I’m here!

  • 0 Posts
  • 20 Comments
Joined 1 year ago
cake
Cake day: June 14th, 2023

help-circle












  • ActivityPub is a standard, Lemmy, KBin & Mastodon are open source applications built on the standard. It’s the same relationship as Hypertext Transfer Protocol (HTTP) and Chrome, Safari, Firefox, Apache & IIS.

    As a client/server architecture, Lemmy is no more or less vulnerable to malicious actors than a web browser or a web server. You’re at least as likely to have a rogue admin mishandle data as someone build Evil-Lemmy. While I consider myself a good netizen, if you delete this post right now I’m still going to have a copy for at least six months because that’s my current backup retention for this instance.

    I’m no GDPR expert but I can’t see how an instance owner who does comply with GDPR can be punished for instances they don’t control not deleting federated data. There are ongoing conversations throughout the Fediverse on this topic.



  • One-click would definitely lower the bar to entry but I have to admit the concept makes me uncomfortable. While it could eliminate those problems, it creates the issue of thousands of new server administrators who really don’t understand the platform that they are now responsible for. Infrastructure and security IS hard because it’s not just about getting the right syntax, it’s understanding the concepts so that not only does it work, it works safely and reliably.

    I’ve seen quite a bit of bad troubleshooting going on as newcomers have sought to set up their instances. It doesn’t help that the current docker-compose in the Lemmy repository is outdated and doesn’t work out of the box. More than a few “this worked for me” solutions that I’ve seen may have gotten things working, but broke fundamental security principles that may or may not come back to bite the administrators later.