you don't kill a cow for a scratch on her leg (I hope the saying is understandable for everybody since it doesn't come from English).
I'm on mastodon and bluesky: the first is even less populated than here and a big part of the interesting content comes from bot reposting popular accounts from x or reddit, while the second is far from being THE solution but it's nowadays a -not wildly populated- compromise.
I don't condone (while I understand) the Turkish bans and I'm not interested in a verification system: if I'd like one, I'd use https://en.wikipedia.org/wiki/EIDAS.
I hope bluesky will correct its approach for what they can (the "good old" twitterin the golden era was banned in Turkey)
Technology
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
The checkmark is the wrong approach. You should never trust accounts, because accounts get hacked. We should instead use cryptographic signatures on individual posts, and clients can warn when that signature doesn't match the account's public key, or if that key changed recently. The private key would never live on the server, and ideally live outside the app.
This doesn't verify identity, it just proves the key didn't change. To establish identity, the person needs to use the same key in multiple places, such as posting it on a personal website or something. If a service wants to add their own stamp of approval, they can sign these public keys and embed them into the apl for clients to use (e.g. show a blue checkmark if Bluesky can verify the public key outside its system).
If the private key is compromised, repeat the process, potentially signing the new key with both the old and new key to prove control of both (or start from scratch if needed). Repeat whenever they get hacked.
Yeah I deleted my Bluesky. All public companies eventually turn to shit because of the shareholders unending greed.
ARE WE LEARNING HOW "SOCIAL MEDIA" WORKS YET HUMANITY?
Seriously. How many more fucking times do we need to go around this goddamn merry go round until we just start calling each other on the phone and meeting face to face again. You know, where the only enshittification is the one you bring with you. It's fucking boring me now, how many of these stupid ass things I didn't join because I've already, apparently, gotten the memo and how, inevitably, something like this happens, and everyone acts surprised and disappointed , as though inevitability was a concept they felt they'd been given a sabbatical from or something.
This. Shit. Ain't. Free. There is an inherent cost, an "effort" required to communicate with others. You pay it with money, time or privacy. The overwhelming choice lately has been "privacy", but it's obviously something that not everyone is comfortable with, because we didn't have the term "enshittification" before we started this flavor of our collective idiocy.
Lots of "how dare they solve a real problem with the only method yet invented" in these replies. Gtfo losers, clutch your pearls harder. If you don't like Bluesky don't use it. Don't be a whiny little bitch about it.
this is unnecessary with custom domains
Then come over to Mastodon...
No one disliked the check mark before "Genghis Kunt" started selling it
Bluesky is the new X. After canceling the accounts of Turkish protesters this is the next step for the big money behind Bluesky. That’s why I deleted my account a few days ago.
What's the story with the Turkish protesters?
Exactly, Bluesky has been shitty for a while for lots of reasons. I’m not understanding why this is the line in the sand.
Same. Deleted my account when they started to censor the Turkish protestors. Not that I used the account really but still.
Preaching to the choir
But anyway anyone who thinks bluesky is actually decentralised will learn sooner rather than later that that's not the case
Yous are hyping it a basic verification system which can't be bought and is handed out for the sake of showing credibility is a good thing
The sake of credibility? What decides that though? Likes? Likes are a big problem imo. It doesn't really do anything except create echo chambers.
IMO it's not that blue check equals credibility, but rather it equals that you are who you say you are. This is a good thing particularly when it comes to public figures/officials — not for their sake, mind you, but for the sake of other people who may see a tweet from them. If the checkmark is there, then it's them. If not, then it's an impersonator. Right now it's difficult to tell.
Tl;dr: it doesn't make what they say real, it just makes them real.
Something like this unavoidable.
Example, ted cruz the car mechanic in marfa Texas has just has much right to use blusky as ~~professional shit bag~~ senator ted cruz. But hiw do tell the real one from the racid sack of weasels.
It's easy: cryptographic signatures. If you want to prove your identify, post a public key on something that you need to prove identity for (personal website or something) and sign your posts with the same key. That way everyone can tell the that the same key listed on the website is used for SM posts. Clients can check this automatically and flag anything on your "official" account that's signed with a different key.
This is much better than a checkmark system, because accounts get hacked and whatnot. It's really easy to check a cryptographic signature, and it's really hard to fake. If the website gets hacked, the signature won't match previous posts.
The main concern here is losing the key. If someone steals your key, generate a new one, and sign it with the old key and the new one. Boom, now everyone can tell you control both keys, while the attacker only controls the old one.
People use usernames like they always have, and rely on reputation to distinguish themselves from the fakes? Senator ted ceuz makes an account called 'senatortedcruz' or if thats taken 'therealsenatortedcruz', and the mechanic makes one called 'tedcruzcars' or whatever. I dont see how your example is even relevant, because under a checkmark verification system both the mechanic ted cruz, and the senator ted cruz would be valid and deserving of a check mark, so there has to be some other way of distinguishing them anyway.
mastodon exists