GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Notices by Émilio Gonzalez (res260@infosec.exchange)

  1. Embed this notice
    Émilio Gonzalez (res260@infosec.exchange)'s status on Wednesday, 04-Mar-2026 09:33:10 JST Émilio Gonzalez Émilio Gonzalez
    in reply to
    • Christine Lemmer-Webber

    @cwebber I'm hanging out there a lot and yes there is a lot of vibecoding. However, they don't seem to vibecode more than the average paid software dev.

    In 2024, I'd say about 20% of my friends vibecoded. Today the number looks more like 90%. This is not specific to atproto, my understanding is that most people vibecode nowadays.

    In conversation about 17 days ago from infosec.exchange permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: dev.in
      Devin Mancuso – Designer
      from @devinmancuso
      A bunch of text about Devin Mancuso, a Design Strategist working in California
  2. Embed this notice
    Émilio Gonzalez (res260@infosec.exchange)'s status on Wednesday, 28-Jan-2026 08:22:45 JST Émilio Gonzalez Émilio Gonzalez
    in reply to
    • Evan Prodromou

    @evan That would make sense. For ATProto, not being required to think about the PDS and the relays implementations must help a ton to get projects off the ground quickly. Hope the Social API changes that 🙏

    In conversation about 2 months ago from infosec.exchange permalink
  3. Embed this notice
    Émilio Gonzalez (res260@infosec.exchange)'s status on Wednesday, 28-Jan-2026 08:14:16 JST Émilio Gonzalez Émilio Gonzalez

    I love #activitypub but seeing how slow its development is compared to #atproto makes it hard to be excited about it. This goes for both protocol development and ecosystem development.

    ATproto has many cool projects popping up every month, the vision is clear and platforms integrate with each other.

    I don't see this excitement and work on the ActivityPub side :(

    In conversation about 2 months ago from infosec.exchange permalink
  4. Embed this notice
    Émilio Gonzalez (res260@infosec.exchange)'s status on Thursday, 17-Jul-2025 06:00:51 JST Émilio Gonzalez Émilio Gonzalez
    in reply to
    • Christine Lemmer-Webber

    @cwebber I apologize this was poorly worded. The asterisk was used as a way to signal a mistake and I meant to apply it to the whole post not just "women".
    I agree with the statements you made!

    In conversation about 8 months ago from infosec.exchange permalink
  5. Embed this notice
    Émilio Gonzalez (res260@infosec.exchange)'s status on Thursday, 17-Jul-2025 05:53:44 JST Émilio Gonzalez Émilio Gonzalez
    in reply to
    • Christine Lemmer-Webber

    @cwebber and for trans I meant AFAB not women*

    In conversation about 8 months ago from infosec.exchange permalink
  6. Embed this notice
    Émilio Gonzalez (res260@infosec.exchange)'s status on Thursday, 17-Jul-2025 05:53:44 JST Émilio Gonzalez Émilio Gonzalez
    in reply to
    • Christine Lemmer-Webber

    @cwebber Goes for most "woke" stuff from caring about climate change to being trans to being vegan

    In conversation about 8 months ago from infosec.exchange permalink
  7. Embed this notice
    Émilio Gonzalez (res260@infosec.exchange)'s status on Monday, 14-Apr-2025 07:53:42 JST Émilio Gonzalez Émilio Gonzalez
    in reply to
    • Evan Prodromou
    • Émilio Gonzalez

    @evan @res260 I'll look this up thank you Evan. Is this not implemented much because it's a new thing, because of cultural fediverse chalenges or because of some other thing?

    In conversation about a year ago from infosec.exchange permalink
  8. Embed this notice
    Émilio Gonzalez (res260@infosec.exchange)'s status on Monday, 14-Apr-2025 06:49:45 JST Émilio Gonzalez Émilio Gonzalez
    • Émilio Gonzalez

    I wish #ActivityPub allowed for a single identity to be used on myltiple services.

    I don't want to create a mastodon account AND a loops account AND a pixelfed account AND a lemmy account. Why can't I just have @res260? :(

    If AP steals one idea from #ATProto, it should be this.

    In conversation about a year ago from infosec.exchange permalink
  9. Embed this notice
    Émilio Gonzalez (res260@infosec.exchange)'s status on Sunday, 02-Feb-2025 07:33:12 JST Émilio Gonzalez Émilio Gonzalez
    in reply to
    • BeAware

    @BeAware I would maybe nuance your first phrase like this: "so basically, it's not decentralized, but the technology is there if some people with a medium amount of resources want it to be decentralized."

    It's currently not entirely up to bluesky to decide how decentralized the network is. They have in their roadmap things planned that with help with decentralization, but everything is currently there for people to make it more decentralized.

    However, the BlueSky company COULD make it harder to decentralize, for example by only allowing THEIR AppView to consume from their Relays (firehose). This is why having more independant relays will be key to ensure that ATProto becomes more decentralized. If you know about TOR nodes, it's kind of the same things. If one entity controls most TOR nodes, this entity owns the TOR network, which is not supposed to happen.

    TOR as a protocol and network kind of has a similar problem, as running a TOR node can be expensive.

    In conversation about a year ago from infosec.exchange permalink
  10. Embed this notice
    Émilio Gonzalez (res260@infosec.exchange)'s status on Sunday, 02-Feb-2025 07:24:14 JST Émilio Gonzalez Émilio Gonzalez

    A few facts and thoughts about #BlueSky being decentralized or not:

    1. #ATProto (the protocol behind bluesky) is decentralized and open-source, but is controlled by a for-profit (albeit fiscally a public benefit) organization, "Bluesky Social PBC".

    2. "Bluesky" refers to a sum of ATProto concepts, notably the AppView (bsky.app), the main Personal Data Servers (PDS, bsky.social), and the Relays (or firehose, bsky.network). There are others, but they're the 3 important ones.

    3. Anyone can run their own AppView, PDS or Relay AND consume the content from/get their content consumed by the Bluesky infrastructure. HOWEVER, not everything is trivial or cheap to run.

    3.1 A PDS, which contains your data (account details but also posts, likes, follows, etc), is trivial and cheap to self-host. Cheaper than hosting a mastodon instance, even, because it does way less stuff and receives way less requests. See https://github.com/bluesky-social/pds

    3.1 An AppView (the presentation layer, where users interact with ATProto content) can be created by anyone, but the bsky.app backend is NOT open-source, so there are not a ton of options right now.

    3.2 Running a relay is trivial but expensive to self-host. This is because its purpose is to act as an aggregator for all the PDS so that AppViews can consume the data in a way that scales better. The Bluesky relay implementation (bigsky) is open-source: https://github.com/bluesky-social/indigo/blob/main/cmd/bigsky/README.md
    About 2.5 months ago, 4.5TB of storage was needed and an OVH server costing 150$/month worked to host a full-atmosphere relay (more on that later).

    1. To make a comparison with #ActivityPub (the protocol behind #mastodon ), the AppView and PDS is the same thing in ActivityPub, and the concept of relay doesn't exist. There are advantages and drawbacks to both architectures, I might do a future post highlighting those.

    2. With those definitions out of the way, some observations:

    5.1 A lot of users self-host their PDS, but the vast majority of users chose the simpler option.

    5.2 There are some alternative AppViews built on ATProto, but the vast majority of users visit bsky.app.

    5.3 There are very little non-bluesky self-hosting of relays, mostly because of their prohibitive cost. Running the bigsky relay is expensive partly because of design decisions for ATProto and partly because it takes ALL content from ALL accounts for ALL the network on the atmosphere (in this case atmosphere == fediverse but for ATProto). This is like if your Mastodon instance queried ALL servers for ALL accounts querying ALL posts. In the future, there might exist relays that don't scrape ALL data but only a subset of it, which would bring down costs, but it's not yet the case.

    1. So "is Bluesky decentralized?"

    6.1 In theory, yes, everything that bluesky does on ATProto can be.

    6.2 In practice, however, the most decentralized part of Bluesky is the PDS, where the user data is stored, and even that is not that decentralized.

    6.3 Will it stay this way? I'm hopeful it won't, but I don't know. ATProto is fairly new compared to ActivityPub, and the ecosystem around it was mostly built by the BlueSky company, but I expect this to change in the future. However, the cost of entry for things built on ATProto will always be more than the cost of entry for things built on ActivityPub.

    6.4 Things built on ActivityPub will always be more decentralized than things built on ATProto, because of design decisions from both of these protocols.

    In conversation about a year ago from infosec.exchange permalink

    Attachments


    1. No result found on File_thumbnail lookup.
      https://github.com/bluesky-social/indigo/blob/main/cmd/bigsky/README.md

    2. https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/930/643/859/278/166/original/29eeefbefff1ddbd.png

User actions

    Émilio Gonzalez

    Émilio Gonzalez

    Cybersecurity blue team person. Love to discuss urbanism, housing crisis and most "bigger-than-you" modern challenges. YIMBY. Involved with Construisons Montréal and Locomotion.app.

    Tags
    • (None)

    Following 0

      Followers 0

        Groups 0

          Statistics

          User ID
          324740
          Member since
          1 Feb 2025
          Notices
          10
          Daily average
          0

          Feeds

          • Atom
          • Help
          • About
          • FAQ
          • TOS
          • Privacy
          • Source
          • Version
          • Contact

          GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

          Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.