I think it's pretty safe to say that the majority of us are here to avoid another corporate takeover of our preferred platforms. It would seem to me to be a tad irresponsible to allow Facebook into our space with open arms, allowing them to hoover up our data. I would love to keep using Lemmy.world, but will happily change instances if need be, and I feel many share that sentiment.

you are viewing a single comment's thread
view the rest of the comments

[–] registrert@lemmy.sambands.net 5 points 11 months ago (3 children)

I know exactly what you mean. People talk about how "anything can be scraped anyway" and don't understand how instances can lock down public timelines, enable whitelist federation and require authorized fetch for federating - at least on the actor-based fedi platforms like Mastodon.

[–] rglullis@communick.news 20 points 11 months ago

public timelines, enable whitelist federation and require authorized fetch for federating

And all of that can be circumvented by pulling the data via the RSS feeds or plain old scraping.

Authorized fetch and domain blocks may be effective to stop drive-by trolls, but do nothing to stop anyone with a minimal amount of resources and interest in scraping data from a social network.

The reality is simple: all information that you put on the web should be considered as publicly available. Those that want or need absolute privacy should not use information in the fediverse and resort only to provably secure communication protocols.

[–] ethan@lemmy.world 7 points 11 months ago

I don’t know of any major instances that have enabled any of those… And all getting around it would take is to create an account on the instance- which for instances without admin approval can be done fully programmatically anyway so it wouldn’t even require human intervention, just a few extra lines of code.

[–] AustralianSimon@lemmy.world 2 points 11 months ago* (last edited 11 months ago)

If your instance is federated it doesn't matter how "locked down" your instance is it's pushing data out of the walled garden lol

And that's ignoring the fact you can just create an account on the target instance then hit the instance's API