Readit News logoReadit News
tptacek · a year ago
Use social media direct messages to establish a connection on a secure messenger designed for direct messaging, and for nothing else. When people try to initiate conversations with you in DMs, have a ready answer to pivot the conversation elsewhere.

Social platforms like BlueSky have radically different design constraints than direct messaging applications. The implications range from security to social dynamics to legal concerns.

Social DMs are bad. Try not to use them!

7bit · a year ago
> The implications range from security to social dynamics to legal concerns.

Which are...?

GaryNumanVevo · a year ago
E2E Encryption is on the road map for Bluesky as it requires some protocol changes. The devs are encouraging people to use the DMs to exchange Signal info, and reminding people to not use DMs for sensitive info.

https://bsky.app/profile/pfrazee.com/post/3kt457v6aq72n

tptacek · a year ago
It wouldn't matter if they implemented "E2E" encryption. "E2E" is necessary but insufficient for messaging security. It would still be a terrible idea to rely on Bluesky DM's, even if they met some floor of cryptographic quality, for the same reason that it's a bad idea to use Facebook DMs, despite their cryptography being close to the gold standard for large scale social apps.
DataDive · a year ago
Zawinski's Law:

> Every program attempts to expand until it can read mail. Those programs which cannot so expand are replaced by ones which can.

I think nowadays we can substitute email with chat/DM.

ziml77 · a year ago
It's important though because it allows you to communicate things that don't really belong in the open while remaining under your identity on that platform and avoiding the need to link that identity with your identity on a different service.
jprochaz · a year ago
It would be useful if I could send people Signal link where they could login with their Facebook/Google/Instagram account (OIDC) to chat with me over Signal. Signal no longer requires phone numbers as identifiers, so this might be feasible.
legutierr · a year ago
Exactly. I often wish GitHub had a messaging capability, for these same reasons.
bitwize · a year ago
Nowadays it's chat, photos/videos, and online purchases thus forming an all-in-one app. Not quite popular here in the West, though that's Elon's eventual goal with X. But think WeChat in China.
numpad0 · a year ago
There is the western superapp, it's called Google Search.
moneywoes · a year ago
whatsapp as well
eviks · a year ago
The original law fails for too many programs to be useful in its own, but why do you need some law to replace the obvious expectation that a social media program is going to do messages?
matsemann · a year ago
Impressed by the rate new features are coming. During the first twitter takeover, many migrated to mastodon in my circles, but it didn't stick. Second wave to bsky has gained enough traction that the circle has sustained there for over half a year, with most disabling their account on X. But a few have remained on X mainly to be able to DM. So this fixes that.

What's lacking for me now is video. Having to share through YouTube and then embed for just small daily clips is a bit cumbersome.

jsheard · a year ago
Video is the killer because it's expensive. Don't they still have no ads and only one paid feature, buying a custom domain name through them directly? Which nobody actually has to pay them for because you can link a domain name registered anywhere else for free.
pjc50 · a year ago
They could just charge for video. Inconcievable to have end-user usage pricing, I know, rather than just give away everything, but someone should try it.
matsemann · a year ago
True. And yeah, I'm also a bit concerned about the longevity of bsky. Hope they can figure something out, without stooping to twitter level stupid ads or lock in (like disabling api / the openness)

Dead Comment

edent · a year ago
It is so far behind Mastodon. Both in terms of features and in terms of communities on there.

The people I interact with on BlueSky are nice, and the website is serviceable. But like Pebble / T2, I just don't see the momentum there.

Nextgrid · a year ago
Disagreed - Mastodon has a major problem. The whole concept of server/instance is unnecessary and introduces extra complexity and hard problems.

Nostr has it right where servers/instances are completely interchangeable and all the hard work is done by the client.

I get why Mastodon had servers at the beginning - because browsers can't speak any other protocol than HTTP towards a single origin domain name. But this limitation fundamentally constrained the entire product into a corner that's very hard/impossible to back out of.

Mastodon should've been Nostr in the first place, with "instances" just being read-only views into the network (to satisfy browser's "demand" for an HTTP endpoint), but otherwise would be disposable and interchangeable - all write actions would be made by a client that doesn't have the constraints of a browser and can interact with the decentralized network over an appropriate protocol (and do the necessary cryptographic magic to ensure those peers are trustless and interchangeable).

The concept of "instances" not only introduces many user experience problems that makes it a non-starter for non-technical people (or even technical people who just don't have the time/willingness to deal with BS) but also open the door for politically-motivated feuds between instance admins to which the users are held hostage (instead of moderation being done on the client where the user is the only one in control of which "moderation feeds" they subscribe to, similar to an ad blocker list).

andybak · a year ago
I have up on Mastodon when I had to switch servers because of subs political dispute between admins.

Plus realising that global search was something that many admins were fundamentally opposed to.

Oh and the array of UX issues that made me suspect that many demographics would never adopt it.

doublerabbit · a year ago
Decentralized just doesn't work in a centralized cyberspace.

You need to recreate your own centralized cyberspace and then build the underground path to the decentralized canyon.

Then provide a mothership allowing others to dock of their own standards and protocols. Yet allowing them to take off at their own accord with the data of the centralized hub.

kelnos · a year ago
> I had to switch servers because of subs political dispute between admins

That seems like a positive, not a negative. If you don't like the choices of the people running Twitter or BlueSky, you can't leave but still maintain your social graph.

I suspect that's why Twitter is still doing as well as it is participation-wise since the Musk acquisition: Twitter is still by and large where the people are, even if the owner is an insufferable jerk.

wraptile · a year ago
It's super american-centric too. For a "decentralized" platform that basically covers 2 small areas of the world is not a good sign. I feel like Bluesky had done nothing to address discoverability and sharing issues. Most engagement is centralized with 1% of shitposters.

From listening to a podcast with the founder it seems that's their goal too as they want to integrate bluesky with e-commerce which obviously doesn't work well globally.

Karrot_Kream · a year ago
The 3 main communities seem to be English speaking, Japanese, and Portuguese. The community is way smaller than Xitter for sure but are the percentages that off?
jandrese · a year ago
Having tried both BlueSky and Mastadon I found Bluesky pretty easy to use and Mastadon bewildering. There were so many Mastadon servers I didn't know where to start. I guess maybe it doesn't matter what server something is on because the app can connect to all of them, but then discussion topics would be repeated in multiple places and it all seemed so disjoint. Like the chaos of old IRC networks but amplified. All in all I felt like a babe in the woods on Mastadon while Bluesky is pretty shamelessly just "Twitter minus Nazis". One thing I like about Bluesky is when a thread starter mutes one of the posters, it mutes them for everybody in the thread, not just the original poster. While this might unfortunately facilitate creation of echo chambers it is a supremely powerful anti-troll tool.

The other big reason I went with Bluesky over Mastadon is that several of the people I used to follow on Twitter have moved over to Bluesky.

kelnos · a year ago
> One thing I like about Bluesky is when a thread starter mutes one of the posters, it mutes them for everybody in the thread, not just the original poster.

Oh interesting. This is a really cool feature. It kinda nudges it in the direction of being a private, self-run micro-blogging platform, where replies are essentially comments that you can moderate.

numpad0 · a year ago
Mastodon core devs avoid discussion of server choices because it inevitably reveals that 1/3 to 1/2 of Twitter/Bluesky/Mastodon by volume and/or users are Japanese image posters incompatible with Western, especially European, languages/memes/values.

2/3 of top 3 and half of top 10-20 Mastodon instances(not including Misskey ActivityPub servers) are Japanese. They really don't like that.

troad · a year ago
I think the primary difference is in the communities. Every six months or so I log back into Mastodon and the discussion there is one hard 'Nope' for me. I don't understand why I'd voluntarily read a platform where every other post is a 'call out' of something 'problematic' according to the warped world view of '@CatMomLibrarian' or something similar.

Cutting out the Nazis from Twitter is a great start, but Mastodon has done this by simply doubling down on the other end of the horseshoe. It's Truth Social for the other fringe.

BlueSky seems somewhat richer in normal people, but that probably won't last if the platform is successful over time. It seems in the nature of social networks to be taken over by parasitic outrage grifters.

facialwipe · a year ago
Jack Dorsey out, plaintext DMs in.

Slow clap for Bluesky.

evbogue · a year ago
My offer still stands to help the Bluesky folks implement these types of things if they can't figure it out. Call me!
Kye · a year ago
From discussions with security professional friends and folks on E2E encryption of protocols: I don't think it's that they can't figure it out, it's that they know it's hard to get right and harder to fix later, so they're taking their time to do it right in the first place. They don't want to end up like Telegram or Matrix with furries doing unflattering writeups on their security.
KerrAvon · a year ago
I don’t think they want a plan to get Dorsey back — he seems to be an idiot.
atulvi · a year ago
I really want bsky to succeed. They have a promising product. Users and Content are all that matters now.
wpietri · a year ago
They have a product, but do they have a business? I haven't kept up with them lately; do they have anything approaching a revenue model that would sustain them and provide good returns to their investors?
jwildeboer · a year ago
I’ll stick to Signal for private communications and publish my public takes with ActivityPub based Mastodon. No need for proprietary stuff anymore.
jimbobthrowawy · a year ago
All of bluesky is MIT licensed (unless there's a subset I'm missing), and developed pretty openly. Heck, you could use DMs much earlier if you logged into main.bsky.dev (with an app password, ideally) rather than bsky.app.

They don't have E2EE yet, and use a different system than posting does on the site. (ergo, I think they're not in the firehose)

jwildeboer · a year ago
I consider ATProto, the protocol BlueSky uses, to be a proprietary thing as it is owned and maintained by BlueSky. ActivityPub is an Open Standard.
srameshc · a year ago
I have a question that is not relevant to this post. Has anyone tried to implement the Bluesky federated protocol?
monknomo · a year ago
I know folks are hosting their own PDSs, at least in the sandbox, and I want to say in prod?

I'm not sure there are any non-bluesky Relays

I know folks are hosting their own labellers.

and I know folks are hosting their own appviews

I've seen repeated kerfuffles about people running mastodon-bluesky bridges

Retr0id · a year ago
Yeah, I wrote my own PDS from scratch[0], that was capable of federating with the sandbox network.

Now that federation is enabled in the public network, I've been working on a slightly more production-ready rewrite[1], although it's not yet in a usable state (haven't had much time to work on it lately)

[0] https://github.com/DavidBuchanan314/picopds

[1] https://github.com/DavidBuchanan314/millipds