But we already have Mastodon for the same purpose?
it seems like maybe this is compatible, and is easier to host for a single user instance
I'm not an expert at infrastructure stuff but "single user instance" sounds quite a bit like "peer to peer", "trackable" and "IP leak" to me
Yep, that would be the ip adres of my €5 a month VPS somewhere in an german datacenter.
No I meant the user's IP
How would that be leaking, home hosters aside?
It can be intercepted by the owner of the server that the instance the user is registered on uses
Which happen to be myself.
And the datacenter facility owner.
It's the same concept as running a mastodon server but turning off registration. No more or less secure.
This is about making your own personal instance of a microblog that's ActivityPub enabled. It's much lighter than running Mastodon that's mean to be a hosting platform for a lot of users.
Hmmm but that means my device (phone or computer) has to be online all the time for all features to work right?
No, it means you run your own VPS to host your personal blog.
What is a VPS? If it's a server, there's nothing new here. I thought it's a 2 in 1 client+server technology like you can do in old Minecraft Java versions (your machine is both a server and a client of its own server)
Yes, it's a virtual server that you can get from a provider like Digital Ocean. It's not running on your machine locally, it's the same thing that the admins of Mastodon instances have to do to run Mastodon servers.
Huh I thought the servers were real and ran on bare metal of volunteers like it's supposed to be
pretty much nobody runs servers on bare metal nowadays
Huh but how about security? Is anything even zero access encrypted???
It's really up to you how you set up your server and the datastore. This has nothing to do with Hollo. Again, there's no difference between this and running a Mastodon server that will also need infrastructure like a db to back it.
Hmm sounds very unsafe to me. The cloud server provider can do anything, including logging all the traffic and sending it to the NSA for criminal finding and analysis purposes. Well I heard it's almost impossible to get data deleted from Mastodon so whatever.
I don't know what to tell you, but this is how modern internet works. Also, nobody is forcing you to get a server in a jurisdiction where US has access to. Meanwhile, any traffic is encrypted via HTTPS, so the provider can't actually log it. It sounds like you have a very superficial understanding of the subject you're debating here.
This is an unpopular take because laziness, lack of quality and lack of care are the standards now but "this is how modern internet works" isn't an excuse at all. That's what FOSS is trying to change actually. But I guess the Fediverse is far behind in terms of security now. Not having everything encrypted on a server you don't own is a massive flaw. Privacy as in data mining seems to be a bit better than what Big Tech offers as long as you trust the instance and its server provider though.
Nope, everyone blindly trusts AWS/Crimeflare/etc. to MITM all their traffic, storage and servers and never happen to do anything bad or leak any data. One day it's going to bite everyone in the ass.
Even when you use AWS's encryption feature for the VM itself, they hold the keys for you.
But we already have Mastodon for the same purpose?
it seems like maybe this is compatible, and is easier to host for a single user instance
I'm not an expert at infrastructure stuff but "single user instance" sounds quite a bit like "peer to peer", "trackable" and "IP leak" to me
Yep, that would be the ip adres of my €5 a month VPS somewhere in an german datacenter.
No I meant the user's IP
How would that be leaking, home hosters aside?
It can be intercepted by the owner of the server that the instance the user is registered on uses
Which happen to be myself. And the datacenter facility owner.
It's the same concept as running a mastodon server but turning off registration. No more or less secure.
This is about making your own personal instance of a microblog that's ActivityPub enabled. It's much lighter than running Mastodon that's mean to be a hosting platform for a lot of users.
Hmmm but that means my device (phone or computer) has to be online all the time for all features to work right?
No, it means you run your own VPS to host your personal blog.
What is a VPS? If it's a server, there's nothing new here. I thought it's a 2 in 1 client+server technology like you can do in old Minecraft Java versions (your machine is both a server and a client of its own server)
Yes, it's a virtual server that you can get from a provider like Digital Ocean. It's not running on your machine locally, it's the same thing that the admins of Mastodon instances have to do to run Mastodon servers.
Huh I thought the servers were real and ran on bare metal of volunteers like it's supposed to be
pretty much nobody runs servers on bare metal nowadays
Huh but how about security? Is anything even zero access encrypted???
It's really up to you how you set up your server and the datastore. This has nothing to do with Hollo. Again, there's no difference between this and running a Mastodon server that will also need infrastructure like a db to back it.
Hmm sounds very unsafe to me. The cloud server provider can do anything, including logging all the traffic and sending it to the NSA for criminal finding and analysis purposes. Well I heard it's almost impossible to get data deleted from Mastodon so whatever.
I don't know what to tell you, but this is how modern internet works. Also, nobody is forcing you to get a server in a jurisdiction where US has access to. Meanwhile, any traffic is encrypted via HTTPS, so the provider can't actually log it. It sounds like you have a very superficial understanding of the subject you're debating here.
This is an unpopular take because laziness, lack of quality and lack of care are the standards now but "this is how modern internet works" isn't an excuse at all. That's what FOSS is trying to change actually. But I guess the Fediverse is far behind in terms of security now. Not having everything encrypted on a server you don't own is a massive flaw. Privacy as in data mining seems to be a bit better than what Big Tech offers as long as you trust the instance and its server provider though.
Nope, everyone blindly trusts AWS/Crimeflare/etc. to MITM all their traffic, storage and servers and never happen to do anything bad or leak any data. One day it's going to bite everyone in the ass.
Even when you use AWS's encryption feature for the VM itself, they hold the keys for you.