makeasnek

joined 2 years ago
MODERATOR OF
[–] makeasnek@lemmy.ml 0 points 1 year ago* (last edited 1 year ago) (11 children)

Sure, you can run one, good luck getting even a halfway decent delivery rate to mailboxes at any major mail provider. Even if they never receive a spam message from your server, your server is an "unknown" which counts against you. And if one person in your small company of 10 or 100 or even 1000 people gets their e-mail hacked and sends spam? Prepare for the rest of them to get punished for it. Running an SMTP server is a nightmare which is why, over time, more and more of the economy has just shifted their SMTP servers to organizations who professionally run SMTP servers instead of having their own.

[–] makeasnek@lemmy.ml 3 points 1 year ago* (last edited 1 year ago) (1 children)

It would be annoying to lose your instance, true, but you just move to another or roll your own.

This is a problem nostr solved, and I believe bluesky solves as well though idk as much about the protocol. On nostr, your identity and your instance are different things. Relay goes down? There's no meaningful impact to you. You're typically connected to several, each of which store your content. You identity isn't username@somerelay dot com, it's just username.

As a user, I had this happen to me early in mastodon and it was very frustrating to lose all my follows, followers, tweets, settings, etc. I realize there's now ways to manually backup etc but properly moving an account requires a cooperative instance which can't happen if it's de-federated or just drops offline randomly like mine did.

The Fediverse and ActivityPub will continue to evolve, but unlike SMTP, they were created after the internet became adversarial. This author isn’t the first to try to fearmonger over the future of AP, and they won’t be the last.

This isn't fearmongering, it's him reviewing the ways SMTP tried to solve the spam problem and became centralized as a result. These questions of how we tackle spam and moderation are valid, important questions. And Fediverse, at a structural level, is basically the same as SMTP. We have users at instances (e-mail hosts), they can send messages/tweets/links (emails) to users on other instances. Each instance is free to accept/reject messages from other instances based on their own criteria. That's the whole thing. That's exactly how SMTP works.

[–] makeasnek@lemmy.ml 11 points 1 year ago* (last edited 1 year ago) (1 children)

A lot of OSS projects and small non-profits? Yes. The cost to entry is "be willing to volunteer" and very few people pay that cost so basically anybody can get in. These aren't exactly competitive positions. And if they improve the software honestly idk if they're a shaman healer or whatever. I care about the software. As long as their energy healing garbage isn't somehow getting into the software who cares?

[–] makeasnek@lemmy.ml 2 points 1 year ago

And didn’t know it’s possible to defederate an email provider.

It absolutely is, your mail provider "de-federates" aka blocks mail from plenty of other e-mail providers.

[–] makeasnek@lemmy.ml 6 points 1 year ago* (last edited 1 year ago) (2 children)

This is an instance moderation problem. If you’re letting spammers in, you need to use a better application process or something similar to that. A big problem with email spam is that most email services allow anyone to sign up for free without any checks.

Which is one reason, this author is arguing, that e-mail has become so centralized. Doing that kind of manual moderation and curation is expensive, the bigger instances out-compete the smaller ones who don't have as much resources to dedicate to it. As more and more instances get "de-federated" for not having as good of anti-spam measures as the bigger instances, more users will sign up at big instances to avoid defederation risk. Just like how many people use gmail simply because their email delivery rate is so good. If I send from g-mail, there's very few servers which will reject my message or throw it in the spam folder. I'd love to run my own mail server, but even as a dedicated sysadmin it's impossible to get decent delivery rates.

The more anti-spam checks we have, yes we weed out spam, but we also make it accessible to less users as well.

AP has been blessed so far with not having to fight too much spam. Look at very popular, very centralized, very resourced platforms like Facebook, spam is still a problem on their platform despite massive resources put towards fighting it.

[–] makeasnek@lemmy.ml 1 points 1 year ago* (last edited 1 year ago)

But as you experience more you do know more

About some things. You also lose knowledge with time as well as mental acuity. The brain is a leaky memory storage device.

[–] makeasnek@lemmy.ml 4 points 1 year ago* (last edited 1 year ago) (7 children)

Don’t email spammers just spoof the domain or send without a domain?

They do both, depending on the spammer and the type of spam they send. In e-mail, you have an e-mail server, you can use it to send mail to users on other e-mail servers. Each e-mail server can choose to accept or reject email from other e-mail servers based on whatever reason they want. AP/Lemmy/Mastodon is basically identical to this. I'm not sure how exactly bluesky is setup but I get the impression it's similar. In Nostr, servers aren't federated (each relay is seperate, if you want to send/recieve content to another user on a different relays you just talk to that relay directly instead of having "your relay" act as an intermediary), but the structure is still pretty similar.

Nostr does have this hashcash type system (requiring proof-of-work to weed out spam), but I haven't come across any relays that actually enforce it, it will be interesting to see if that changes in time. I also saw a GitHub issue about adding something similar to AP but I think they chose not to implement it.

[–] makeasnek@lemmy.ml 29 points 1 year ago* (last edited 1 year ago) (11 children)

Domains aren’t free and I don’t think it’s worth it for them to buy a new domain to just be able to spam for a short time again.

Literally what e-mail spammers do.

Agreed defederating can help solve obviously malicious instances, it doesn't solve spammers abusing good instances. E-mail and AP are very similar at a protocol structure level.

[–] makeasnek@lemmy.ml 9 points 1 year ago* (last edited 1 year ago) (1 children)

where you’ve previously used a SIM linked to your name

Don't do that then. Also consider that people buy and re-sell used phones. The same IMEI is not a guarantee it's the same user. Privacy isn't necessarily about being absolute, sometimes it comes in shades.

 

What you can do: https://www.patrick-breyer.de/en/posts/messaging-and-chat-control/#WhatYouCanDo

Contact your MEP: https://www.europarl.europa.eu/meps/en/home

Edit: Article linked is from 2002 (overview of why this legislation is bad), but it is coming up for a vote on the 19th see https://www.patrick-breyer.de/en/council-to-greenlight-chat-control-take-action-now/

 
 

Situation: You run a website and want users to have to do some amount of work in order to activate a function in your code. The "function" can be anything: creating an account, receiving some kind of in-game token/reward, dispensing coins from a faucet, whatever. Captchas are becoming increasingly both increasingly complex and increasingly useless against spam attacks. Various "proof of personhood" options are available (SMS verification etc) but come with downsides as well.

An obvious alternative to captchas is some kind of "proof work" scheme where the user has to run a certain number of hash calculations. This is cheap for individual users but expensive for spammers to spam, and could even net you a little crypto if you wanted it to. This, for example, is the approach used by Tor's anonymity network help prevent DDoS attacks. This is fine, but it serves no other purpose and uses lots of of energy. Though in Tor's implementation, it is only occasionally used as opposed to being used for every request.

My script is a "proof of useful work" captcha alternative. The user must download and process a chosen amount of workunits from a chosen BOINC project(s). This work is "useful" because it contributes to scientific research. BOINC is a software for distributed/volunteer computing and its used by scientists all over the world including the Large Hadron Collider (CERN) to offload expensive computation to the machines of volunteers. My script downloads stats from the BOINC projects and verifies the user has completed the work. If the user is a pre-existing BOINC user, they will already have sufficient credit to instantly activate the function on the site.

The default setup for this software is as a "crypto faucet", but you can plug-in any function you want: anti-spam, user registration, whatever. It calculates a cost for the "work" and makes sure it dispenses less than the cost, making sure no user has incentive to use the faucet more than a few times since it would cheaper for the user to just do the work on their own without the faucet acting as a middleman.

Downside of this tool is that the user may take some time to accumulate the credit (unless they are an existing BOINC user with credit) and the BOINC projects only report updated credit once every 24 hours (though if you ran your own BOINC project for this purpose, you could get this time down much lower). So while this can be good for longer-term tasks (such as giving an in-game reward to users who contribute to science), it is not quick. They also have to download and run BOINC (and change their username at a BOINC project), which is a big step compared to a captcha. In an ideal world, the BOINC work could be completed in the browser instead of by downloading BOINC, I believe folding at home had a client that could do this at one point.

Anyways, I think it's an interesting idea. Maybe you do too and can use it to your advantage somehow.

 
  • Note: "relay" is the nostr term while "instance" is the AP/Mastodon/Lemmy term. They are functionally very similar and offer the same abilities to ban annoying users from "public square" type spaces. Moderation works identically.
  • In AP/mastodon/lemmy you are connected to one "main instance" and then connect to other instances "through" that instance. In nostr, you are typically connected to multiple relays and access content more directly.
  • Nostr is an underlying protocol like AP is for Mastodon/Lemmy. The main use of nostr currently is as a twitter/mastodon clone, but it has other interfaces as well (calendaring, video sharing, etc) that I am less familiar with.
  • Both networks are decentralized in nature

AP/Mastodon/Lemmy

  • Instance admins on your instance and the instance of the user you are DMing can read your DMs, block them, or modify them without your knowledge or the knowledge of the receiving user
  • If your instance goes down, so does your access to the wider network. It will take your DMs with it, and your identity.

Nostr

  • Relays cannot read the content of your DMs as they are encrypted. They can only see that user A is DMing user B and approximate DM size. (This upgrade reduces that visibility further)
  • Relays cannot manipulate DMs as they are encrypted and will fail a signature check
  • No relay can prevent you from DMing another user as your client will automatically route the DM through another relay (unless that user has blocked you, which they can do).
  • You can receive DMs from anybody as long as one relay lets your DM through (and you are usually connected to several)
  • Your DMs and other content is replicated across multiple relays. Downed relay? No problem. You don't lose your content or your identity as your identity is a private/public keypair not "user @ instance dot com"

Bluesky

Idk anybody care to fill this section in?

Image source: nostr post

 
 
 

Curious to hear people's stories

 

There's a lot of talk about inflation and its causes. Is it corporate greed? Supply chain issues? One clear base cause of inflation less talked about is having an inflationary currency supply. Any other inflation caused by supply chain issues, corporate greed, lack of market competition, etc is just added on top of that. Fiat inflationary currency is a rather new invention in terms of the human timeline. In the US, Nixon is the start of it. Central banks aim for 2-3% inflation in "good years". The money supply expands, the portion of that supply a single dollar represents, and therefore its value, decreases. This isn't a conspiracy, it's government policy, and both parties gleefully support it because it benefits their rich donors.

Think of it: in the last 50 years, everything has gotten cheaper to produce thanks to increasing mechanization, outsourcing to cheap labor/low regulation countries, and extremely efficient supply chains. Yet so many things "cost more" than they did 50 years ago. Even basics like bread. What used to be 5c in the US in the 50s now costs $5.00. How is that the case? Shouldn't it cost less? Where is that "extra efficiency" going if not to lower prices? The answer: bread is the same value it's always been, the money has gotten less valuable. This is how they keep working class people running on a treadmill, never able to achieve economic mobility.

Inflationary currency devalues the currency you worked hard to earn by increasing the supply. It hits the middle class the worst because they have more of their net wealth in cash, often in the form of emergency funds, savings, and putting together enough money for a down payment on a home. Rich people have their money in assets which aren't harmed by currency inflation. Actually, even worse, it inflates the value of those assets! If the dollar loses value (all other things being equal), it takes more dollar to buy a share in Amazon, just like it takes more dollars to buy a loaf of bread. Poor people live hand to mouth, so their net wealth is not impacted much, but inflationary currency prevents them from saving and "moving up". If you want to identify the causes of increasing wealth disparity, the inability of people to save money and theft of value from the middle class via money supply expansion is a major one.

 

There's a lot of talk about inflation and its causes. Is it corporate greed? Supply chain issues? One clear base cause of inflation less talked about is having an inflationary currency supply. Any other inflation caused by supply chain issues, corporate greed, lack of market competition, etc is just added on top of that. Fiat inflationary currency is a rather new invention in terms of the human timeline. In the US, Nixon is the start of it. Central banks aim for 2-3% inflation in "good years". The money supply expands, the portion of that supply a single dollar represents, and therefore its value, decreases. This isn't a conspiracy, it's government policy, and both parties gleefully support it because it benefits their rich donors.

Think of it: in the last 50 years, everything has gotten cheaper to produce thanks to increasing mechanization, outsourcing to cheap labor/low regulation countries, and extremely efficient supply chains. Yet so many things "cost more" than they did 50 years ago. Even basics like bread. What used to be 5c in the US in the 50s now costs $5.00. How is that the case? Shouldn't it cost less? Where is that "extra efficiency" going if not to lower prices? The answer: bread is the same value it's always been, the money has gotten less valuable. This is how they keep working class people running on a treadmill, never able to achieve economic mobility.

Inflationary currency devalues the currency you worked hard to earn by increasing the supply. It hits the middle class the worst because they have more of their net wealth in cash, often in the form of emergency funds, savings, and putting together enough money for a down payment on a home. Rich people have their money in assets which aren't harmed by currency inflation. Actually, even worse, it inflates the value of those assets! If the dollar loses value (all other things being equal), it takes more dollar to buy a share in Amazon, just like it takes more dollars to buy a loaf of bread. Poor people live hand to mouth, so their net wealth is not impacted much, but inflationary currency prevents them from saving and "moving up". If you want to identify the causes of increasing wealth disparity, the inability of people to save money and theft of value from the middle class via money supply expansion is a major one.

 

Most of these transactions took a few minutes and around $1 in fees. Bitcoin lightning is pennies in fees, but the account shown is on main chain. There are over 19,000 individual donations.

  • If you know somebody who wants to contribute to Ukraine but doesn't want to deal with the hassle, cost, or availability of international bank wires, this is a great way.
  • It will go directly to the Govt of Ukraine instead of being filtered through a NGO or other party.
  • Unlike aid from governments/NGOs this money comes with no restrictions on how Ukraine can spend it.
  • Most major cities have several Bitcoin ATMs and in many countries you can buy Bitcoin online easily. This means you can have a bake sale or other fundraiser, turn that money into Bitcoin, and send it to Ukraine directly.

Transaction list: https://www.blockchain.com/explorer/addresses/btc/357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P

Proof this address (357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P) is really owned by the Ukraine govt: https://twitter.com/Ukraine/status/1497594592438497282

view more: ‹ prev next ›