Natanael

joined 1 month ago
[–] Natanael@infosec.pub 1 points 22 hours ago

To be pedantic, transparency mod bots exists on reddit and server admins can redact the log here.

[–] Natanael@infosec.pub 3 points 22 hours ago

Server admins can set up moderation filters to deal with stuff like that, and should be coordinating with each other on detected spam patterns, etc.

[–] Natanael@infosec.pub 2 points 22 hours ago

Infrastructure costs

[–] Natanael@infosec.pub 1 points 22 hours ago (1 children)

Lemmy has language tags. Clients could offer integration with translation tools.

[–] Natanael@infosec.pub 16 points 23 hours ago* (last edited 23 hours ago)

Lemmy is built around forums, which is very distinct from microblogging when it comes to moderation and management.

You don't get the same kind of context collapse as on Twitter. You don't get the same kind of dependency on server wide shared culture like on many niche Mastodon servers. Although context collapse still happens to some degree on reddit and may happen here when threads gets popular, it's possible for forums to be moderated to minimize it and enforce quality. You don't get nearly as many people trying to enforce their rules in others' spaces, because forum makes it clear that it's not "your feed" (like how some try to control what they see not with filters but instead by harassing people who post stuff they don't like), here it's somebody's forum and somebody else is the moderator. You can stop seeing specific content by blocking those forums instead of blocking the users. Forums which you don't interact with doesn't affect you!

Because of how the federation works here, volume alone is never the main problem. Forums can be hosted on small instances just fine. Users on small instances can use big forums just fine. If a particular forum is poorly moderated it can be blocked regardless of where it's hosted. Admins for small servers can filter content from problematic servers, regardless how big they are, and can do it on a per-forum basis too in order to avoid collateral.

Spurious defederation between servers where one has a lot of users is where the problems gets complicated.

[–] Natanael@infosec.pub 4 points 1 day ago

It's losing cost advantages as time goes. Long term storage is still on tape (and that's actively developed too!), and flash is getting cheaper, and spinning disks have inherent bandwidth and latency limits. It's probably not going away entirely, but it's main usecases are being squeezed on both ends

[–] Natanael@infosec.pub 1 points 3 days ago

It's also what Google Maps live view is using. Street view imagery plus rough location plus on-phone camera sensor calibration data allows it to compute highly accurate positions relative to surroundings.

[–] Natanael@infosec.pub 1 points 1 week ago

Passkeys can be synchronized, but aren't intended to be exported raw as they're meant to be used with a TPM / secure element chip or equivalent secure hardware to protect the key in use. Bitwarden can synchronize them.

Also, they intentionally create distinct keys per site, so you can't link multiple accounts using the same passkey / hardware security key.

[–] Natanael@infosec.pub 1 points 1 week ago (2 children)

That's literally no different from a regular password manager or having a 2FA TOTP code app set up for it

[–] Natanael@infosec.pub 3 points 1 week ago

It literally just takes a slightly different domain name. Lots of infosec pros have been phished when not paying attention

[–] Natanael@infosec.pub 1 points 1 week ago (4 children)

Passkeys use unique keys per site for that reason

[–] Natanael@infosec.pub 3 points 1 week ago (2 children)

TOTP codes can be phished, hardware security keys and passkey can't

view more: next ›