Also React 18's Suspense and serverside rendered response streaming is super cool, it allows out-of-order sending of the rendered page, where some things take longer to load than others (because they have to do various requests to the Mastodon backend)
Finally worked some more on #FediFoxShield, my project to write a protective layer of sorts around Mastodon 4.x' newly way too exposed API
Code is a sprawling mess, but i'm also using this as a playground for some new tech, like streamed server-side React rendering with Suspense
@researchfairy that sounds like Amos
@thufie It's still kind of a tech demo atm, but I think it can progress fast from here. Especially as I'm hoping to share a bunch of components with the FediFox client (profile, toot, thread rendering etc).
Security-wise, the worst that could happen is exposing something that local non-admin account has access too, but as it won't follow anyone there's no simply no way to accidentally expose someone's follower-only posts etc
(also it just uses the Mastodon api, so you can run it in front of a GoToSocial instance too if you wanted)
Also React 18's Suspense and serverside rendered response streaming is super cool, it allows out-of-order sending of the rendered page, where some things take longer to load than others (because they have to do various requests to the Mastodon backend)
Central to the design is that it authenticates as a local account on the instance, so you can run it with `DISALLOW_UNAUTHENTICATED_API_ACCESS`
(which would totally break the entire new frontend), and still have functional public profile and thread pages.
This also allows introducing more configurability and more consent, like letting users choose if they want to include unlisted statuses, or even show their profile publicly at all
@thufie same, unfortunately
@kim finally I can block * and live in peace
meta, power imbalance
I think that what bothers me about the "there's a power imbalance between who can host an instance and who can't and that's why fedi is unsustainable" argument, is that it doesn't acknowledge that *this is true for every alternative too*.
This isn't a problem of Mastodon or fedi specifically. It is a problem of technology in general, a problem that even predates computers. It holds true for any infrastructure that involves technical complexity. Once it becomes a specialization, there's a power imbalance.
Even if you just look at social media sites - how is this any different for Twitter, Cohost, and so on? There's still the same admin vs. user power imbalance, just now you don't even get to choose who is the admin, and there's no real accountability because the cost of leaving is social exclusion.
I'm not convinced that this problem (of power imbalance in technical complexity) is actually solvable, and I also don't think that it's a useful *goal* to try and solve it - it feels to me like the same old 'rugged individualism' in a new coat of progressive-sounding paint.
The more useful goal here would be to *acknowledge* that those power imbalances exist, and try to erase or at least minimize their impact through building healthy communities and trust relationships. Not by replacing it with a centralized silo that has the same problems but worse.
(And no, P2P isn't a solution either. There's still a power imbalance between developer and user there.)
Finally worked some more on #FediFoxShield, my project to write a protective layer of sorts around Mastodon 4.x' newly way too exposed API
Code is a sprawling mess, but i'm also using this as a playground for some new tech, like streamed server-side React rendering with Suspense
⚠️ READ BEFORE FOLLOWING ⚠️
if i don't know you from elsewhere (under same nick), shoot me an introductory DM first (following back is fine)
I do anarchist tech stuff and run free services at https://pixie.town
I program, solder rgb led thingies, and fly fpv quadcopters
en: they/them
nl: die/dies (langzaldieleven.nl)
“i don't trust like that”
not a furry, actually
Extreme coffee-out-of-a-wineglass Energy
something something trans list stop scraping bios
and now a word from our sponsors (screenreader warning it's zalgo)
T̀ͧ̓̑͐̓̍̂̏҉̴̷͚̦̤͙̜̖͙̝͟ợ̵͈̗̮̲̥͕̼̩̭̞̙͉̆ͮͧ̉̒́̑̍̋ͭ̌ͭ̒̉́̕͟ ̐̅̈́ͯ҉̸̴҉̹̟͕̖̠̟̤͕į̸̙̮͓̤̠̘̫̦̥̣̻͚̣̎ͭͯ̋̉͝n̔̄̏̈́̃̇͛̂̋̇̐́͘͝҉͙͔̠͇̖̤̹̭̱̪v̴̴̛̘̠̰̹͚̱͉̳̘̥̞̳̪͈ͥͭ̅ͥͦ̀͛̔̃̃̎͋̋̎͐͌ͪ̚͟͢ͅö́́̎ͬ̔͑̆̃̅̒̿ͪͯ̓͏̞̱̜͍̬̗̹̫̝̪͓͕̳̬̰͘͝kͥ̒ͣͦ̌͛̃͒̀̿ͣͪͤͬ̍ͮ̚̚̕͝҉̹̰̟̰̻̻͍̠̗̳̬̬̬̞̟̹̩͇́͜ẹ̴̡̨̱̹͍̯̱̗̗͍̬̐ͣ̑͑̐̓̈̑ͥ̅́̇̃͒̀̃̂́ ̨̛͖̬͇̣͔̼̥̬̝̥̣̭̝̪͎͈̌̅͆̉̀͘͜ͅẗ́̄͊̌̍̆́̿́̊ͣͮ̅ͥͩ̔̏͏̧̳͎̥͈ͅh̴̴͇̻ͧ̍̐̈͐̎͛́̀̽̃̒̔͢͢ȩ̸̶̶̟̗̮̺̭̥͕̭͎̺̙͎̖͔ͪ̑͛̓̅ͪ̄́ͧ͡ͅ ̡̧͇̤͚̻̬͉͔̥̫̟̙ͮͩ͌̿́̆͋͜h̵̨̭̰͎̭̱͊͒́͒͆̎ͮ̈́̆ͪͧ̚͞î̛̦̞͓͖̭͈̮͔̩͙̱̖̞̳̥̦̩ͭ̂̏͒ͨ̃̿̽̓͑ͫ̕͝͡vͧ͋ͪ̌̂̑́͌̂̒͑ͮ̋̂ͫ̈́҉̹͜͢ȩ̡̖̯̞̺̭̗͔͇̻̤̼͈̙̞͉͙̈ͤ͊ͨ̀̆͆͒̓̄̿ͭ̃̚͜͝͡-̶̪̪̠̝̜̯̜̹̭̯͎͍̲̱͉ͪ̏͒̊ͫ̀̈͘͡m̸̪̘͙̰͚̗̳͕̟̖̿̌͐̔̐̈̽̃ͯ̅͢ͅͅi̸̷̧̛͍̝̦̫̮̤̐͑͗̏ͬn̡̨͆ͩͤͫ̔̈́̈́͊͐̂͛̀̚͞҉̜͍̝̰̱͚̜̹̞̝̞͈d̢̫͕͚͕̥̰̝͆͗́ͨ͑̈́̓͜ ̡̩̜͎̳͎͂̓ͫͭ͐̀͡ȑ̷ͭ̑ͪͭ͋͢͏͕̳̟͜ͅͅe̴͌̅ͣ̾͒̔́̊̔ͭ̅̄̇͏͎͉͈̤̙p̀ͥ̈ͨͩ͛ͥͣ͗̄̈́̚҉̢͔͉͍̹̮͉̺r̵̸̡̩͎̱̟̺̟̞͈̯̯̪̹͂́ͣ̐͑̒̒̀ͧͩ̿ͮ̕͞ě̵̡̱͈̜̯̳͍̝̦̜̫͈̜̗̘̪̪̓͆͑͋ͮͯͪ̅̂͐̔̆̃ͫ͑̾͒͢ͅş̶͓͉͚̜̪̜͓̘̻̃̔ͨ́̀ͅẻ̵͇͈̮̝̠͖͍̫͉͓̪̠͔̬͕͛̊͐̎̓̽ͫ̌ͧ̅̿́͘n̛͚̺͈͍̰͉͙̤̘̺͖͉̤͖̈͑͑̍̅ͪ̎͂́ͦ̒ͣ̋̆̄̄̍̃̊͟t̵̛͙͚̥͇̫̻̞͖͕̰͈̩̰̱͉ͣ̃ͫ̋̍̈ͥ͗̎ͭ͋͜i̵̡̤͇̣̰̦̟̭̮̩̲͔̭̟̖̹̙ͥ̆̋ͫ̓͌̒̾̍̄̾̎̂͂̏̇ͩ̚͢n̶̮̹̤̻͈̙͔͎̦̟ͫ̀͌͛̋̌̽̀̓̂̕g̷̣͖̠̩͈̲̥͍̦̘̺̏̍͛͋̎͛͒ͪ̇ͮ͠͝ ͦ͂́̿͐̅̌̊̌̉̍̀҉҉͈͖̮̩͎̮̬͖c͖̬̠̫̠̫̗̉̾͋͒̏̄̈́ͬ̊̓͘͝h̴̷̨͉͖̱̗̪̣͕̮͓͕̺͖͈͙̥̬͓̟ͣ̏̀͐̀́̍ͪ̋͒͐ͪ͐́̕a͍͈͉͎̥̠͍͛ͭ͛̃ͫ͒͋́͟ö͙̻͔̙͖̰́̋̑́͜s̶̸̫̖̫͇̣̻̺̹͔ͧ͐̂̈́ͮ͋̌͠.̰̯̞͎̗̺̠͔̫͍̖ͮͦ̒̏̈̾ͭͧ̉͘͢͠