@
Ben Royce 
If you want to max out user safety in the Fediverse, do
not place all your bets on Mastodon!
Again: The Fediverse is not only Mastodon. The Fediverse isn't Mastodon with stuff bolted onto Mastodon either.
There's a whole lot of stuff in the Fediverse that's developed fully independently from Mastodon. There's stuff that's older than Mastodon. There's stuff that's a whole lot different from Mastodon. And "different" doesn't mean "wrong". Mastodon is not the Fediverse's quality standard. No, really, it isn't.
One issue that you've mentioned are reply guys. What you seem to be looking for is a technological barrier that's absolute, 100% water-tight safety from reply-guying.
This means that you'll have to go with Mastodon's re-definition of a reply guy: anyone who replies to you without being mutually connected to you, and without having been mentioned by you in the post which that person replies to. Because by Mastodon's standards, it shouldn't even be possible for such a post to show up on your timeline.
But, again, the Fediverse is not only Mastodon. Nor does the Fediverse in its entirety work like Mastodon. Especially in this regard. Not everything in the Fediverse tries to mimic Twitter.
For example, Friendica. Friendica is a Facebook alternative that was launched in 2010. And when Mastodon was launched, it immediately federated itself with a Friendica which, at that point, was five and a half years old and had its own living, breathing culture based on its own technology. Which is
vastly different from Mastodon.
Friendica doesn't think in single posts loosely tied together. Friendica thinks in full conversations. Whereas Mastodon doesn't even know what a conversation is.
And: On Friendica, if you receive a post, you receive the whole thread. With all comments.
Let's suppose you follow Alice. Alice sends a post. Bob comments on the post. Carol comments on the post. But Bob and Carol don't mention you, and you don't follow them.
On Mastodon, you only see Alice's post.
On Friendica, you see Alice's post, Bob's comment and Carol's comment. With no following, with no mentions. Because you've received Alice's post, you also receive all comments.
This is not a bug. This is absolutely intentional. For this is how Facebook works which Friendica aims to replace. It has always been this way. And it's deeply engrained in Friendica's culture.
This also means that anyone on Friendica can and
does comment on comments by people who haven't mentioned them and whom they don't follow, just because these people have commented on something someone wrote whom these Friendica users follow.
Oh, and by the way: Hubzilla, a fork of Friendica by Friendica's creator from 2015, works the same. (streams), a fork of a fork of three forks of a fork (of a fork?) of Hubzilla by Friendica's and Hubzilla's creator from 2021, works the same. Forte, a fork of (streams) by still the same creator from this year, works the same.
They're all part of the Fediverse, and they're all federated with Mastodon. I'm writing to you from Hubzilla right now.
In fact, Pleroma and its various forks, particularly Akkoma, knows conversations, too. Misskey and its many forks, including but not limited to Calckey/Firefish, Sharkey, CherryPick, Iceshrimp, Catodon, Neko, Meisskey, Tanukey etc., all know conversations. Again, they're all part of the Fediverse, and they're all federated with Mastodon.
So first of all, we have a difference in culture based on a difference in technology and use-case.
Of course, the natural reaction of many Mastodon users would be to put the proverbial gun against the chests of everything that isn't Mastodon and try to force it to become another Mastodon and ditch up to 90% of its features because Mastodon doesn't have them, and to force everyone who isn't on Mastodon to use whatever they have exactly like Mastodon. Believe me, I know people to whom this has actually happened. I could mention them.
You can try. But you can't expect it to work. No, seriously, you can't.
As for a technological barrier: If you want it installed on Mastodon, it won't work. Not with a Fediverse that isn't entirely Mastodon.
It might work with a proper permissions system like on Hubzilla or (streams) or Forte, and even that only if it was made into an FEP, a quasi-standard, and all the Fediverse adopted this system in fully compatible ways. And even that would only give you the power to define
- whether people may generally comment on your posts, or whether nobody or only a select few may
- who of your connections may comment on your posts
- if it's more like Hubzilla, whether or not anyone is permitted to comment on the post that you're just writing
Properly implemented, this permissions system actually removes the controls for commenting from your Web UI if you aren't permitted to comment.
This, however, means:
- The permissions system does not distinguish between people whom you've mentioned and people whom you haven't mentioned. Hubzilla, (streams) and Forte don't rely on mentions.
- You can only define whether someone may reply to your posts. As in anything that isn't a reply. Replies aren't posts in this system. They're comments. Whether someone may reply to your comments is defined by whoever sent the post that you've just commented on. They own the whole conversation. They define all permissions in the conversation. And since you could comment on that post, probably anyone can, otherwise you couldn't either.
Speaking of permissions: If you want safety, ditch that underwhelming, intentionally lack-lustre and hopelessly outdated kluge that's Mastodon and look elsewhere in the Fediverse where the real innovations are made.
Imagine you, as a user, could generally define
- who is allowed to see your personal timeline and your toots
- who is allowed to send you their toots
- who is allowed to fave and reply to your toots
- who is allowed to send you DMs
- who is allowed to see your profile
- who is allowed to see your followers and followed
- who is allowed to boost and quote-toot your toots
Yeah, I know, Mastodon has a few of these. But Mastodon doesn't have them all.
Also, Mastodon only has everybody and nobody as options. Now imagine you can generally grant any permission to
- everyone on the Internet (only where this is possible and makes sense)
- everyone in the Fediverse
- everyone on Hubzilla
- everyone on this instance
- everyone who wants to follow you or whom you follow (there's no "who follows you")
- everyone whom you follow
- only those whom you follow whom you explicitly grant that permission
- only you yourself
Yes, "whom you explicitly grant that permission". Imagine you can grant permissions individually to certain contacts and not to other contacts.
Imagine you can be mutually connected with Alice, but still keep Alice from sending you her toots. Imagine you can disallow Alice and Bob, both mutual connections of yours, to see your profile, but you can allow Carol to see it.
Science-fiction? No.
This has been reality on Hubzilla since 2012, for a dozen years, almost four years longer than Mastodon has been around. Permissions are everything on Hubzilla.
This is not experimental. This is rock-solid technology, daily-driven by thousands of Fediverse users.
This is technology available in the Fediverse right now.(streams) and Forte have a similar, compatible permissions system, only that the controls are different, and a few permissions are different. They have an additional permission setting for searching your posts, and they even let you allow or disallow individual contacts to send you boosts. Also, the only general, channel-wide permissions levels they have are
- everyone on the Internet
- everyone in the Fediverse
- those whom you follow (and even then only if you explicitly grant this permission to them individually)
- nobody except you
That said, these permissions have their limitations outside the Hubzilla/(streams)/Forte ecosystem. They can keep certain unwanted things out, but they can't keep them from happening.
For example, let's suppose you're on (streams), and you only let certain people comment on your posts. If someone is on Hubzilla or (streams) and receives one of your posts, and that someone isn't permitted to comment on it, certain UI elements for replying are removed for them, and so they can't reply.
But neither Hubzilla nor (streams) nor Forte can make UI elements disappear on Mastodon or on Misskey or on Iceshrimp or on Akkoma or elsewhere. In other words, a Mastodon user can still reply to you. You'll never receive that reply. If you're the only recipient of that reply on your instance, the whole instance rejects the reply. But still, that reply is made and sent. At the very least, it ends up on the replier's timeline and the local timeline of their Mastodon instance.
There's only one way for the Fediverse to become significantly safer: This kind of permissions system must be turned into an FEP, and it must remain fully compatible with the existing implementations. And the whole Fediverse, vanilla Mastodon included, must implement it to its full extent.
Yes, this makes the Fediverse harder to use.
But seriously, you can't expect your real-life home to be safer than Fort Knox while you're still able to walk in and out anytime without even having to open one single door.
CC: @
obscurestar#
Long #
LongPost #
CWLong #
CWLongPost #
FediMeta #
FediverseMeta #
CWFediMeta #
CWFediverseMeta