Reddit refuge

  • 0 Posts
  • 76 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle
  • Passkeys rely on you holding a private key. The initial design was that a device (like a browser or computer/phone) stored the private key in a TPM-protected manner, but you can also store it in a password manager.

    This is more secure than a password because of the way private/public key encryption works. Your device receives a challenge encrypted with the public key, decrypts with the private key and then responds. The private key is never revealed, so if attackers get the public key they can’t do shit with it.

    Just be sure that your private key is safe (use a strong master password for your PM vault) and your passkey can’t be stolen by hacking of a website.









  • Lemmy is AGPL v3.0. From what I understand, that means anyone running Lemmy (or a fork of Lemmy) needs to make their source code public, even if their code changes are strictly to support their own network infrastructure.

    it really doesn’t matter though, as a corporation only needs to implement an interface to Lemmy via ActivityPub protocols; in other words it they could write a completely closed-source backend to use for profit and as long as it can poop out the correct data structures over ActivityPub to allow Lemmy instances to understand it, it will work.

    This already happens as we can see and subscribe to kbin magazines, and Mastodon users can be @'d and IIRC can reply to comments via Hoot (or whatever they call it). Kinda wild, but it also leaves the door open to literally whoever.

    I think the real interesting question is will a large corporate player be able to maintain a captive userbase? None of the doomsday scenarios play out in their favor unless they can capture users and communities - because then the usefulness of the whole thing rides on their server being available. At that point it’s reddit with more steps - they can do what they want.