Don’t record your social life on an append-only social network (2022)(ctrl.blog)
ctrl.blog
Don’t record your social life on an append-only social network (2022)
https://www.ctrl.blog/entry/append-only-social.html
141 comments
> Learn about Nostr: A simple, open protocol that enables a truly censorship-resistant and global social network.
> Relays are like the backend servers for Nostr. They allow Nostr clients to send them messages, and they may (or may not) store those messages and broadcast those messages to all other connected clients.
I still haven't wrapped my head around these two words from the nostr site. How can it be truly censorship-resistant when used are entirely dependant on what their relays decide to store and share?
> Relays are like the backend servers for Nostr. They allow Nostr clients to send them messages, and they may (or may not) store those messages and broadcast those messages to all other connected clients.
I still haven't wrapped my head around these two words from the nostr site. How can it be truly censorship-resistant when used are entirely dependant on what their relays decide to store and share?
I'm not particularly familiar with the project, but:
The claim is that it enables social network/s that are resistant to censorship. It doesn't say that it is a social network that's impossible to censor.
It's a protocol that everyone is free to implement. Valid implementations of the protocol should be compatible with each other. Meaning you don't have to go to soshl.com or use the Soshl app. Relays can choose whether or not to store/broadcast your messages, yes. But they can't stop you from sending them and they can't fake or modify your messages. They also can't revoke your identity. I assume a relay can't force other relays to delete things, but I'm not sure of the details.
A relay choosing to retransmit your message or not could be considered censorship, but it is not the same censorship as a court ordering Youtube to take a video down, which is not the same as Twitter silently burying your posts, which is not the same as the police arresting protestors, etc...
The claim is that it enables social network/s that are resistant to censorship. It doesn't say that it is a social network that's impossible to censor.
It's a protocol that everyone is free to implement. Valid implementations of the protocol should be compatible with each other. Meaning you don't have to go to soshl.com or use the Soshl app. Relays can choose whether or not to store/broadcast your messages, yes. But they can't stop you from sending them and they can't fake or modify your messages. They also can't revoke your identity. I assume a relay can't force other relays to delete things, but I'm not sure of the details.
A relay choosing to retransmit your message or not could be considered censorship, but it is not the same censorship as a court ordering Youtube to take a video down, which is not the same as Twitter silently burying your posts, which is not the same as the police arresting protestors, etc...
Users publish their messages to multiple relays, and they can be followed by others on multiple relays. The idea is that if a relay starts censoring, then users and their followers can choose different relays, so the system as a whole “routes around censorship”. At least in theory.
I interpreted in a similar yet different way. It is not just that users can choose a non-censoring relay but that users are connected to many different relays and so it does not matter if a few relays censor stuff
This is an interesting detail to me and may just spend on how the community grows
In Mastodon each server makes their own decision on who to censor. Functionally it's grown into a bit of a hard mentality with entire servers being censored if they don't go along with the larger group
In Mastodon each server makes their own decision on who to censor. Functionally it's grown into a bit of a hard mentality with entire servers being censored if they don't go along with the larger group
Messages are signed locally with entirely local private key, so relays can censor or ban all they like following local laws, without harm to your identity or social graph.
Hopefully someone, like a Raspberry Pi cluster on a derelict Soviet military space station on an international orbit, will take your message and relay it, :shrug:, and those messages can still be authenticated by the key.
That’s how I understand that part; Nostr uses DNS for blue badges and relay connections so “truly” indeed sound a bit of crypto talk though.
Hopefully someone, like a Raspberry Pi cluster on a derelict Soviet military space station on an international orbit, will take your message and relay it, :shrug:, and those messages can still be authenticated by the key.
That’s how I understand that part; Nostr uses DNS for blue badges and relay connections so “truly” indeed sound a bit of crypto talk though.
Do you know if nostr supports peer to peer messages, or did everything have to go through a relay?
If it's all through a relay it probably isn't very censorship resistant at all. My messages may be signed locally but if the network trends towards mob-based bans and censorship like Mastodon as soon as I get on the wrong side of the network I'll be the only one seeing my signed posts
If it's all through a relay it probably isn't very censorship resistant at all. My messages may be signed locally but if the network trends towards mob-based bans and censorship like Mastodon as soon as I get on the wrong side of the network I'll be the only one seeing my signed posts
I believe it's all through relays, there's no peer discovery or even inter-relay meshing. So that could very well could happen. Currently it's just each clients multi-posting to dozen relays and receiving dozen duplicates.
What I believe that "censorship resistance" actually means in un-cryptocurrencified talk is, it lets relay operators filter out locally illegal but not globally unethical contents(e.g. political speeches, pornography, certain URLs and strings) without banning users and/or fragmenting the network. And that is an improvement over Mastodon/ActivityPub architecture.
But boy those crypto guys knows how to hype it up...
What I believe that "censorship resistance" actually means in un-cryptocurrencified talk is, it lets relay operators filter out locally illegal but not globally unethical contents(e.g. political speeches, pornography, certain URLs and strings) without banning users and/or fragmenting the network. And that is an improvement over Mastodon/ActivityPub architecture.
But boy those crypto guys knows how to hype it up...
>If it's all through a relay it probably isn't very censorship resistant at all. My messages may be signed locally but if the network trends towards mob-based bans and censorship like Mastodon as soon as I get on the wrong side of the network I'll be the only one seeing my signed posts
Well on their page they said" To publish something, you write a post, sign it with your key and send it to multiple relays (servers hosted by someone else, or yourself)."
If you really want to prevent that then it is to also selfhost.
Well on their page they said" To publish something, you write a post, sign it with your key and send it to multiple relays (servers hosted by someone else, or yourself)."
If you really want to prevent that then it is to also selfhost.
Good question. Not sure about Nostra, but that is how WebRTC is doing it. If there is only 2 people then it is peer to peer, more parties require some sort 'relay' to facilitate the chats.
However the main issue with peer to peer is not everyone is going to be online all the time, relay serves as a temporary storage place until one of the user/client goes online and get the message.
However the main issue with peer to peer is not everyone is going to be online all the time, relay serves as a temporary storage place until one of the user/client goes online and get the message.
I tried nostr but found it hard to find anything except people sending micro transactions to each other and posting memes about Bitcoin.
That's because bitcoiners created it and Jack Dorsey boosted it and abandoned Twitter for it. He's been extremely active there, https://primal.net/jack
And the idea of using nano transactions for upvotes has long been an attractive approach in this community for mitigating bot swarms from influencing conversations. In fact, the proof of work system that bitcoin was based on was originally proposed in the 90s as a solution to fight email spam. A micro cost of computation power (or a nano transaction) is neglegible to most legitimate users, but adds up quickly for spammers who depend on sending out thousands of emails for a single hit.
And the idea of using nano transactions for upvotes has long been an attractive approach in this community for mitigating bot swarms from influencing conversations. In fact, the proof of work system that bitcoin was based on was originally proposed in the 90s as a solution to fight email spam. A micro cost of computation power (or a nano transaction) is neglegible to most legitimate users, but adds up quickly for spammers who depend on sending out thousands of emails for a single hit.
Isn't nostr still an append-only solution?
Yes, you delete by appending a delete event:
https://github.com/nostr-protocol/nips/blob/7d792055372ce1af...
Then clients and relays SHOULD act as if the referenced event is deleted. This is different than MUST, probably because there’s no way to guarantee it happens. It’s also possible the delete event doesn’t make it to everywhere that received the initial event.
https://github.com/nostr-protocol/nips/blob/7d792055372ce1af...
Then clients and relays SHOULD act as if the referenced event is deleted. This is different than MUST, probably because there’s no way to guarantee it happens. It’s also possible the delete event doesn’t make it to everywhere that received the initial event.
DELETE is never a MUST when it's sent to someone else computer.
I demand you delete your comment!
Social media sites are being siphoned up by various intelligence services, data brokers, quant trading firms. Everything you delete always has a window where it can be permanently recorded by someone. Even on HN. Anything you delete/edit isn't necessarily gone forever, even if it is no longer on the server you posted to.
If I was one of these creepy organizations, “deleted, edited, or not posted” would have to be a pretty strong signal that I might be interested in it.
It's a key reason why I don't attempt to delete social media posts. I've said a lot of stupid shit over the years, and whether I like it or not, that stupid shit is permanent; any attempt to take it down would only serve to make it more interesting and more worthy of preservation. Better to let that stupid shit linger unnoticeably - or even better, embrace that I'm (hopefully) a better person than I was $N years ago.
See also: the Streisand effect
See also: the Streisand effect
> It's a key reason why I don't attempt to delete social media posts. I've said a lot of stupid shit over the years...any attempt to take it down would only serve to make it more interesting and more worthy of preservation.
Only if someone cares enough about your social media to be watching for deletions, which I'd imagine is pretty rare. If no one's watching now, now is the right time to delete something.
> See also: the Streisand effect
I think it's important not to overstate that effect, as there are lots of scenarios where deletion will not draw more attention to something. For instance: you're a rando deleting something that's not interesting, not currently being observed, or something no one will notice when it's gone.
The trope namer got hit by it because 1) she's a celebrity, and 2) removal would result in a noticeable gap.
Only if someone cares enough about your social media to be watching for deletions, which I'd imagine is pretty rare. If no one's watching now, now is the right time to delete something.
> See also: the Streisand effect
I think it's important not to overstate that effect, as there are lots of scenarios where deletion will not draw more attention to something. For instance: you're a rando deleting something that's not interesting, not currently being observed, or something no one will notice when it's gone.
The trope namer got hit by it because 1) she's a celebrity, and 2) removal would result in a noticeable gap.
> removal would result in a noticeable gap
It would, if someone were looking in detail, but that isn't what the Streisand Effect is. That effect is the demand to stop/remove something that draws attention to it, not the actual removal (if it is indeed removed at all).
If the photo of her property had been quietly removed by the photographer I and most others would likely never know anything about it, much like you and most of the rest of the world wouldn't know I deleted a post on my blog that was so full of embarrassing typos that I couldn't be bothered to correct it. I know about it because of the heavy-handed demand that it be removed from that collection.
It would, if someone were looking in detail, but that isn't what the Streisand Effect is. That effect is the demand to stop/remove something that draws attention to it, not the actual removal (if it is indeed removed at all).
If the photo of her property had been quietly removed by the photographer I and most others would likely never know anything about it, much like you and most of the rest of the world wouldn't know I deleted a post on my blog that was so full of embarrassing typos that I couldn't be bothered to correct it. I know about it because of the heavy-handed demand that it be removed from that collection.
Right, but how do I know that nobody's watching? Indeed, the idea that nobody's watching seems far-fetched; even if that somebody is some Internet archival robot or NSA monitoring tool or advertising algorithm, it seems more likely than not that all but the most recent posts would draw more attention if deleted than if left alone, whether I'm a nobody or a celebrity or somewhere in between.
> Right, but how do I know that nobody's watching?
A better way to think about it is: do you have good reason to think someone is actively watching you or will go through the effort to collate your social media posts against some archive (that will be incomplete unless you're an active target)? If you don't, delete away.
If you're still concerned, delete some old stuff randomly to distract from the stuff you really want to delete.
> even if that somebody is some Internet archival robot
Those can't even scrape everything people actually want to keep, let alone comprehensively scrape every social media post from everyone. There are huge gaps.
I actually was peripherally involved in some volunteer efforts to archive a bunch of stuff around the Hong Kong protests and the Afghanistan withdrawal. IIRC, they didn't even try to scrape Facebook posts (because FB was doing so much to thwart scraping, and there may have even been problems with Twitter). There are well-developed tools for YouTube, through.
A better way to think about it is: do you have good reason to think someone is actively watching you or will go through the effort to collate your social media posts against some archive (that will be incomplete unless you're an active target)? If you don't, delete away.
If you're still concerned, delete some old stuff randomly to distract from the stuff you really want to delete.
> even if that somebody is some Internet archival robot
Those can't even scrape everything people actually want to keep, let alone comprehensively scrape every social media post from everyone. There are huge gaps.
I actually was peripherally involved in some volunteer efforts to archive a bunch of stuff around the Hong Kong protests and the Afghanistan withdrawal. IIRC, they didn't even try to scrape Facebook posts (because FB was doing so much to thwart scraping, and there may have even been problems with Twitter). There are well-developed tools for YouTube, through.
I don't get why there is no inter-relay communication. From what I read it would just work but it is not allowed for some reason.
How is it different from Secure Scuttlebutt?
Seems neat. Has anyone written an ActivityPub bridge for nostr?
Users don't use protocols they use websites. Or more specifically, apps.
Exactly! It's amazing how few people understand this. Signal is the perfect example, there's a lot of technical magic wrapped up it, but my Dad can use it.
Whatsapp rolling out e-2-e to its 1b+ users was the most significant move in digital privacy ever, without most users knowing that it even happened.
This is 100% true. And all apps goes through App Store approval process, which makes all the censorship talk kind of moot.
Sideloading has to become a default, somehow without us returning to antivirus era. Problem is that no one knows how to make that happen.
Sideloading has to become a default, somehow without us returning to antivirus era. Problem is that no one knows how to make that happen.
It's funny how common jailing-breaking iPhones used to be, I did mine immediately when it would come out and everyone else I knew did too. Now I don't know a single person that does.
You know what, that’s a great insight. I got the iPod touch precisely because it could be unlocked to be a pocket Unix with shell. 15 years later, it still is and isn’t. Like, lol not at all ha ha. It was a giant, near irrecoverable mistake to computing freedom.
> Append-only databases are acceptable for financial ledgers, contracts, and things we want to be persistent and immutable.
Neither financial ledgers nor contracts are things we should want to be persistent and immutable - as the crypto and smart contract folks have repreatedly demonstrated
Neither financial ledgers nor contracts are things we should want to be persistent and immutable - as the crypto and smart contract folks have repreatedly demonstrated
You very much do want immutable and persistent records of financial transactions. That's the whole point of having a ledger in the first place. Error corrections should appear as actual corrections and be dated appropriately.
It depends on what the ledger does. If the ledger is tracking transactions that occur somewhere else and for some reason a transaction is entered incorrectly then immutability will prevent the ledger from being corrected to reflect reality.
I have seen way too many systems that model something that happens somewhere else and provide no way for correcting discrepancies between the system and reality, built on the assumption of either infallible humans or infallible integrations, when the truth is that all humans and all integrations will eventually fail to input data correctly and need the ability to correct anything (no field should ever become fully read-only in such a system, and no status should become fully unreachable from any other status).
I have seen way too many systems that model something that happens somewhere else and provide no way for correcting discrepancies between the system and reality, built on the assumption of either infallible humans or infallible integrations, when the truth is that all humans and all integrations will eventually fail to input data correctly and need the ability to correct anything (no field should ever become fully read-only in such a system, and no status should become fully unreachable from any other status).
> If the ledger is tracking transactions that occur somewhere else and for some reason a transaction is entered incorrectly then immutability will prevent the ledger from being corrected to reflect reality.
You just enter a new operation correcting the issue. If you can't do in in the external ledger, you do it on your own side and then cancel your correction using a new operation when the external ledger is finally corrected.
The point is auditability. You want what's inside the system to reflect what's actually happening.
You just enter a new operation correcting the issue. If you can't do in in the external ledger, you do it on your own side and then cancel your correction using a new operation when the external ledger is finally corrected.
The point is auditability. You want what's inside the system to reflect what's actually happening.
Completely unaware of this social network. What problem, exactly, is a blockchain based social network trying to solve? Proof of origin? A conversational paper trail?
The latter would be interesting for areas where conversations should be on the record, however in cases that people want their conversations off the record they’d just use a side channel. The UK govt communicates using WhatsApp for Christ’s sake.
So it’d need to be something where both parties fundamentally benefit from the ability to verify that a post, or a conversation, took place. Where would that even apply?
The latter would be interesting for areas where conversations should be on the record, however in cases that people want their conversations off the record they’d just use a side channel. The UK govt communicates using WhatsApp for Christ’s sake.
So it’d need to be something where both parties fundamentally benefit from the ability to verify that a post, or a conversation, took place. Where would that even apply?
> What problem, exactly, is a blockchain based social network trying to solve? Proof of origin?
(SSB is blockchain in the strict sense, but there's no proof of work or anything like that. Each feed is its own append-only chain with its own private key.)
For SSB, the aim was to be able to gossip feeds via untrusted intermediaries, with patchy network connections all round, and be sure that the intermediaries haven't added, changed or removed any posts in the feed.
The protocol's designer lives on a boat in New Zealand, and other collaborators live in remote areas in different time zones.
One adjustment to the protocol that seems to me like a quick win (but presumably has some technical hitch I can't see, since I don't recall anyone suggesting this) would be to not include the post's body in the “block” (in the message itself that gets hashed and signed by the next message), but rather as a “blob” (essentially an attachment) which others don't need to download in order to verify the feed. That way old messages could be effectively forgotten if all peers co-operate (and no-one took a screenshot, etc).
(SSB is blockchain in the strict sense, but there's no proof of work or anything like that. Each feed is its own append-only chain with its own private key.)
For SSB, the aim was to be able to gossip feeds via untrusted intermediaries, with patchy network connections all round, and be sure that the intermediaries haven't added, changed or removed any posts in the feed.
The protocol's designer lives on a boat in New Zealand, and other collaborators live in remote areas in different time zones.
One adjustment to the protocol that seems to me like a quick win (but presumably has some technical hitch I can't see, since I don't recall anyone suggesting this) would be to not include the post's body in the “block” (in the message itself that gets hashed and signed by the next message), but rather as a “blob” (essentially an attachment) which others don't need to download in order to verify the feed. That way old messages could be effectively forgotten if all peers co-operate (and no-one took a screenshot, etc).
> For SSB, the aim was to be able to gossip feeds via untrusted intermediaries, with patchy network connections all round, and be sure that the intermediaries haven't added, changed or removed any posts in the feed.
why would that need a blockchain (even without proof of work), as opposed to simple signed, timestamped, indexed posts and having the reading client app check the signature and post indices?
why would that need a blockchain (even without proof of work), as opposed to simple signed, timestamped, indexed posts and having the reading client app check the signature and post indices?
> > For SSB, the aim was to be able to gossip feeds via untrusted intermediaries, with patchy network connections all round, and be sure that the intermediaries haven't added, changed or removed any posts in the feed.
> why would that need a blockchain (even without proof of work), as opposed to simple signed, timestamped, indexed posts and having the reading client app check the signature and post indices?
It depends on how the message is signed. If the message format's this:
sign_message(message + timestamp + index) + message + timestamp + index
The 'index' can be manipulated: The signer (malicious or not) can resign an old message & effectively overwrite a previous message.
sign_message(new_message + old_timestamp + old_index) + new_message + old_timestamp + old_index
This means that in the event of such a resigning, it's the app's responsibility to prevent resigned messages from overwriting old messages.
Blockchains prevent this at the data structure level because signature hashes are effectively random, meaning they're near-impossible to tamper with:
whole_message := prev_message_hash + sign_message(message + timestamp) + message + timestamp
wherein prev_message_hash := hash(prev_whole_message)
> why would that need a blockchain (even without proof of work), as opposed to simple signed, timestamped, indexed posts and having the reading client app check the signature and post indices?
It depends on how the message is signed. If the message format's this:
sign_message(message + timestamp + index) + message + timestamp + index
The 'index' can be manipulated: The signer (malicious or not) can resign an old message & effectively overwrite a previous message.
sign_message(new_message + old_timestamp + old_index) + new_message + old_timestamp + old_index
This means that in the event of such a resigning, it's the app's responsibility to prevent resigned messages from overwriting old messages.
Blockchains prevent this at the data structure level because signature hashes are effectively random, meaning they're near-impossible to tamper with:
whole_message := prev_message_hash + sign_message(message + timestamp) + message + timestamp
wherein prev_message_hash := hash(prev_whole_message)
Just as a reminder: The original stated task was to protect against "untrusted intermediaries" and "patchy network connections", and in particular to make "sure that the *intermediaries* haven't added, changed or removed any posts in the feed." … which can perfectly well be done with simple signed, timestamped, indexed posts and having the reading client app check the signature and post indices.
In contrast, this here, which is the only thing the blockchain struckture really adds:
> The signer (malicious or not) can resign an old message & effectively overwrite a previous message
… is a rather radical shift of the goalpost, as the only capability the blockchain really adds is to protect against modification not by untrusted intermediaries (which was the purpose and which would already be covered without a blockchain) but by the legitimate owner/editor of the feed.
In other words: The only thing the blockchain adds is that it makes it impossible for YOU as the user to edit YOUR OWN posts. I'm not sure that's something most people in the social network context (as opposed to, say, a financial transaction ledger) would see as a feature and not an anti-feature.
In contrast, this here, which is the only thing the blockchain struckture really adds:
> The signer (malicious or not) can resign an old message & effectively overwrite a previous message
… is a rather radical shift of the goalpost, as the only capability the blockchain really adds is to protect against modification not by untrusted intermediaries (which was the purpose and which would already be covered without a blockchain) but by the legitimate owner/editor of the feed.
In other words: The only thing the blockchain adds is that it makes it impossible for YOU as the user to edit YOUR OWN posts. I'm not sure that's something most people in the social network context (as opposed to, say, a financial transaction ledger) would see as a feature and not an anti-feature.
[deleted]
> why would that need a blockchain (even without proof of work), as opposed to simple signed, timestamped, indexed posts and having the reading client app check the signature and post indices?
Yeah, that's exactly what SSB does, plus each post includes a hash of the previous post.
I think that's so that even the holder of the private key can't retroactively replace an old post with an altered version of that post (but with the same index number and similar timestamp).
Yeah, that's exactly what SSB does, plus each post includes a hash of the previous post.
I think that's so that even the holder of the private key can't retroactively replace an old post with an altered version of that post (but with the same index number and similar timestamp).
Why do you need social network non-repudiation again? These are the programs over which people shitpost... Correct?
Feels like people are really just trying to play into "everyone has a number that can be banned" for the Internet/social life in general.
Feels like people are really just trying to play into "everyone has a number that can be banned" for the Internet/social life in general.
> One adjustment to the protocol that seems to me like a quick win (but presumably has some technical hitch I can't see, since I don't recall anyone suggesting this) would be to not include the post's body in the “block” (in the message itself that gets hashed and signed by the next message), but rather as a “blob” (essentially an attachment) which others don't need to download in order to verify the feed.
There's nothing to prevent you from taking this route, you just sign a blob hash instead of an entire message object.
I work on an experimental SSB-like-protocol in my spare time that does exactly what you've suggested: https://github.com/evbogue/bogbook
I don't know if this makes the network forget more, but the aim is to reduce the time it takes to sync and get started.
There's nothing to prevent you from taking this route, you just sign a blob hash instead of an entire message object.
I work on an experimental SSB-like-protocol in my spare time that does exactly what you've suggested: https://github.com/evbogue/bogbook
I don't know if this makes the network forget more, but the aim is to reduce the time it takes to sync and get started.
I'm working on something in this space, though god knows if I'll ever finish it. And that's one of two approaches I considered to that problem. Another is to have a signed deletion marker saying something to the effect of "there was a block here with hash d9841a, but now there isn't anymore, and I'm its replacement".
> What problem, exactly, is a blockchain based social network trying to solve?
I think the problem it's trying to solve is: "How can we mix social networking with blockchain?"
I think the problem it's trying to solve is: "How can we mix social networking with blockchain?"
To my understanding, it allows messages on the network to have a total order, even when fully decentralised. Without a hash chain, clients could not tell what order events happened in, and might display them ordered differently, which would change a conversation's meaning.
The traditional alternative is logical clocks, but a malicious participant could forge those, so they're not suitable for a fully distributed system run by random users.
The traditional alternative is logical clocks, but a malicious participant could forge those, so they're not suitable for a fully distributed system run by random users.
AFAIK it was intended to support the use case of being occasionally connected to the internet (one author spent a lot of time on a small sailboat in the south Pacific), while maintaining an order of messages.
> Where would that even apply?
That sounds like it could be useful in legal and policing contexts. One complaint I’ve often heard about body cameras in policing is the possibility of footage that was created and did indeed exist being “lost”, with the implication being that legal entities intentionally destroyed evidence of either the footage existing, or its contents.
To the extent that this centralized authority issue applies to textual data or metadata, decentralized records of messaging times and contents would potentially be an invaluable tool of transparency and promoting systemic confidence in a visible shared audit trail.
That sounds like it could be useful in legal and policing contexts. One complaint I’ve often heard about body cameras in policing is the possibility of footage that was created and did indeed exist being “lost”, with the implication being that legal entities intentionally destroyed evidence of either the footage existing, or its contents.
To the extent that this centralized authority issue applies to textual data or metadata, decentralized records of messaging times and contents would potentially be an invaluable tool of transparency and promoting systemic confidence in a visible shared audit trail.
> What problem, exactly, is a blockchain based social network trying to solve?
The same as every other blockchain application: the problem that no-one has found a practical use for Blockchain despite 14 years of effort, but that blockchainers continually need the next wave of hype so that their coins don't lose value.
The same as every other blockchain application: the problem that no-one has found a practical use for Blockchain despite 14 years of effort, but that blockchainers continually need the next wave of hype so that their coins don't lose value.
It's about as much blockchain as git is blockchain, so... not really blockchain at all...
Maybe betting? Both sides are usually interested in recording the bet.
> What problem, exactly, is a blockchain based social network trying to solve? Proof of origin? A conversational paper trail?
I would say the main interesting problem to solve is how to have a social network with a shared state without requiring a all-powerful central party like the existing solutions. Blockchain solutions allow a consensus about what is in the network without this.
If you don't care about the social network state diverging endlessly that's not a problem, but part of the "social" part of social networking is that users expect to see broadly the same messages or at least that all messages are drawing from a common well in the sense that I can choose not to follow a particular person or conversation, but if I do follow them/it then I see the same set of messages as others who are following. This is how we have a shared conversation.
Edit: Not saying this is the only or best way to do this, but it is one way and I believe this to be the problem blockchain social networks are trying to solve. eg these guys are building a blockchain social network and it's explicitly one of their goals https://www.projectliberty.io/
I would say the main interesting problem to solve is how to have a social network with a shared state without requiring a all-powerful central party like the existing solutions. Blockchain solutions allow a consensus about what is in the network without this.
If you don't care about the social network state diverging endlessly that's not a problem, but part of the "social" part of social networking is that users expect to see broadly the same messages or at least that all messages are drawing from a common well in the sense that I can choose not to follow a particular person or conversation, but if I do follow them/it then I see the same set of messages as others who are following. This is how we have a shared conversation.
Edit: Not saying this is the only or best way to do this, but it is one way and I believe this to be the problem blockchain social networks are trying to solve. eg these guys are building a blockchain social network and it's explicitly one of their goals https://www.projectliberty.io/
> What problem, exactly, is a blockchain based social network trying to solve?
The problem of justifying the existence of blockchains.
The problem of justifying the existence of blockchains.
Same problem every problem using blockchain tries to solve.
Getting funded by people thinking it will be next big thing.
Getting funded by people thinking it will be next big thing.
While not anything blockchain-based, I had a similar thought of just doing social media through a single text file that you can add to/remove from whenever, and re-post the whole thing[0]. Literally HTTP POST it.
Edit, amend, add, delete, schedule, etc., all from a single text file. I haven't worked on it in a few weeks but I intend to get back to it soon.
[0] https://post.mw
Edit, amend, add, delete, schedule, etc., all from a single text file. I haven't worked on it in a few weeks but I intend to get back to it soon.
[0] https://post.mw
sigh I'm now old enough to watch yet another wave of "reinventing 2005 web dev again"
Did you know HTML and CSS are basically text files with some special organization that allow you to make really snazzy colors and marquees and stuff?
It's just a text file you can POST, too!
Super simple, use the same tools you use now.
Well, you'll need a browser to make it look pretty, but that's not the point right?
Did you know HTML and CSS are basically text files with some special organization that allow you to make really snazzy colors and marquees and stuff?
It's just a text file you can POST, too!
Super simple, use the same tools you use now.
Well, you'll need a browser to make it look pretty, but that's not the point right?
Somewhat of a precedent exists: classic UNIX mbox files.
I guess it would be fine if indexed separately. Edits to data past a certain age are fairly rare.
I guess it would be fine if indexed separately. Edits to data past a certain age are fairly rare.
Another old UNIX prior art is finger.
Any example public user sites?
https://post.mw/rob
Haven't been posting as much as I want to yet, I'm working on the editor from https://markwhen.com to hopefully port it over to https://post.mw as well
Haven't been posting as much as I want to yet, I'm working on the editor from https://markwhen.com to hopefully port it over to https://post.mw as well
Cool stuff
Worth considering, but the conclusion that permanency is "definitely not what you should look for in your social network" goes way too far. People use different social networks for different purposes.
There are certain privacy features like self-deleting messages that you can only get in a closed ecosystem. Does this mean you shouldn't use any kind of web-based social media, since everyone you communicate with can easily and automatically archive everything using a browser extension or userscript?
There are certain privacy features like self-deleting messages that you can only get in a closed ecosystem. Does this mean you shouldn't use any kind of web-based social media, since everyone you communicate with can easily and automatically archive everything using a browser extension or userscript?
Unfortunately lawyers at least in Russia would have an opinion here.
Let's suppose that you posted something publicly to an append-only social network, and it was completely OK at that time. Then, laws changed (and you could not predict this), and this post is no longer legal according to the new rules. What the lawyers say is that the very fact that the message is still online is now a crime. Yes, there is a universal notion that laws do not apply backwards in time (retroactively), but here they indeed don't: the message is still online AFTER the law got into existence, and so this is a lasting crime that started when the law was enacted.
Normally you would be required to delete the post between the moments when the new law is announced and enacted, but you can't, and it is still yours for others to find and read, so you go to jail.
P.S. It would be interesting to know the opinion of lawyers from other countries.
Let's suppose that you posted something publicly to an append-only social network, and it was completely OK at that time. Then, laws changed (and you could not predict this), and this post is no longer legal according to the new rules. What the lawyers say is that the very fact that the message is still online is now a crime. Yes, there is a universal notion that laws do not apply backwards in time (retroactively), but here they indeed don't: the message is still online AFTER the law got into existence, and so this is a lasting crime that started when the law was enacted.
Normally you would be required to delete the post between the moments when the new law is announced and enacted, but you can't, and it is still yours for others to find and read, so you go to jail.
P.S. It would be interesting to know the opinion of lawyers from other countries.
Mostly agree. You can have strong cryptography even with mutability/overwritability. You can simply issue soft deletes by issuing a tombstone write.
However, you always risk someone else (like a scraper) storing messages including your signature forever. Deleting is virtually impossible for practical communication purposes. Best you can get is “I promise you I deleted my copy and thus wont distribute it further”.
However, you always risk someone else (like a scraper) storing messages including your signature forever. Deleting is virtually impossible for practical communication purposes. Best you can get is “I promise you I deleted my copy and thus wont distribute it further”.
I'd generally consider that different because whatever people scrape could be randomly reassembled but its not forming a canonical proof. A social platform that digitally signed content to have irrefutable proof of what you scraped would be closer and that would probably be adding the anti pattern they criticize for little reason.
It sounds right, but would you mind spelling out the full conclusion? The level of indirection is a bit high for my lazy brain.
To me public communication has the trade off between trusting the communications platform (like most social platforms today) vs trusting the end user (signed messages). If you have trusted end users, scraping a third party repo of “forever history” becomes more plausible, as they can both prove that you(ish) signed it and are unlikely to respect your request to delete their copy. Is this different from what you’re saying?
To me public communication has the trade off between trusting the communications platform (like most social platforms today) vs trusting the end user (signed messages). If you have trusted end users, scraping a third party repo of “forever history” becomes more plausible, as they can both prove that you(ish) signed it and are unlikely to respect your request to delete their copy. Is this different from what you’re saying?
If you post something public it can be attested to by whoever that it once looked like X which is almost as irrefutable as it being self proving like a block chain. Scuttlebutt is trying to help you obscure your identity in posting and one could be sending encrypted content to particular other parties (maybe in its protocols but certainly just using it for the medium) where those parties could reveal irrefutably that content and that you made that content as that identity in that historical context.
Take instead the example of sending content encrypted with shared session keys over a live mesh network, where you send session keys to your specific friends to decrypt instead of revealing an identity to them.
Any "friend" could prove that they had some content at a specific time, but they could never prove that they didn't just make it themself since you gave them the symmetric key that let's either of you make shared content. This is a simple way to fail to achieve irrefutable though other properties as well..
If for example you are accused of a crime with no statute of limitations and a friend has since died, there should be a distinction between whether their hard drives prove something or their hard drives are hearsay without something else, like their testimony that they didn't tamper with contents in some long forgotten practical joke.
Take instead the example of sending content encrypted with shared session keys over a live mesh network, where you send session keys to your specific friends to decrypt instead of revealing an identity to them.
Any "friend" could prove that they had some content at a specific time, but they could never prove that they didn't just make it themself since you gave them the symmetric key that let's either of you make shared content. This is a simple way to fail to achieve irrefutable though other properties as well..
If for example you are accused of a crime with no statute of limitations and a friend has since died, there should be a distinction between whether their hard drives prove something or their hard drives are hearsay without something else, like their testimony that they didn't tamper with contents in some long forgotten practical joke.
It can be archived by something like the Wayback Machine.
For the strongest guarantee of non-repudiation, there’s OpenTimestamps:
https://opentimestamps.org/
For the strongest guarantee of non-repudiation, there’s OpenTimestamps:
https://opentimestamps.org/
Nothing strong about it, as you could trivially timestamp faked content.
Good point. I thought there was a way to validate authenticity by involving the TLS cert, but I’m unsure how that would actually work.
> You can have strong cryptography even with mutability/overwritability. You can simply issue soft deletes by issuing a tombstone write.
It sounds like you are describing a UI for simuating mutablity (like declarativd photo edits in Google Photos) , not actual data mutability.
It sounds like you are describing a UI for simuating mutablity (like declarativd photo edits in Google Photos) , not actual data mutability.
> Best you can get is “I promise you I deleted my copy and thus wont distribute it further”.
"Promise" as in committed somehow or wishful?
"Promise" as in committed somehow or wishful?
"The internet never forgets."
This article like many others claims a mass exodus from Twitter, but Musk claims usage is at an all time high. I wonder which is true? I’d be inclined to think Musk is lying. He has clear motive to do so. But on the other hand, he has access to the actual numbers unlike any of these writers who are relying on anecdotal evidence. The writers also say hate speech is more common, but my anecdotal evidence says the opposite is true. Genuinely torn on this one.
Didnt they allow all the banned users to come back + removed the systems that automatically ban bots?
If you let the bots come back, then you will have much more "users".
They unbanned some controversial accounts (Trump being the most famous by far, although he hasn't posted anything since being unbanned), but it's pretty hyperbolic to say they allowed "all the banned users to come back"
I rejoined Twitter mostly to hang with writer friends, but I’ve noticed that their engagement has gone down a lot since Musk took over and with it mine as well. It used to be that I would pop into Twitter several times a day, now I’ll go days.
I can’t speak to hate speech (other than seeing reactions to it showing up a lot in trending topics) as I’m liberal with my use of block to keep Twitter as non-toxic as possible.
I can’t speak to hate speech (other than seeing reactions to it showing up a lot in trending topics) as I’m liberal with my use of block to keep Twitter as non-toxic as possible.
The third option is that the mass exodus is limited, and Twitter usage dipped just a bit. Mr Musk has obvious reasons to lie, but his users or people who don't like him can also lie.
If the mass exodus has caused any major user count decrease, people should be talking about "Why would you still using Twitter?" than "Hey, I've closed my Twitter account, cool uh?"
If the mass exodus has caused any major user count decrease, people should be talking about "Why would you still using Twitter?" than "Hey, I've closed my Twitter account, cool uh?"
The obvious response is in the form of a meme:
The entire neighborhood gather to see a fire destroy my house
Me: wow, I never had so many visitors before
Anyway it seems clear that usage has shifted and reportedly Twitter is now running low quality (and less expensive) ads.
The entire neighborhood gather to see a fire destroy my house
Me: wow, I never had so many visitors before
Anyway it seems clear that usage has shifted and reportedly Twitter is now running low quality (and less expensive) ads.
I deleted 12 years of Facebook posts after downloading a backup one by one. This was before they had multiple deletes. It took me a few weeks so I did it when I was bored. What's funny is that you can't actually delete everything, because something from the past will show up again. Just one or two things. I assume when databases located around the world sync up there's a few things that didn't get deleted.
Do they really get deleted or just hidden? Guessing the latter.
I think they are supposed to delete them by law, but they could ignore that. Assuming they do delete them, it seems to me they miss a few that show up as the DBs around the world sync up
Maybe in EU, but I don't think so in other places.
Mastodon and SSB have terrible user interfaces. Centralization still makes the user experience way better and smoother, a necessary condition for a network effect and mass user adoption. I don't see these products going mainstream.
People will wade through all sorts of terrible UI if their friends (or people they like) are using the app. See Snapchat.
Snapchat is centralized.
Also, I wouldn't call the Snapchat UI terrible. I would call it difficult for first time users. This creates a "buy in" effect with users... Lots of powerful tools have this concept, similar to the Bloomberg terminal.
Also, I wouldn't call the Snapchat UI terrible. I would call it difficult for first time users. This creates a "buy in" effect with users... Lots of powerful tools have this concept, similar to the Bloomberg terminal.
- Your identity isn’t a username and doesn’t depend on a domain name or service provider. Instead, your username is a meaningless cryptographic hash that consists of random-looking numbers and letters. Your friends only need to know your hash to follow you, and you can keep it as public or private as you want.
Yeah, that sounds like a really positive user experience. Hard pass.
Yeah, that sounds like a really positive user experience. Hard pass.
No one has or owns a "true name", collisions on names are expected and natural with a set of billions.
Crypto keys aren't supposed to collide, but on a set of billions this could happen. -- If it does have a contingency for replacing the PKI part of the identity. This also covers loss of key material, etc...
Identity is ephemeral and in flux.
An indexed web of trust, who knows who, etc might work.
Crypto keys aren't supposed to collide, but on a set of billions this could happen. -- If it does have a contingency for replacing the PKI part of the identity. This also covers loss of key material, etc...
Identity is ephemeral and in flux.
An indexed web of trust, who knows who, etc might work.
> The technology that powers SSB is entirely different from Twitter and Mastodon. You don’t need to register an account anywhere to get started. Your identity isn’t a username and doesn’t depend on a domain name or service provider. Instead, your username is a meaningless cryptographic hash that consists of random-looking numbers and letters. Your friends only need to know your hash to follow you, and you can keep it as public or private as you want.
I'm not familiar with SSB. And, to me, this article's headline is five words too long (harumph)
Question though: Does this imply that I can follow someone without them knowing about it if their address hash gets leaked? If so, in what way could it meaningfully be described as being private? I assume there's some way to control who you broadcast to, or approve someone who follows you, and this description is just not mentioning it.
I'm not familiar with SSB. And, to me, this article's headline is five words too long (harumph)
Question though: Does this imply that I can follow someone without them knowing about it if their address hash gets leaked? If so, in what way could it meaningfully be described as being private? I assume there's some way to control who you broadcast to, or approve someone who follows you, and this description is just not mentioning it.
> in what way could it meaningfully be described as being private?
You can broadcast encrypted statements: https://ssbc.github.io/scuttlebutt-protocol-guide/#private-m...
~Everyone can tell how many of these you sent, when, and how large were they, but not to whom (incl. how many recipients they had unless there were too many and you had to send multiple copies[1]) or what was in them.
[1] The copies will still be unlinkable, but if someone sends 5 messages of ~same size within a second, it's a pretty good guess that they're sending 5 copies of the same message.
You can broadcast encrypted statements: https://ssbc.github.io/scuttlebutt-protocol-guide/#private-m...
~Everyone can tell how many of these you sent, when, and how large were they, but not to whom (incl. how many recipients they had unless there were too many and you had to send multiple copies[1]) or what was in them.
[1] The copies will still be unlinkable, but if someone sends 5 messages of ~same size within a second, it's a pretty good guess that they're sending 5 copies of the same message.
Bluesky's AT Protocol has made some progress on using Merkle trees while still allowing content to be deleted.
I treat all of the web as being an append-only store and so should you. With storage being as cheap as it is (and it's still getting cheaper), your published information is going to be stored somewhere. Make decisions about posting something as if unpublishing it were impossible.
Methinks any social network that prioritizes its tech over user experience will not take off. It doesn't mean that new tech is automatic grounds for failure, but if that's all you have to show for it right now you barely have anything.
[deleted]
>Your identity isn’t a username and doesn’t depend on a domain name or service provide
Like a tripcode?
>Instead, your username is a meaningless cryptographic hash that consists of random-looking numbers and letters.
Ah
Like a tripcode?
>Instead, your username is a meaningless cryptographic hash that consists of random-looking numbers and letters.
Ah
In SSB it's a public key. Most users announce their own display names (which needn't be unique) and some clients let you set a pet name for other users (like a phone's contacts list).
Hey how can I delete this message in future?
Why would you want your social life recorded anywhere? I love that my social life isn't recorded.
Is there a logical way to interpret this other than "don't use the internet"?
After hard-avoiding social networks, I spent some time thinking about this problem when I wanted to share pictures of my kids. One of my requirements was privacy, another was _not inventing a protocol_. I landed on RSS and built Haven[1], but I made the rookie mistake of putting my principles above usability. I want it to be hard-decentralized so everyone runs their own server--but nobody wants to run their own server.
I still have vision for what Haven could be, and supporting self-hosting remains important but I think I'll end up with something like the Matrix/Element model where there is a (free?) centralized server you can use, or you can host your own with full interoperability.
[1]: https://havenweb.org
I still have vision for what Haven could be, and supporting self-hosting remains important but I think I'll end up with something like the Matrix/Element model where there is a (free?) centralized server you can use, or you can host your own with full interoperability.
[1]: https://havenweb.org
Avoid building new protocols. However if it really can't even be shoehorned into an existing protocol, or if there are extremely clear problems (to the point that the existing closest option is even unsuitable as a compatibility / bootstrap interface); then go ahead and make a protocol that really covers the use case, if you can also make an open source (as in free beer) library anyone can use to talk with it.
I went to try this out only to read the words 'download the software'.
Good luck with that. Even the Firefox plugin requires some additional setup. Frictionless it ain't. By a long stretch.
Sigh.
Good luck with that. Even the Firefox plugin requires some additional setup. Frictionless it ain't. By a long stretch.
Sigh.
Sounds like the goal of the article was achieved? You didn’t record your social life on an append-only social network.
On top of the issues that append only doesn’t seem to fit social graphs, having to exchange hashes sounds terrible for discovery.
Lol, we're about 30 years late. Everything, all the bits, are slurped by the NSA. ECHELON started in 1970s with the big five brothers.
Here's some fun keywords to whet your whistles if you wanna:
Camp Williams Boundless Informant ICREACH MAINWAY DCSNet BULLRUN/Edgehill - NSA breaking encryption by intentionally weakening encryption schemes and stealing master keys.
Here's some fun keywords to whet your whistles if you wanna:
Camp Williams Boundless Informant ICREACH MAINWAY DCSNet BULLRUN/Edgehill - NSA breaking encryption by intentionally weakening encryption schemes and stealing master keys.
Exodus = 0.2%
"Blockchains are useless, more at 5"
don't record your social life.
other people will do it for you
you cannot control what other people do, incl. where they post it so the least you can do is to not add to the volume.
"I get spied with a little help from my friends ..."
To rewrite the Beatle's lyric.
To rewrite the Beatle's lyric.
also, wash your hands after using the toilet.
twetch uses the bie1 encryption protocol on a plaintext blockchain to allow for append only data that can be retracted from view.
twetch.com
twetch.com
As opposed to Mastadon, your identity is tied to your pubkey rather than the instance that you created your account on. The difference to Scuttlebutt is the differentiation of relays vs clients, and the lack of chaining messages together in the "blockchain"-like structure.
The result is a fairly simple protocol which is fairly low latency and seamless for many applications compared to other decentralized solutions.
[1]. https://nostr.com/