#tallship — Public Fediverse posts

@monniele The two closest actual production initiatives, or perhaps, production grade proof of concepts, at least in my mind, were/are Keybase and KeyOxide, respectively - not that #Keybase is gone, but just a scroll back a couple of days I quote posted a post linked to @simontatham 's Fedi post two weeks ago about Zoom privacy mining one of your clipboards.

You can find my post just scrolling back 4 days until you see Kewl Hand Luke, finally pretending to relent to the Captain's perverse requirement of total and complete subjugation.

Anyway, Keybase has been a modern day ghost town since Chris Coyne abrubtly announced he had sold it to Zoom and then rode off into the sunset. The underlying issue is indeed trust, and Zoom could and may have introduced new keys at anytime w/o notification.

I'm getting off the point a bit, I think. The concept of both Keybase and #KeyOxide is that of an ever increasing cross-convoluted web of signed cryptographic proofs that atest that "I am who I say I am".

Certainly, There's no way to certify my:

client side attestation that verifies the user's intent rather than just their device ID.

... After all, I might be psychotically afflicted with bi-polar disorder twice a week (I'm not, but still), but I do believe that mal-intents, for the most part, aren't going to go through weeks and years of building cross-connects showcasing their personalities and presence, like the everyday schmoes like you and I might because we, as people, typically like to share essentially who we are... or at least, who we see ourselves as :)

I do think that FOSS based community managed services can go a long way towards at least assuring, if not certifying, with a great degree of confidence that we are who we say [we think] we are though.

There's an elephant in the room though that no one has pointed at. Even Simon mentions it so matter-of-factly that I don't believe the emphasis that we need to place on this is being ascribed to the problem - Zoom is (almost certainly) privacy mining password vaults via the clipboard - VaultWarden, KeypassXC, Pass, Ente Auth, Etc., if not ubiquitous, are certainly increasingly commonplace utilities in everyday use on Androids and Desktops globally. Industrial password farming from the clipboard is a very real threat.

Well at the risk of already having bored you to death, or maybe just preaching to the choir, I'll close now, thanking you for your thoughtful reply :)

#tallship #OpenSource #FOSS #KeepassXC #KeepassDX #kdbx #VaultWarden #pass #passwordstore #OpenKeyChain #Identity #Privacy

⛵

@monniele The two closest actual production initiatives, or perhaps, production grade proof of concepts, at least in my mind, were/are Keybase and KeyOxide, respectively - not that #Keybase is gone, but just a scroll back a couple of days I quote posted a post linked to @simontatham 's Fedi post two weeks ago about Zoom privacy mining one of your clipboards.

You can find my post just scrolling back 4 days until you see Kewl Hand Luke, finally pretending to relent to the Captain's perverse requirement of total and complete subjugation.

Anyway, Keybase has been a modern day ghost town since Chris Coyne abrubtly announced he had sold it to Zoom and then rode off into the sunset. The underlying issue is indeed trust, and Zoom could and may have introduced new keys at anytime w/o notification.

I'm getting off the point a bit, I think. The concept of both Keybase and #KeyOxide is that of an ever increasing cross-convoluted web of signed cryptographic proofs that atest that "I am who I say I am".

Certainly, There's no way to certify my:

client side attestation that verifies the user's intent rather than just their device ID.

... After all, I might be psychotically afflicted with bi-polar disorder twice a week (I'm not, but still), but I do believe that mal-intents, for the most part, aren't going to go through weeks and years of building cross-connects showcasing their personalities and presence, like the everyday schmoes like you and I might because we, as people, typically like to share essentially who we are... or at least, who we see ourselves as :)

I do think that FOSS based community managed services can go a long way towards at least assuring, if not certifying, with a great degree of confidence that we are who we say [we think] we are though.

There's an elephant in the room though that no one has pointed at. Even Simon mentions it so matter-of-factly that I don't believe the emphasis that we need to place on this is being ascribed to the problem - Zoom is (almost certainly) privacy mining password vaults via the clipboard - VaultWarden, KeypassXC, Pass, Ente Auth, Etc., if not ubiquitous, are certainly increasingly commonplace utilities in everyday use on Androids and Desktops globally. Industrial password farming from the clipboard is a very real threat.

Well at the risk of already having bored you to death, or maybe just preaching to the choir, I'll close now, thanking you for your thoughtful reply :)

#tallship #OpenSource #FOSS #KeepassXC #KeepassDX #kdbx #VaultWarden #pass #passwordstore #OpenKeyChain #Identity #Privacy

⛵

@monniele The two closest actual production initiatives, or perhaps, production grade proof of concepts, at least in my mind, were/are Keybase and KeyOxide, respectively - not that #Keybase is gone, but just a scroll back a couple of days I quote posted a post linked to @simontatham 's Fedi post two weeks ago about Zoom privacy mining one of your clipboards.

You can find my post just scrolling back 4 days until you see Kewl Hand Luke, finally pretending to relent to the Captain's perverse requirement of total and complete subjugation.

Anyway, Keybase has been a modern day ghost town since Chris Coyne abrubtly announced he had sold it to Zoom and then rode off into the sunset. The underlying issue is indeed trust, and Zoom could and may have introduced new keys at anytime w/o notification.

I'm getting off the point a bit, I think. The concept of both Keybase and #KeyOxide is that of an ever increasing cross-convoluted web of signed cryptographic proofs that atest that "I am who I say I am".

Certainly, There's no way to certify my:

client side attestation that verifies the user's intent rather than just their device ID.

... After all, I might be psychotically afflicted with bi-polar disorder twice a week (I'm not, but still), but I do believe that mal-intents, for the most part, aren't going to go through weeks and years of building cross-connects showcasing their personalities and presence, like the everyday schmoes like you and I might because we, as people, typically like to share essentially who we are... or at least, who we see ourselves as :)

I do think that FOSS based community managed services can go a long way towards at least assuring, if not certifying, with a great degree of confidence that we are who we say [we think] we are though.

There's an elephant in the room though that no one has pointed at. Even Simon mentions it so matter-of-factly that I don't believe the emphasis that we need to place on this is being ascribed to the problem - Zoom is (almost certainly) privacy mining password vaults via the clipboard - VaultWarden, KeypassXC, Pass, Ente Auth, Etc., if not ubiquitous, are certainly increasingly commonplace utilities in everyday use on Androids and Desktops globally. Industrial password farming from the clipboard is a very real threat.

Well at the risk of already having bored you to death, or maybe just preaching to the choir, I'll close now, thanking you for your thoughtful reply :)

#tallship #OpenSource #FOSS #KeepassXC #KeepassDX #kdbx #VaultWarden #pass #passwordstore #OpenKeyChain #Identity #Privacy

⛵

@apps

This is excellent news, a demonstration of courage and commitment to one's values that warrants notice, but moreover, notice being taken by other #Fediverse software developers, and further, #FOSS in general.

@tom79 has already demonstrated such courage a few years ago when the Tusky devs decided to convert their #Android app to #Crippleware, and arguably criminally promote that bait & switch at the #Google_Playstore - once the news of this treachery got out it almost got Tusky permanently removed, and did nothing but provide the impetus for massive amounts of Tusky forks to be made available at the #playstore, with the hardcoded cripples removed, many within minutes of every Tusky update - their ratings crashed into the "two's" within days of releasing their product as crippleware.

That wasn't really the news, however. Against an almost unbearable assault of threats and denigration by an army of snot-nosed children on the Fediverse moving in blind lockstep, #FediLab, the very best Android Fediverse app supporting over a dozen Fediverse platforms including #PixelDev, #Friendica #PeerTube, and at least half a dozen others, stood fast, refusing to join in conspiratorial behavior to disenfranchise the #Freedom everyday users expected, in the spirit and letter of the #FSF and #GPL.

When the dust settled, FediLab prevailed and a black cloud remains over Tusky to this day with respect to trust that was never reclaimed from average, everyday users. Much of this is water under the bridge, considering the plethora of Fediverse clients for both Android and web-based #PWS innovations, but the point being made is that here we are, on the eve of another evil being inflicted upon the #Freedom_of_choice by the user, in an insidious attempt to subjugate the users by virtue of giving developers a choice between subverting them through the threat of hamstringing or disenfranchising them.

The Fedilab Development team has been through this before, and stood fast at the helm to ensure the freedom of choice for the users, and this time they stand firm again for the same freedoms - but this time, not just for the users, but their very existence, in the face of the dystopian despotism of the Alphabet Corporation (Google).

By now it's become quite clear that it's not so much about the #privacy of #pseudonymity that many developers insist upon, although that is an important part of the issue; but rather, the ultimatum between being swearing fealty to an evil baron or insisting on the abandonment of crippleware in favor of insuring their products derived from intensely hard work and effort is available directly via #git repos everywhere, and app distribution services like F-Droid.

Thank you @apps - still the very best #Android app!

#tallship #KYC #fdroid #OpenSource #Free_Software_Movement FSM

⛵

RE: https://toot.fedilab.app/users/apps/statuses/117277154889320838

@downey

Mastodon IS NOT the #Fediverse!

The #BDFL of that project saying it's is "vital" illustrates the branding philosophy and corporate, ego driven mindset behind so many PRs and requests that have repeatedly been rejected by an overwhelming amount of Fediverse users and developers - just look at how many 👎 "thumbs down" 👎 reactions his post received (that is rarely seen on GitHub).

His language and marketing have been largely successful, confusing newcomers during this Twitter egress (including media coverage) and conflating just what the Fediverse and mastodon are...

People are saying, "I just joined mastodon!" - NO, you did not. You just joined the "Fediverse", by creating an account on a mastodon server. Even newcomers creating accounts on #Friendica and #Pleroma servers are often seen saying this, and it needs to "STOP".

The Fediverse is the network they are joining, and mastodon is just one of a dozen or so viable platforms that people can use to do so.

Truth be told, mastodon is one of the least feature complete Fediverse server platforms, lacking in many of the most basic social networking tools and features that most other popular server platforms introduced ages ago.

It doesn't even render Markdown, have have quotable boosting, only introduced editing of posts a couple of weeks back, and has a hard coded limit of a paltry 500 characters for each post, forcing users to create those confusingly chronologically backward hellthreads that are interspersed and broken up in everyone's feeds, and there's many more deficiencies to list here.

This is why there are so many different forks.

When you create a #PeerTube account, you haven't joined the PeerTube network - you've joined the Fediverse!

When you create a #Pixelfed account, you haven't joined the Pixelfed network - you've joined the Fediverse!

If you create a mastodon account, you haven't joined "mastodon" - you've joined three Fediverse!

There is no such thing as a mastodon network!

It's just one type of Fediverse server platform, among many, like:

#Akkama, Pleroma, Friendica, #Lemmy, #Soapbox, #Misskey, PeerTube, #Mitra, Pixelfed, #MicroPub, #Epicyon, #Quanta, #GoToSicial, #Socialhome, #FunkWhale, and many many other platforms that open up the entire Fediverse to people, allowing them to share and seamlessly communicate with one another.

There are analogs for #Faceplant, #Twitter, #InstaSPAM, #Reddit, and pretty much any type of social networking experience you can find in the deprecated, centralized, legacy silo systems that cannot, and do not wish to interact with each other - which the Fediverse breaks the paradigm of, and empowers everyone engage with each other globally.

Mastodon's marketing has very deliberately been designed to subvert that narrative and replace this reality with its own, self serving commercial interests to the detriment of Fediverse itself.

A wake up call us coming very soon when the #non_FOSS based platforms like #Tumblr and #Imgur join their (millions) substantial user bases to the Fediverse at which time, mastodon itself may find itself drowned out and largely irrelevant due to its very lacking feature set, and ask if the other existing Fediverse platforms providing so much more if what is possible for us all.

This is typically what happens when your development is driven by egocentric, ulterior motives (whether he actually realizes this about himself or not) to benefit yourself personally - just look at how his donations have jumped, even though newcomers are creating accounts on other Fediverse and mastodon servers begging for donations that for the most part are going directly to him.

#tallship #FOSS #ActivityPub #introductions #newcomers

⛵

.

@[email protected]

Too bad mastodon is incapable of rendering #Markdown or punishing posts with more than 500 characters.

That's perhaps a good reason to consider moving to #Fediverse platforms like #Akkama, #Friendica, #Hometown, #Pleroma, and #suffix, and #SoapBox.

https://btrf.ly

#tallship #FOSS #SaaS #ActivityPub

⛵

.

Fast and #Easy_Peasy #light_theme and #dark_theme swap outs in #Fedilab.

• Lightning fast cross-account #boosting and favoriting.

• Integrated two tap post translation powered by #FOSS based #LibreTranslate.

• #Scheduled posting and boosting.

• True #bookmarking

• Unlimited Multi-Account management.

• Full #moderation suite of tools for regular user accounts and admin level server management.

• Complete native #Support for the most popular #Fediverse server platforms including #Akkama, #Friendica, #GnuSocial, mastodon, #PeerTube, #Pixelfed, #Pleroma, #Rebased, #Soapbox, and partial basic support for many more.

• Configurable #hashtag following collection management with search and #timeline_reordering.

• #Automagic link sanitation using #Invidious and #Nitter when posting, and following twitter timelines with integrated Nitter support.

Truly the most #feature_complete and trusted Fediverse client for #Android - no hidden blocks or crippleware like others, ever.

If you’re looking for the best #Android app for all your Fediverse needs, you need look no further. #Fedilab is available via F-Droid and The Google Playstore.

#tallship @apps #UntrackMe #FDroid #ActivityPub

⛵

.

RT: https://toot.fedilab.app/users/apps/statuses/109474849867080460

Yes indeed @alexstandiford 😎

I’m going to shower you with a plethora of research i think you’re going to like.

https://fedidb.org/

https://JoinTheFedi.com - similar to Mastodon, but without the 500 character limit (#SoapBox, #Pleroma, #Akkama), and there’s a new managed hosting service launching in s few days for $15/mo. I’ll share that link when it goes live if you like.

Always glad to see folks coming over from the deprecated, privacy disrespecting, monolithic legacy silos!

While you’re perusing the #FediDB, take some time to checkout other #Fediverse platforms like:

• #PeerTube (WebTorrent based Livestream and VoD)
• #Friendica (like #Faceplant - easy LAMP stack install)
• #FunkWhale (free music streaming)
• #Pixelfed (like #InstaSPAM)

All of them federate seamlessly, all #FOSS, all of them can be self-hosted on an inexpensive VPS.

Well, we dunt want to overwhelm you right it of the gate, and BTW, you made a good choice with the instance you chose. I’ve got an account on #Fosstodon too, and feel free to give me a follow there if you like!

#tallship #Privacy #ActivityPub

⛵

.

Yes indeed @alexstandiford 😎

I’m going to shower you with a plethora of research i think you’re going to like.

https://fedidb.org/

https://JoinTheFedi.com - similar to Mastodon, but without the 500 character limit (#SoapBox, #Pleroma, #Akkama), and there’s a new managed hosting service launching in s few days for $15/mo. I’ll share that link when it goes live if you like.

Always glad to see folks coming over from the deprecated, privacy disrespecting, monolithic legacy silos!

While you’re perusing the #FediDB, take some time to checkout other #Fediverse platforms like:

• #PeerTube (WebTorrent based Livestream and VoD)
• #Friendica (like #Faceplant - easy LAMP stack install)
• #FunkWhale (free music streaming)
• #Pixelfed (like #InstaSPAM)

All of them federate seamlessly, all #FOSS, all of them can be self-hosted on an inexpensive VPS.

Well, we dunt want to overwhelm you right it of the gate, and BTW, you made a good choice with the instance you chose. I’ve got an account on #Fosstodon too, and feel free to give me a follow there if you like!

#tallship #Privacy #ActivityPub

⛵

.