jpereira

This is insanely dumb. Cloudflare is providing free hosting services, not materially supporting the attacker. You can argue that cloudflare needs to be better, or adopt different values towards, taking down sites they host, but this organization could absolutely just serve elsewhere (or just advertise their services over telegram or the like).

Maybe there is a point to be made about monopoly power in hosting and ddos protection. I don't really see how this blog post, or labelling it blackmail, help make that point.

Love this! A couple things it'd be really fun to see:

- timelapses of things being drawn

- a list of brushes used in a drawing

To get even wilder, what if you could record brush strokes and then retroactively change the brush code and replay them?

I guess I got my language wrong here. Maybe what I'm talking about is about portability more than global vs local. Identities should exist at a layer higher than any given social context, and should be "materialized" into that context with local information. It's not about using the same identity everywhere, it's about being able to take the identity where you want to. Similarly it's not about the same information being available everywhere, but information being relative to durable identities, not ephemeral ones.

When thinking about online communities I think the lack of "global" identities has dramatically hampered community migration and evolution. I fully agree with the author that you can't just pick up and move a community wholesale but irl we do see patterns of migration, disaporas, etc that bring along with them relationships and trust networks. That's been basically impossible to do online. The networks where most of us hang out are even straightforwardly antagonistic towards people leaving and maintaining their identities and relationships in anyway.

I don't quite know how to articulate it but I really feel the social fabric of the internet has been limited hugely by this, and it's hard to seperate what is fundamental about community migration with what's an outcome of this limited circumstance.

I'm curious about how the persistence primitives (OrderedTable, Table, etc) are implemented under the hood. Is it calling out to some other database service? Is it implemented in Unison itself? Seems like a really interesting composable set of primitives, together with the Database abstraction, but having a bit of a hard time wrapping my head around it!

The fact that all the data is open means not only that you could plausibly exit to other providers and keep all your projects data, (issues, prs, etc), but also that it's dramatically easier to build other tools that work on that same data. Triage, labelers, bots, etc, I know these are all possible on GitHub today with their API, but I think the programming model of ATProto removes a lot of friction in building and composing them.

In my view the atproto approach asks the users to make fewer required complex decisions, but gives them the freedom to make many voluntary ones. If someone wants to use a particular application, they basically just need to sign in. If they don't have an existing ATProto account, they can just make one, in the flow of the application they're signing into. Later they can chose different clients, or different infrastructure, or move their account, to their own hosting even if they want.

Mastodon requires a complex decision upfront, which server do I trust, which is analogous to where you create your account on ATProto, but unlike ATProto, doesn't give the tools to seamlessly transition later.

The trust lens I think is a good one. You want to let different users make different tradeoffs in effort without having that leading to a worse experience..

Agh, sorry about this! I'm one of the people building leaflet.pub, which this blog is running on. Just pushed a fix for this (ironically on nextjs/vercel). The redirect loop is to handle sharing auth between our "main" domain, and people's various custom subdomains. Auth, via the ATProtocol, is used for things like subscribing and commenting!

disclosure: building a substack competitor on atproto

I'm really excited for ATProto as a way to build applications that let you have the benefits of substack (a unified network, recommendations, social features like comments, etc) without the eventual path to lock in.

It's particularly exciting because the incentive is actually there to build an application this way. Whether Bluesky is growing or not, there are currently 30M accounts that you can reach (with one of the best auth systems I've interacted with), AND atproto gives you the building blocks for others to build on your work. Both these things make the bootstrapping problem for any social application way down.

There's still a lot of stuff missing, payments being a big (and gnarly one), notification management being another, but both the bluesky team and the overall ecosystem has been moving at a solid pace, and things are getting more viable by the day.

Super early days, but we've been building a substack alternative on top of atproto, you can check out some publications people have made at leaflet.pub/discover.

I think atproto offers a pretty compelling way to get the benefits of substack, like discovery, native social features like comments, quotes etc, integration into a microblogging network; without locking into a closed network.

The extensibility story is also really good, opening interesting opportunities for individual publishers to augment their experiences.

Moderation, which is the main point of this article, is a bit of an open question, but diffusing responsibility the way bluesky does is a more promising direction imo than hoping a single trust and safety department can make everyone happy.

Not right now, self hosting isn't a priority for us at the moment. It shouldn't be tooooo difficult to figure out though, the two main infrastructure dependencies are supabase and nextjs and everything else is for additional features. I should make an example .env file to make all that clear though!