HNHacker News
TopNewBestAskShowJobs

paroneayea

2,351 karma · joined August 30, 2011

submissionscomments
paroneayea··on ActivityPub: from decentralized to distributed social networks
And apparently GitLab went down shortly after posting this, so here's an alternate copy: https://github.com/WebOfTrustInfo/rebooting-the-web-of-trust...
paroneayea··on ActivityPub: from decentralized to distributed social networks
Alternately if you prefer a dead tree version, here’s a PDF: https://gitlab.com/dustyweb/talks/raw/master/activitypub/rwo...

As an aside, this is a big week for ActivityPub, since Mastodon is going to begin rolling out ActivityPub to their ~850k registered users.

paroneayea··on ActivityPub: a federated social web standard
We did reach out to both all the major centralized social networks and also all the distributed social networks. The major social centralized networks didn't seem interested in participating in this round, but they were welcomed and encouraged to become part of the group iirc.
paroneayea··on ActivityPub: a federated social web standard
Well we certainly consider it an important aspect! But also, as said, we were standardizing the existing set of federation functionality currently implemented in the federated social web.

But the Social Web Incubator Community Group has made anti-spam/anti-abuse stuff part of our mission, but that's hard stuff. ActivityPub does include federated blocklist support, but I think it's not enough. I've written about possible directions though: https://dustycloud.org/blog/possible-distributed-anti-abuse/

paroneayea··on ActivityPub: a federated social web standard
It's tricky, though people are using them. Mastodon probably is seeing the most success at the moment. Over half a million users by current estimates. Not everyone who signs up stays around, but there's still quite a bit of retention. We could do better.

We need to make these things easier to host and deploy though. Having worked on MediaGoblin for many years now, I've found the most depressing part of it is that not only is it hard for people to start hosting things, it's even harder for them to keep it running... and it's not just MediaGoblin; you'll find this of most social network things. Most especially, people become afraid to upgrade their systems. I'm hopeful that systems like Guix will help in that regard, but that's a whole direction to explore itself: https://media.libreplanet.org/u/libreplanet/m/solving-the-de...

paroneayea··on ActivityPub: a federated social web standard
So, I'm co-editor of the ActivityPub spec, hi! And yes, there's both reasons to want a Delete operation and to be skeptical of it!

Reasons to be skeptical of it: well there's the obvious ones, you might want to hold on to some content coming your way and lots of people are disappointed to see things disappear. Mutating networks have some dangers for sure.

Reasons it to want it, or that it's there: well, this is how all the existing federated social networks work. ActivityPub was designed in the context of standardizing basically something that projects like Mastodon, Diaspora, MediaGoblin, GNU Social, etc can use. And that is how things work now... mutation and federated deletion has been part of the existing federated social web for a decade. And we're trying to build something people can hook into their existing systems. People may also change their minds about things. Should they have the authority to remove their own posts? An open question, but at the very least, whether a server removes the content or not, a Delete is a request to do so across the network.

However, yes, there is an alternative structure one can imagine for these things, and that's something a bit closer to something git-like in the way that branches point at commits, but may change at which commit they point to over time, but the commits themselves never change. That's a desirable thing to explore, and I've blogged about it: http://dustycloud.org/blog/an-even-more-distributed-activity...

And we're even looking at exploring it, possibly, in the Social Web Incubator Community Group: https://www.w3.org/wiki/ActivityPub_extensions#Possible_futu...

BTW, if you're interested in such things, the community group is open to everyone and is hosting weekly meetings https://www.w3.org/community/swicg/ and we'll be hosting a meeting next week https://www.w3.org/wiki/SocialCG/2017-05-31

paroneayea··on ActivityPub: a federated social web standard
There's a public delivery mechanism where if many people are on the same server, and its a public post (eg Twitter style messages, etc) it can be delivered to a shared public inbox https://www.w3.org/TR/activitypub/#public-inbox-delivery

That way the receiving server can only get POST'ed to once and distribute to the appropriate followers.

Of course, for more limited distribution posts, you still have to distribute individually, but that's no different than how email works.

paroneayea··on MediaGoblin – Self Hosted, Decentralized​ Alt to YouTube, Flickr, SoundCloud
Hi, MediaGoblin co-founder and co-maintainer here.

It's still under active development, though I've temporarily handed over the reigns to others while I've been busy getting the federation standard we're going to use nicely shaped up through the W3C spec process https://www.w3.org/TR/activitypub/

That's taken up more of my last year (okay, last two years) than I expected. I'll be back in the swing of things within the next few months. We have a federation branch right now, but the standardization process of ActivityPub meant that we're going to have to retool some things before its released in 1.0!

The good news is that ActivityPub is looking to be picked up by projects like NextCloud, Mastodon, Pump.io, and quite possibly GNU Social, Diaspora, postActiv. This means we should be able to have more federation working across the many federated social web projects out there.

If you're interested in ActivityPub and federation generally, I highly recommend checking out the tutorial, which is baked into the spec: https://www.w3.org/TR/activitypub/#Overview

In the meanwhile, Boris Bobrov (breton) has been kindly doing the main work along maintainership while I've been preoccupied. But, I'll be back soon... and it'll be good to be back!

paroneayea··on Guile 2.2.1 released, includes sandboxed execution support
More docs on the sandboxed execution stuff: https://www.gnu.org/software/guile/manual/html_node/Sandboxe...

Includes a great quote:

> Sometimes you would like to evaluate code that comes from an untrusted party. The safest way to do this is to buy a new computer, evaluate the code on that computer, then throw the machine away. However if you are unwilling to take this simple approach, Guile does include a limited “sandbox” facility that can allow untrusted code to be evaluated with some confidence.

paroneayea··on Possible routes for distributed anti-abuse systems
People are I hope aware of the ability of abuse reporting systems to themselves become channels of abuse. Facebook's real names policy is exploited by anti-trans campaigners to force people off the platform, for example. Anyone should be aware of the risks of automated threshold systems being abused: if all you have to do is get 100 accounts to press "report abuse", that will be abused very quickly.

Local standards also present problems. Do we really want to go along with e.g. Pakistan arresting people for blasphemy?

It's definitely true that anti-abuse systems can be themselves abused, though most of the systems that you're talking about are partly due to the anti-abuse systems being centralized, right? I also see a lot of comments here along the lines of "but that's censorship!" But the article is discussing decentralized anti-abuse systems which allow individuals to set up their own opt-in filters which apply to themselves and their communities (which means different people might have different filters). Do you think that's different?

paroneayea··on Possible routes for distributed anti-abuse systems
That's great to hear that the Matrix community cares about this so much, and is thinking along similar lines! (The fact that you're already exploring the Stellar approach makes me feel a little bit less crazy for thinking some of these things.) I agree, I hope we can work together... it really does face everyone in this space.

I linked your comment and slides from the blogpost now, btw!

paroneayea··on Dungeon Crawl: Stone Soup
If you've never tried DCSS, I think you should try it. I think it also mitigates a number of the same things you complained about. The game's built-in manual has a whole section about its game philosophy you're likely to find appealing, especially if you were frustrated with Nethack for those reasons:

  https://web.archive.org/web/20160304070026/http://crawl.develz.org/other/manual.html#n-philosophy-pas-de-faq
Anyway, you should try it!
paroneayea··on Ring, officially a GNU package
GNU developer here (MediaGoblin lead developer). GNU projects get to decide whether or not to do copyright assignment to the FSF. As an example, MediaGoblin and Guix don't require copyright assignment, while Guile does.
paroneayea··on Guile security vulnerability with listening on localhost and port
It does look like there's a way to "forward" a unix domain socket over ssh enough to do that kind of debugging:

https://debian-administration.org/users/dkg/weblog/68

paroneayea··on Ask HN: How can I create a decentralized GNU-social-compatible website?
So I have quite a bit of bias, since I work on a specification in this area. So yes, if you want to make sure it's GNU Social (formerly StatusNet) compatible specifically, use OStatus, which is a number of protocols combined in a specific way.

The most unfortunate part of all this though is that all these different applications, GNU Social, Diaspora, Pump.io, etc all speak different protocols and aren't all really interoperable. This leads to a "fractured federation", which really isn't great. I've been participating in the W3C Social Working Group to try to standardize federation. Here's our spec, ActivityPub:

https://www.w3.org/TR/activitypub/

Some background: it's derivative of the "Pump API", which is sort of the successor of OStatus, in the sense that the primary author of StatusNet (now GNU Social) wrote the Pump API in response to some perceived shortcomings in OStatus. We've done a lot of analysis to make sure that the protocol can handle all the kinds of things that you expect from the "big player" social networks, but in a federated setting.

Interested? Now's a great time to research and give feedback. We're looking to move to Candidate Recommendation status shortly, which means we're looking for feedback and implementations.

PS: I'm also involved in MediaGoblin, and we definitely intend to implement there. If you're interested in a bit of news from that end, here's a moderately fresh blogpost, including info on how to give your feedback: http://mediagoblin.org/news/tpac-2016-and-review-activitypub...

We're planning on using it for MediaGoblin.

paroneayea··on GNU Guile site redesign
It's a worthwhile question. I'm a huuuuuuuge supporter of the current design though! This conversation came up on the guile-devel list, and I gave my response there too: https://lists.gnu.org/archive/html/guile-devel/2015-09/msg00...

Basically, I think that Lisp and Scheme have a reputation for being unapproachable. This reputation partly comes from how we structure our communities, who we reach out to, and etc. But it also depends on how we message ourselves.

There's a very conscious decision in the new design to make things look playful and inviting, to encourage experimentation. I think that's super important. It seems like it's having some effect on encouraging people to become engaged, and it certainly doesn't seem to be doing any harm to those who are already into hacking parentheses. :)

paroneayea··on GNU Guile site redesign
A lot of Guix devs use Debian as our host distro. Debian's main website doesn't mention Arch or Guix either.
paroneayea··on GNU Guile 2.1.1 released
So yeah, Guile-powered Emacs exists! http://www.emacswiki.org/emacs/GuileEmacs

It's still in an early stage, but it works. That emacswiki post points you in the right direction, but if you use the Guix package manager, you can give it a try: "guix package -i guile-emacs"

Mostly at this point it needs people working on it and playing around with it. Considering you're fairly excited about it, maybe you should give it a spin? :)

paroneayea··on Container provisioning with Guix
Since I'm sure everyone is thinking, "but don't we already have Docker for everything?", I'll point out that this was addressed on one of Dave's mailing list posts, in case you're looking for a comparison!

  http://lists.gnu.org/archive/html/guix-devel/2015-10/msg00916.html
paroneayea··on A conversation with Sussman on AI and asynchronous programming
Maybe true, but "stone-old" ideas don't mean "bad ideas". Neural networks were "stone old" until all this big data stuff went crazy and now suddenly they're on the frontpage of hacker news all the time again and people think they're the New Hotness (TM). Similar with many long-forgotten functional programming techniques which are being talked about as new stuff, much of it is refinements of old ideas, but finally hitting the mainstream.

The AI Winter is thawing... but whose lap will it fall into after the defrost? Big data mining organizations, or everyday hackers, or....?

paroneayea··on GNU Guix 0.8.2 released
Nice new site design too: https://www.gnu.org/software/guix/
paroneayea··on Hy – A dialect of Lisp that’s embedded in Python
Yes that's exactly what's happening. Hy has two levels of things mostly: a "compiler" that does the low-level mapping of base python constructs (and whatever can be mapped to AST)... here's where list-comp is implemented: https://github.com/hylang/hy/blob/master/hy/compiler.py#L137...

Anything above that is written as Hy macros, in Hy itself: https://github.com/hylang/hy/blob/master/hy/core/macros.hy

There's a lot of other core code that's written in Hy itself too. https://github.com/hylang/hy/tree/master/hy/core

paroneayea··on Become an Official Software Freedom Conservancy Supporter
I've donated... Conservancy does good for a lot of great projects. Heck, if you're using / developing FOSS, you're pretty much 100% guaranteed to be helped by the work Conservancy is doing.

I wrote here about why I'm supporting, and why you should too:

  http://dustycloud.org/blog/donate-to-conservancy/
paroneayea··on Become an Official Software Freedom Conservancy Supporter
Indeed, we seem willing in free software to accept the "step up and code", but not enough with the "step up and design". Help a nonprofit out! I'm sure they'd love some design help.
paroneayea··on GNU Guix 0.8 released
Guix is based on / inspired by Nix, but using Scheme instead of a custom DSL.
paroneayea··on GNU MediaGoblin – A decentralized alternative to Flickr, YouTube, SoundCloud
Federation, as said earlier on here, is in-progress; Jessica Tallon has been laying down some foundations in a library we'll used called PyPump. She's updated our OAuth code to match what the Pump API expects and is starting on endpoints now. I don't have a clear ETA on when "federation will be ready" but things are moving along well. The stuff on the wiki is totally outdated, ignore it :)

Re: mirroring, I replied to that a bit here: https://news.ycombinator.com/item?id=6180159

Additionally, you can already host media files with an OpenStack Swift cloud files provider like Rackspace Cloud if you prefer.

I don't know anything about windows or macs personally, though people have gotten mediagoblin working just fine on macs... windows is harder. :) I don't have any clue when that packaging might happen though... if it happens, it'll be by someone else I guess; I just don't know anything about it.

paroneayea··on GNU MediaGoblin – A decentralized alternative to Flickr, YouTube, SoundCloud
Apologies, I will work on reducing my apologies. ;)
paroneayea··on GNU MediaGoblin – A decentralized alternative to Flickr, YouTube, SoundCloud
I guess under maybe certain $STANDARD_FANTASY systems, maybe! But "goblins" are actually a very amorphous "creature"... there's a lot of various designs of them throughout folklore, and even in recent fantasy, a lot of variations on what they actually are. We have a very different set of branding around what goblins are, and our own little goblin universe, at least as sketched out through the character art over release art and etc.
paroneayea··on GNU MediaGoblin – A decentralized alternative to Flickr, YouTube, SoundCloud
Thanks!
paroneayea··on GNU MediaGoblin – A decentralized alternative to Flickr, YouTube, SoundCloud
Please do run a MediaDungeon instance, and make it a dungeon crawler theme. I do like roguelikes. ;)
← PreviousPage 4 of 5Next →