this post was submitted on 05 Jul 2023
11 points (100.0% liked)

Fediverse

19 readers
2 users here now

This magazine is dedicated to discussions on the federated social networking ecosystem, which includes decentralized and open-source social media platforms. Whether you are a user, developer, or simply interested in the concept of decentralized social media, this is the place for you. Here you can share your knowledge, ask questions, and engage in discussions on topics such as the benefits and challenges of decentralized social media, new and existing federated platforms, and more. From the latest developments and trends to ethical considerations and the future of federated social media, this category covers a wide range of topics related to the Fediverse.

founded 2 years ago
11
The fediverse is a privacy nightmare (blog.bloonface.com)
submitted 1 year ago by Bloonface@kbin.social to c/fediverse@kbin.social
60 comments fedilink hide all child comments
 

ActivityPub, the protocol that powers the fediverse (including Mastodon โ€“ same caveats as the first two times, will be used interchangeably, deal with it) is not private. It is not even semi-private. It is a completely public medium and absolutely nothing posted on it, including direct messages, can be seen as even remotely secure. Worse, anything you post on Mastodon is, once sent, for all intents and purposes completely irrevocable. To function, the network relies upon the good faith participation of thousands of independently owned and operated servers, but a bad actor simply has to behave not in good faith and there is absolutely no mechanism to stop them or to get around this. Worse, whatever legal protections are in place around personal data are either non-applicable or would be stunningly hard to enforce.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] Melpomene@kbin.social 12 points 1 year ago

Direct messages, private messages, whatever you want to call them... have ALWAYS been available to your social media hosts. Reddit, Twitter, Facebook, Instagram, Discord... they can all read your private communications if they choose to do so. While I'd support E2EE for private messages for kBin etc, pretending that this is some sort of flaw inherent to the fediverse is inaccurate. It's fair to want the fediverse to be better. It is not fair to hold it to a standard no one has ever applied to other social media.