There is a lot of back history involved. Some admins don't like the terms of service used at Qoto -- **specifically some quite Libertarian statements** on it which I personally have made motions to change.
In some other cases it's because this instance did not block some other instance which they found deplorable and a nest of iniquity, etc.
I have been out in Diplomatic missions in the past, but not much resulted -- other than me sending detailed correspondence and sometimes being :
* told to not contact them again.
* or losing my local account at that instance for the attempt.
* or simply getting a polite rebuff on the attempt, which appears the most positive result.
#QOTO is **perceived negatively in some quarters** - and that has implications on **who sees your posts here as well**.
See these two blog posts for detailed info on some of my past attempts :
https://write.tedomum.net/rgx/when-you-discover-your-instance-is-blocked
https://write.tedomum.net/rgx/todon-nl-admin-reacts-to-polite-inquiries
By the way I'd also like to point out one little piece of irony. Your "main" account over at muensterland. That account has been your "main" account for 5 months, prior to that qoto was your main account for about 6 months. Despite the fact that they were both your main for similar amounts of time, and you followed a similar number of people from each account... your account here at QOTO remains four times larger than your new main account.
>todon dot nl
Wait a minute! Why are you communicating with that user on gameliberty? It’s clearly a rightwinger or even alt-right.
>2 days later
Your account has been suspended and all of your toots and your uploaded media files have been irreversibly removed from this server and servers where you had followers.
They… that… they didn’t just delete his account. They impersonated him, spamming other instances with fake Delete messages, to trick them into helping retroactively censor him, regardless of their ToSes. Because he may have spoken with someone who was likely to be a wingnut.
…
THIS IS WHY WE SHOULD BE USING PUBLIC KEYS JESUS CHRIST
@cy
Yup there is a reason we dont cave to their insanity. We do what is right in terms of server policy not what a few radicalized servers demand we do.
@design_RG @olamundo
@freemo @design_RG @olamundo Mostly I just wish people used public keys. Because we require a digital signature from the instance, not the user, it lets instances use their users as unwilling weapons to sabatoge other instances. I never thought I’d see it being done under benevolent pretenses, but here we are.
Maybe I should make a list of safe instances for people to join too…
@cy
Agreed, im all for personal control of our identity and keys
@design_RG @olamundo
> They… that… they didn’t just delete his account. They impersonated him, spamming other instances with fake Delete messages, to trick them into helping retroactively censor him, regardless of their ToSes. Because he may have spoken with someone who was likely to be a wingnut.
Very true -- that is one angle I hadn't thought about. In fact, the account deletion at the one instance, a huge Abuse of Power considering the circumstances (honestly and clearly documented in the blog post, linked above in a previous comment), that also meant a deletion of the user account content EVERYWHERE.
I have read and thought about the way Hubzilla does things, and it seems a lot better. There, we can pack up at move, with ALL our content preserved, intact.
Which is impossible in Mastodon. The only tool offered is a backup archive creation. This archive, with all toots, images etc, currently cannot be imported in any other instance; and there's no software to view it, to retrieve a toot's text or the attached media, etc.
Not only the @admin did this, surprising since their is supposed to be a Left wing instance, (which I am aligned with).
I had the displeasure to see a good friend lose completely his account and all data from mastodon.social - and no appeal was possible or got any results.
No abuse from this user either. We need smaller instances and closer control of our data, plus portability.
@design_RG
Importing toots is something ive wanted to add to qoyos feature list. This may be a good reason to focus on that.
I should also point out promising not to behave in this was is also what free speech instances are all about.
If someone could take a shot at creating a JSON viewer, with the proper intelligence to handle the mastodon exported archive, it would already be a HUGE improvement.
Currently, **there's no tool that I know of** -- and [I have posted **a detailed Blog on this**](https://write.tedomum.net/rgx/mastodon-options-for-moving-an-account), and asked friends in various instances.
Got a few pointers but the only viewer I could use was not intended for this and a bit cumbersome.
We are potentially looking at large amounts of personal data; **7000 plus toots, thousands of images in my 450 MB archive**, from this account here at Qoto.
Importing the data into a new instance has big difficulties as it will be propagating to other instances, etc. So this is a difficult and critical job.
**But an archive handler which can navigate the saved data would advance things a lot** and not pose this type of problem. We would be very grateful to anyone who took that project on.
Pretty printing JSON is easy if that's all you want. I guess it depends how far you take it though. If you want a pretty html interface and rendering of markdown in the toot contents and other bells and whistles it becomes a bit more involved, but doable.
Honestly in some ways it might be just as easy to build an importer than it would a viewer, again depending on the feature set of the viewer.
I've had several users in recent days particularly say they would want to mOVe to qoto if they could take their toots with them.
The issue I see with an importer is just one really, that is, a person could abuse it to create post-dated fake toots. The importer would effectively add the ability to create toots with any date timestamp you want.
The other issue is preserving the threads on the toots, this seems like it could be impossible.. Other users replied to your post at another account. You cant change their post to point to your copied toot at the new account. So while importing all your toplevel toots is doable you couldn't really do anything to effectively import the thread of replies attached to it. Even if you only imported your own replies to your own threads they would mostly be hanging replies since the parent comments would be missing.
Is bugzilla even ActivityPub? I would imagine the only way importable toots would be possible at all is if it didn't use the activity pub standard at all. In which case I'd wonder how they safely handle these concerns.
That question sounds like it implies it would take effort. Presumably if the client were written correctly it would just need to be be configured once and then every post would get signed automatically.
Mastodon is already keybase compatible (I suspect you may know that).. I use it myself. It has some limited use here in the sense that if your account is compromised you can revoke the verification of it. The problem is people cant retroactively figure out when that revocation took place so it can be hard to do forensics to figure out the point where messages were no longer officially associated with the person.
Yea but a key signing something doesnt require manual user intervention if the client is written such as not to need it. So I'm not sure why thats a burden.
In this example is A and B servers and x is the source users public key and y is the destination users public key?
Im not even sure why the servers would even need to know about it at all to be honest.. let alone be a part of activity pub.. for example it could just call GPG whenever I try to make a post from my computer and ask it to sign the content of the post. The signature would just be attached as metadata. the usual server approach to signing would remain intact and uneffected.. When a client sees and gets your post if they too have the relevant feature then it would see the signature and verify it.
All this would manifest as some osrt of a check mark or other marking indicating when a post is signed and verified vs not. The signing process could therefore be completely automated.
I'm not sure having a server delete your post is particularly an issue. Servers are not obligated to let your posts go through at all, a server might block you and could (and its perfectly acceptable to) drop your post. So posts just not getting dropped isnt an issue we are trying to solve here (unless im missing something).
the issue attempting to be solved is if a server spoofs another user. Kicked them off their account then uses their account to spoof messages as if from them. Thats what we are trying to address and the scenario i proposed I believe would accomplish just that.
As far as I know Eugene doesnt develop ActivityPub, he only consumes it. I think its Webber you'd have to talk about to isee if any such changes for AP is a possibility (probably not if it isnt backwards compatible I'd think).
Would it though? If the model allows for "anything" then presumably it includes the option (though not requirement) of personal key use. So not sure why the protocol would have to be reworked to **only** allow for that (or how it could be enforced as a standard even or what functional changes it might imply to do so)...
Its just thatfor servers that allow users to use their own key, and users that adopt it, then I can trust them. On servers where they dont do this or users dont employ it I would just trust those account's identity less so.
@lanodan @design_RG @freemo @olamundo Yes, that’s why I said “we” not “they.”
@design_RG
To clarify a few points... The "Libertarian Statements" he is refering to is specifically our rule regarding not banning people for their opinions as a matter of policy. What we call "Freedom of speech".
It should also be pointed out that while a handful of services do block us for such a policy they are a very small minority and limited mostly to the more extremist instances who have a tendency to mass block large swaths of the fediverse.
To put some numbers to it QOTO is in the top 10 most connected instances on the fediverse. In other words, we are one of the least blocked instances out there that is large enough to be have a federation footprint (be discoverable by other servers).
So if your concern is being able to talk to and connect to other instances QOTO is one of your better bets.
@olamundo