@evan strong no. major privacy violation, extreme creepy factor, high risk of stalker behavior and harassment
Conversation
Notices
-
Embed this notice
Brooke Vibber :blobcatcoffee: (brooke@bikeshed.vibber.net)'s status on Wednesday, 12-Jun-2024 09:21:36 JST Brooke Vibber :blobcatcoffee: -
Embed this notice
Evan Prodromou (evan@cosocial.ca)'s status on Wednesday, 12-Jun-2024 09:21:35 JST Evan Prodromou @brooke conversely, people deserve to know who's reading their data.
-
Embed this notice
Evan Prodromou (evan@cosocial.ca)'s status on Wednesday, 12-Jun-2024 09:23:24 JST Evan Prodromou @brooke I mean, that's how domain blocks work.
-
Embed this notice
Evan Prodromou (evan@cosocial.ca)'s status on Wednesday, 12-Jun-2024 09:27:23 JST Evan Prodromou @brooke ah! So, when someone fetches a post or a profile through activitypub, they have to provide authentication. If the webfinger id matches a domain the blocklist, the request fails. If the request isn't authenticated, the block won't work.
-
Embed this notice
Brooke Vibber :blobcatcoffee: (brooke@bikeshed.vibber.net)'s status on Wednesday, 12-Jun-2024 09:27:24 JST Brooke Vibber :blobcatcoffee: @evan i haven't the foggiest idea how those things are related :)
-
Embed this notice
Evan Prodromou (evan@cosocial.ca)'s status on Wednesday, 12-Jun-2024 09:38:38 JST Evan Prodromou @brooke I understand your point, that people want some anonymity when they're browsing the web. But I also see the other side -- people want to know who's reading their profile and posts. I think the Fediverse might find a different arrangement than commercial platforms have (namely, the platform knows everyone who does everything, does not share that info with other users).
-
Embed this notice
Evan Prodromou (evan@cosocial.ca)'s status on Wednesday, 12-Jun-2024 09:40:08 JST Evan Prodromou @brooke sometimes. Often, it's just the server ID, not the individual user.
I think what I am saying is, people on here seem comfortable being in control of who sees their stuff.
-
Embed this notice
Brooke Vibber :blobcatcoffee: (brooke@bikeshed.vibber.net)'s status on Wednesday, 12-Jun-2024 09:40:09 JST Brooke Vibber :blobcatcoffee: @evan ah so are you saying that activitypub *already* reveals your identity to the server of anyone who's profile you view through your front-end server or client?
and therefore, it's no big deal for the server to inform the person that you viewed the profile?
-
Embed this notice
Brooke Vibber :blobcatcoffee: (brooke@bikeshed.vibber.net)'s status on Wednesday, 12-Jun-2024 09:44:36 JST Brooke Vibber :blobcatcoffee: @evan ah so the specific issue is that this is an example of *not* being in control of who sees your stuff
if you don't expect that clicking a link reveals your identity to another person, you might be *very surprised* to find that your stalker or a mass-harrassment group now knows who you are
-
Embed this notice
Evan Prodromou (evan@cosocial.ca)'s status on Wednesday, 12-Jun-2024 09:44:36 JST Evan Prodromou @brooke sure. On the flip side, knowing that a stalker or harassment group has been checking out your profile page may be extremely valuable intelligence.
-
Embed this notice
Brooke Vibber :blobcatcoffee: (brooke@bikeshed.vibber.net)'s status on Wednesday, 12-Jun-2024 09:54:05 JST Brooke Vibber :blobcatcoffee: @evan i feel there's an asymmetry here that makes this a... poorly thought out response.
that said, in spaces where visibility is *expected*, it can be extremely valuable to know who's in the room with you. that's a different circumstance than the question of the poll, so deserves a separate answer.
-
Embed this notice
Evan Prodromou (evan@cosocial.ca)'s status on Wednesday, 12-Jun-2024 09:54:05 JST Evan Prodromou @brooke OK
-
Embed this notice