeted at their direct audience.the other part is that tags.pub works by scraping relay traffic.
       
 (DIR) Post #B7mElY4ziSnPJ2FHJQ by ariadne@social.treehouse.systems
       0 likes, 1 repeats
       
       @luana so if you are on a server which uses relays (you really shouldn't IMO), then there is a much larger chance that you shoot yourself in the foot if you're using a hashtag for post grouping that you don't really intend to distribute to the public.a lot of the problem isn't tags.pub or relays but rather that activitypub's security model as implemented in practice does not give publishers enough control over how posts flow through the network
       
 (DIR) Post #B7mMhxiFGozTHSPCTo by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @futzle yes all of that is correct.  this is why authorized fetch should be the default.
       
 (DIR) Post #B7mgFEzZwcMpYd5xLs by ohmu@social.seattle.wa.us
       0 likes, 0 repeats
       
       @ariadne How would one know if my server uses relays?I mean, I know my admin so I can just ask them but is there another way?
       
 (DIR) Post #B7mhjuIL2xx4IT3YhM by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @ohmu basically that, sadly.
       
 (DIR) Post #B7myJJXMmpntzEzVGC by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @philippe yes that is one of the problems 🙃
       
 (DIR) Post #B7n49d7Bk2ZzXFVnF2 by vfrmedia@social.tchncs.de
       0 likes, 0 repeats
       
       @ariadne @noisytoot @zwol I use a *lot* of hashtags, but curiously only my post about an old radio transmitter being closed down got snagged by these bots, none of my toots about cars, transport, crime reports from UK - which makes me /more/ suspicious - is the setup *really* following every hashtag (which might not even work as there seem to be some bizzare ones being used), or is it quietly being curated in a subtle attempt to introduce algorithms to the Fedi?