News for hackers. Stuff that matters.
Re:The AT protocol is the most obtuse crock of s* by iptq on Tuesday May 09, 2023 @07:59PM (#35881924)
It seems to me that a lot of the problems discussed in this thread (it's using a new protocol that doesn't work with existing tools, it uses crypto, handles auth in the protocol, server can goes down) are just frustrations that don't have to do with the core innovation that Bluesky promises to deliver, and are instead confusing the AT protocol to be another ActivityPub-related protocol, rather than something completely different. In fact, it misses that having pull-based indexes is part of the idea of separating data publication vs. data curation. Yes, invite codes are kind of a weird thing to shove so deep into the protocol but sometimes these kinds of things are necessary to bootstrap a social network, and become relatively unimportant in the long term.

But on the other hand, the AT protocol is not all what it seems either. It's fundamentally not possible to do what they promise unless there is some kind of synchronization point where your most up-to-date identity can be searched. The documentation goes on extensively about the format of DIDs and the fact that there _is_ a resolution scheme, but it fails to mention that this resolution is being done by Bluesky themselves, and is not planned to expand into something that others can control. As a decentralized protocol, you would expect this to be something DNS-based, or if you really wanted something more peer-to-peer, DHT lookup, or at the worst case, a distributed blockchain. Seeing as this is a fundamental protocol-level change, the fact that they're rolling with the current approach makes me believe they will not be changing this in the near future. Bluesky is just converting one problem into another.

Re:The AT protocol is the most obtuse crock of s* by pfraze on Tuesday May 09, 2023 @08:15PM (#35882045)
The DID method has to satisfy a lot of requirements. I did a ton of research on DHT and blockchain approaches and none of them give the right performance, reliability, and cost outcomes while also supporting key rotation. DNS isn't far off but it's a little obtuse to cram it into, so we're starting with did:web and did:plc. We'll add others if they have the right characteristics.

The only options that seem reasonable for PLC is for it either to be operated by some trusted multi-stakeholder institution like ICANN or to be a closed-group blockchain. I'm open to either approach but they require the creation of a consortium, which requires buyin from a set of stakeholders that don't exist yet. So until that happens, we run it, and that's why we called it Placeholder. We'll backronym it into something else once we get there (the C most likely being Consortium).

Re:The AT protocol is the most obtuse crock of s* by omeze on Tuesday May 09, 2023 @09:55PM (#35882712)
Since you're familiar with this, what was wrong with how Farcaster approached name registration? Signing up or rotating your key is (relatively) cheap on Ethereum mainnet, and client apps could front the cost of signing users up. The user registry doesn't need to be maintained by a closed group in the long run (could start out that way, with Bluesky maintaining the contracts but eventually removing upgradeability when out of beta).
Re:The AT protocol is the most obtuse crock of s* by pfraze on Tuesday May 09, 2023 @10:51PM (#35883095)
I’m concerned about the transaction cost variability that we’ve seen with ethereum.
Re:The AT protocol is the most obtuse crock of s* by gregw2 on Wednesday May 10, 2023 @04:10AM (#35884943)
Consider Avax?
Re:The AT protocol is the most obtuse crock of s* by bb010g on Wednesday May 10, 2023 @01:13AM (#35883873)
What are your thoughts on KERI? Some of Phillip's slide decks are weird to go through, but I really like its security & usability goals (key rotation needs to be realistic!) and the fact that it's going through the IETF RFC process. (Also, it avoids cryptocurrency-related blockchain baggage. It's disappointing how much blockchains have infested decentralized identity efforts.)

<https://github.com/WebOfTrust/keri>

Re:The AT protocol is the most obtuse crock of s* by epicsponge on Tuesday May 09, 2023 @09:04PM (#35882387)
> are just frustrations that don't have to do with the core innovation that Bluesky promises to deliver, and are instead confusing the AT protocol to be another ActivityPub-related protocol, rather than something completely different.

AtProto is designed to be a federated protocol. The issue I have is that it is not interoperable with the major standard used on the federated internet right now: ActivityPub. You can built protocols on top of each other. Instead of doing that, Bluesky built a confusing alternative that is difficult to implement and difficult to work with.

> In fact, it misses that having pull-based indexes is part of the idea of separating data publication vs. data curation.

Mastodon does this already. There is literally an 'explore' part of the app that is completely separate from the feed and does not rely on ActivityPub.

You cannot 'publish' content without having some sort of a federation protocol to go overtop of it, to network things together and send your content to the people who follow you. There is nothing about ActivityPub that makes a single global view impossible or hard to implement.

Re:The AT protocol is the most obtuse crock of s* by mattdesl on Wednesday May 10, 2023 @12:57AM (#35883785)
Creating a restriction where every new social media protocol has to be built on top of ActivityPub sounds awful. There is room for innovation outside of this narrow scope of ideas.
Re:The AT protocol is the most obtuse crock of s* by nr2x on Wednesday May 10, 2023 @01:09AM (#35883858)
“We have a thing that is arcane and hasn’t taken off with the public so don’t make a new one” isn’t exactly a stellar argument.

The only winning move is to onboard users and given hundreds of millions of people may be looking to leave Twitter, Mastodon utterly shit the bed and missed the moment.

That’s the end of the story: if the system can’t catch users raining down from the sky during a generational upheaval in social media it ain’t never gonna make it.

Re:The AT protocol is the most obtuse crock of s* by robertlagrant on Wednesday May 10, 2023 @09:48AM (#35887316)
I wondered if Twitter would try extending its protocol so it integrated into the Fediverse, and just become the best Mastodon server ever that everyone ended up congregating on.
Re:The AT protocol is the most obtuse crock of s* by pxoe on Wednesday May 10, 2023 @02:35AM (#35884338)
this seeming belief that activitypub is be-all end-all and the only protocol that anybody should be concerned with and cater to, is kinda off-putting

personally I hope it doesn't actually become "the one protocol" with how opinionated and callous it is about some features

Re:The AT protocol is the most obtuse crock of s* by Sytten on Wednesday May 10, 2023 @03:09AM (#35884576)
My experience with mastodon is that both explore and the feed are miles behind the experience I have on twitter to discover content I care about. No offense but everybody that switched from twitter to mastodon that I know went back. In the end I dont care what protocol you use but mastodon experience really isn't great IMO so I tend to be willing to give Bluesky a shot before I judge.
Re:The AT protocol is the most obtuse crock of s* by datbrizziolio on Wednesday May 10, 2023 @03:15AM (#35884617)
> major standard

> has less than like 5 million users

go outside

Re:The AT protocol is the most obtuse crock of s* by barnabee on Wednesday May 10, 2023 @03:25AM (#35884688)
As far as I can tell ActivityPub is (at least part of) the problem. If it’s not, then Mastodon is simply not trying to be a “Twitter replacement” or a useful global social network at all.

The only worse idea than Bluesky using ActivityPub would be to build something new making all the same design decisions.

Deciding “ActivityPub is the standard” (seriously?!) and demanding we give up already is the opposite of what we need.

I don’t know if AT is the best long term solution, but — and I’ve tried it multiple times — ActivityPub/Mastodon sure as hell isn’t. There’s no value in being interoperable with it that I can see, beyond the potential short term boost to vanity metrics on user numbers.

I absolutely want my identity to use public key cryptography, and I absolutely want to store all my emails, tweets (or whatever), and DMs locally first. I don’t like how accounts and servers work in Mastodon and the federation and global discovery approach sucks too.

The best thing we can do now is keep an open mind and try as many approaches as possible, because if something better than ActivityPub doesn’t come along society is stuck with centralised social media forever.

Re:The AT protocol is the most obtuse crock of s* by vidarh on Wednesday May 10, 2023 @04:32AM (#35885082)
Fediverse posts are signed with public key crypto (e.g. I'm looking at signatures for my post literally in the window next to my browser right now). It could use a multi-sig model so you'd be able to unilaterally prove claims about your posts, but that's not an ActivityPub limitation or issue. If you want to store it locally first, the only thing stopping you currently is that current servers are clunky, not the protocol. You don't give much detail of the specifics of why you think the protocol is the problem, so I can't address much more than that.

ActivityPub is very generic; it can accommodate all kinds of changes. E.g. if you want to introduce activity / object types that have improvements over what Mastodon supports, you can do so. If you want to introduce vocabulary within existing object types that Mastodon wouldn't understand, you can do so without breaking federation with Mastodon or other Fediverse servers. I'd be a lot more sympathetic to anyone who decided to extend ActivityPub.

The minimum viable subset of ActivityPub is largely: Provide an endpoint that returns an Actor with a list of the required endpoints (inbox, outbox, follower, following etc.) - the spec requires a list of them, but you don't even need all of them for basic interop - and handle POST's to your announced inbox, and GET requests to the outbox. Add unique URL's as "id" fields in the JSON, and support GET to them. Follow the format of the JSON to provide at least the minimum set of fields to address the activity, provide a type, and provide the minimum fields for the given type.

For interop w/Mastodon you'd want to support Webfinger to find the Actor. Nothing stops you from also supporting other mechanisms, like BlueSky's domain validation.

Nothing stops you from supporting additional federation mechanisms. Nothing stops you from providing additional fields. Nothing stops you from storing data locally. Nothing stops you from adding additional ways of signing claims about individual objects or a whole repository of objects. Nothing stops you from providing additional mechanisms for distributed lookup of objects by id. Many of those things would be welcome if people wanted to do it on top of ActivityPub.

Re:The AT protocol is the most obtuse crock of s* by barnabee on Wednesday May 10, 2023 @07:25AM (#35885939)
Sure nothing stops you doing those things, but also nothing makes them seem like a good idea.

Why bother with Mastodon interop? Why bother building on top of a standard that doesn’t do what you want if you don’t think being part of the “Fediverse” is particularly interesting or a goal of the platform you’re building?

Something new is a better bet at this point than being anchored to or seeming like part of Mastodon IMO.

Re:The AT protocol is the most obtuse crock of s* by vidarh on Wednesday May 10, 2023 @08:06AM (#35886166)
> Why bother with Mastodon interop? Why bother building on top of a standard that doesn’t do what you want if you don’t think being part of the “Fediverse” is particularly interesting or a goal of the platform you’re building?

Because they pretend to want to be open, and it's sending a very clear signal that is not their goal if they're not even trying to work with the existing ecosystem.

If they just want to be a silo, that's fine. But in that case be honest about it.

Re:The AT protocol is the most obtuse crock of s* by Ar-Curunir on Wednesday May 10, 2023 @09:35AM (#35887146)
* * *
Re:The AT protocol is the most obtuse crock of s* by vidarh on Wednesday May 10, 2023 @11:37AM (#35888932)
Making a conscious choice about differences is fine. The BSDs and Linux share many things, and not other, on the basis of different goals. They're not different for the sake of being different. The vibe I'm getting from the way AT is different is that they're different for the sake of being different.
Re:The AT protocol is the most obtuse crock of s* by barnabee on Wednesday May 10, 2023 @10:05AM (#35887548)
The “Fediverse” is not an existing ecosystem in any way that replaces Twitter or builds an interesting social network, from my perspective at least.

No matter how open I wanted to be, if I was setting out to build a social network, I’d please precisely zero value on being connected to that “existing network”.

It is irrelevant to me, despite what a vocal minority might want me to believe.

Re:The AT protocol is the most obtuse crock of s* by vidarh on Wednesday May 10, 2023 @11:36AM (#35888919)
It might not matter to you, but that doesn't mean it doesn't exist, and choosing to ignore it is a clear signal.
Re:The AT protocol is the most obtuse crock of s* by cxr on Wednesday May 10, 2023 @06:12AM (#35885555)
> the major standard used on the federated internet right now: ActivityPub

This might be a true statement for microblogging, but the major-est "standard used on the federated internet right now" is surely SMTP+IMAP, and I wouldn't be surprised if RSS/Atom were in the #2 spot even though "nobody" is using it anymore (esp. considering "nobody" includes most podcasts).

Re:The AT protocol is the most obtuse crock of s* by OJFord on Wednesday May 10, 2023 @06:38AM (#35885678)
> , it uses crypto, handles auth

Good? HN also uses crypto. Unless I'm missing it, it's not using cryptocurrency or 'tokens' or anything, just good old fashioned cryptography.