We Are Trying Out PeerTube
boilingsteam.com
boilingsteam.com
"Which server do I choose to get in bed with?"
It's not just a question of which server do you trust to be a good actor and to not shut down tomorrow. It's also a question of which domain name do you want associated with your user account?
Do you want alice@cucumbers.pizza? Or do you want alice@witches.bike?
I believe that gmail won email not because of security and good user experience. I think they won because it removed the complexity of this problem.
When I sign up for gmail, I can just be myself. I don't have to be myself + something else.
Consequently, this is the strength of P2P networks. Remove the domain question entirely. I _am_ just a long string of characters (which is like my essence), but people call me by my name. Just like in normal life.
I don't understand this sentence. What is the "something else" here that Gmail uniquely lacks?
The unique domain that I would otherwise have to associate myself with. "gmail" is so ubiquitous that it just doesn't mean anything anymore. It's just... the protocol.
Tell someone that your email is "alice@alice.website" and even _that_ is saying something significant about yourself that you may not want to say.
A big aspect of appearing "cool" is not letting on that you care so much. Social networks and messaging systems should allow people to be "cool" if they want to be.
Many people on HN just straight up won't understand what I'm talking about.
To a normal person, "@gmail.com" doesn't say _anything_. Give someone a different domain and they will literally look at you funny.
Of course, I am, but no need to reinforce that.
...yes, of course; why else would you do it? ;)
I'm semi-kidding; there are very real practical benefits, but I really do run email through my own domain, at least in part, because it sends a message.
That doesn’t explain how Gmail became ubiquitous. Back when it started, Hotmail, Yahoo Mail, AOL were very popular (among many others). Since it was not yet ubiquitous, Gmail’s ubiquity could not be an explanation for success.
Also, if someone asks me for my YT channel, I just say the channel name and they know where to look, youtube.com.
With peertube you have to: give your channel name, remember then it's NOT youtube, tall then the correct instance, hope they won't type peertube on google and try to search for you in the first instance that comes up.
But I tend to think that a true web of trust model makes the most sense. There may be 250 pewdiepie's on the network, but I'll just follow the one that (1) is closest in my network (followed by my friends) and (2) has the most follows (AKA highest trust).
We already follow this logic of #1 and #2 today even on centralized networks. Web of trust just makes sense to people intuitively.
Who do I know that already knows you? How else can I determine that you're legit? I'm gonna snoop your profile and see what looks legit. Ah, looks like a lot of normal people follow you already.
Of course this isn't full proof. But it's not full proof on centralized networks either. We just need reasonable certainty.
BUT, there's a huge problem. When you have a big creator on the platform, like PewDiePie for example. Every instance would have someone creating a fake PewDiePie. So, either the original creator would go to another platform, or they would need to use bots to create they users on all possible instances. So... creator will not have any incentive on using Peertube, as there's no 100% way to know who's the original.
Remember when Mastodon started, the fake IDs were already a problem: https://mashable.com/2017/04/06/you-cant-delete-your-mastodo...
You shouldn’t need Youtube, Twitter, or some other centralized provider to attest to your identity; you should be able to, with centralized providers only announcing or caching that attestation (just as keybase provided for with proofs). Maybe there’s an easy way to tie this together with FIDO, U2F, etc. I need to do more research.
Also, searching for your account on any Peertube instance should work fine.
Before I had gmail, I used my ISP email address. While using my ISP email address, I set up an email server with a dynamic hostname -- homeip.net at the time. It 100% worked.
There absolutely was a choice. You just had to be technical to know it existed in the first place.
The argument is that, at some critical point, X became the default choice, and stayed that way.
Why it was gmail was interesting at the time, but isn't anymore; now it's literally just "people pick gmail because it's gmail".
It seems strange to me that gmail would be the default anywhere.
Congratulations, we reinvented Facebook.
Anything with any hierarchy in its namespace will follow this path. Only pure P2P has a chance of avoiding it, and pure P2P is very hard to build and scale.
It also faces a serious protocol ossification challenge with no good solution (yet). Federated protocols face it too, but less as there are fewer cats to herd.
That's true of pretty much any system, though: The Iron Law of Oligarchy[0] always applies.
How is that anything like reinventing a monolithic social network like Facebook?
As a separate analogy, consider a server for a MMO. MMO servers live and die based off the usercount, and lower count servers are considered less desirable for other incoming users. So what ends up happening is that players congregate around the server that has the most users, which in turn drives up costs for said server requiring them to take in more money (through donations or ads or subscriptions) and soon they become the standard for other servers to follow.
Even if other servers end up hosting, few reach the same numbers because most new users are instead redirected or drawn to existing servers with a high user count. So we're back to stage 1 where the fediverse hasn't really solved anything at all. Said competitor may then choose to instead jump off the fediverse and take their users with them (because you become associated with certain other negative groups which are bad for your image), the fediverse starves because your average user doesn't care and then we have Facebook again.
As a counter example, if the behavior you described really did happen in federated systems then why hasn't it happened to email?
I think you'll find it agrees with your assessments. DNS and SSL Certificate Authorities centralize an otherwise sensible decentralized system.
It's out of date because work has continued. Here's some hints as to how we can improve the situation:
- Decrease importance of server you're on by allowing easy account migration. One easy way to do this is to use mutable data to represent your activitypub profile in a content-addressed store... you can look at mutable links in IPFS as an example (the work that we're doing on Datashards is also relevant). (ActivityPub actually does support other URI types that are not https so this is no problem...) Don't like the server you're on? Update your actor profile to point its inbox URI at another place.
- Support hosting over more p2p, easily self-hostable, NAT-punching and secure systems where you know you have a secure connection because the name of the server is actually the fingerprint of the key. That's actually what tor .onion servers and I2P servers are. There's no reason you can't run ActivityPub over such servers, and some people do, but it isn't widely supported because...
- ... because of the way we've chosen to do names. The right answer isn't webfinger (which isn't in the ActivityPub spec but is what's popularly deployed), it's petnames: https://github.com/cwebber/rebooting-the-web-of-trust-spring...
- And now you need a way to handle anti-abuse in a system that doesn't assume that domain names and instances are all too important. OcapPub outlines some of that (sadly unfinished, but the core ideas are there) https://gitlab.com/spritely/ocappub/blob/master/README.org
- On top of all that, maybe add store and forward messaging to support nodes being offline. This can be done and we have plans but I need to write them in a more visible place.
So in short, as one of the main authors of the biggest fediverse specs out there, not only do I agree, work is happening.
Everything I'm reading in your comment and in the links you shared, I agree with. I think the main difference is in our choice of tools.
For the network mapping (for trust and petnames), I believe that a graph structure is required. Having this at a foundational layer is important for scalability and mathematical simplicity imo.
Other than that, I think we agree on offline-first and multi-casting being requirements. And bonus points for keypair management through shamir's secret sharing and multi-device key management.
Can I contact/keep up with you directly somewhere to continue the conversation?
Well, it's still you + gmail.com. It could be you + fastmail.com, it could be you + posteo.de, it could be you + <insert other e-mail provider>. You still chose gmail over another provider, like you could choose cucumbers.pizza over another provider in the case of the Fediverse.
Not to mention, I do know a fair number of people with non-gmail personal addresses—iCloud, Outlook.com, Yahoo etc.
[1] https://www.searchenginejournal.com/gmail-rewards-users-with...
I can’t agree with that because Gmail was far from the first to provide this. Growing up all my friends and I had Hotmail addresses.
Gmail won because of unlimited storage and to a lesser extent a far superior UI. The invitation system also gave it a “cool” factor others never had.
I have an email address. That unique identifier is also what I'd want to use for the fediverse. So how do I most easily do that?
(This isn't going to be a universal expectation; email at your own domain is not incredibly common. But it's also not exceedingly rare, especially among technical folks, or among folks with a personal "brand" and social media presence.)
It’s marketed as easy, but once you start digging into the details, it quickly becomes more complex than I was expecting.
I’ve been looking into Mastadon, Pixelfed, and Matrix to use in this way, but it seems pointless since I don’t want to host my friends and family’s content, and they’re not going to sign up for some random odd sounding instance. I’m then left with an empty social network or communication tool that’s little more than a tech demo.
The irony is that because email is so broken as an open platform, this normalized default so prone to collision has become the legitimate one, and everything else is filtered out...just like what tends to happen in other domains of society. It's easy upfront, but we're finally getting past the initial adoption of these technologies, and overall quality of service - from initial UX to issues like these - is going to become an increasingly large factor.
It’s also a shame that they also helped enforce top posting, especially considering how ludicrous it is in the context of threaded emails.
I agree, it's hard to choose from so many awesome domains.
Like surely that’s such a tiny thing. It seems like the author is trying to muster up some nondescript hate for YT when they were going to move for ideological reasons anyway.
This puts creators of videos that might potentially appeal to kids in a bad situation, since either they tag it as such and watch their video get buried, or avoid doing so and hope YouTube or the FTC doesn't disagree with them.
When advertisers realized that a stupid percentage of their ad spend was going to four-year-olds watching six hours of unlicensed Disney characters in kinky scenarios it was the perfect storm for change.
Keeping perceived ad value up to advertisers is why creators even have the opp to monetize at the rate they do, so it’s really give and take.
Essentially YT opted out of actually creating moderation tools and a team and instead just increased their ad revenue cut while placing further burden on independent creators who don't have millions in budgets to cushion this effect.
https://www.theverge.com/2019/11/13/20963459/youtube-google-...
Yes, these things are hassles but on youtube you have access to an audience of billions, youtube eats the entire infrastructure costs and manages virtually everything for you.
What do you get on peer tube, 500 views and laggy 480p videos, and no advertisement revenue at all?
And then advertisers realized that having your ads displayed on video content that is damaging to your company's image is generally Really Really Bad for PR. No company is going to sign on for your platform if they can't control where and how their ads are shown.
I don't want to go into the details of my revenue model but it's sound and has undergone multiple refinements. I don't need you to explain PR to me. I've done my research. I've read Crystalizing Public Opinion by the man himself, Edward Bernays. I am going to venture out and say that I know more about this subject than you and you should reverse your thrusters.
But no, I won't 'reverse my thrusters'. You want me to change my opinion, then prove me wrong. Otherwise all you have is your word, and words are meaningless.
Lol. You're the one with the negative attitude. You don't know anything about my model and you're just playing devil's advocate. I never claimed it would be successful, I just said it was pretty decent and was worth exploring.
You're being a serious negative nancy. I don't need to change your opinion, and I don't need to prove you wrong, because your statements are empty and deflective and there is no real substance or argument other than "it won't work because I can't imagine a platform other than the ones I have already seen".
And ironically you say my words are meaningless. I've been conservative with my speech, making no hard claims, and you're throwing out whatever spice you can think of. I'm talking from a position reached by years of research, and you're talking straight from your ass.
You can continue to be this way, it's not in my interest to convert you or explain my model any further. Now I suggest you end this over-critical tirade before you cross the line of civility and I have to report you. Good bye.
One thing people don't understand is that while Clorox might not want their ads next to a video about guns, they still want their ads to reach me. If 100% of my consumed content involves guns, there is a compromise in some capacity which Clorox is willing to make. The aim of the model is to make it such that this compromise is fair and clearly separates sponsored content and consumed content so that there is no connection between the two. This is accomplished in many ways.
If this is something that interests you, I'm happy to discuss my model in a private setting.
We want to protect children from predatory data harvesting, so we have laws like COPPA (in the US). YouTube's answer to COPPA was to just forbid children under 13 having their own account and launching Youtube Kids.
Children under 13 want to watch youtube, and the content they want isn't always on YTKids, so they watch using a parent's account. They do this because they also want the like and subscribe buttons. But because YT doesn't know if it's a child or adult watching they serve ads for horror films or gambling or alcohol. But they also try to guess if it's a child watching the video and they'll serve ads for toys.
Regulators were unhappy.
Youtube tried to say to the regulators "we comply with coppa and we definitely do not target children for ads", but they were going to the potential advertisers and saying "we have the largest child audience and we know how you can reach them".
Faced with further regulation Youtube bunted this onto the creators, and (weirdly, IMO) the regulators agreed and said that the creators (not Youtube) were responsible for ads placed against their content.
Now you have content that is clearly, unambiguously, aimed at children where the Youtuber has to say the word "fuck" three times a video so they can tick the "not for kids" box to get decent ad revenue. There's a bunch of content that was fine for kids that now has to include tediously edgy shit just to avoid that "aimed at kids" classification. Youtube has no idea who is watching videos so the ad serving is awful. The regulators don't talk to each other but are clearly unhappy that unsuitable ads are pushed at kids.
And parents are left not knowing if this content aimed at children actually is aimed at children or if it's going to include jokes about anal rape[1].
[1] On the off-chance that anyone from YouTube is reading this this is a real fucking example, but there's no way to tell you.
> [1] On the off-chance that anyone from YouTube is reading this this is a real fucking example, but there's no way to tell you.
Well, in the 90s they sometimes put adult jokes/puns in cartoons so adults would get something out of it and watch alongside their kids. Your example reminded me of this from Animaniacs: https://www.youtube.com/watch?v=1xmAC9Qu908
And I share your opinion on video playback alternatives - when a website serves me the video which isn't hosted on Youtube, I kind of groan inside, because of the bad experience of alternatives. Youtube just works, it loads fast and plays without interruptions.
I don't know what the threshold for "toy" versus "non-toy" is in terms of seriousness, but I do know that I uploaded a video for a professor of mine 5 or 6 years ago, it's a 20 minute video of an unimportant speech he gave with bad audio and it is not SEOed at all (no real search terms attached to it) and it has more views than the highest viewcount video on the instance.
I see one of two possible interpretations: The first is that given that you choose to upload to both YouTube and a PeerTube instance, no one will watch the PeerTube instance. So PeerTube is just an emergency hedge against something going south on YouTube. Insurance is good, but the premiums in terms of time might be a little high.
The second is that it's possible some of those YouTube people wouldn't watch the videos on PeerTube even if they were removed from YouTube. That's a harder problem to solve.
I guess I don't intend to undermine the nobility of the effort, just a natural skeptic when it comes to the feasibility of it going anywhere.
Would be cool if there were a way to add peers from the command line. Then I could add a server or two with better peering and maybe be able to watch stuff.
https://peertube.ch/videos/watch/dcad56d9-9fe6-45bc-96aa-3d7... (1 min. long demonstration)
I don't believe the existence of their legalese dodging all liability will hold up in many countries for instances. As for user liability it's been shown that countries will battle those as well. Examples:
1) Usenet servers get routinely taken down and it becomes a game of wack-a-mole.
2) BitTorrent seed peers with illegal copyright content are routinely served DMCA notices.
One neat (or overcomplicating?) thing about PeerTube is that you can follow a PeerTube account with your Mastodon account. Posted videos show up as "toots" and I'm guessing that your replies turn into comments on the video.
> When it comes to uploading videos, PeerTube is a joy to use and a lot more straightforward than YouTube with its bazillions of options and “is that for children??? is it OK to show to my 2 years old?” ridiculous regulatory checks.
So basically:
- Google doesn't have checks: "Wow, look how irresponsible Google is."
- Google does have checks: "Wow, look how annoying Google is."
Basically, Youtube will hold you responsible if you upload something to Youtube without properly tagging if the content is rated for children or not.
However, they also said that anything that may be related to children (toys, kids' movies, etc.) should be tagged for children.
If you tag something as rated for children and it's not, Youtube will punish you. However, if you talk about a new Frozen movie or review Lego (toys) and use swears, that's children's content with adult language, and therefore punishable.
The FTC has published rules about this[0] but has in the past stated it intended to go after Youtubers who broke the rules.
These toggles also have an impact on how your videos are monetized and functionality [1].
So, an adult reviewing lego and calling it "fucking amazing" might be right in the middle between "FTC lawsuit" and "account banned by Youtube".
Of course this is all further complicated by the fact that other countries will have different legislation. A video marked as viewable for children by the Youtube rules may get you into legal trouble in another country.
I'm not necessarily against COPPA but the way the lawsuit was settled caused quite a stir on Youtube and threatened the income of quite a few people, which was made worse by the terrible UI Google has built into Youtube (you couldn't mark a set of videos as "for children", you had to go through each one, and every day a video was up was a day the FTC could send lawyers after you). If Google had handled this better by providing the necessary tools and clear information, this wouldn't have been a big issue at all.
[0]: https://www.ftc.gov/news-events/blogs/business-blog/2019/11/... [1]: https://www.vox.com/culture/2019/12/13/21012611/youtube-copp...
>The media could not be loaded, either because the server or network failed or because the format is not supported.