News for hackers. Stuff that matters.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by tptacek on Monday August 15, 2022 @04:52PM (#32475205)
Why? What else should I be able to demand from other people's products, simply by dint of their products fitting a particular description?
Re:discordo: Lightweight, secure, and feature-rich Discord t... by jelly on Monday August 15, 2022 @06:33PM (#32476363)
The demand isn't being made to the product side; Discord and other chat clients already have a chat API which their clients authenticate and talk to, it's all already built and user-facing. They already distrust their clients. They already made everything a third party client would need.

It's a policy change, not a product change, and demanding a company adjust their bad policy is totally normal.

Re:discordo: Lightweight, secure, and feature-rich Discord t... by franga2000 on Tuesday August 16, 2022 @03:11AM (#32480031)
You mean "particular descriptions" like "is a vehicle", "contains radio transmitter", "stores personally identifiable information"...? We he regulatory requirements for all sorts of products for all sorts of reasons. Any specific example can of course be debated about, but the concept of "to demand from other people's products, simply by dint of their products fitting a particular description" is anything but the crazy unprecedented idea you seem to be implying it is.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by neoromantique on Monday August 15, 2022 @06:02PM (#32476032)
Demanding opening and tolerating programmatic access to an extent would probably be a good thing tbh, even if from accessibility PoV.

Make it opt-in with advanced user verification if you want to fight spam, not simply blanket ban everyone whose data you can't monetize easily :shrug:

Re:discordo: Lightweight, secure, and feature-rich Discord t... by tptacek on Monday August 15, 2022 @06:27PM (#32476301)
It's not just spam; in fact, spam might be the least of it. Part of the reason companies require specific clients is that doing so makes it easier for them to build the product and deliver the specific value that they've decided they want to deliver.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by RobbieGM on Monday August 15, 2022 @07:08PM (#32476724)
So, let's force that "value" on every user rather than let them build the experience they actually like?
Re:discordo: Lightweight, secure, and feature-rich Discord t... by tptacek on Monday August 15, 2022 @07:28PM (#32476970)
Sure? Companies do get to dictate things to their customers: they can build things, or not build them. Customers don't get that control: their recourse is to the market.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by RobbieGM on Thursday August 25, 2022 @05:38PM (#32600267)
They absolutely should get that control though. The only thing preventing them from having it, often, are artificial limitations. Don't place too much faith in "the market" to fix problems.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by tdy_err on Tuesday August 16, 2022 @04:09PM (#32488164)
I don't like YouTube's UI therefore I should… use Vimeo?
Re:discordo: Lightweight, secure, and feature-rich Discord t... by Jetrel on Monday August 15, 2022 @09:20PM (#32478109)
The biggest plus is that — like Chrome, if they decide they made a mistake, they can pivot a change that many of their users would disagree with, and force it on the whole ecosystem immediately. Chrome has done this a lot, and almost all of it has been security-related stuff that's been jammed down our throats. And sure enough - the medicine has been quite distasteful, but it was good for the patient.

A lot of this stuff is UI-related; it's things that aren't a reskin, but they're a major shakeup of how the entire UI works, and would break all other clients using a framework.

The problem with "truly" federated protocols is that every design fuckup is preserved in amber for eternity.

Re:discordo: Lightweight, secure, and feature-rich Discord t... by e12e on Monday August 15, 2022 @06:11PM (#32476125)
They are in various ways more like utilities than products - like other utilities they/we would benefit from regulation - leveling the playing field and helping future proof these services.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by troyvit on Tuesday August 16, 2022 @09:38AM (#32482543)
Then we should name them as utilities before we start regulating them as such.

And who is the one to name them a utility? Is it the government of the company's base of operations? If so won't they just move (such as many companies do to avoid tax complications)?

And where do you draw the line? Why is Discord a utility and not, say, Truth Social?

And then how do you turn federated networks like Mastodon into utilities?

Once something is classified as a utlity, what are the rules for guarding customer data? Are they more beholden to governments to release customer data? Less?

Re:discordo: Lightweight, secure, and feature-rich Discord t... by e12e on Tuesday August 16, 2022 @11:57AM (#32484585)
> Then we should name them as utilities before we start regulating them as such.

Well, we should certainly make an effort so that regulations are predictable and sensible.

> And where do you draw the line? Why is Discord a utility and not, say, Truth Social?

> And then how do you turn federated networks like Mastodon into utilities?

I think this is going about it from the wrong side. Snail mail, phone service, internet service - these are things we regulate in various ways. Maybe we should with various, similar digital services too. Email? Messaging networks like discord?

Re:discordo: Lightweight, secure, and feature-rich Discord t... by HidyBush on Monday August 15, 2022 @05:20PM (#32475532)
Discord clients can't magically implement features that the Discord API doesn't have. The only thing they can do is personalize the experience locally, maybe by changing the interface or implementing more comfortable defaults and shortcuts. This is not a case of a Discord client offering Nitro (i.e. paid) features for free, to get the paid features you have to authenticate yourself through the API meaning Discord still gets the money and everyone's happy.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by tptacek on Monday August 15, 2022 @05:24PM (#32475582)
Why should companies that build products with serverside components be required to let you build your own clients? What you're saying when you make this demand is that it should be unlawful to build closed systems (or: unlawful to build closed systems if there's a network API anywhere in them).
Re:discordo: Lightweight, secure, and feature-rich Discord t... by HidyBush on Monday August 15, 2022 @05:35PM (#32475705)
The moment you have a publicly facing API you are saying "these are the rules to talk to us". It doesn't matter what the client is, if it follows the rules then it should work.

A website is a publicly facing API and if two different browsers can talk the HTTP protocol and implement all the other APIs the website requires then you shouldn't be blocked from accessing the website through one of them

Re:discordo: Lightweight, secure, and feature-rich Discord t... by tptacek on Monday August 15, 2022 @05:39PM (#32475759)
You're not really answering my question. "One of the rules of this API is that you exclusively use this client" is an expressible rule. What gives you the right to dictate the terms that other people build by? I don't understand the principle here.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by Firmwarrior on Monday August 15, 2022 @05:51PM (#32475891)
I'll explain why I want the right to dictate the terms by which software on my computer talks to software on other people's computers. It's because it's relatively easy to customize local software to work in ways I and other people want it to, and the only thing stopping us from doing so is arbitrary draconian laws and rules. This results in situations where you can't access a lot of straightforward websites and services unless you download an "app" that's actually just a wrapper around a web browser and a bunch of spyware, and it makes it impossible for people with various minor disabilities to use a lot of services comfortably.

The rule right now is "Any jerkoff can dictate what is and isn't allowed to run on my computer" and I would like to change that rule to "I'm in charge of what runs on my computer, you're in charge of what runs on your computer".

Re:discordo: Lightweight, secure, and feature-rich Discord t... by cartesius13 on Monday August 15, 2022 @06:02PM (#32476037)
You are in charge of what runs on your computer, nobody is forcing you to use Discord.

There's no jerk dictating what is allowed to run on your computer, there's someone offering a piece of software that you can willingly install on your computer if you want.

If you don't want that, you're always free to not use the software or use workarounds to avoid the things you don't like.

I, for example, hate ads and use adblock always. But I don't think it's fair for me to go and say that everyone should forced to not put ads on their stuff.

I'm not a fan but I understand that I have no right to dictate what people do with their software

Re:discordo: Lightweight, secure, and feature-rich Discord t... by spion on Monday August 15, 2022 @06:08PM (#32476096)
This is not true for platforms. If a community decides they're going to use Discord, then you, the individual, are out of luck. You either use that or miss out on the community or convince the entire community not to use Discord.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by tptacek on Monday August 15, 2022 @06:09PM (#32476115)
How is that different from, say, being forced to buy a PS5 or an X-whatever to participate in a gaming community, or to get a Spotify membership to hear a particular podcast?
Re:discordo: Lightweight, secure, and feature-rich Discord t... by spion on Monday August 15, 2022 @06:14PM (#32476169)
They aren't very different. With Spotify we actually gave up a lot of power that custom clients had for the lowest-common-denominator sort of stuff, which is really sad.

With each of these products we keep giving up more and more of the powerful variety that was available before. While the average person doesn't lose much, the average person doesn't really exist and we've really lost a lot of long tails of value.

Re:discordo: Lightweight, secure, and feature-rich Discord t... by tptacek on Monday August 15, 2022 @06:26PM (#32476288)
I see the potential value, I just don't understand the principle that enables us to dictate that private companies provide it to us.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by xphos on Monday August 15, 2022 @09:19PM (#32478095)
I feel a lot of laws dictate what private companies provide us. For example a butcher's meat cannot be covered in rat poison. A hyperbolic example but for giant chat services like this where the wield an incredible amount of power because of scale they are still subject to restrictions by the government for the benefit of the people. The government totally has that overriding right because your companies operating in there county. Don't like it the same way the user has no choice but to not use your interface the company has the right now to operate in the country. Personally I think the api format is a little ambiguous but it's incredibly naive to think that companies cannot be subjected to laws on how they do business just because they built a computer service. With adoption comes regulation to protect both users and companies
Re:discordo: Lightweight, secure, and feature-rich Discord t... by troops_h8r on Monday August 15, 2022 @06:55PM (#32476603)
The same principle behind antitrust laws: dismantling monopolies is good for the public and good for innovation
Re:discordo: Lightweight, secure, and feature-rich Discord t... by tptacek on Monday August 15, 2022 @07:28PM (#32476981)
Lacking an open-for-all-comers API is not in fact an antitrust violation.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by troops_h8r on Monday August 15, 2022 @10:14PM (#32478474)
I agree of course, it's not a violation of any laws. I just thought you were asking for some moral principle to justify pressing a developer to make an API available
Re:discordo: Lightweight, secure, and feature-rich Discord t... by tptacek on Monday August 15, 2022 @11:46PM (#32478986)
I mean, it's just not antitrust, at all. A vendor is not coherently a "monopoly for their own products".
Re:discordo: Lightweight, secure, and feature-rich Discord t... by spion on Tuesday August 16, 2022 @03:58AM (#32480347)
As the world changes, we can't always expect new behaviors to ideally fit existing moral principles.

Is there a moral principle preventing a power company from providing you with all your electrical appliances and forbidding you from using those not provided by them?

Re:discordo: Lightweight, secure, and feature-rich Discord t... by dancemethis on Tuesday August 16, 2022 @01:54PM (#32486341)
There are a LOT of jerks coercing people into being used by Discord. Not only that, actively defending it.

FOMO on "community" is a considerable factor. The regular person is quite likely a social being. They will care and value being able to use the same platform.

It is a personal sacrifice to resist it while it remains. Even when a Free Software alternative becomes wide-reaching enough for an exodus, it'll be years too late.

Re:discordo: Lightweight, secure, and feature-rich Discord t... by matheusmoreira on Monday August 15, 2022 @10:48PM (#32478696)
> I, for example, hate ads and use adblock always.

> But I don't think it's fair for me to go and say that everyone should forced to not put ads on their stuff.

You can use ad blocking software because browsers are on our side. Our browsers support uBlock Origin whether webmasters like it or not and they don't have the power to force us to switch.

What companies like Discord and WhatsApp do is akin to contractually requiring us to use a specific browser that does their bidding on pain of banishment from the platform. That's how they get away with advertising, spamming, surveillance, DRM and countless other abuses: by forcing us to run their software on our computers if we want to use their service. If we could run our own clients, they would be powerless.

Re:discordo: Lightweight, secure, and feature-rich Discord t... by systoll on Tuesday August 16, 2022 @02:49AM (#32479905)
The terms of service are just Discord being transparent about what they’re doing.

The thing actually stopping you from using Discord with a third-party client is that Discord’s server software responds differently to the way the third-party clients talk to it.

You’re in charge of what runs on your computer, and they're in charge of what runs on theirs.

Re:discordo: Lightweight, secure, and feature-rich Discord t... by dancemethis on Tuesday August 16, 2022 @01:55PM (#32486354)
They are not transparent, since it's proprietary software.

The likelihood they sell/yield personal user data/metadata is too high to ignore.

Re:discordo: Lightweight, secure, and feature-rich Discord t... by prvit on Monday August 15, 2022 @05:56PM (#32475970)
> and I would like to change that rule to "I'm in charge of what runs on my computer, you're in charge of what runs on your computer".

Who is forcing you to install Discord?

Re:discordo: Lightweight, secure, and feature-rich Discord t... by spion on Monday August 15, 2022 @06:22PM (#32476247)
A study group, a programming community, any social group that you want to be a part of and they've decided to use Discord.

Don't like the Discord client or have trouble using it? Pay the price of not participating in dozens of communities you would like to participate in.

Re:discordo: Lightweight, secure, and feature-rich Discord t... by JetAlone on Monday August 15, 2022 @08:03PM (#32477430)
It reminds me of being a little kid growing up in a house without any channels on TV which had been my parent's deliberate decision (to shelter us from all the advertising and presumably, help us become more active and creative). All of my friends would be talking and joking about some show they saw the other night, and I'd be out of that loop. Asking them to explain what they saw would annoy them a little, but I might get a begrudging explanation. For a solid couple of years, my friends' favourite characters from shows like South Park and Family Guy were mysterious figures from apocryphal legends, whose personalities I understood fragments of without actually ever seeing them.

Maybe sometimes I could pick up on a meme without knowing the source material and sort of fit in for a bit. That's what not participating directly can be like, when you're caught at the fringe of your community because you don't use <platform>.

Re:discordo: Lightweight, secure, and feature-rich Discord t... by prvit on Monday August 15, 2022 @07:34PM (#32477068)
Maybe take it up with those communities?
Re:discordo: Lightweight, secure, and feature-rich Discord t... by maskros on Monday August 15, 2022 @08:01PM (#32477402)
Or maybe we can just have interoperability and open systems so all users can be happy, and don't have to choose between being obnoxious social outcasts or bow down in total obedience to the surveillance capitalists?
Re:discordo: Lightweight, secure, and feature-rich Discord t... by Jetrel on Monday August 15, 2022 @09:36PM (#32478248)
The problem is that all users aren't happy. Having used federated services for years, they're never in synch, and some users always have access to some features that other users don't have.

In fact, the problem is chiefly that a certain group of assholes never upgrade their clients, ever, and disingenuously try to keep everyone on an old version of the protocol, because they don't see a need for new features. Period. I've been through this gauntlet with some long-running open-source projects, and basically these guys were like "plain text and command-line should be sufficient for everyone (and shame on you if it's not!)".

Of course, that's fine if you're a programmer, but then these guys were SHOCKED - shocked, I say, that people's whose primary working medium was images rather than text - you know, UI designers and artists - found it a struggle to work on their project and quickly gave up.

This kind of bigotry constantly stifles progress in the OSS community.

---

There's a damn good reason no federated service even comes remotely close to Discord, and it's because despite all of those features being developed for other clients, repeatedly, there is always heavy social pressure not to leave people out, so "newfangled" features get swatted down by communities, and people are forced to only use the features that everyone supports.

You can have IRC that supports pasting images just fine, but some asshole's client doesn't support it, so you're back to using a shithole solution like external pastebins or personal FTP servers, again. Otherwise you're dealing with a constant "I don't see anything! Why can't you just use something that works on my client!"

---

So no, "interoperability and open systems" doesn't mean all users can be happy. It's a trojan horse to let luddites force obsolete versions of the protocol on everyone because they don't want to update.

Re:discordo: Lightweight, secure, and feature-rich Discord t... by spion on Tuesday August 16, 2022 @12:03PM (#32484691)
This is not the ask. Its just to have some kind of API.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by systoll on Tuesday August 16, 2022 @02:54AM (#32479939)
We have interoperable, open systems; things like IRC and XMPP exist.

People chose discord over them.

Re:discordo: Lightweight, secure, and feature-rich Discord t... by psanford on Monday August 15, 2022 @06:45PM (#32476503)
Indeed. Discord also works just fine in a browser where it doesn't have any privileged access to your system.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by citizenkeen on Monday August 15, 2022 @05:57PM (#32475974)
While I understand your sentiment, no jerkoff is dictating what is and isn't allowed to run on your computer. You're always welcome to use something other than Discord.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by neoromantique on Monday August 15, 2022 @06:03PM (#32476042)
At certain size companies should become platforms. Discord is just about there I feel.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by HidyBush on Monday August 15, 2022 @06:09PM (#32476117)
How can a server know I'm using a different client if all the features are implemented? The condition that you may not use a third party client cannot be imposed by the API but is stipulated externally.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by matheusmoreira on Monday August 15, 2022 @10:39PM (#32478648)
> Why should companies that build products with serverside components be required to let you build your own clients?

It's the only way to ensure we have the ability to adversarially interoperate with the offered service.

https://www.eff.org/deeplinks/2019/10/adversarial-interopera...

Re:discordo: Lightweight, secure, and feature-rich Discord t... by drewcoo on Monday August 15, 2022 @08:23PM (#32477592)
> Why should companies that build products with serverside components be required . . . ?

Because consumers should be able to make demands in return for adoption?

In a world less completely asymmetrically imbalanced toward capital, consumers would have a say in the products offered them, not merely the option to purchase (or not) rights to use technology as-is.

Re:discordo: Lightweight, secure, and feature-rich Discord t... by canadaduane on Monday August 15, 2022 @07:25PM (#32476932)
Network size on a spectrum from "me and my dog" to "society-wide monopoly" should be taken into account. (Not arguing Discord is at any particular point on that spectrum; only that it matters when considering policy decisions and how it burdens a company vs. benefits the public).
Re:discordo: Lightweight, secure, and feature-rich Discord t... by YetAnotherNick on Monday August 15, 2022 @07:47PM (#32477248)
You got the causation backwards. There are chat server with open API much before discord like IRC. The only reason discord or something else worked is because they got private funding and operates at loss for many years. And the only reason they got private funding is because they want to reap the benefits of monopoly on its users in future. So if there is some rule like you suggest, discord wouldn't even exist.
Re:discordo: Lightweight, secure, and feature-rich Discord t... by franga2000 on Tuesday August 16, 2022 @03:35AM (#32480227)
> So if there is some rule like you suggest, discord wouldn't even exist.

Yes, exactly! Monopolies are bad and shouldn't exist, so companies that only exist to create them shouldn't exist either. Without Discord and other providers wishing to make a chat monopoly for themselves, development would be driven by need. That tends to create solutions that are much more open and less exploitative of its users.

Re:discordo: Lightweight, secure, and feature-rich Discord t... by matheusmoreira on Monday August 15, 2022 @10:33PM (#32478607)
> Why?

Computing freedom: it should be law. Clauses like "you can't reverse engineer" and "you can only connect via our software" should be null and void.

> What else should I be able to demand from other people's products

You should be able to demand that your computing freedom be respected. We should all be able to run whatever software we want to interact with their servers.