@r000t @matrix pleromafe uses api so you cant exactly filter requests to it

@r000t @matrix well, most you can do is set an instance's private mode to on, like i do on pl.wowana.me. but i only do that to cut down bandwidth use. i know stuff's still accessible directly, like post objects and whatnot

@wowaname @r000t I thought Pleroma has authorized fetch too

@matrix @r000t doesnt matter if your instance is set to public and people can use the frontend while logged out

@matrix @wowaname @r000t I haven't been following this very closely. Whats going on with all this fetch stuff and Mastodon devs...?

@shebang @matrix @r000t basically Pleroma Disrespect 2.0

@wowaname @matrix @r000t Alright, but what are the details, rationale? Like are they just deliberately making a Pleroma incompatibility or something? Isn't that just fucking up activitypub?

@shebang @matrix @r000t huh? both masto and pleroma are implementing authorised fetch from what i remember hearing

i dont know when you joined fedi, i was referring to something that happened years ago on fedi

@wowaname @matrix @r000t Hmm now what was it then, I think it was some big Mastodon server flipped on some option that made it incompatible with older versions. I thought it was fetch-y but now I don't recall. I assumed this was what it was about.

@shebang @matrix @r000t no, it was rareoma's pleroma fork that made everything (even DMs) public

@wowaname @matrix @r000t Oooh ok, nm then.

@shebang
Basically, there are a few larger Mastodon instances that suspend other instances for political reasons, but they don't do it to *not see things from that instance*, they do it with the expectation that *people on that instance cannot see their content*

They see it as some sort of divine punishment, that their drivel is something worth taking away.

So it stands to reason that they'd be upset if their content wound up in the servers they suspended. Never mind that it was posted publicly for public consumption, we want our message to go out to the whole world except these people.

So authenticated fetch became a thing.
@wowaname @matrix

@r000t @shebang @matrix authenticated fetch is actually useful with regard to voluntary association, but that point is moot when you realise that all these mastodon servers still have fucking public html pages for everyone to see. thats the kicker

@wowaname
Well and fediEngine solves this problem by letting you add an infinite number of "bitch accounts" with benign bios on whatever wide-reaching instances, to do the fetching for you.
@shebang @matrix

@wowaname @shebang @matrix
Speaking of which, someone should tell @sjw that there's soon to be a client that can handle all of their accounts

@r000t @shebang @matrix i like what youre doing, even if i dont end up using your client for whatever reason

the people who try to cast you off as someone whos "disrupting the network rather than working on security fixes" are so full of shit, they dont realise we've all been talking about these flaws for the longest time, they ignore us as if we're wrong

when they see it in action, *then* something will happen – either we all accept that everyone can see everyone else's posts, or we overhaul the protocol with something that actually works. im really fine with either. until then, everyone's gonna settle for snakeoil security

@wowaname
I'm not even here for the security bit.

I personally wanted a desktop client that can aggregate my accounts, let me watch FSE and some other instances' timelines without giving up half a gig of ram each, and let me find other League players on fedi. (I'm p sure I'm the only one)

I was also getting pissed off that I had to open up like 8 different websites to get a complete view of any given thread, even if I was unblocked by everyone and every instance involved. I wanted a single butting that would crawl a thread *at the client* and not at the server.

It just so happens that these tools could be used by assholes. But assholes were going to be assholes anyway. The stakeholders either need to accept that their content is public, and that a block means inbound, not outbound, or they need to switch to whitelist federation or forum software.
@shebang @matrix

@wowaname
I think that Mastodon now has a whitelist mode that removes the public HTML pages.
@shebang @r000t

@matrix
And I sincerely hope the tumblrverse instances turn it on. Spare us from their insanity. Let them be in their own corner.
@wowaname @shebang

@r000t @matrix @shebang i wish they would all go whitelist mode

@r000t
They basically already do this. They added my server to the fediblock within days of it being turned on because someone glanced at it and decided that I wouldn't take action if someone was being abusive. Well I do, it's in the policy, although I've only had to do that once (and it was good old cvcvcv). A few days ago I brought up that it was a shame that they've walled themselves off, and someone on fosstodon called me a cunt lol. It really is tumblrverse, exactly.

@matrix @wowaname

@shebang @r000t @matrix cvcvcv is a good dude

@wowaname @shebang @matrix @r000t cvcvcv needs to stop subposting me

@fluffy
Wait? He's back?
@wowaname @shebang @r000t

@matrix
In many ways, he never really left...

Anyway I see like cvcvcvebook or something posting racist stuff randomly so I assume it's him. He seems to have a lot of time on his hands.

@fluffy @wowaname @r000t

@shebang
That's a bot mixing up his old posts
@fluffy @wowaname @r000t

@r000t
Yeah that sounds like the Mastodon devs. The guys who fled Twitter because it didn't censor enough for them. I don't know what their problem is, but it's not based on rationality, it's actually, and I mean this, deranged.

I like the software though. But yeah, thats dumb.
@wowaname @matrix

@matrix @r000t @wowaname private mode has different meaning in pleroma than mastodon. pleroma instance blocks are a joke compared to mastodon, the only work at the mrf, so when things arrive to your instance, they can't even stop people from mentioning users on blocked instances or stop the federator for sending messages to those

@matrix @r000t would be cool to crowdsource all instance histories into one cohesive database for searching

yes i said fedi's ephemeral but theres the pyromaniac inside me calling this a good idea

@wowaname
That all comes down to getting signatures for every status and if I recall, that's one of the things authenticated fetch disables.
@matrix