Recent searches
Search options
Introducing Streamiverse… a simple Mastodon-compatible streaming API of curated posts from the fediverse.
https://streamiverse.small-web.org
Consume the public API curated/hosted by Small Technology Foundation (for non-commercial and educational use) or host your own.
Mastodon had a public streaming API but it was locked down this year. This gives you back that useful feature (for demos, teaching, etc.) plus you know exactly what you’re getting.
@aral @catileptic do you know why we locked it down? Because that's an important part here
@aral @catileptic specifically it was being used as a side-channel to access content post defederation or post blocking.
️
Wasn't this always going to happen? Granted I just have a sysad background and not coding but isn't everything on fedi in the open? I never expected any privacy here.
To me, blocking means "I can't see X". Not "X can't see me". Am I off base?
@plasma4045 @aral yes, you're off base here. People do have an expectation of safety features working. The unsecured streaming endpoints were being used for mass non-consensual data gathering, tools to circumvent blocks and defederations, and just generally didn't align with the API policies in place.
Whilst you don't have any expectation of privacy, others have an expectation of safety (which involves privacy and controlling reach of their posts)
I feel that participation in a public forum such as this is basically acknowledging that this data will be collected by someone, somewhere.
If your safety depends on you controlling how far your posts on a public forum go, I'm not sure you should be on a public forum at all without utilizing a pseudonym.
This isn't a value judgement. Just a reality of posting in public.
^ All said in polite discussion - not meant as confrontation. And I don't feel I'm owed a response.
@plasma4045 @aral right, but you do still have the ability to decide not to talk with someone or to move away from someone trying to listen in on your conversation to harass or bully you.
Our main APIs already required authentication for accessing lots of data, streaming was just inexplicably left open.
But also consuming from a proprietary API is not participating in a conversation, since that'd require being on activitypub. Please do read up on consent, it's really important